Red Hat Security AdvisoryRHSA-2026:4011
kernel security update
Released 2026-03-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.96.1.el9_6, libperf-5.14.0-570.96.1.el9_6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.96.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.96.1.el9_6, kernel-64k-devel-5.14.0-570.96.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.96.1.el9_6, kernel-64k-5.14.0-570.96.1.el9_6, kernel-64k-core-5.14.0-570.96.1.el9_6 +28
- Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.96.1.el9_6, kernel-rt-64k-5.14.0-570.96.1.el9_6, kernel-rt-64k-core-5.14.0-570.96.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.96.1.el9_6, kernel-rt-core-5.14.0-570.96.1.el9_6, kernel-rt-debug-5.14.0-570.96.1.el9_6 +11
Fixes 7 records
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix geneve_opt type confusion addition When handling multiple NFTA_TUNNEL_KEY_OPTS_GENEVE attributes, the parsing logic should pl…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0032 · Published 2025-04-16 · Partial fix · 5.10.236, 5.15.180 +6 CWE-787
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: net: af_can: do not leave a dangling sk pointer in can_create() On error can_create() frees the allocated sk object, but sock_init_data() has already at…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00238 · Published 2024-12-27 · Partial fix · 5.4.287, 5.10.231 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: dm: fix dm_blk_report_zones If dm_get_live_table() returned NULL, dm_put_live_table() was never called.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00197 · Published 2025-07-03 · Partial fix · 6.12.34, 6.15.3 +1 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a uaf in page_pool_recycle_in_ring: BUG: KASAN: slab-use-after-free in lock_r…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00199 · Published 2025-07-03 · Partial fix · 5.10.259, 5.15.198 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x7d/0xa0 li…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00229 · Published 2025-06-18 · Partial fix · 5.4.294, 5.10.238 +6 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix "in-kernel MMIO" check TDX only supports kernel-initiated MMIO operations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00247 · Published 2024-10-21 · Partial fix · 6.1.113, 6.6.54 +3 CWE-754
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00176 · Published 2025-09-04 · Partial fix · 6.12.43, 6.15.11 +2 CWE-416
THREATIST.IORead the docs