Red Hat Security AdvisoryRHSA-2026:49033
kernel security update
Released 2026-07-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.204.1.el8_6, kernel-4.18.0-372.204.1.el8_6, kernel-abi-stablelists-4.18.0-372.204.1.el8_6 +14
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) bpftool-4.18.0-372.204.1.el8_6, kernel-4.18.0-372.204.1.el8_6, kernel-abi-stablelists-4.18.0-372.204.1.el8_6 +14
Fixes 5 records
Priority HIGH 73
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GF…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.01368 · Published 2026-07-04 · Partial fix · 5.15.222, 6.1.177 +5 CWE-416
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle tcf_classify() can return TC_ACT_CONSUMED while the skb is held by the defragmentation e…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00655 · Published 2026-07-26 · Fixed in 5.15.212, 6.1.178 +6 CWE-416
Priority MEDIUM 48
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00544 · Published 2026-06-09 · Partial fix CWE-362
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for direct shadow pages using sp->gfn plus the SPTE index.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00195 · Published 2026-05-28 · Partial fix · 5.15.222, 6.1.175 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete KASAN reproduces a slab-use-after-free in __xfrm_state_delete()'s hlist_del_rcu calls u…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0013 · Published 2026-05-28 · Partial fix · 5.10.261, 5.15.210 +6 CWE-416