Red Hat Security Advisory

RHSA-2026:6986

kernel security update

Released 2026-04-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.164.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.164.1.el9_2, kernel-64k-devel-5.14.0-284.164.1.el9_2 +10
Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.164.1.el9_2, kernel-5.14.0-284.164.1.el9_2, kernel-64k-5.14.0-284.164.1.el9_2 +29

Fixes 3 records

TI-2026-18438 CVE-2026-23001 · GHSA-vgc7-m4r9-xw45

macvlan: fix possible UAF in macvlan_forward_source()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlan_forward_source() Add RCU protection on (struct macvlan_source_entry)->vlan.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00206 Published 2026-01-25 Partial fix · 5.10.249, 5.15.199 +5 CWE-416

TI-2025-25546 CVE-2025-38206 · GHSA-349q-hp2f-r4hf

exfat: fix double free in delayed_free

LOW 35

In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2025-07-04 Partial fix · 5.10.239, 5.15.186 +5 CWE-415

TI-2025-25520 CVE-2025-38180 · GHSA-qp5r-frvf-p8mw

net: atm: fix /proc/net/atm/lec handling

LOW 35

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev_lec[] changes.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0021 Published 2025-07-04 Partial fix · 5.4.295, 5.10.239 +6 CWE-416