Red Hat Security Advisory

RHSA-2026:61256

kernel security, bug fix, and enhancement update

Released 2026-08-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.161.1.el8_8, kernel-4.18.0-477.161.1.el8_8, kernel-abi-stablelists-4.18.0-477.161.1.el8_8 +14
Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.161.1.el8_8, kernel-4.18.0-477.161.1.el8_8, kernel-abi-stablelists-4.18.0-477.161.1.el8_8 +14

Fixes 3 records

TI-2026-52363 CVE-2026-74580 · GHSA-mr6w-hqp3-cg59

vhost: reset the vring metadata cache on vring reconfiguration

HIGH 73

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq->meta_iotlb[] caches the vhost_iotlb_map that backs each vring metadata region, and io…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00409 Published 2026-08-21 Partial fix · 5.10.265, 5.15.216 +6

TI-2026-38103 CVE-2026-53016 · GHSA-4rx4-73jx-c5r8

crypto: ccp - copy IV using skcipher ivsize

LOW 35

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00141 Published 2026-06-24 Partial fix · 5.10.258, 5.15.209 +6 CWE-805

TI-2026-23969 CVE-2026-31411 · GHSA-9q92-j4jr-j3jp

net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

LOW 24

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00133 Published 2026-04-08 Partial fix · 5.10.252, 5.15.202 +6 CWE-476