Red Hat Security AdvisoryRHSA-2026:67470
kernel security, bug fix, and enhancement update
Released 2026-09-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.48.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.48.1.el9_8, kernel-64k-devel-5.14.0-687.48.1.el9_8 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.48.1.el9_8, kernel-64k-5.14.0-687.48.1.el9_8, kernel-64k-core-5.14.0-687.48.1.el9_8 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.48.1.el9_8, libperf-5.14.0-687.48.1.el9_8
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.48.1.el9_8, kernel-rt-64k-5.14.0-687.48.1.el9_8, kernel-rt-64k-core-5.14.0-687.48.1.el9_8 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.48.1.el9_8, kernel-rt-core-5.14.0-687.48.1.el9_8, kernel-rt-debug-5.14.0-687.48.1.el9_8 +9
Fixes 7 records
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer iscsi_tcp_hdr_dissect() receives the data segment of several PDU types int…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00399 · Published 2026-08-15 · Partial fix · 5.10.265, 5.15.216 +6
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvu_mbox_handler_lmtst_tbl_setup() uses req->base_pcifunc as a direct index into the LMT…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00151 · Published 2026-08-15 · Partial fix · 5.15.217, 6.1.184 +5 CWE-862
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: restrict socket creation to the initial network namespace QRTR keeps its entire port and node state in module-global variables that are not p…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00151 · Published 2026-08-10 · Partial fix · 5.10.265, 5.15.216 +6 CWE-862
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify rvu_mbox_handler_rep_event_notify() in drivers/net/ethernet/marvell/ octeontx2/…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00173 · Published 2026-07-19 · Fixed in 6.18.42, 7.0.12 +1 CWE-787
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive against buffer reallocation sl_realloc_bufs() replaces rbuff and updates buffsize while holding sl->lock.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00107 · Published 2026-08-10 · Partial fix · 5.10.265, 5.15.216 +6 CWE-362
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on lookup Nicholas Carlini reports that the keyring code calls assoc_array_find() in find_key_to_update() wit…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00155 · Published 2026-07-19 · Partial fix · 5.10.273, 5.15.224 +6 CWE-362
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound check to vhost_vdpa Remove duplication by consolidating these here.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00164 · Published 2026-05-06 · Partial fix · 6.1.191, 6.6.160 +4 CWE-787
THREATIST.IORead the docs