Read the docs
Red Hat Security Advisory

RHSA-2026:59473

kernel security, bug fix, and enhancement update

Released 2026-08-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

Priority HIGH 73

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and io…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00409 Published 2026-08-21 Partial fix · 5.10.265, 5.15.216 +6
Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() Two latent bugs in the Text-phase handler, both present since the orig…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00778 Published 2026-07-19 Partial fix · 5.10.259, 5.15.210 +6 CWE-415
TI-2026-38103 CVE-2026-53016 · GHSA-4rx4-73jx-c5r8

crypto: ccp - copy IV using skcipher ivsize

Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00141 Published 2026-06-24 Partial fix · 5.10.258, 5.15.209 +6 CWE-805
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq The wacom_intuos_bt_irq() function processes Bluetooth HID reports without sufficient bounds c…

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00256 Published 2026-05-01 Partial fix · 5.10.253, 5.15.203 +6 CWE-125
Priority LOW 32

In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is a…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00123 Published 2026-05-27 Partial fix · 6.6.144, 6.12.95 +3 CWE-862
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00133 Published 2026-04-08 Partial fix · 5.10.252, 5.15.202 +6 CWE-476