Red Hat Security AdvisoryRHSA-2026:65708
kernel security, bug fix, and enhancement update
Released 2026-09-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.140.1.el9_6, libperf-5.14.0-570.140.1.el9_6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.140.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.140.1.el9_6, kernel-64k-devel-5.14.0-570.140.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.140.1.el9_6, kernel-64k-5.14.0-570.140.1.el9_6, kernel-64k-core-5.14.0-570.140.1.el9_6 +28
- Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.140.1.el9_6, kernel-rt-64k-5.14.0-570.140.1.el9_6, kernel-rt-64k-core-5.14.0-570.140.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.140.1.el9_6, kernel-rt-core-5.14.0-570.140.1.el9_6, kernel-rt-debug-5.14.0-570.140.1.el9_6 +11
Fixes 8 records
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate CHAP_R length before base64 decode chap_server_compute_hash() allocates client_digest as kzalloc(chap->digest_size) and th…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00711 · Published 2026-07-19 · Partial fix · 6.1.176, 6.6.143 +4 CWE-122
Priority MEDIUM 46
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2_compound_op() If a server sends a truncated response but a large OutputBufferLength, and terminates the EA li…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00478 · Published 2026-05-28 · Fixed in 6.6.140, 6.12.88 +3 CWE-125
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00503 · Published 2026-07-29 · Partial fix · 5.10.262, 5.15.213 +6 CWE-362
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2C_SMBUS_I2C_BLOCK_DATA case in stub_xfer() uses data->block[0] as the transfer length.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00165 · Published 2026-07-20 · Partial fix · 5.10.260, 5.15.211 +6 CWE-787
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram_bvec_write_partial() zram_read_page() picks the sync or async backing device read path based on whether the parent bio…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00107 · Published 2026-06-25 · Partial fix · 6.6.143, 6.12.94 +3 CWE-364
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: fix signed comparison in io_poll_get_ownership() io_poll_get_ownership() uses a signed comparison to check whether poll_refs has reached…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00148 · Published 2026-06-24 · Fixed in 5.16, 6.1 +6 CWE-190
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential UAF after skb_unshare() failure If skb_unshare() fails to unshare a packet due to allocation failure in rxrpc_input_packet(), the s…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00137 · Published 2026-05-27 · Partial fix · 6.6.140, 6.12.86 +3 CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads le16_to_cpu(rom_desc->Size) bytes from the device I2C EEPROM into a buf…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00271 · Published 2026-06-25 · Partial fix · 5.10.259, 5.15.210 +6 CWE-787
THREATIST.IORead the docs