Read the docs
Red Hat Security Advisory

RHSA-2026:35894

kernel security update

Released 2026-07-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

Priority MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00298 Published 2026-05-06 Partial fix · 5.10.270, 5.15.221 +6 CWE-362
Priority MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after-free in __inet_lookup_established The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU to guarantee socket me…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00471 Published 2026-04-24 Partial fix · 5.15.203, 6.1.169 +5 CWE-416
Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold sco_recv_frame() reads conn->sk under sco_conn_lock() but immediately re…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00322 Published 2026-04-06 Partial fix · 5.10.265, 5.15.203 +6 CWE-416
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Sashiko points out the radix_tree itself is RCU safe, but nothing ever frees the mlx4_srq struct with…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00144 Published 2026-05-28 Partial fix · 6.1.191, 6.6.160 +4 CWE-366
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in iomap inline data write path The inline data buffer head (dibh) is being released prematurely in gfs2_iomap_begin() via rele…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00184 Published 2026-05-27 Partial fix · 5.10.252, 5.15.202 +6 CWE-826
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes at silencing At silencing the playback URB packets in the implicit fb mode before the actual playback,…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00123 Published 2026-05-06 Partial fix · 5.15.202, 6.1.165 +5 CWE-787