Red Hat Security AdvisoryRHSA-2026:47869
kernel security update
Released 2026-07-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.156.1.el8_8, kernel-4.18.0-477.156.1.el8_8, kernel-abi-stablelists-4.18.0-477.156.1.el8_8 +14
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.156.1.el8_8, kernel-4.18.0-477.156.1.el8_8, kernel-abi-stablelists-4.18.0-477.156.1.el8_8 +14
Fixes 7 records
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix race between ICReq handling and queue teardown nvmet_tcp_handle_icreq() updates queue->state after sending an Initialization Connection R…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00397 · Published 2026-05-28 · Partial fix · 5.10.261, 5.15.212 +6 CWE-362
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a "stale" page fault, i.e.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00273 · Published 2026-08-04 · Partial fix · 5.15.218, 6.1.183 +5 CWE-362
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR free_nested() frees the shadow VMCS while vmcs01 still points to it.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00162 · Published 2026-08-04 · Fixed in 5.10.265, 5.15.216 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete KASAN reproduces a slab-use-after-free in __xfrm_state_delete()'s hlist_del_rcu calls u…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0013 · Published 2026-05-28 · Partial fix · 5.10.261, 5.15.210 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 ("drm/amd/display: Add dsc pre-validation in ato…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0014 · Published 2026-04-22 · Partial fix · 6.1.175, 6.6.140 +4 CWE-416
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O,…
CVSS 3.1HIGH 7.9· Local · Low privileges · No interaction · EPSS 0.0017 · Published 2025-10-28 · Partial fix · 5.4.301, 5.10.246 +7
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net: sched: act_csum: validate nested VLAN headers tcf_csum_act() walks nested VLAN headers directly from skb->data when an skb still carries in-payload…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00117 · Published 2026-04-25 · Partial fix · 4.20, 5.10.258 +7