Read the docs
Red Hat Security Advisory

RHSA-2026:57254

kernel-rt security, bug fix, and enhancement update

Released 2026-08-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 9 records

Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() Two latent bugs in the Text-phase handler, both present since the orig…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00778 Published 2026-07-19 Partial fix · 5.10.259, 5.15.210 +6 CWE-415
Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf iscsi_encode_text_output() concatenates "key=value\0" records into login->rsp_b…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00778 Published 2026-07-19 Partial fix · 5.10.259, 5.15.210 +6 CWE-122
Priority MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3_simple_fallocate_range() can skip holes when an allocated range returned by the server…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00514 Published 2026-08-10 Partial fix · 5.10.265, 5.13 +8 CWE-125
Priority LOW 39

In the Linux kernel, the following vulnerability has been resolved: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot On the SMC-D client, slot 0 of ini->ism_dev[]/ini->ism_chid[] is reserved for an SMC-Dv…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00501 Published 2026-07-19 Partial fix · 5.10.266, 5.15.217 +6 CWE-476
Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() sock_init_data() attaches the allocated sk object to the provided sock object…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00231 Published 2024-12-27 Partial fix · 5.4.287, 5.10.231 +5 CWE-416
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_huge_pmd_locked() updates the file/shmem RSS counter after dropping the PMD mapping's…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0013 Published 2026-06-25 Partial fix · 5.10.259, 5.15.210 +6 CWE-416
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between file release and pressure write A potential race condition exists between pressure write and cgroup file release regarding t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00147 Published 2026-06-24 Partial fix · 6.1.191, 6.6.160 +4 CWE-367
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: ip6_gre: Use cached t->net in ip6erspan_changelink().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00128 Published 2026-05-28 Partial fix · 4.17, 5.10.258 +7 CWE-416
Priority LOW 31

In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value fr…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00309 Published 2026-07-25 Partial fix · 5.10.261, 5.15.212 +6 CWE-20