Red Hat Security AdvisoryRHSA-2026:45192
kernel security, bug fix, and enhancement update
Released 2026-07-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.30.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.30.1.el9_8, kernel-64k-devel-5.14.0-687.30.1.el9_8 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.30.1.el9_8, kernel-64k-5.14.0-687.30.1.el9_8, kernel-64k-core-5.14.0-687.30.1.el9_8 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.30.1.el9_8, libperf-5.14.0-687.30.1.el9_8
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.30.1.el9_8, kernel-rt-64k-5.14.0-687.30.1.el9_8, kernel-rt-64k-core-5.14.0-687.30.1.el9_8 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.30.1.el9_8, kernel-rt-core-5.14.0-687.30.1.el9_8, kernel-rt-debug-5.14.0-687.30.1.el9_8 +9
Fixes 6 records
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is problematic since skb->head can change.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00394 · Published 2026-06-24 · Partial fix · 5.10.258, 5.15.209 +6 CWE-825
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a "stale" page fault, i.e.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2026-08-04 · Partial fix · 5.15.218, 6.1.183 +5 CWE-362
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() Two error handling issues exist in xe_exec_queue_create_ioctl(): 1.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00184 · Published 2026-06-24 · Fixed in 6.12.91, 6.18.33 +2 CWE-825
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: fix UAF with retry loop Retry doesn't work here, since bo will be freed on error, leading to UAF.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00178 · Published 2026-06-24 · Fixed in 6.18.33, 7.0.10 +1 CWE-825
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O,…
CVSS 3.1HIGH 7.9· Local · Low privileges · No interaction · EPSS 0.0017 · Published 2025-10-28 · Partial fix · 5.4.301, 5.10.246 +7
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_context() is declared as unsigned int (32-bit…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00141 · Published 2026-06-24 · Partial fix · 5.10.258, 5.15.209 +6 CWE-787
THREATIST.IORead the docs