Red Hat Security Advisory

RHSA-2026:91648

kernel security update

Released 2026-10-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.114.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.114.1.el10_0, kernel-64k-devel-6.12.0-55.114.1.el10_0 +12
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.114.1.el10_0, kernel-64k-6.12.0-55.114.1.el10_0, kernel-64k-core-6.12.0-55.114.1.el10_0 +28
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.114.1.el10_0, libperf-6.12.0-55.114.1.el10_0
Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.114.1.el10_0, kernel-rt-64k-6.12.0-55.114.1.el10_0, kernel-rt-64k-core-6.12.0-55.114.1.el10_0 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.114.1.el10_0, kernel-rt-core-6.12.0-55.114.1.el10_0, kernel-rt-debug-6.12.0-55.114.1.el10_0 +11

Fixes 2 records

TI-2026-46072 CVE-2026-64508 · GHSA-667g-8hv2-vmxj

bpf: Support for hardening against JIT spraying

LOW 22

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space with…

CVSS — EPSS 0.00189 Published 2026-07-25 Partial fix · 6.1.183, 6.6.145 +4

TI-2026-46071 CVE-2026-64507 · GHSA-mfjh-rff8-525v

x86/bugs: Enable IBPB flush on BPF JIT allocation

LOW 22

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use.

CVSS — EPSS 0.00231 Published 2026-07-25 Partial fix · 6.1.183, 6.6.145 +4