Red Hat Security AdvisoryRHSA-2026:6632
kernel security update
Released 2026-04-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-124.49.1.el10_1, kernel-64k-debug-devel-matched-6.12.0-124.49.1.el10_1, kernel-64k-devel-6.12.0-124.49.1.el10_1 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-124.49.1.el10_1, kernel-64k-6.12.0-124.49.1.el10_1, kernel-64k-core-6.12.0-124.49.1.el10_1 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-124.49.1.el10_1, libperf-6.12.0-124.49.1.el10_1
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-124.49.1.el10_1, kernel-rt-64k-6.12.0-124.49.1.el10_1, kernel-rt-64k-core-6.12.0-124.49.1.el10_1 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-124.49.1.el10_1, kernel-rt-core-6.12.0-124.49.1.el10_1, kernel-rt-debug-6.12.0-124.49.1.el10_1 +9
Fixes 7 records
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() In iscsit_dec_session_usage_count(), the function calls complete() while hol…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00363 · Published 2026-02-14 · Partial fix · 5.10.250, 5.15.200 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice repro to crash the kernel: ip link add p1 type veth peer p2 ip link set ad…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00176 · Published 2026-02-14 · Partial fix · 5.10.250, 5.15.200 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substr…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00133 · Published 2026-02-14 · Partial fix · 5.10.270, 5.15.221 +5 CWE-362
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free due to enslave fail after slave array update Fix a use-after-free which happens due to enslave failure after the new slave h…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00172 · Published 2026-02-14 · Partial fix · 6.1.191, 6.6.140 +3 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip (ECVF) of a BlueField de…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.002 · Published 2025-07-03 · Fixed in 6.6.94, 6.12.34 +2 CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00152 · Published 2026-02-14 · Partial fix · 5.10.260, 5.15.209 +5 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure When a context DAMON sysfs directory setup is failed after setup of attrs/ directory,…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00143 · Published 2026-02-14 · Partial fix · 6.1.162, 6.6.122 +3 CWE-401
THREATIST.IORead the docs