Red Hat Security AdvisoryRHSA-2026:43307
kernel security, bug fix, and enhancement update
Released 2026-07-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.29.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.29.1.el9_8, kernel-64k-devel-5.14.0-687.29.1.el9_8 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.29.1.el9_8, kernel-64k-5.14.0-687.29.1.el9_8, kernel-64k-core-5.14.0-687.29.1.el9_8 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.29.1.el9_8, libperf-5.14.0-687.29.1.el9_8
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.29.1.el9_8, kernel-rt-64k-5.14.0-687.29.1.el9_8, kernel-rt-64k-core-5.14.0-687.29.1.el9_8 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.29.1.el9_8, kernel-rt-core-5.14.0-687.29.1.el9_8, kernel-rt-debug-5.14.0-687.29.1.el9_8 +9
Fixes 7 records
Priority HIGH 69
In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap in change_handle There was a potential race condition in change_handle.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00227 · Published 2026-05-28 · Fixed in 6.18.32, 7.0.9 +1 CWE-416
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined single-frag length gate The ESP out-of-place fast path appends the trailer in esp_output_head() before esp_output_tail() all…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00714 · Published 2026-07-19 · Partial fix · 5.10.259, 5.15.210 +10 CWE-125
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp l2cap_ecred_reconf_rsp() calls l2cap_chan_del() without holding l2cap_chan_lock().
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00429 · Published 2026-06-24 · Partial fix · 5.10.258, 5.15.209 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Commit f1b4e32aca08 ("can: bcm: use call_rcu() instead of costly synchronize_rcu()")…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2026-08-15 · Partial fix · 5.10.265, 5.15.216 +9
Priority LOW 32
In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may return false for a mark on an unrelated group, which results in bypassing…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0013 · Published 2026-05-28 · Partial fix · 5.10.258, 5.15.209 +6 CWE-863
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated via sock_kmalloc Several crypto user API contexts and requests allocated with sock_kmalloc() were left…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00151 · Published 2026-01-14 · Partial fix · 5.10.248, 5.15.198 +5 CWE-119
Priority LOW 20
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Wake up the error handler when final completions race against each other The fragile ordering between marking commands completed or failed s…
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00113 · Published 2026-02-04 · Partial fix · 5.10.249, 6.1.162 +4 CWE-362
THREATIST.IORead the docs