Red Hat Security AdvisoryRHSA-2026:85000
kernel security update
Released 2026-10-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.223.1.el8_6, kernel-4.18.0-372.223.1.el8_6, kernel-abi-stablelists-4.18.0-372.223.1.el8_6 +14
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) bpftool-4.18.0-372.223.1.el8_6, kernel-4.18.0-372.223.1.el8_6, kernel-abi-stablelists-4.18.0-372.223.1.el8_6 +14
Fixes 7 records
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00714 · Published 2026-07-19 · Partial fix · 5.10.259, 5.15.210 +6 CWE-822
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00714 · Published 2026-07-19 · Partial fix · 5.10.259, 5.15.210 +6 CWE-416
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAY_BACKLOG requests MAY_BACKLOG requests can return EBUSY.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00681 · Published 2026-05-19 · Partial fix · 5.10.258, 5.15.209 +6 CWE-390
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling and host reset handling") caused two p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00503 · Published 2025-12-24 · Partial fix · 4.10, 4.15 +6
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In usb6fire_chip_abort(), the chip struct is allocated as the card's private data (via snd_card_new with s…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00128 · Published 2026-04-24 · Partial fix · 5.10.258, 5.15.209 +10 CWE-416
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00172 · Published 2026-07-19 · Partial fix · 5.10.259, 5.15.210 +6 CWE-125
Priority LOW 30
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() nfnl_cthelper_dump_table() has a 'goto restart' that jumps to a label inside t…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00132 · Published 2026-05-08 · Partial fix · 5.10.253, 5.15.203 +6 CWE-125