Red Hat Security Advisory

RHSA-2026:51035

kernel security, bug fix, and enhancement update

Released 2026-08-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.36.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.36.1.el9_8, kernel-64k-devel-5.14.0-687.36.1.el9_8 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.36.1.el9_8, kernel-64k-5.14.0-687.36.1.el9_8, kernel-64k-core-5.14.0-687.36.1.el9_8 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.36.1.el9_8, libperf-5.14.0-687.36.1.el9_8
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.36.1.el9_8, kernel-rt-64k-5.14.0-687.36.1.el9_8, kernel-rt-64k-core-5.14.0-687.36.1.el9_8 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.36.1.el9_8, kernel-rt-core-5.14.0-687.36.1.el9_8, kernel-rt-debug-5.14.0-687.36.1.el9_8 +9

Fixes 5 records

TI-2026-24111 CVE-2026-31554 · GHSA-fqg3-p6v9-g3wx

futex: Require sys_futex_requeue() to have identical flags

LOW 35

In the Linux kernel, the following vulnerability has been resolved: futex: Require sys_futex_requeue() to have identical flags Nicholas reported that his LLM found it was possible to create a UaF when sys_futex_requeue()…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0021 Published 2026-04-24 Partial fix · 6.12.80, 6.18.21 +2 CWE-416

TI-2026-18850 CVE-2026-23415 · GHSA-chr7-rqmr-q86r

futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() During futex_key_to_node_opt() execution, vma->vm_policy is read under speculati…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00168 Published 2026-04-02 Fixed in 6.18.21, 6.19.11 +1 CWE-416

TI-2026-31627 CVE-2026-43450 · GHSA-4jv3-xpmj-f4vf

netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

LOW 30

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() nfnl_cthelper_dump_table() has a 'goto restart' that jumps to a label inside t…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00132 Published 2026-05-08 Partial fix · 5.10.253, 5.15.203 +6 CWE-125

TI-2026-38064 CVE-2026-52977 · GHSA-f389-gw66-p7gf

futex: Prevent lockup in requeue-PI during signal/ timeout wakeup

LOW 24

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup During wait-requeue-pi (task A) and requeue-PI (task B) the following race can happen:…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00123 Published 2026-06-24 Partial fix · 5.15.216, 6.1.175 +5

TI-2026-24112 CVE-2026-31555 · GHSA-58x2-94x2-vr83

futex: Clear stale exiting pointer in futex_lock_pi() retry path

LOW 24

In the Linux kernel, the following vulnerability has been resolved: futex: Clear stale exiting pointer in futex_lock_pi() retry path Fuzzying/stressing futexes triggered: WARNING: kernel/futex/core.c:825 at wait_for_owne…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00129 Published 2026-04-24 Partial fix · 4.5, 4.10 +11