Red Hat Security AdvisoryRHSA-2026:59662
kernel security, bug fix, and enhancement update
Released 2026-08-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.188.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.188.1.el9_2, kernel-64k-devel-5.14.0-284.188.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.188.1.el9_2, kernel-5.14.0-284.188.1.el9_2, kernel-64k-5.14.0-284.188.1.el9_2 +29
Fixes 5 records
Priority HIGH 73
In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and io…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00409 · Published 2026-08-21 · Partial fix · 5.10.265, 5.15.216 +6
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only del…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00352 · Published 2026-05-06 · Partial fix · 5.15.209, 6.1.175 +5 CWE-125
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels seg6_input_core() and rpl_input() call ip6_route_input() which sets a NOREF dst on the skb, then…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00288 · Published 2026-05-27 · Partial fix · 5.15.209, 6.1.175 +5 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_context() is declared as unsigned int (32-bit…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00141 · Published 2026-06-24 · Partial fix · 5.10.258, 5.15.209 +6 CWE-787
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00133 · Published 2026-04-08 · Partial fix · 5.10.252, 5.15.202 +6 CWE-476