Red Hat Security AdvisoryRHSA-2026:4899
kernel security update
Released 2026-03-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.115.1.el9_4, libperf-5.14.0-427.115.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.115.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.115.1.el9_4, kernel-64k-devel-5.14.0-427.115.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.115.1.el9_4, kernel-5.14.0-427.115.1.el9_4, kernel-64k-5.14.0-427.115.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.115.1.el9_4, kernel-rt-core-5.14.0-427.115.1.el9_4, kernel-rt-debug-5.14.0-427.115.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.115.1.el9_4, kernel-rt-core-5.14.0-427.115.1.el9_4, kernel-rt-debug-5.14.0-427.115.1.el9_4 +11
Fixes 1 record
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk->skb pointer is dereferenced in the if-block where it's supposed to be NULL only.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00644 · Published 2025-12-04 · Partial fix · 5.4.301, 5.10.246 +6
