Red Hat Security Advisory

RHSA-2026:61932

kernel security update

Released 2026-09-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.163.1.el8_8, kernel-4.18.0-477.163.1.el8_8, kernel-abi-stablelists-4.18.0-477.163.1.el8_8 +14
Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.163.1.el8_8, kernel-4.18.0-477.163.1.el8_8, kernel-abi-stablelists-4.18.0-477.163.1.el8_8 +14

Fixes 4 records

TI-2026-52364 CVE-2026-74581 · GHSA-7ph7-58w3-w755

net: ipv6: clear suppressed fib6 rule result

MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6_rule_suppress() drops a suppressed route with ip6_rt_put_flags(), but leaves res->rt6 pointing at the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00421 Published 2026-08-21 Partial fix · 5.10.265, 5.15.216 +7

TI-2026-38093 CVE-2026-53006 · GHSA-f2fg-xhhc-4m4w

ipv6: fix possible UAF in icmpv6_rcv()

MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is problematic since skb->head can change.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00394 Published 2026-06-24 Partial fix · 5.10.258, 5.15.209 +6 CWE-825

TI-2026-45567 CVE-2026-64002 · GHSA-gghq-r38g-rg55

ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() ipv4_sysctl_exit_net() is currently freeing net->ipv4.sysctl_local_…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0013 Published 2026-07-19 Partial fix · 5.10.259, 5.15.210 +6 CWE-416

TI-2026-14374 CVE-2026-17523 · GHSA-pvqq-pw2j-4v86

can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet

LOW 35

In the Linux kernel, the following vulnerability has been resolved: can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet This patch switches the timer to HRTIMER_MODE_SOFT, which executed the timer call…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2026-07-27 Fixed in 4.19.226, 5.4