Red Hat Security Advisory

RHSA-2026:25908

kernel security update

Released 2026-06-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.79.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.79.1.el10_0, kernel-64k-devel-6.12.0-55.79.1.el10_0 +12
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.79.1.el10_0, kernel-64k-6.12.0-55.79.1.el10_0, kernel-64k-core-6.12.0-55.79.1.el10_0 +28
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.79.1.el10_0, libperf-6.12.0-55.79.1.el10_0
Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.79.1.el10_0, kernel-rt-64k-6.12.0-55.79.1.el10_0, kernel-rt-64k-core-6.12.0-55.79.1.el10_0 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.79.1.el10_0, kernel-rt-core-6.12.0-55.79.1.el10_0, kernel-rt-debug-6.12.0-55.79.1.el10_0 +11

Fixes 3 records

TI-2026-33964 CVE-2026-46243 · GHSA-3mg7-pfmq-9qfv

smb: client: reject userspace cifs.spnego descriptions

HIGH 69

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upca…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00413 Published 2026-06-01 Fixed in 5.10.258, 5.15.209 +6 CWE-20

TI-2024-37530 CVE-2024-56645 · GHSA-3364-cw6v-mc8j

can: j1939: j1939_session_new(): fix skb reference counting

MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_session_new(): fix skb reference counting Since j1939_session_skb_queue() does an extra skb_get() for each new skb, do the same for th…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00681 Published 2024-12-27 Partial fix · 5.4.287, 5.10.231 +5

TI-2024-37488 CVE-2024-56603 · GHSA-98rc-vgv3-572h

net: af_can: do not leave a dangling sk pointer in can_create()

LOW 36

In the Linux kernel, the following vulnerability has been resolved: net: af_can: do not leave a dangling sk pointer in can_create() On error can_create() frees the allocated sk object, but sock_init_data() has already at…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00238 Published 2024-12-27 Partial fix · 5.4.287, 5.10.231 +5 CWE-416