Red Hat Security Advisory

RHSA-2026:74438

kernel security, bug fix, and enhancement update

Released 2026-10-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.54.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.54.1.el9_8, kernel-64k-devel-5.14.0-687.54.1.el9_8 +12
Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.54.1.el9_8, kernel-64k-5.14.0-687.54.1.el9_8, kernel-64k-core-5.14.0-687.54.1.el9_8 +28
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.54.1.el9_8, libperf-5.14.0-687.54.1.el9_8
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.54.1.el9_8, kernel-rt-64k-5.14.0-687.54.1.el9_8, kernel-rt-64k-core-5.14.0-687.54.1.el9_8 +21
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.54.1.el9_8, kernel-rt-core-5.14.0-687.54.1.el9_8, kernel-rt-debug-5.14.0-687.54.1.el9_8 +9

Fixes 3 records

TI-2026-45360 CVE-2026-63794 · GHSA-8vm9-66j5-xm27

KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path

LOW 33

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path In sev_dbg_crypt(), the per-iteration transfer length is bounded by the source page offs…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00142 Published 2026-07-19 Partial fix · 5.10.260, 5.15.211 +6 CWE-787

TI-2026-33581 CVE-2026-45856 · GHSA-xq3r-74hw-4c5p

RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send

LOW 30

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send ib_uverbs_post_send() uses cmd.wqe_size from userspace without any validation befo…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00187 Published 2026-05-27 Partial fix · 5.10.252, 5.15.202 +6 CWE-125

TI-2026-55788 CVE-2026-80775 · GHSA-f29q-mg8h-pcrg

futex: Fix race on the initial mm->futex.phash.ref allocation

LOW 22

In the Linux kernel, the following vulnerability has been resolved: futex: Fix race on the initial mm->futex.phash.ref allocation futex_hash_allocate() allocates mm->futex.phash.ref without any locking.

CVSS — EPSS 0.00185 Published 2026-09-04 Partial fix · 6.18.47, 7.1.11 +2