Red Hat Security Advisory

RHSA-2026:3966

kernel security update

Released 2026-03-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-611.38.1.el9_7, kernel-64k-debug-devel-matched-5.14.0-611.38.1.el9_7, kernel-64k-devel-5.14.0-611.38.1.el9_7 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-611.38.1.el9_7, kernel-64k-5.14.0-611.38.1.el9_7, kernel-64k-core-5.14.0-611.38.1.el9_7 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-611.38.1.el9_7, libperf-5.14.0-611.38.1.el9_7
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-611.38.1.el9_7, kernel-rt-64k-5.14.0-611.38.1.el9_7, kernel-rt-64k-core-5.14.0-611.38.1.el9_7 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-611.38.1.el9_7, kernel-rt-core-5.14.0-611.38.1.el9_7, kernel-rt-debug-5.14.0-611.38.1.el9_7 +9

Fixes 3 records

TI-2026-18438 CVE-2026-23001 · GHSA-vgc7-m4r9-xw45

macvlan: fix possible UAF in macvlan_forward_source()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlan_forward_source() Add RCU protection on (struct macvlan_source_entry)->vlan.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00206 Published 2026-01-25 Partial fix · 5.10.249, 5.15.199 +5 CWE-416

TI-2025-25447 CVE-2025-38106 · GHSA-vh9v-7rrm-mm8x

io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() syzbot reports: BUG: KASAN: slab-use-after-free in getrusage+0x1109/0x1a60 Read o…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00196 Published 2025-07-03 Partial fix · 6.12.34, 6.15.3 +1 CWE-416

TI-2025-42268 CVE-2025-68800 · GHSA-jhc9-chhp-3xfj

mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats

LOW 33

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Cited commit added a dedicated mutex (instead of RTNL) to protect the multica…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00151 Published 2026-01-13 Partial fix · 5.10.248, 5.15.198 +5 CWE-416