Red Hat Security AdvisoryRHSA-2026:68100
kernel security update
Released 2026-09-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.4) kernel-64k-debug-devel-5.14.0-427.150.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.150.1.el9_4, kernel-64k-devel-5.14.0-427.150.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS E4S (v.9.4) bpftool-7.3.0-427.150.1.el9_4, kernel-5.14.0-427.150.1.el9_4, kernel-64k-5.14.0-427.150.1.el9_4 +29
- Red Hat Enterprise Linux Real Time E4S (v.9.4) kernel-rt-5.14.0-427.150.1.el9_4, kernel-rt-core-5.14.0-427.150.1.el9_4, kernel-rt-debug-5.14.0-427.150.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) kernel-rt-5.14.0-427.150.1.el9_4, kernel-rt-core-5.14.0-427.150.1.el9_4, kernel-rt-debug-5.14.0-427.150.1.el9_4 +11
Fixes 7 records
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc_rresp() places each inbound Read Response…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00714 · Published 2026-07-25 · Partial fix · 5.10.261, 5.15.212 +6 CWE-787
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() Two latent bugs in the Text-phase handler, both present since the orig…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00778 · Published 2026-07-19 · Partial fix · 5.10.259, 5.15.210 +6 CWE-415
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf iscsi_encode_text_output() concatenates "key=value\0" records into login->rsp_b…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00778 · Published 2026-07-19 · Partial fix · 5.10.259, 5.15.210 +6 CWE-122
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() The VF2PF interrupt handler queues PF-side response work that stores a raw pointer to…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00135 · Published 2026-07-25 · Partial fix · 5.10.261, 5.15.212 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Florian Westphal says: "Historically this is not an issue, even for normal base hooks: the data path doesn'…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00183 · Published 2026-06-24 · Partial fix · 6.1.191, 6.6.160 +4 CWE-763
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: fix signed comparison in io_poll_get_ownership() io_poll_get_ownership() uses a signed comparison to check whether poll_refs has reached…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00148 · Published 2026-06-24 · Fixed in 5.16, 6.1 +6 CWE-190
Priority LOW 32
In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may return false for a mark on an unrelated group, which results in bypassing…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0013 · Published 2026-05-28 · Partial fix · 5.10.258, 5.15.209 +6 CWE-863
THREATIST.IORead the docs