Red Hat Security AdvisoryRHSA-2026:30129
kernel security, bug fix, and enhancement update
Released 2026-06-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.28.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.28.1.el10_2, kernel-64k-devel-6.12.0-211.28.1.el10_2 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.28.1.el10_2, kernel-64k-6.12.0-211.28.1.el10_2, kernel-64k-core-6.12.0-211.28.1.el10_2 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.28.1.el10_2, libperf-6.12.0-211.28.1.el10_2
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.28.1.el10_2, kernel-rt-64k-6.12.0-211.28.1.el10_2, kernel-rt-64k-core-6.12.0-211.28.1.el10_2 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.28.1.el10_2, kernel-rt-core-6.12.0-211.28.1.el10_2, kernel-rt-debug-6.12.0-211.28.1.el10_2 +9
Fixes 8 records
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport double free In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_dcmd_sp_free().
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.006 · Published 2026-05-08 · Partial fix · 6.1.191, 6.6.160 +7 CWE-415
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix race between ICReq handling and queue teardown nvmet_tcp_handle_icreq() updates queue->state after sending an Initialization Connection R…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00397 · Published 2026-05-28 · Partial fix · 5.10.261, 5.15.212 +6 CWE-362
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing work_list The commit e1168f0 ("RDMA/iwcm: Simplify cm_event_handler()") changed the work submission…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00529 · Published 2026-05-27 · Fixed in 6.12.75, 6.18.14 +2 CWE-1341
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00298 · Published 2026-05-06 · Partial fix · 5.10.270, 5.15.221 +6 CWE-362
Priority MEDIUM 48
In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: In ip6_err_gen_icmpv6_unreach(), the skb is an outer IPv4 ICMP…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00255 · Published 2026-05-01 · Partial fix · 5.10.253, 5.15.203 +6 CWE-787
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix RESPONSE authenticator parser OOB read rxgk_verify_authenticator() copies auth_len bytes into a temporary buffer and then passes p + auth_len…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00442 · Published 2026-04-24 · Fixed in 6.18.23, 6.19.13 +1 CWE-125
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko points out that rx_hash_key_len comes from a uAPI structure and is blindly passed to memcpy, allowing the us…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00147 · Published 2026-05-28 · Fixed in 6.6.141, 6.12.88 +3 CWE-120
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out that the user can specify WQs sharing the same CQ as a part o…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00138 · Published 2026-05-28 · Fixed in 6.12.91, 6.18.30 +2 CWE-20
THREATIST.IORead the docs