Red Hat Security AdvisoryRHSA-2026:91493
kernel security update
Released 2026-10-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.225.1.el8_6, kernel-4.18.0-372.225.1.el8_6, kernel-abi-stablelists-4.18.0-372.225.1.el8_6 +14
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) bpftool-4.18.0-372.225.1.el8_6, kernel-4.18.0-372.225.1.el8_6, kernel-abi-stablelists-4.18.0-372.225.1.el8_6 +14
Fixes 5 records
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read In qla2x00_status_entry(), the FWI2 status path advances sense_data and shrinks par_sense…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00714 · Published 2026-09-16 · Partial fix · 5.10.270, 5.15.221 +6
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_data() before in-place crypto llsec_do_encrypt_unauth(), llsec_do_encrypt_auth(), llsec_do_decrypt_unauth(), and llsec_do_…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00307 · Published 2026-07-19 · Partial fix · 5.10.260, 5.15.211 +6 CWE-416
Priority LOW 38
In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not updated when TCP Fast Open support was introduced to en…
CVSS 3.1HIGH 8.4· Local · Low privileges · No interaction · EPSS 0.00166 · Published 2026-08-15 · Partial fix · 6.1.178, 6.6.145 +4
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when checking the TX buffer size, cap the associated data len…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00144 · Published 2026-06-24 · Partial fix · 5.10.258, 5.15.209 +7
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be rewritten in place by `fdb_delete_local()`, which updates `f->dst` to…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00129 · Published 2026-05-27 · Partial fix · 5.10.259, 5.15.210 +6 CWE-476