Red Hat Security AdvisoryRHSA-2026:59473
kernel security, bug fix, and enhancement update
Released 2026-08-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.208.1.el8_6, kernel-4.18.0-372.208.1.el8_6, kernel-abi-stablelists-4.18.0-372.208.1.el8_6 +14
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) bpftool-4.18.0-372.208.1.el8_6, kernel-4.18.0-372.208.1.el8_6, kernel-abi-stablelists-4.18.0-372.208.1.el8_6 +14
Fixes 6 records
Priority HIGH 73
In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and io…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00409 · Published 2026-08-21 · Partial fix · 5.10.265, 5.15.216 +6
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() Two latent bugs in the Text-phase handler, both present since the orig…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00778 · Published 2026-07-19 · Partial fix · 5.10.259, 5.15.210 +6 CWE-415
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00141 · Published 2026-06-24 · Partial fix · 5.10.258, 5.15.209 +6 CWE-805
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq The wacom_intuos_bt_irq() function processes Bluetooth HID reports without sufficient bounds c…
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.00256 · Published 2026-05-01 · Partial fix · 5.10.253, 5.15.203 +6 CWE-125
Priority LOW 32
In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is a…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00123 · Published 2026-05-27 · Partial fix · 6.6.144, 6.12.95 +3 CWE-862
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00133 · Published 2026-04-08 · Partial fix · 5.10.252, 5.15.202 +6 CWE-476