Red Hat Security Advisory

RHSA-2026:5691

kernel security update

Released 2026-03-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.185.1.el8_6, kernel-4.18.0-372.185.1.el8_6, kernel-abi-stablelists-4.18.0-372.185.1.el8_6 +14
Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.185.1.el8_6, kernel-4.18.0-372.185.1.el8_6, kernel-abi-stablelists-4.18.0-372.185.1.el8_6 +19
Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.185.1.el8_6, kernel-4.18.0-372.185.1.el8_6, kernel-abi-stablelists-4.18.0-372.185.1.el8_6 +14

Fixes 4 records

TI-2025-25369 CVE-2025-38024 · GHSA-5vmj-cw62-2mgm

RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug

LOW 35

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x7d/0xa0 li…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00229 Published 2025-06-18 Partial fix · 5.4.294, 5.10.238 +6 CWE-416

TI-2025-26910 CVE-2025-40240 · GHSA-p7wh-phc3-g7xr

sctp: avoid NULL dereference when chunk data buffer is missing

LOW 34

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk->skb pointer is dereferenced in the if-block where it's supposed to be NULL only.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00644 Published 2025-12-04 Partial fix · 5.4.301, 5.10.246 +6

TI-2025-43235 CVE-2025-71085 · GHSA-hjpx-f2r6-rr4q

ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()

LOW 33

In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00305 Published 2026-01-13 Partial fix · 5.10.248, 5.15.198 +5 CWE-190

TI-2023-29827 CVE-2023-53539 · GHSA-v36f-cm3w-p7vq

RDMA/rxe: Fix incomplete state save in rxe_requester

LOW 33

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix incomplete state save in rxe_requester If a send packet is dropped by the IP layer in rxe_requester() the call to rxe_xmit_packet() can fa…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00169 Published 2025-10-04 Partial fix · 6.1.53, 6.4.16 +2