Red Hat Security Advisory

RHSA-2026:8342

kernel security update

Released 2026-04-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.68.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.68.1.el10_0, kernel-64k-devel-6.12.0-55.68.1.el10_0 +12
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.68.1.el10_0, kernel-64k-6.12.0-55.68.1.el10_0, kernel-64k-core-6.12.0-55.68.1.el10_0 +28
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.68.1.el10_0, libperf-6.12.0-55.68.1.el10_0
Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.68.1.el10_0, kernel-rt-64k-6.12.0-55.68.1.el10_0, kernel-rt-64k-core-6.12.0-55.68.1.el10_0 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.68.1.el10_0, kernel-rt-core-6.12.0-55.68.1.el10_0, kernel-rt-debug-6.12.0-55.68.1.el10_0 +11

Fixes 4 records

TI-2026-18608 CVE-2026-23171 · GHSA-5r72-p4cv-h344

bonding: fix use-after-free due to enslave fail after slave array update

LOW 35

In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free due to enslave fail after slave array update Fix a use-after-free which happens due to enslave failure after the new slave h…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00172 Published 2026-02-14 Partial fix · 6.1.191, 6.6.140 +3 CWE-416

TI-2025-43369 CVE-2025-71238 · GHSA-7hgf-78m2-x598

scsi: qla2xxx: Fix bsg_done() causing double free

LOW 35

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix bsg_done() causing double free Kernel panic observed on system, [5353358.825191] BUG: unable to handle page fault for address: ff5f5e…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00216 Published 2026-03-04 Partial fix · 5.10.251, 5.15.201 +6 CWE-415

TI-2026-18641 CVE-2026-23204 · GHSA-rf63-9f5h-hhg6

net/sched: cls_u32: use skb_header_pointer_careful()

LOW 30

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00152 Published 2026-02-14 Partial fix · 5.10.260, 5.15.209 +5 CWE-125

TI-2026-18581 CVE-2026-23144 · GHSA-chwm-55mq-46m4

mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure

LOW 24

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure When a context DAMON sysfs directory setup is failed after setup of attrs/ directory,…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00143 Published 2026-02-14 Partial fix · 6.1.162, 6.6.122 +3 CWE-401