Read the docs
Red Hat Security Advisory

RHSA-2026:63128

kernel security update

Released 2026-09-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

TI-2026-52364 CVE-2026-74581 · GHSA-7ph7-58w3-w755

net: ipv6: clear suppressed fib6 rule result

Priority MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6_rule_suppress() drops a suppressed route with ip6_rt_put_flags(), but leaves res->rt6 pointing at the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00421 Published 2026-08-21 Partial fix · 5.10.265, 5.15.216 +7
Priority MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query directory replay double-free A response-bearing attempt can return a replayable error and free its response buffer.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00457 Published 2026-07-25 Fixed in 6.6.145, 6.12.96 +3 CWE-415
Priority MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfat_find_dir_entry() In exfat_find_dir_entry(), the buffer_head obtained from exfat_get_dentry() is released wi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00527 Published 2026-07-19 Partial fix · 5.10.260, 5.15.211 +6 CWE-416
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: iomap: fix out-of-bounds bitmap_set() with zero-length range ifs_set_range_dirty() and ifs_set_range_uptodate() compute last_blk as (off + len - 1) >> i…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00138 Published 2026-08-10 Fixed in 6.6.153, 6.12.101 +3 CWE-190
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the internal output buffer is calculated incorrectly, which can result overflow when a t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00169 Published 2026-07-19 Partial fix · 5.10.260, 5.15.211 +6 CWE-787
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error When hci_register_dev() fails in hci_uart_register_dev() HCI_UART_PROTO_INIT is not cleared bef…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00114 Published 2026-06-24 Partial fix · 5.10.258, 5.15.209 +9 CWE-476