Red Hat Security AdvisoryRHSA-2026:52764
kernel security, bug fix, and enhancement update
Released 2026-08-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.95.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.95.1.el10_0, kernel-64k-devel-6.12.0-55.95.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.95.1.el10_0, kernel-64k-6.12.0-55.95.1.el10_0, kernel-64k-core-6.12.0-55.95.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.95.1.el10_0, libperf-6.12.0-55.95.1.el10_0
- Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.95.1.el10_0, kernel-rt-64k-6.12.0-55.95.1.el10_0, kernel-rt-64k-core-6.12.0-55.95.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.95.1.el10_0, kernel-rt-core-6.12.0-55.95.1.el10_0, kernel-rt-debug-6.12.0-55.95.1.el10_0 +11
Fixes 8 records
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only del…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00352 · Published 2026-05-06 · Partial fix · 5.15.209, 6.1.175 +5 CWE-125
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: libceph: make decode_pool() more resilient against corrupted osdmaps If the osdmap is (maliciously) corrupted such that the encoded length of ceph_pg_po…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00458 · Published 2026-01-14 · Partial fix · 5.10.248, 5.15.198 +5 CWE-125
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is dif…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00403 · Published 2026-01-23 · Partial fix · 5.10.248, 5.15.198 +5 CWE-400
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() Two error handling issues exist in xe_exec_queue_create_ioctl(): 1.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00184 · Published 2026-06-24 · Fixed in 6.12.91, 6.18.33 +2 CWE-825
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request the next SysV IPC id through ids->next_id.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00215 · Published 2026-06-24 · Partial fix · 5.10.259, 5.15.210 +6 CWE-20
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns STATUS_STOPPED_ON_SYMLINK, smb2_check_message() returns success without…
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00387 · Published 2026-04-24 · Partial fix · 6.1, 6.1.175 +6 CWE-125
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmd_vm_ops defines .close (privcmd_close), but neither .may_split nor .open.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00183 · Published 2026-04-30 · Partial fix · 5.10.254, 5.15.204 +6 CWE-415
Priority LOW 32
In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is a…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2026-05-27 · Partial fix · 6.6.144, 6.12.95 +3 CWE-862
THREATIST.IORead the docs