Read the docs
Red Hat Security Advisory

RHSA-2026:69906

kernel security update

Released 2026-09-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

Priority MEDIUM 52

In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asc…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01432 Published 2026-08-04 Partial fix · 5.10.265, 5.15.216 +6 CWE-416
Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc_rresp() places each inbound Read Response…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00714 Published 2026-07-25 Partial fix · 5.10.261, 5.15.212 +6 CWE-787
TI-2026-38089 CVE-2026-53002 · GHSA-2256-5c36-mwcj

netfilter: conntrack: remove sprintf usage

Priority MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprintf, the buffer sizes are expected to be large enough to hold the result, no need for s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00368 Published 2026-06-24 Partial fix · 5.10.258, 5.15.209 +6 CWE-787
TI-2026-38080 CVE-2026-52993 · GHSA-m86q-cgj9-94c8

tipc: fix double-free in tipc_buf_append()

Priority MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate the skb it is validating, freeing the old one.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00404 Published 2026-06-24 Partial fix · 5.10.258, 5.15.209 +6 CWE-763
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in tcp_write_timer_handler().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00148 Published 2025-12-09 Fixed in 6.1.191, 6.2.12 +1
Priority LOW 32

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may return false for a mark on an unrelated group, which results in bypassing…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0013 Published 2026-05-28 Partial fix · 5.10.258, 5.15.209 +6 CWE-863