Red Hat Security AdvisoryRHSA-2026:72623
kernel security, bug fix, and enhancement update
Released 2026-09-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.53.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.53.1.el9_8, kernel-64k-devel-5.14.0-687.53.1.el9_8 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.53.1.el9_8, kernel-64k-5.14.0-687.53.1.el9_8, kernel-64k-core-5.14.0-687.53.1.el9_8 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.53.1.el9_8, libperf-5.14.0-687.53.1.el9_8
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.53.1.el9_8, kernel-rt-64k-5.14.0-687.53.1.el9_8, kernel-rt-64k-core-5.14.0-687.53.1.el9_8 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.53.1.el9_8, kernel-rt-core-5.14.0-687.53.1.el9_8, kernel-rt-debug-5.14.0-687.53.1.el9_8 +9
Fixes 9 records
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw peer can send an iWARP FPDU whose MPA length field (c_hd…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.005 · Published 2026-07-19 · Partial fix · 5.10.258, 5.15.209 +6 CWE-190
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE The current implementation incorrectly handles memory regions (MRs) with page sizes d…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0045 · Published 2026-06-09 · Fixed in 6.3, 6.6.160 +4 CWE-190
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() Perform rctx->cryptlen calculation in tegra_gcm_do_one_req() the same way it is…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00129 · Published 2026-08-26 · Partial fix · 6.12.105, 6.18.46 +2
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perf_event_remove_on_exec() sets remove-on-exec events to the EXIT state and detaches their group relationsh…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00129 · Published 2026-08-26 · Partial fix · 6.2, 6.6.156 +3
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_exec perf_event_remove_on_exec() removes events by calling perf_event_exit_event().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00162 · Published 2026-07-29 · Partial fix · 6.1.191, 6.6.145 +4 CWE-662
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When huge_pmd_unshare() is called to unshare a PMD table, the tlb_unshare_pmd_ptdesc() function s…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00176 · Published 2026-07-19 · Partial fix · 5.10.259, 5.15.210 +6 CWE-459
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() may_decode_fh() accesses mount::mnt_ns without holding any locks; that means the mount…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00127 · Published 2026-07-01 · Partial fix · 6.12.95, 6.18.36 +2 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ext4: fix e4b bitmap inconsistency reports A bitmap inconsistency issue was observed during stress tests under mixed huge-page workloads.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00127 · Published 2026-05-27 · Partial fix · 6.1.191, 6.6.130 +4 CWE-362
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when checking the TX buffer size, cap the associated data len…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00144 · Published 2026-06-24 · Partial fix · 5.10.258, 5.15.209 +7
THREATIST.IORead the docs