Red Hat Security Advisory

RHSA-2026:70290

kernel security update

Released 2026-09-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) bpftool-3.10.0-1160.162.1.el7, kernel-3.10.0-1160.162.1.el7, kernel-abi-whitelists-3.10.0-1160.162.1.el7 +11
Red Hat Enterprise Linux Server Optional (v. 7 ELS) kernel-debug-devel-3.10.0-1160.162.1.el7, kernel-tools-libs-devel-3.10.0-1160.162.1.el7

Fixes 4 records

TI-2026-46128 CVE-2026-64564 · GHSA-xw85-w2q2-369x

sctp: don't free the ASCONF's own transport in DEL-IP processing

MEDIUM 52

In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asc…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01432 Published 2026-08-04 Partial fix · 5.10.265, 5.15.216 +6 CWE-416

TI-2026-45755 CVE-2026-64191 · GHSA-cc9h-5xhh-h7j7

i2c: stub: Reject I2C block transfers with invalid length

LOW 35

In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2C_SMBUS_I2C_BLOCK_DATA case in stub_xfer() uses data->block[0] as the transfer length.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2026-07-20 Partial fix · 5.10.260, 5.15.211 +6 CWE-787

TI-2026-33874 CVE-2026-46150 · GHSA-97pw-xx9j-rg9j

fanotify: fix false positive on permission events

LOW 32

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may return false for a mark on an unrelated group, which results in bypassing…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0013 Published 2026-05-28 Partial fix · 5.10.258, 5.15.209 +6 CWE-863

TI-2026-38282 CVE-2026-53196 · GHSA-f3q5-7m6p-4qxq

USB: serial: io_ti: fix heap overflow in get_manuf_info()

LOW 30

In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads le16_to_cpu(rom_desc->Size) bytes from the device I2C EEPROM into a buf…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00271 Published 2026-06-25 Partial fix · 5.10.259, 5.15.210 +6 CWE-787