Red Hat Security AdvisoryRHSA-2026:45114
kernel security update
Released 2026-07-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.39.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.39.1.el10_2, kernel-64k-devel-6.12.0-211.39.1.el10_2 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.39.1.el10_2, kernel-64k-6.12.0-211.39.1.el10_2, kernel-64k-core-6.12.0-211.39.1.el10_2 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.39.1.el10_2, libperf-6.12.0-211.39.1.el10_2
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.39.1.el10_2, kernel-rt-64k-6.12.0-211.39.1.el10_2, kernel-rt-64k-core-6.12.0-211.39.1.el10_2 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.39.1.el10_2, kernel-rt-core-6.12.0-211.39.1.el10_2, kernel-rt-debug-6.12.0-211.39.1.el10_2 +9
Fixes 7 records
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a "stale" page fault, i.e.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2026-08-04 · Partial fix · 5.15.218, 6.1.183 +5 CWE-362
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels seg6_input_core() and rpl_input() call ip6_route_input() which sets a NOREF dst on the skb, then…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00288 · Published 2026-05-27 · Partial fix · 5.15.209, 6.1.175 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: futex: Drop CLONE_THREAD requirement for private default hash alloc Currently need_futex_hash_allocate_default() depends on strict pthread semantics, ab…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00184 · Published 2026-06-24 · Fixed in 6.18.33, 7.0.10 +1 CWE-825
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_context() is declared as unsigned int (32-bit…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00141 · Published 2026-06-24 · Partial fix · 5.10.258, 5.15.209 +6 CWE-787
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer network namespace whe…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00119 · Published 2026-04-30 · Partial fix · 6.18.24, 6.19.14 +1
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfs_encode_fid with s_umount Calling intotify_show_fdinfo() on fd watching an overlayfs inode, while the overlayfs is being unmount…
CVSS — · EPSS 0.00216 · Published 2025-12-04 · Partial fix · 6.6.73, 6.6.115 +3
Priority LOW 20
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Wake up the error handler when final completions race against each other The fragile ordering between marking commands completed or failed s…
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00113 · Published 2026-02-04 · Partial fix · 5.10.249, 6.1.162 +4 CWE-362
THREATIST.IORead the docs