Red Hat Security Advisory

RHSA-2026:56574

kernel security, bug fix, and enhancement update

Released 2026-08-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.135.1.el9_6, libperf-5.14.0-570.135.1.el9_6
Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.135.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.135.1.el9_6, kernel-64k-devel-5.14.0-570.135.1.el9_6 +12
Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.135.1.el9_6, kernel-64k-5.14.0-570.135.1.el9_6, kernel-64k-core-5.14.0-570.135.1.el9_6 +28
Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.135.1.el9_6, kernel-rt-64k-5.14.0-570.135.1.el9_6, kernel-rt-64k-core-5.14.0-570.135.1.el9_6 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.135.1.el9_6, kernel-rt-core-5.14.0-570.135.1.el9_6, kernel-rt-debug-5.14.0-570.135.1.el9_6 +11

Fixes 4 records

TI-2026-38103 CVE-2026-53016 · GHSA-4rx4-73jx-c5r8

crypto: ccp - copy IV using skcipher ivsize

LOW 35

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00141 Published 2026-06-24 Partial fix · 5.10.258, 5.15.209 +6 CWE-805

TI-2026-38146 CVE-2026-53059 · GHSA-vj88-ppr4-hj46

dm log: fix out-of-bounds write due to region_count overflow

LOW 33

In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_context() is declared as unsigned int (32-bit…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00141 Published 2026-06-24 Partial fix · 5.10.258, 5.15.209 +6 CWE-787

TI-2026-23969 CVE-2026-31411 · GHSA-9q92-j4jr-j3jp

net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

LOW 24

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00133 Published 2026-04-08 Partial fix · 5.10.252, 5.15.202 +6 CWE-476

TI-2026-18547 CVE-2026-23110 · GHSA-7p3h-gfr2-rwcv

scsi: core: Wake up the error handler when final completions race against each other

LOW 20

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Wake up the error handler when final completions race against each other The fragile ordering between marking commands completed or failed s…

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00113 Published 2026-02-04 Partial fix · 5.10.249, 6.1.162 +4 CWE-362