Red Hat Security Advisory

RHSA-2026:47040

kernel security, bug fix, and enhancement update

Released 2026-07-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.31.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.31.1.el9_8, kernel-64k-devel-5.14.0-687.31.1.el9_8 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.31.1.el9_8, kernel-64k-5.14.0-687.31.1.el9_8, kernel-64k-core-5.14.0-687.31.1.el9_8 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.31.1.el9_8, libperf-5.14.0-687.31.1.el9_8
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.31.1.el9_8, kernel-rt-64k-5.14.0-687.31.1.el9_8, kernel-rt-64k-core-5.14.0-687.31.1.el9_8 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.31.1.el9_8, kernel-rt-core-5.14.0-687.31.1.el9_8, kernel-rt-debug-5.14.0-687.31.1.el9_8 +9

Fixes 5 records

TI-2026-38367 CVE-2026-53281 · GHSA-p9cf-q2gf-35mq

iommu/vt-d: Avoid NULL pointer dereference or refcount corruption

LOW 39

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption Commit 60f030f7418d ("iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE") fixed a NULL…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00136 Published 2026-06-26 Fixed in 6.12.114, 6.14 +3 CWE-476

TI-2026-45582 CVE-2026-64017 · GHSA-pqjq-mhgh-j532

blk-mq: pop cached request if it is usable

LOW 35

In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable When submitting a bio to blk-mq, if the task should sleep after peeking a cached request, but before it pops…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00126 Published 2026-07-19 Partial fix · 6.1.191, 6.6.161 +5 CWE-416

TI-2026-38060 CVE-2026-52973 · GHSA-9qj4-wr4g-7m6f

futex: Drop CLONE_THREAD requirement for private default hash alloc

LOW 35

In the Linux kernel, the following vulnerability has been resolved: futex: Drop CLONE_THREAD requirement for private default hash alloc Currently need_futex_hash_allocate_default() depends on strict pthread semantics, ab…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00184 Published 2026-06-24 Fixed in 6.18.33, 7.0.10 +1 CWE-825

TI-2025-26472 CVE-2025-39797 · GHSA-p94f-8hph-rvrp

xfrm: Duplicate SPI Handling

LOW 33

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRM_MSG_ALLOCSPI Netlink message, which triggers the kernel function xfr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2025-09-12 Partial fix · 6.1.191, 6.6.103 +4

TI-2026-18439 CVE-2026-23002 · GHSA-g95h-2j46-jx6w

lib/buildid: use __kernel_read() for sleepable context

LOW 24

In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use __kernel_read() for sleepable context Prevent a "BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio".

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00176 Published 2026-01-25 Partial fix · 6.12.67, 6.18.7 +1 CWE-476