Read the docs
Red Hat Security Advisory

RHSA-2026:85000

kernel security update

Released 2026-10-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00714 Published 2026-07-19 Partial fix · 5.10.259, 5.15.210 +6 CWE-822
Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00714 Published 2026-07-19 Partial fix · 5.10.259, 5.15.210 +6 CWE-416
Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAY_BACKLOG requests MAY_BACKLOG requests can return EBUSY.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00681 Published 2026-05-19 Partial fix · 5.10.258, 5.15.209 +6 CWE-390
TI-2025-42214 CVE-2025-68745 · GHSA-vc2w-h9rc-mpxx

scsi: qla2xxx: Clear cmds after chip reset

Priority MEDIUM 49

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling and host reset handling") caused two p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00503 Published 2025-12-24 Partial fix · 4.10, 4.15 +6
Priority LOW 33

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In usb6fire_chip_abort(), the chip struct is allocated as the card's private data (via snd_card_new with s…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00128 Published 2026-04-24 Partial fix · 5.10.258, 5.15.209 +10 CWE-416
Priority LOW 30

In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00172 Published 2026-07-19 Partial fix · 5.10.259, 5.15.210 +6 CWE-125
Priority LOW 30

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() nfnl_cthelper_dump_table() has a 'goto restart' that jumps to a label inside t…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00132 Published 2026-05-08 Partial fix · 5.10.253, 5.15.203 +6 CWE-125