Red Hat Security AdvisoryRHSA-2026:93437
kernel-rt security update
Released 2026-11-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.181.1.rt7.522.el8_10, kernel-rt-core-4.18.0-553.181.1.rt7.522.el8_10, kernel-rt-debug-4.18.0-553.181.1.rt7.522.el8_10 +9
- Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.181.1.rt7.522.el8_10, kernel-rt-core-4.18.0-553.181.1.rt7.522.el8_10, kernel-rt-debug-4.18.0-553.181.1.rt7.522.el8_10 +7
Fixes 6 records
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE core_scsi3_emulate_pro_register_and_move() maps the PERSISTENT RESERVE OUT parame…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00724 · Published 2026-08-15 · Partial fix · 3.3, 5.10.261 +7 CWE-416
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00714 · Published 2026-07-19 · Partial fix · 5.10.259, 5.15.210 +6 CWE-822
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00714 · Published 2026-07-19 · Partial fix · 5.10.259, 5.15.210 +6 CWE-416
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() unix_stream_data_wait() does skb_peek_tail(&sk->sk_receive_queue) without holding any lock…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00129 · Published 2026-07-19 · Partial fix · 6.6.143, 6.12.92 +3 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name against end of SMB response in cifs_filldir cifs_filldir() copies the entry name out of an SMB1 TRANS2_FIND_FIRST / FIND_…
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00344 · Published 2026-09-24 · Partial fix · 6.1.189, 6.6.158 +3
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutators TIPCv2 registers mutating generic-netlink operations without admin permission flags.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2026-08-15 · Partial fix · 5.10.261, 5.15.212 +6