Red Hat Security AdvisoryRHSA-2026:87805
kernel security, bug fix, and enhancement update
Released 2026-10-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.60.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.60.1.el9_8, kernel-64k-devel-5.14.0-687.60.1.el9_8 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.60.1.el9_8, kernel-64k-5.14.0-687.60.1.el9_8, kernel-64k-core-5.14.0-687.60.1.el9_8 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.60.1.el9_8, libperf-5.14.0-687.60.1.el9_8
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.60.1.el9_8, kernel-rt-64k-5.14.0-687.60.1.el9_8, kernel-rt-64k-core-5.14.0-687.60.1.el9_8 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.60.1.el9_8, kernel-rt-core-5.14.0-687.60.1.el9_8, kernel-rt-debug-5.14.0-687.60.1.el9_8 +9
Fixes 8 records
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets vmxnet3_get_hdr_len() assumes gdesc->rcd.v4/v6/tcp always describe the outer header, but…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00501 · Published 2026-08-10 · Partial fix · 5.10.265, 5.15.216 +6 CWE-20
Priority LOW 37
In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlog_recover_do_reg_buffer() replays each dirty region described by a buffer log item's bitmap into the…
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00142 · Published 2026-08-26 · Partial fix · 5.10.267, 5.15.218 +6
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the destructor queue_delete() closes the queue timer, then frees it.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00177 · Published 2026-08-10 · Partial fix · 5.10.266, 5.15.217 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41_hda creates ALSA controls whose private data points at the cs35l41_hda object.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00176 · Published 2026-07-25 · Partial fix · 6.1.191, 6.6.160 +4 CWE-416
Priority LOW 32
In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN When exchanging two full-file ranges, xmi_can_exchange_reflink_flags() can move th…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00133 · Published 2026-08-26 · Partial fix · 6.12.105, 6.18.46 +2
Priority LOW 25
In the Linux kernel, the following vulnerability has been resolved: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets When calling netlbl_conn_setattr(), addr->sa_family is used to determine the func…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2025-04-16 · Partial fix · 5.4.292, 5.10.236 +7 CWE-476
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: calipso: Don't call calipso functions for AF_INET sk.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00227 · Published 2025-07-03 · Partial fix · 5.4.295, 5.10.239 +6 CWE-476
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copy_file_range source with src mounter creds Commit 5dae222a5ff0c ("vfs: allow copy_file_range to copy across devices") allowed fi…
CVSS — · EPSS 0.00161 · Published 2026-08-12 · Partial fix · 6.1.191, 6.6.160 +4
THREATIST.IORead the docs