Red Hat Security Advisory

RHSA-2026:79783

kernel security update

Released 2026-10-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.221.1.el8_6, kernel-4.18.0-372.221.1.el8_6, kernel-abi-stablelists-4.18.0-372.221.1.el8_6 +14
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) bpftool-4.18.0-372.221.1.el8_6, kernel-4.18.0-372.221.1.el8_6, kernel-abi-stablelists-4.18.0-372.221.1.el8_6 +14

Fixes 3 records

TI-2026-52488 CVE-2026-74705 · GHSA-rcm8-q4cm-988v

udp: fix potential use-after-free in tunnel segmentation

MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP header before ensuring the tunnel header is in the skb…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.005 Published 2026-08-22 Fixed in 5.10.265, 5.15.216 +6

TI-2026-45368 CVE-2026-63802 · GHSA-22rm-57qw-fv2w

blk-cgroup: fix UAF in __blkcg_rstat_flush()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in the same blkcg are released concurrently, a use-after-free can occur.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00102 Published 2026-07-19 Partial fix · 6.4, 6.6.144 +4 CWE-362

TI-2026-33873 CVE-2026-46149 · GHSA-vvx9-xfcg-g62v

scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()

LOW 30

In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() target_tg_pt_gp_members_show() formats LUN paths with snprintf() into a 256-b…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00142 Published 2026-05-28 Partial fix · 5.10.258, 5.15.209 +6 CWE-126