Red Hat Security AdvisoryRHSA-2026:27729
kernel security, bug fix, and enhancement update
Released 2026-06-22 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) bpftool-3.10.0-1160.153.1.el7, kernel-3.10.0-1160.153.1.el7, kernel-abi-whitelists-3.10.0-1160.153.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) kernel-debug-devel-3.10.0-1160.153.1.el7, kernel-tools-libs-devel-3.10.0-1160.153.1.el7
Fixes 6 records
Priority HIGH 69
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upca…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00413 · Published 2026-06-01 · Fixed in 5.10.258, 5.15.209 +6 CWE-20
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00688 · Published 2026-05-01 · Partial fix · 5.10.253, 5.15.203 +6 CWE-121
Priority MEDIUM 42
In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length before reading optlen Quoting reporter: In net/netfilter/xt_tcpmss.c (lines 53-68), the TCP option parser r…
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00463 · Published 2026-05-06 · Partial fix · 5.10.252, 5.15.202 +6 CWE-125
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code af…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00469 · Published 2026-05-06 · Partial fix · 5.10.252, 5.15.202 +6 CWE-664
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF events brcmf_fweh_handle_if_event() validates the firmware-provided interface index before it touches drvr…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.0027 · Published 2026-05-06 · Partial fix · 5.10.258, 5.15.209 +6 CWE-129
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled count and the MAD header sizes.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0018 · Published 2026-03-18 · Partial fix · 5.10.252, 5.15.202 +6 CWE-190