Red Hat Security Advisory

RHSA-2026:25095

kernel security update

Released 2026-06-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) bpftool-3.10.0-1160.151.1.el7, kernel-3.10.0-1160.151.1.el7, kernel-abi-whitelists-3.10.0-1160.151.1.el7 +11
Red Hat Enterprise Linux Server Optional (v. 7 ELS) kernel-debug-devel-3.10.0-1160.151.1.el7, kernel-tools-libs-devel-3.10.0-1160.151.1.el7

Fixes 4 records

TI-2026-24164 CVE-2026-31607 · GHSA-fcfj-3h7q-75mq

usbip: validate number_of_packets in usbip_pack_ret_submit()

MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USB/IP client receives a RET_SUBMIT response, usbip_pack_ret_submit() unconditionall…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00311 Published 2026-04-24 Partial fix · 2.6.33, 2.6.34 +12 CWE-787

TI-2026-24242 CVE-2026-31685 · GHSA-hf2p-g3jq-w2mx

netfilter: ip6t_eui64: reject invalid MAC header for all packets

MEDIUM 47

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares i…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00485 Published 2026-04-25 Partial fix · 5.10.258, 5.15.209 +6 CWE-125

TI-2026-24090 CVE-2026-31532 · GHSA-7w6x-pfmg-76xx

can: raw: fix ro->uniq use-after-free in raw_rcv()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is d…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2026-04-23 Fixed in 5.10.258, 5.15.209 +7 CWE-416

TI-2026-31342 CVE-2026-43163 · GHSA-4hfr-m4m2-94ff

md/bitmap: fix GPF in write_page caused by resize race

LOW 20

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resize race A General Protection Fault occurs in write_page() during array resize: RIP: 0010:write_page+0x22b…

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00091 Published 2026-05-06 Partial fix · 5.10.252, 5.15.202 +6 CWE-362