Red Hat Security Advisory

RHSA-2026:54343

kernel security, bug fix, and enhancement update

Released 2026-08-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.47.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.47.1.el10_2, kernel-64k-devel-6.12.0-211.47.1.el10_2 +12
Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.47.1.el10_2, kernel-64k-6.12.0-211.47.1.el10_2, kernel-64k-core-6.12.0-211.47.1.el10_2 +29
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.47.1.el10_2, libperf-6.12.0-211.47.1.el10_2
Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.47.1.el10_2, kernel-rt-64k-6.12.0-211.47.1.el10_2, kernel-rt-64k-core-6.12.0-211.47.1.el10_2 +21
Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.47.1.el10_2, kernel-rt-core-6.12.0-211.47.1.el10_2, kernel-rt-debug-6.12.0-211.47.1.el10_2 +9

Fixes 5 records

TI-2026-38350 CVE-2026-53264 · GHSA-vq3g-6qwh-5wj2

net/sched: act_api: use RCU with deferred freeing for action lifecycle

HIGH 69

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred freeing for action lifecycle When NEWTFILTER and DELFILTER are run concurrently it is possible to create a rac…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00485 Published 2026-06-25 Partial fix · 5.10.259, 5.15.210 +6 CWE-416

TI-2026-45452 CVE-2026-63887 · GHSA-cccw-rxpj-wfqf

scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf

MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf iscsi_encode_text_output() concatenates "key=value\0" records into login->rsp_b…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00778 Published 2026-07-19 Partial fix · 5.10.259, 5.15.210 +6 CWE-122

TI-2026-38288 CVE-2026-53202 · GHSA-jpvf-6235-4rh8

accel/ivpu: Fix signed integer truncation in IPC receive

LOW 35

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied data_size is cast to signed int before be…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2026-06-25 Fixed in 6.12.94, 6.18.36 +2 CWE-190

TI-2026-37999 CVE-2026-52912 · GHSA-ffm7-9f73-pvmf

netfilter: nf_queue: hold bridge skb->dev while queued

LOW 35

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridge skb->dev while queued br_pass_frame_up() rewrites skb->dev from the ingress port to the bridge master before queueing b…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2026-06-24 Partial fix · 5.10.259, 5.15.209 +6 CWE-416

TI-2026-45864 CVE-2026-64300 · GHSA-643v-c574-jxr9

perf/aux: Fix page UAF in map_range()

LOW 33

In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in map_range() map_range() reads rb->aux_pages[], rb->aux_nr_pages and rb->aux_pgoff via perf_mmap_to_page() while holding only e…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00182 Published 2026-07-25 Fixed in 6.18.39, 7.1.4 +1 CWE-416