Read the docs
Red Hat Security Advisory

RHSA-2026:27729

kernel security, bug fix, and enhancement update

Released 2026-06-22 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 6 records

Priority HIGH 69

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upca…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00413 Published 2026-06-01 Fixed in 5.10.258, 5.15.209 +6 CWE-20
TI-2026-31217 CVE-2026-43037 · GHSA-p2wf-qj6m-x5fg

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00688 Published 2026-05-01 Partial fix · 5.10.253, 5.15.203 +6 CWE-121
Priority MEDIUM 42

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length before reading optlen Quoting reporter: In net/netfilter/xt_tcpmss.c (lines 53-68), the TCP option parser r…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00463 Published 2026-05-06 Partial fix · 5.10.252, 5.15.202 +6 CWE-125
Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code af…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00469 Published 2026-05-06 Partial fix · 5.10.252, 5.15.202 +6 CWE-664
Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF events brcmf_fweh_handle_if_event() validates the firmware-provided interface index before it touches drvr…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0027 Published 2026-05-06 Partial fix · 5.10.258, 5.15.209 +6 CWE-129
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled count and the MAD header sizes.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0018 Published 2026-03-18 Partial fix · 5.10.252, 5.15.202 +6 CWE-190