Red Hat Security AdvisoryRHSA-2026:6153
kernel security update
Released 2026-03-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-611.45.1.el9_7, kernel-64k-debug-devel-matched-5.14.0-611.45.1.el9_7, kernel-64k-devel-5.14.0-611.45.1.el9_7 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-611.45.1.el9_7, kernel-64k-5.14.0-611.45.1.el9_7, kernel-64k-core-5.14.0-611.45.1.el9_7 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-611.45.1.el9_7, libperf-5.14.0-611.45.1.el9_7
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-611.45.1.el9_7, kernel-rt-64k-5.14.0-611.45.1.el9_7, kernel-rt-64k-core-5.14.0-611.45.1.el9_7 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-611.45.1.el9_7, kernel-rt-core-5.14.0-611.45.1.el9_7, kernel-rt-debug-5.14.0-611.45.1.el9_7 +9
Fixes 8 records
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() In iscsit_dec_session_usage_count(), the function calls complete() while hol…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00363 · Published 2026-02-14 · Partial fix · 5.10.250, 5.15.200 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice repro to crash the kernel: ip link add p1 type veth peer p2 ip link set ad…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00176 · Published 2026-02-14 · Partial fix · 5.10.250, 5.15.200 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substr…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00133 · Published 2026-02-14 · Partial fix · 5.10.270, 5.15.221 +5 CWE-362
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free due to enslave fail after slave array update Fix a use-after-free which happens due to enslave failure after the new slave h…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00172 · Published 2026-02-14 · Partial fix · 6.1.191, 6.6.140 +3 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev_lec[] changes.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0021 · Published 2025-07-04 · Partial fix · 5.4.295, 5.10.239 +6 CWE-416
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies When adding dependencies with drm_sched_job_add_dependency(), that function…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00154 · Published 2025-10-30 · Partial fix · 6.1.158, 6.6.114 +3
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00152 · Published 2026-02-14 · Partial fix · 5.10.260, 5.15.209 +5 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure When a context DAMON sysfs directory setup is failed after setup of attrs/ directory,…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00143 · Published 2026-02-14 · Partial fix · 6.1.162, 6.6.122 +3 CWE-401
THREATIST.IORead the docs