Red Hat Security Advisory

RHSA-2026:9095

kernel security update

Released 2026-04-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.69.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.69.1.el10_0, kernel-64k-devel-6.12.0-55.69.1.el10_0 +12
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.69.1.el10_0, kernel-64k-6.12.0-55.69.1.el10_0, kernel-64k-core-6.12.0-55.69.1.el10_0 +28
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.69.1.el10_0, libperf-6.12.0-55.69.1.el10_0
Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.69.1.el10_0, kernel-rt-64k-6.12.0-55.69.1.el10_0, kernel-rt-64k-core-6.12.0-55.69.1.el10_0 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.69.1.el10_0, kernel-rt-core-6.12.0-55.69.1.el10_0, kernel-rt-debug-6.12.0-55.69.1.el10_0 +11

Fixes 5 records

TI-2026-18630 CVE-2026-23193 · GHSA-fccp-g2rw-8q2g

scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() In iscsit_dec_session_usage_count(), the function calls complete() while hol…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00363 Published 2026-02-14 Partial fix · 5.10.250, 5.15.200 +5 CWE-416

TI-2026-18668 CVE-2026-23231 · GHSA-gxm6-px42-mpjc

netfilter: nf_tables: fix use-after-free in nf_tables_addchain()

LOW 38

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_tables_addchain() publishes the chain to table->chains via list_add_tail_rcu() (in n…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01045 Published 2026-03-04 Partial fix · 6.1.165, 6.6.128 +4 CWE-416

TI-2026-18653 CVE-2026-23216 · GHSA-jfq5-qg8x-7rmp

scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() In iscsit_dec_conn_usage_count(), the function calls complete() while holding t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00142 Published 2026-02-18 Partial fix · 5.10.250, 5.15.200 +5 CWE-416

TI-2026-18503 CVE-2026-23066 · GHSA-rx25-rppp-x99w

rxrpc: Fix recvmsg() unconditional requeue

LOW 35

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recvmsg() unconditional requeue If rxrpc_recvmsg() fails because MSG_DONTWAIT was specified but the call at the front of the recvmsg queue al…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00122 Published 2026-02-04 Partial fix · 5.10.258, 5.15.209 +5 CWE-362

TI-2026-18593 CVE-2026-23156 · GHSA-r6pf-fx8p-436v

efivarfs: fix error propagation in efivar_entry_get()

LOW 33

In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivar_entry_get() efivar_entry_get() always returns success even if the underlying __efivar_entry_get() fails, maski…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00141 Published 2026-02-14 Fixed in 6.1.162, 6.6.123 +3