Red Hat Security AdvisoryRHSA-2026:30848
kernel security, bug fix, and enhancement update
Released 2026-06-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.19.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.19.1.el9_8, kernel-64k-devel-5.14.0-687.19.1.el9_8 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.19.1.el9_8, kernel-64k-5.14.0-687.19.1.el9_8, kernel-64k-core-5.14.0-687.19.1.el9_8 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.19.1.el9_8, libperf-5.14.0-687.19.1.el9_8
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.19.1.el9_8, kernel-rt-64k-5.14.0-687.19.1.el9_8, kernel-rt-64k-core-5.14.0-687.19.1.el9_8 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.19.1.el9_8, kernel-rt-core-5.14.0-687.19.1.el9_8, kernel-rt-debug-5.14.0-687.19.1.el9_8 +9
Fixes 8 records
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing work_list The commit e1168f0 ("RDMA/iwcm: Simplify cm_event_handler()") changed the work submission…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00529 · Published 2026-05-27 · Fixed in 6.12.75, 6.18.14 +2 CWE-1341
Priority MEDIUM 48
In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: In ip6_err_gen_icmpv6_unreach(), the skb is an outer IPv4 ICMP…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00255 · Published 2026-05-01 · Partial fix · 5.10.253, 5.15.203 +6 CWE-787
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() mlx5_ib_dev_res_srq_init() allocates two SRQs, s0 and s1.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00142 · Published 2026-05-28 · Fixed in 6.6.140, 6.12.88 +3 CWE-825
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopback_check_format() may stop the capture side when playback starts with parameters that…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00104 · Published 2026-05-27 · Partial fix · 5.10.259, 5.15.210 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtable hardware offload actions in IPv6 is: * ethernet mangl…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00178 · Published 2026-05-08 · Partial fix · 5.15.203, 6.1.168 +5 CWE-122
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 ("drm/amd/display: Add dsc pre-validation in ato…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0014 · Published 2026-04-22 · Partial fix · 6.1.175, 6.6.140 +4 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path Sashiko points out that pvrdma_uar_free() is already called within pvrdma_dealloc…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00143 · Published 2026-05-28 · Partial fix · 5.10.258, 5.15.209 +6 CWE-415
Priority LOW 32
In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is a…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2026-05-27 · Partial fix · 6.6.144, 6.12.95 +3 CWE-862
THREATIST.IORead the docs