Red Hat Security AdvisoryRHSA-2026:95367
kernel security update
Released 2026-11-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- 10Base-SMTV kernel-modules-internal-6.12.0-211.74.1.el10_2
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.74.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.74.1.el10_2, kernel-64k-devel-6.12.0-211.74.1.el10_2 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.74.1.el10_2, kernel-64k-6.12.0-211.74.1.el10_2, kernel-64k-core-6.12.0-211.74.1.el10_2 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.74.1.el10_2, libperf-6.12.0-211.74.1.el10_2
- Red Hat Enterprise Linux Hidden (v. 10) kernel-modules-internal-6.12.0-211.74.1.el10_2
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.74.1.el10_2, kernel-rt-64k-6.12.0-211.74.1.el10_2, kernel-rt-64k-core-6.12.0-211.74.1.el10_2 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.74.1.el10_2, kernel-rt-core-6.12.0-211.74.1.el10_2, kernel-rt-debug-6.12.0-211.74.1.el10_2 +9
Fixes 8 records
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback svc_tcp_handshake() stores the raw svc_xprt pointer in tls_handshake_args.ta_data an…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00635 · Published 2026-08-15 · Fixed in 6.6.145, 6.12.97 +3
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callback when cancel loses race When wait_for_completion_interruptible_timeout() in svc_tcp_handshake() returns…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00635 · Published 2026-08-15 · Fixed in 6.6.145, 6.12.97 +3
Priority MEDIUM 49
In the Linux kernel, the following vulnerability has been resolved: sctp: clear new_transport when removing a peer sctp_process_asconf_param() stores a newly added peer transport in asoc->new_transport.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.005 · Published 2026-08-22 · Partial fix · 5.10.265, 5.15.216 +6
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-free Packet processing uses CT limit state under RCU, while netns teardown frees that state under ovs_mutex…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00126 · Published 2026-09-11 · Partial fix · 5.10.270, 5.15.221 +6
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix use-after-free during unmount During unmount or failure teardown all mon_data structures that contain monitoring event file private data…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2026-08-15 · Fixed in 6.18.42, 7.1.5 +1 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() When a container exits, the following BUG_ON() is occasionally triggered: =…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.001 · Published 2026-07-25 · Partial fix · 4.5, 5.10.261 +6 CWE-362
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFS_IOC_EXCHANGE_RANGE'…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00163 · Published 2026-10-23 · Partial fix · 6.12.114, 6.18.57 +2
Priority LOW 22
In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Currently, the legacy I/O and memory sysfs handlers do not check security_locked_down(L…
CVSS — · EPSS 0.00198 · Published 2026-09-17 · Partial fix · 6.18.57, 7.2.6 +1
THREATIST.IORead the docs