Red Hat Security Advisory

RHSA-2026:3964

kernel-rt security update

Released 2026-03-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.111.1.rt7.452.el8_10, kernel-rt-core-4.18.0-553.111.1.rt7.452.el8_10, kernel-rt-debug-4.18.0-553.111.1.rt7.452.el8_10 +9
Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.111.1.rt7.452.el8_10, kernel-rt-core-4.18.0-553.111.1.rt7.452.el8_10, kernel-rt-debug-4.18.0-553.111.1.rt7.452.el8_10 +7

Fixes 2 records

TI-2026-18438 CVE-2026-23001 · GHSA-vgc7-m4r9-xw45

macvlan: fix possible UAF in macvlan_forward_source()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlan_forward_source() Add RCU protection on (struct macvlan_source_entry)->vlan.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00206 Published 2026-01-25 Partial fix · 5.10.249, 5.15.199 +5 CWE-416

TI-2025-43235 CVE-2025-71085 · GHSA-hjpx-f2r6-rr4q

ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()

LOW 33

In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00305 Published 2026-01-13 Partial fix · 5.10.248, 5.15.198 +5 CWE-190