Red Hat Security AdvisoryRHSA-2026:49212
kernel security update
Released 2026-07-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.33.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.33.1.el9_8, kernel-64k-devel-5.14.0-687.33.1.el9_8 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.33.1.el9_8, kernel-64k-5.14.0-687.33.1.el9_8, kernel-64k-core-5.14.0-687.33.1.el9_8 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.33.1.el9_8, libperf-5.14.0-687.33.1.el9_8
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.33.1.el9_8, kernel-rt-64k-5.14.0-687.33.1.el9_8, kernel-rt-64k-core-5.14.0-687.33.1.el9_8 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.33.1.el9_8, kernel-rt-core-5.14.0-687.33.1.el9_8, kernel-rt-debug-5.14.0-687.33.1.el9_8 +9
Fixes 3 records
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle tcf_classify() can return TC_ACT_CONSUMED while the skb is held by the defragmentation e…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00655 · Published 2026-07-26 · Fixed in 5.15.212, 6.1.178 +6 CWE-416
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate the skb it is validating, freeing the old one.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00404 · Published 2026-06-24 · Partial fix · 5.10.258, 5.15.209 +6 CWE-763
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request the next SysV IPC id through ids->next_id.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00215 · Published 2026-06-24 · Partial fix · 5.10.259, 5.15.210 +6 CWE-20
THREATIST.IORead the docs