Red Hat Security Advisory

RHSA-2026:7013

kernel security update

Released 2026-04-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.0) kernel-debug-devel-5.14.0-70.173.1.el9_0, kernel-debug-devel-matched-5.14.0-70.173.1.el9_0, kernel-devel-5.14.0-70.173.1.el9_0 +5
Red Hat Enterprise Linux BaseOS E4S (v.9.0) bpftool-5.14.0-70.173.1.el9_0, kernel-5.14.0-70.173.1.el9_0, kernel-abi-stablelists-5.14.0-70.173.1.el9_0 +14

Fixes 5 records

TI-2025-25587 CVE-2025-38248 · GHSA-2838-84rj-32xc

bridge: mcast: Fix use-after-free during router port configuration

LOW 36

In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a global list of ports behind which a multicast router resides.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.003 Published 2025-07-09 Partial fix · 5.15.224, 6.1.191 +4 CWE-416

TI-2026-18646 CVE-2026-23209 · GHSA-89j4-f3cq-gm32

macvlan: fix error recovery in macvlan_common_newlink()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice repro to crash the kernel: ip link add p1 type veth peer p2 ip link set ad…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00176 Published 2026-02-14 Partial fix · 5.10.250, 5.15.200 +5 CWE-416

TI-2025-25546 CVE-2025-38206 · GHSA-349q-hp2f-r4hf

exfat: fix double free in delayed_free

LOW 35

In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2025-07-04 Partial fix · 5.10.239, 5.15.186 +5 CWE-415

TI-2025-25520 CVE-2025-38180 · GHSA-qp5r-frvf-p8mw

net: atm: fix /proc/net/atm/lec handling

LOW 35

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev_lec[] changes.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0021 Published 2025-07-04 Partial fix · 5.4.295, 5.10.239 +6 CWE-416

TI-2025-25495 CVE-2025-38154 · GHSA-vvj3-j4jg-68hm

bpf, sockmap: Avoid using sk_socket after free when sending

LOW 35

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sk_socket after free when sending The sk->sk_socket is not locked or referenced in backlog thread, and during the call to skb_…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00191 Published 2025-07-03 Partial fix · 5.15.186, 6.1.142 +5 CWE-416