Red Hat Security Advisory

RHSA-2026:92209

kernel security, bug fix, and enhancement update

Released 2026-10-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.180.1.el8_10, kernel-4.18.0-553.180.1.el8_10, kernel-abi-stablelists-4.18.0-553.180.1.el8_10 +19
Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.180.1.el8_10

Fixes 4 records

TI-2026-61054 CVE-2026-90011 · GHSA-m4f8-5753-34xg

scsi: target: iscsi: Reserve a terminator byte for the login payload

MEDIUM 41

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Reserve a terminator byte for the login payload iscsi_target_check_login_request() rejects a login PDU whose DataSegmentLength exce…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00841 Published 2026-09-16 Partial fix · 5.10.270, 5.15.221 +6

TI-2026-50568 CVE-2026-72289 · GHSA-j2wf-f982-8f9v

KVM: arm64: vgic: Check the interrupt is still ours before migrating it

MEDIUM 41

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Check the interrupt is still ours before migrating it vgic_prune_ap_list() drops both ap_list_lock and irq_lock while migrating an int…

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00185 Published 2026-08-15 Partial fix · 5.10.261, 5.15.212 +6

TI-2026-50567 CVE-2026-72288 · GHSA-9726-h75p-mc3x

KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling

MEDIUM 41

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo Kim reports some really bad races should the following situati…

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00185 Published 2026-08-15 Partial fix · 6.1.191, 6.6.160 +4

TI-2026-68113 CVE-2026-98222 · GHSA-8jg9-f732-244h

Integer overflow in Linux kernel encrypted key handling

LOW 22

In the Linux kernel, the following vulnerability has been resolved: KEYS: encrypted: fix integer overflow of datablob_len encrypted_key_alloc() stores datablob_len in a u16.

CVSS — EPSS 0.00168 Published 2026-10-06 Partial fix · 6.12.112, 6.18.54 +2