Red Hat Security AdvisoryRHSA-2026:25191
kernel security update
Released 2026-06-11 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.22.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.22.1.el10_2, kernel-64k-devel-6.12.0-211.22.1.el10_2 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.22.1.el10_2, kernel-64k-6.12.0-211.22.1.el10_2, kernel-64k-core-6.12.0-211.22.1.el10_2 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.22.1.el10_2, libperf-6.12.0-211.22.1.el10_2
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.22.1.el10_2, kernel-rt-64k-6.12.0-211.22.1.el10_2, kernel-rt-64k-core-6.12.0-211.22.1.el10_2 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.22.1.el10_2, kernel-rt-core-6.12.0-211.22.1.el10_2, kernel-rt-debug-6.12.0-211.22.1.el10_2 +9
Fixes 7 records
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header, swaps the next segmen…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00732 · Published 2026-05-21 · Partial fix · 5.10.258, 5.15.209 +6 CWE-787
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00688 · Published 2026-05-01 · Partial fix · 5.10.253, 5.15.203 +6 CWE-121
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is d…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00165 · Published 2026-04-23 · Fixed in 5.10.258, 5.15.209 +7 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original skb for the last slave (determined by bond_is_last_s…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00129 · Published 2026-04-13 · Partial fix · 5.10.273, 5.15.224 +7 CWE-362
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In usb6fire_chip_abort(), the chip struct is allocated as the card's private data (via snd_card_new with s…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00128 · Published 2026-04-24 · Partial fix · 5.10.258, 5.15.209 +10 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: erofs: add GFP_NOIO in the bio completion if needed The bio completion path in the process context (e.g.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00378 · Published 2026-04-22 · Fixed in 5.15.203, 6.1.168 +5 CWE-667
Priority LOW 32
In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is a…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2026-05-27 · Partial fix · 6.6.144, 6.12.95 +3 CWE-862
THREATIST.IORead the docs