Red Hat Security Advisory

RHSA-2026:53329

kernel security, bug fix, and enhancement update

Released 2026-08-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.38.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.38.1.el9_8, kernel-64k-devel-5.14.0-687.38.1.el9_8 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.38.1.el9_8, kernel-64k-5.14.0-687.38.1.el9_8, kernel-64k-core-5.14.0-687.38.1.el9_8 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.38.1.el9_8, libperf-5.14.0-687.38.1.el9_8
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.38.1.el9_8, kernel-rt-64k-5.14.0-687.38.1.el9_8, kernel-rt-64k-core-5.14.0-687.38.1.el9_8 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.38.1.el9_8, kernel-rt-core-5.14.0-687.38.1.el9_8, kernel-rt-debug-5.14.0-687.38.1.el9_8 +9

Fixes 3 records

TI-2026-45932 CVE-2026-64368 · GHSA-m4hc-cp9r-f6rj

mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

LOW 37

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled When init (zeroing) on allocation is requested, for kmalloc() we generally ha…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00417 Published 2026-07-25 Fixed in 6.6.145, 6.12.96 +3 CWE-665

TI-2026-46095 CVE-2026-64531 · GHSA-4pwv-pmm4-fw4r

net: openvswitch: reject oversized nested action attrs

LOW 36

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0038 Published 2026-07-27 Partial fix · 5.15.212, 6.1.178 +6 CWE-190

TI-2026-24088 CVE-2026-31530 · GHSA-6pf8-h7c8-42fv

cxl/port: Fix use after free of parent_port in cxl_detach_ep()

LOW 33

In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use after free of parent_port in cxl_detach_ep() cxl_detach_ep() is called during bottom-up removal when all CXL memory devices beneath a…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00159 Published 2026-04-22 Fixed in 6.6.160, 6.12.80 +3 CWE-416