Red Hat Security Advisory

RHSA-2026:89890

kernel security update

Released 2026-10-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.151.1.el9_6, libperf-5.14.0-570.151.1.el9_6
Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.151.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.151.1.el9_6, kernel-64k-devel-5.14.0-570.151.1.el9_6 +12
Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.151.1.el9_6, kernel-64k-5.14.0-570.151.1.el9_6, kernel-64k-core-5.14.0-570.151.1.el9_6 +28
Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.151.1.el9_6, kernel-rt-64k-5.14.0-570.151.1.el9_6, kernel-rt-64k-core-5.14.0-570.151.1.el9_6 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.151.1.el9_6, kernel-rt-core-5.14.0-570.151.1.el9_6, kernel-rt-debug-5.14.0-570.151.1.el9_6 +11

Fixes 2 records

TI-2026-46072 CVE-2026-64508 · GHSA-667g-8hv2-vmxj

bpf: Support for hardening against JIT spraying

LOW 22

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space with…

CVSS — EPSS 0.00189 Published 2026-07-25 Partial fix · 6.1.183, 6.6.145 +4

TI-2026-46071 CVE-2026-64507 · GHSA-mfjh-rff8-525v

x86/bugs: Enable IBPB flush on BPF JIT allocation

LOW 22

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use.

CVSS — EPSS 0.00231 Published 2026-07-25 Partial fix · 6.1.183, 6.6.145 +4