Red Hat Security AdvisoryRHSA-2026:36073
kernel security update
Released 2026-07-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.179.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.179.1.el9_2, kernel-64k-devel-5.14.0-284.179.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.179.1.el9_2, kernel-5.14.0-284.179.1.el9_2, kernel-64k-5.14.0-284.179.1.el9_2 +29
Fixes 5 records
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix race between ICReq handling and queue teardown nvmet_tcp_handle_icreq() updates queue->state after sending an Initialization Connection R…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00397 · Published 2026-05-28 · Partial fix · 5.10.261, 5.15.212 +6 CWE-362
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00298 · Published 2026-05-06 · Partial fix · 5.10.270, 5.15.221 +6 CWE-362
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold sco_recv_frame() reads conn->sk under sco_conn_lock() but immediately re…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00322 · Published 2026-04-06 · Partial fix · 5.10.265, 5.15.203 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00154 · Published 2025-12-16 · Partial fix · 6.1.191, 6.6.117 +3
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path Sashiko points out that pvrdma_uar_free() is already called within pvrdma_dealloc…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00143 · Published 2026-05-28 · Partial fix · 5.10.258, 5.15.209 +6 CWE-415