Red Hat Security Advisory

RHSA-2026:6961

kernel security update

Released 2026-04-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.187.1.el8_6, kernel-4.18.0-372.187.1.el8_6, kernel-abi-stablelists-4.18.0-372.187.1.el8_6 +14
Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.187.1.el8_6, kernel-4.18.0-372.187.1.el8_6, kernel-abi-stablelists-4.18.0-372.187.1.el8_6 +19
Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.187.1.el8_6, kernel-4.18.0-372.187.1.el8_6, kernel-abi-stablelists-4.18.0-372.187.1.el8_6 +14

Fixes 4 records

TI-2025-25587 CVE-2025-38248 · GHSA-2838-84rj-32xc

bridge: mcast: Fix use-after-free during router port configuration

LOW 36

In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a global list of ports behind which a multicast router resides.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.003 Published 2025-07-09 Partial fix · 5.15.224, 6.1.191 +4 CWE-416

TI-2026-18646 CVE-2026-23209 · GHSA-89j4-f3cq-gm32

macvlan: fix error recovery in macvlan_common_newlink()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice repro to crash the kernel: ip link add p1 type veth peer p2 ip link set ad…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00176 Published 2026-02-14 Partial fix · 5.10.250, 5.15.200 +5 CWE-416

TI-2025-25520 CVE-2025-38180 · GHSA-qp5r-frvf-p8mw

net: atm: fix /proc/net/atm/lec handling

LOW 35

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev_lec[] changes.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0021 Published 2025-07-04 Partial fix · 5.4.295, 5.10.239 +6 CWE-416

TI-2022-25181 CVE-2022-49674 · GHSA-7522-w99f-pjfx

dm raid: fix accesses beyond end of raid member array

LOW 31

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix accesses beyond end of raid member array On dm-raid table load (using raid_ctr), dm-raid allocates an array rs->devs[rs->raid_disks] for th…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00289 Published 2025-02-26 Partial fix · 4.14.287, 4.19.251 +5 CWE-125