Red Hat Security AdvisoryRHSA-2026:34911
kernel security, bug fix, and enhancement update
Released 2026-07-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.30.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.30.1.el10_2, kernel-64k-devel-6.12.0-211.30.1.el10_2 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.30.1.el10_2, kernel-64k-6.12.0-211.30.1.el10_2, kernel-64k-core-6.12.0-211.30.1.el10_2 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.30.1.el10_2, libperf-6.12.0-211.30.1.el10_2
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.30.1.el10_2, kernel-rt-64k-6.12.0-211.30.1.el10_2, kernel-rt-64k-core-6.12.0-211.30.1.el10_2 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.30.1.el10_2, kernel-rt-core-6.12.0-211.30.1.el10_2, kernel-rt-debug-6.12.0-211.30.1.el10_2 +9
Fixes 8 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is taken (MSG_MORE / NETIF_F_SG / large…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00709 · Published 2026-07-04 · Fixed in 6.1.177, 6.6.144 +4 CWE-122
Priority MEDIUM 48
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In nft_inner_parse_l2l3(), when processing inner IPv6 packets, ipv6_find_hdr() correctly computes the…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00418 · Published 2026-06-03 · Fixed in 6.6.142, 6.12.92 +3 CWE-682
Priority MEDIUM 48
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00544 · Published 2026-06-09 · Partial fix CWE-362
Priority MEDIUM 42
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache wit…
CVSS 3.1CRITICAL 9.3· Local · No auth · No interaction · EPSS 0.00337 · Published 2026-06-09 · Partial fix · 6.12.93, 6.18.35 +2 CWE-362
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only del…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00352 · Published 2026-05-06 · Partial fix · 5.15.209, 6.1.175 +5 CWE-125
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In __ip_append_data(), when the paged-allocation branch is taken, alloclen and pagedlen are compu…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00171 · Published 2026-07-16 · Fixed in 6.1.178, 6.6.144 +4 CWE-131
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() drm_gem_fb_init_with_funcs() computes sub-sampled plane dimensions…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00142 · Published 2026-05-28 · Partial fix · 5.10.258, 5.15.209 +6 CWE-190
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential UAF after skb_unshare() failure If skb_unshare() fails to unshare a packet due to allocation failure in rxrpc_input_packet(), the s…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00137 · Published 2026-05-27 · Partial fix · 6.6.140, 6.12.86 +3 CWE-416
THREATIST.IORead the docs