Read the docs
Red Hat Security Advisory

RHSA-2026:93436

kernel security update

Released 2026-11-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE core_scsi3_emulate_pro_register_and_move() maps the PERSISTENT RESERVE OUT parame…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00724 Published 2026-08-15 Partial fix · 3.3, 5.10.261 +7 CWE-416
Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00714 Published 2026-07-19 Partial fix · 5.10.259, 5.15.210 +6 CWE-822
Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00714 Published 2026-07-19 Partial fix · 5.10.259, 5.15.210 +6 CWE-416
Priority LOW 39

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() unix_stream_data_wait() does skb_peek_tail(&sk->sk_receive_queue) without holding any lock…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00129 Published 2026-07-19 Partial fix · 6.6.143, 6.12.92 +3 CWE-416
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name against end of SMB response in cifs_filldir cifs_filldir() copies the entry name out of an SMB1 TRANS2_FIND_FIRST / FIND_…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00344 Published 2026-09-24 Partial fix · 6.1.189, 6.6.158 +3
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutators TIPCv2 registers mutating generic-netlink operations without admin permission flags.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00169 Published 2026-08-15 Partial fix · 5.10.261, 5.15.212 +6