Red Hat Security Advisory

RHSA-2026:38491

kernel security, bug fix, and enhancement update

Released 2026-07-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.25.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.25.1.el9_8, kernel-64k-devel-5.14.0-687.25.1.el9_8 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.25.1.el9_8, kernel-64k-5.14.0-687.25.1.el9_8, kernel-64k-core-5.14.0-687.25.1.el9_8 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.25.1.el9_8, libperf-5.14.0-687.25.1.el9_8
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.25.1.el9_8, kernel-rt-64k-5.14.0-687.25.1.el9_8, kernel-rt-64k-core-5.14.0-687.25.1.el9_8 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.25.1.el9_8, kernel-rt-core-5.14.0-687.25.1.el9_8, kernel-rt-debug-5.14.0-687.25.1.el9_8 +9

Fixes 4 records

TI-2026-31676 CVE-2026-43499 · GHSA-cqc6-9f34-295v

rtmutex: Use waiter::task instead of current in remove_waiter()

HIGH 69

In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slowlock paths, but it is also used for proxy-lock rollba…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05372 Published 2026-05-21 Partial fix · 5.10.261, 5.15.212 +6 CWE-416

TI-2026-38103 CVE-2026-53016 · GHSA-4rx4-73jx-c5r8

crypto: ccp - copy IV using skcipher ivsize

LOW 35

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00141 Published 2026-06-24 Partial fix · 5.10.258, 5.15.209 +6 CWE-805

TI-2026-33810 CVE-2026-46086 · GHSA-qcf5-mj4w-x99v

net: bridge: use a stable FDB dst snapshot in RCU readers

LOW 24

In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be rewritten in place by `fdb_delete_local()`, which updates `f->dst` to…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00129 Published 2026-05-27 Partial fix · 5.10.259, 5.15.210 +6 CWE-476

TI-2026-18416 CVE-2026-22979 · GHSA-w4ch-7p82-3m56

net: fix memory leak in skb_segment_list for GRO packets

LOW 24

In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in skb_segment_list for GRO packets When skb_segment_list() is called during packet forwarding, it handles packets that were aggreg…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00142 Published 2026-01-23 Partial fix · 6.1.161, 6.6.121 +5 CWE-401