Red Hat Security AdvisoryRHSA-2026:35894
kernel security update
Released 2026-07-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.199.1.el8_6, kernel-4.18.0-372.199.1.el8_6, kernel-abi-stablelists-4.18.0-372.199.1.el8_6 +14
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) bpftool-4.18.0-372.199.1.el8_6, kernel-4.18.0-372.199.1.el8_6, kernel-abi-stablelists-4.18.0-372.199.1.el8_6 +14
Fixes 6 records
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00298 · Published 2026-05-06 · Partial fix · 5.10.270, 5.15.221 +6 CWE-362
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after-free in __inet_lookup_established The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU to guarantee socket me…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00471 · Published 2026-04-24 · Partial fix · 5.15.203, 6.1.169 +5 CWE-416
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold sco_recv_frame() reads conn->sk under sco_conn_lock() but immediately re…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00322 · Published 2026-04-06 · Partial fix · 5.10.265, 5.15.203 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Sashiko points out the radix_tree itself is RCU safe, but nothing ever frees the mlx4_srq struct with…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00144 · Published 2026-05-28 · Partial fix · 6.1.191, 6.6.160 +4 CWE-366
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in iomap inline data write path The inline data buffer head (dibh) is being released prematurely in gfs2_iomap_begin() via rele…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00184 · Published 2026-05-27 · Partial fix · 5.10.252, 5.15.202 +6 CWE-826
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes at silencing At silencing the playback URB packets in the implicit fb mode before the actual playback,…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2026-05-06 · Partial fix · 5.15.202, 6.1.165 +5 CWE-787