Red Hat Security Advisory

RHSA-2026:34443

kernel security update

Released 2026-07-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.4) kernel-64k-debug-devel-5.14.0-427.135.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.135.1.el9_4, kernel-64k-devel-5.14.0-427.135.1.el9_4 +11
Red Hat Enterprise Linux BaseOS E4S (v.9.4) bpftool-7.3.0-427.135.1.el9_4, kernel-5.14.0-427.135.1.el9_4, kernel-64k-5.14.0-427.135.1.el9_4 +29
Red Hat Enterprise Linux Real Time E4S (v.9.4) kernel-rt-5.14.0-427.135.1.el9_4, kernel-rt-core-5.14.0-427.135.1.el9_4, kernel-rt-debug-5.14.0-427.135.1.el9_4 +9
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) kernel-rt-5.14.0-427.135.1.el9_4, kernel-rt-core-5.14.0-427.135.1.el9_4, kernel-rt-debug-5.14.0-427.135.1.el9_4 +11

Fixes 4 records

TI-2026-31377 CVE-2026-43198 · GHSA-rhcj-6wxj-r34p

tcp: fix potential race in tcp_v6_syn_recv_sock()

MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00298 Published 2026-05-06 Partial fix · 5.10.270, 5.15.221 +6 CWE-362

TI-2026-33965 CVE-2026-46244 · GHSA-fgx8-r5g7-5cr9

netfilter: nft_inner: Fix IPv6 inner_thoff desync

MEDIUM 48

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In nft_inner_parse_l2l3(), when processing inner IPv6 packets, ipv6_find_hdr() correctly computes the…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00418 Published 2026-06-03 Fixed in 6.6.142, 6.12.92 +3 CWE-682

TI-2026-33905 CVE-2026-46181 · GHSA-pw2f-xmgc-f22m

RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Sashiko points out the radix_tree itself is RCU safe, but nothing ever frees the mlx4_srq struct with…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00144 Published 2026-05-28 Partial fix · 6.1.191, 6.6.160 +4 CWE-366

TI-2026-33814 CVE-2026-46090 · GHSA-w9ff-9cjh-6463

ALSA: aloop: Fix peer runtime UAF during format-change stop

LOW 35

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopback_check_format() may stop the capture side when playback starts with parameters that…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00104 Published 2026-05-27 Partial fix · 5.10.259, 5.15.210 +6 CWE-416