Red Hat Security Advisory

RHSA-2026:6310

kernel security update

Released 2026-04-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.117.1.el9_4, libperf-5.14.0-427.117.1.el9_4
Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.117.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.117.1.el9_4, kernel-64k-devel-5.14.0-427.117.1.el9_4 +11
Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.117.1.el9_4, kernel-5.14.0-427.117.1.el9_4, kernel-64k-5.14.0-427.117.1.el9_4 +29
Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.117.1.el9_4, kernel-rt-core-5.14.0-427.117.1.el9_4, kernel-rt-debug-5.14.0-427.117.1.el9_4 +9
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.117.1.el9_4, kernel-rt-core-5.14.0-427.117.1.el9_4, kernel-rt-debug-5.14.0-427.117.1.el9_4 +11

Fixes 4 records

TI-2026-18646 CVE-2026-23209 · GHSA-89j4-f3cq-gm32

macvlan: fix error recovery in macvlan_common_newlink()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice repro to crash the kernel: ip link add p1 type veth peer p2 ip link set ad…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00176 Published 2026-02-14 Partial fix · 5.10.250, 5.15.200 +5 CWE-416

TI-2026-18438 CVE-2026-23001 · GHSA-vgc7-m4r9-xw45

macvlan: fix possible UAF in macvlan_forward_source()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlan_forward_source() Add RCU protection on (struct macvlan_source_entry)->vlan.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00206 Published 2026-01-25 Partial fix · 5.10.249, 5.15.199 +5 CWE-416

TI-2025-25520 CVE-2025-38180 · GHSA-qp5r-frvf-p8mw

net: atm: fix /proc/net/atm/lec handling

LOW 35

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev_lec[] changes.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0021 Published 2025-07-04 Partial fix · 5.4.295, 5.10.239 +6 CWE-416

TI-2025-25495 CVE-2025-38154 · GHSA-vvj3-j4jg-68hm

bpf, sockmap: Avoid using sk_socket after free when sending

LOW 35

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sk_socket after free when sending The sk->sk_socket is not locked or referenced in backlog thread, and during the call to skb_…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00191 Published 2025-07-03 Partial fix · 5.15.186, 6.1.142 +5 CWE-416