Red Hat Security Advisory

RHSA-2026:9835

kernel-rt security update

Released 2026-04-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt-5.14.0-70.175.1.rt21.247.el9_0, kernel-rt-core-5.14.0-70.175.1.rt21.247.el9_0, kernel-rt-debug-5.14.0-70.175.1.rt21.247.el9_0 +9
Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt-5.14.0-70.175.1.rt21.247.el9_0, kernel-rt-core-5.14.0-70.175.1.rt21.247.el9_0, kernel-rt-debug-5.14.0-70.175.1.rt21.247.el9_0 +7

Fixes 3 records

TI-2026-18668 CVE-2026-23231 · GHSA-gxm6-px42-mpjc

netfilter: nf_tables: fix use-after-free in nf_tables_addchain()

LOW 38

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_tables_addchain() publishes the chain to table->chains via list_add_tail_rcu() (in n…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01045 Published 2026-03-04 Partial fix · 6.1.165, 6.6.128 +4 CWE-416

TI-2026-18438 CVE-2026-23001 · GHSA-vgc7-m4r9-xw45

macvlan: fix possible UAF in macvlan_forward_source()

LOW 35

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlan_forward_source() Add RCU protection on (struct macvlan_source_entry)->vlan.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00206 Published 2026-01-25 Partial fix · 5.10.249, 5.15.199 +5 CWE-416

TI-2026-18641 CVE-2026-23204 · GHSA-rf63-9f5h-hhg6

net/sched: cls_u32: use skb_header_pointer_careful()

LOW 30

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00152 Published 2026-02-14 Partial fix · 5.10.260, 5.15.209 +5 CWE-125