Red Hat Security Advisory

RHSA-2026:9112

kernel security update

Released 2026-04-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.108.1.el9_6, libperf-5.14.0-570.108.1.el9_6
Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.108.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.108.1.el9_6, kernel-64k-devel-5.14.0-570.108.1.el9_6 +12
Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.108.1.el9_6, kernel-64k-5.14.0-570.108.1.el9_6, kernel-64k-core-5.14.0-570.108.1.el9_6 +28
Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.108.1.el9_6, kernel-rt-64k-5.14.0-570.108.1.el9_6, kernel-rt-64k-core-5.14.0-570.108.1.el9_6 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.108.1.el9_6, kernel-rt-core-5.14.0-570.108.1.el9_6, kernel-rt-debug-5.14.0-570.108.1.el9_6 +11

Fixes 6 records

TI-2026-18630 CVE-2026-23193 · GHSA-fccp-g2rw-8q2g

scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() In iscsit_dec_session_usage_count(), the function calls complete() while hol…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00363 Published 2026-02-14 Partial fix · 5.10.250, 5.15.200 +5 CWE-416

TI-2026-18548 CVE-2026-23111 · GHSA-jh9m-9mr6-3ghc

netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

LOW 37

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate() has an inverted element activity check compa…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00519 Published 2026-02-13 Partial fix · 5.15.200, 6.1.163 +8 CWE-416

TI-2026-18608 CVE-2026-23171 · GHSA-5r72-p4cv-h344

bonding: fix use-after-free due to enslave fail after slave array update

LOW 35

In the Linux kernel, the following vulnerability has been resolved: bonding: fix use-after-free due to enslave fail after slave array update Fix a use-after-free which happens due to enslave failure after the new slave h…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00172 Published 2026-02-14 Partial fix · 6.1.191, 6.6.140 +3 CWE-416

TI-2026-18503 CVE-2026-23066 · GHSA-rx25-rppp-x99w

rxrpc: Fix recvmsg() unconditional requeue

LOW 35

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recvmsg() unconditional requeue If rxrpc_recvmsg() fails because MSG_DONTWAIT was specified but the call at the front of the recvmsg queue al…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00122 Published 2026-02-04 Partial fix · 5.10.258, 5.15.209 +5 CWE-362

TI-2026-18641 CVE-2026-23204 · GHSA-rf63-9f5h-hhg6

net/sched: cls_u32: use skb_header_pointer_careful()

LOW 30

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00152 Published 2026-02-14 Partial fix · 5.10.260, 5.15.209 +5 CWE-125

TI-2026-18581 CVE-2026-23144 · GHSA-chwm-55mq-46m4

mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure

LOW 24

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure When a context DAMON sysfs directory setup is failed after setup of attrs/ directory,…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00143 Published 2026-02-14 Partial fix · 6.1.162, 6.6.122 +3 CWE-401