Red Hat Security Advisory

RHSA-2026:49211

kernel security, bug fix, and enhancement update

Released 2026-07-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.42.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.42.1.el10_2, kernel-64k-devel-6.12.0-211.42.1.el10_2 +12
Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.42.1.el10_2, kernel-64k-6.12.0-211.42.1.el10_2, kernel-64k-core-6.12.0-211.42.1.el10_2 +29
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.42.1.el10_2, libperf-6.12.0-211.42.1.el10_2
Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.42.1.el10_2, kernel-rt-64k-6.12.0-211.42.1.el10_2, kernel-rt-64k-core-6.12.0-211.42.1.el10_2 +21
Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.42.1.el10_2, kernel-rt-core-6.12.0-211.42.1.el10_2, kernel-rt-debug-6.12.0-211.42.1.el10_2 +9

Fixes 3 records

TI-2026-46094 CVE-2026-64530 · GHSA-w5h3-gv63-49vp

net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle

MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle tcf_classify() can return TC_ACT_CONSUMED while the skb is held by the defragmentation e…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00655 Published 2026-07-26 Fixed in 5.15.212, 6.1.178 +6 CWE-416

TI-2026-34024 CVE-2026-46303 · GHSA-phcq-c45r-9f84

isofs: validate Rock Ridge CE continuation extent against volume size

LOW 36

In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue() reads rs->cont_extent verbatim from the Rock Ridge CE record and p…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0032 Published 2026-06-08 Fixed in 2.6.33, 3.3 +14 CWE-401

TI-2025-41788 CVE-2025-68211 · GHSA-qhqr-mc3h-hmjp

ksm: use range-walk function to jump over holes in scan_get_next_rmap_item

LOW 24

In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item Currently, scan_get_next_rmap_item() walks every page address in a VMA to loc…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00147 Published 2025-12-16 Partial fix · 5.10.249, 5.15.199 +5