Red Hat Security AdvisoryRHSA-2026:69906
kernel security update
Released 2026-09-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.216.1.el8_6, kernel-4.18.0-372.216.1.el8_6, kernel-abi-stablelists-4.18.0-372.216.1.el8_6 +14
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) bpftool-4.18.0-372.216.1.el8_6, kernel-4.18.0-372.216.1.el8_6, kernel-abi-stablelists-4.18.0-372.216.1.el8_6 +19
Fixes 6 records
Priority MEDIUM 52
In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asc…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01432 · Published 2026-08-04 · Partial fix · 5.10.265, 5.15.216 +6 CWE-416
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siw_qp_rx.c, siw_proc_rresp() places each inbound Read Response…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00714 · Published 2026-07-25 · Partial fix · 5.10.261, 5.15.212 +6 CWE-787
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprintf, the buffer sizes are expected to be large enough to hold the result, no need for s…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00368 · Published 2026-06-24 · Partial fix · 5.10.258, 5.15.209 +6 CWE-787
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate the skb it is validating, freeing the old one.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00404 · Published 2026-06-24 · Partial fix · 5.10.258, 5.15.209 +6 CWE-763
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in tcp_write_timer_handler().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00148 · Published 2025-12-09 · Fixed in 6.1.191, 6.2.12 +1
Priority LOW 32
In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may return false for a mark on an unrelated group, which results in bypassing…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0013 · Published 2026-05-28 · Partial fix · 5.10.258, 5.15.209 +6 CWE-863