Read the docs
TI-2026-18534 Aliases CVE-2026-23097GHSA-3gqm-m375-7mp2

migrate: correct lock ordering for hugetlb file folios

Priority LOW 24CWE-362Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 44 fixed, 2 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock (analyzed by Lance Yang): 1) Task (5749): Holds folio_lock, then tries to acquire i_mmap_rwsem(read lock). 2) Task (5754): Holds i_mmap_rwsem(write lock), then tries to acquire folio_lock. migrate_pages() -> migrate_hugetlbs() -> unmap_and_move_huge_page() <- Takes folio_lock! -> remove_migration_ptes() -> __rmap_walk_file() -> i_mmap_lock_read() <- Waits for i_mmap_rwsem(read lock)! hugetlbfs_fallocate() -> hugetlbfs_punch_hole() <- Takes i_mmap_rwsem(write lock)! -> hugetlbfs_zero_partial_page() -> filemap_lock_hugetlb_folio() -> filemap_lock_folio() -> __filemap_get_folio <- Waits for folio_lock! The migration path is the one taking locks in the wrong order according to the documentation at the top of mm/rmap.c. So expand the scope of the existing i_mmap_lock to cover the calls to remove_migration_ptes() too. This is (mostly) how it used to be after commit c0d0381ade79. That was removed by 336bf30eb765 for both file & anon hugetlb pages when it should only have been removed for anon hugetlb pages.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00107 1st percentileScored 2026-11-07
Fix Partial Linux (Linux): 5.10, 5.10.249, 5.15.199 +5Red Hat: 14 advisoriesRed Hat: 44 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
LinuxLinux5.9.9 to before 5.105.10Patch availableCNA
LinuxLinux5.10 and later5.10.249, 5.15.199, 6.1.162, 6.6.122, 6.12.68, 6.18.8, 6.19Patch availableCNA
  • Linux VendorLinux Affected 5.9.9 to before 5.10 Fixed in 5.10 Patch available CNA
  • Linux VendorLinux Affected 5.10 and later Fixed in 5.10.249, 5.15.199, 6.1.162, 6.6.122, 6.12.68, 6.18.8, 6.19 Patch available CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*5.9.9 to before 5.10; 5.10.1 to before 5.10.249; 5.11 to before 5.15.199; 5.16 to before 6.1.162; 6.2 to before 6.6.122; 6.7 to before 6.12.68; 6.13 to before 6.18.8VulnerableLinux
cpe:2.3:o:linux:linux_kernel:5.10:-:*:*:*:*:*:*5.10VulnerableLinux
cpe:2.3:o:linux:linux_kernel:5.10:rc4:*:*:*:*:*:*5.10 rc4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:5.10:rc5:*:*:*:*:*:*5.10 rc5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:5.10:rc6:*:*:*:*:*:*5.10 rc6VulnerableLinux
cpe:2.3:o:linux:linux_kernel:5.10:rc7:*:*:*:*:*:*5.10 rc7VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*6.19 rc1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*6.19 rc2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*6.19 rc3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*6.19 rc4VulnerableLinux
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 5.9.9 to before 5.10; 5.10.1 to before 5.10.249; 5.11 to before 5.15.199; 5.16 to before 6.1.162; 6.2 to before 6.6.122; 6.7 to before 6.12.68; 6.13 to before 6.18.8 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:5.10:-:*:*:*:*:*:* Versions 5.10 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:5.10:rc4:*:*:*:*:*:* Versions 5.10 rc4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:5.10:rc5:*:*:*:*:*:* Versions 5.10 rc5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:5.10:rc6:*:*:*:*:*:* Versions 5.10 rc6 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:5.10:rc7:*:*:*:*:*:* Versions 5.10 rc7 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:* Versions 6.19 rc1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:* Versions 6.19 rc2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:* Versions 6.19 rc3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:* Versions 6.19 rc4 Vulnerable ·Linux
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*6.19 rc5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*6.19 rc6VulnerableLinux
  • cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:* Versions 6.19 rc5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:* Versions 6.19 rc6 Vulnerable ·Linux

Remediation

  • Fix · CNA Linux (Linux) Fixed in 5.10
  • Fix · CNA Linux (Linux) Fixed in 5.10.249, 5.15.199, 6.1.162, 6.6.122, 6.12.68, 6.18.8, 6.19

Red Hat 14 advisories

  • RHSA-2026:26535 Released 2026-06-17 · Red Hat rating Critical
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.194.1.el8_4, kernel-4.18.0-305.194.1.el8_4, kernel-abi-stablelists-4.18.0-305.194.1.el8_4 +14
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bpftool-4.18.0-305.194.1.el8_4, kernel-4.18.0-305.194.1.el8_4, kernel-abi-stablelists-4.18.0-305.194.1.el8_4 +14
  • RHSA-2026:15883 Released 2026-05-11 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.72.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.72.1.el10_0, kernel-64k-devel-6.12.0-55.72.1.el10_0 +12
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.72.1.el10_0, kernel-64k-6.12.0-55.72.1.el10_0, kernel-64k-core-6.12.0-55.72.1.el10_0 +28
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.72.1.el10_0, libperf-6.12.0-55.72.1.el10_0
    • Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.72.1.el10_0, kernel-rt-64k-6.12.0-55.72.1.el10_0, kernel-rt-64k-core-6.12.0-55.72.1.el10_0 +21
    • Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.72.1.el10_0, kernel-rt-core-6.12.0-55.72.1.el10_0, kernel-rt-debug-6.12.0-55.72.1.el10_0 +11
  • RHSA-2026:14301 Released 2026-05-06 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux Real Time E4S (v.9.2) kernel-rt-5.14.0-284.169.1.rt14.454.el9_2, kernel-rt-core-5.14.0-284.169.1.rt14.454.el9_2, kernel-rt-debug-5.14.0-284.169.1.rt14.454.el9_2 +9
    • Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) kernel-rt-5.14.0-284.169.1.rt14.454.el9_2, kernel-rt-core-5.14.0-284.169.1.rt14.454.el9_2, kernel-rt-debug-5.14.0-284.169.1.rt14.454.el9_2 +11
Show 11 more Red Hat advisories
  • RHSA-2026:14137 Released 2026-05-06 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt-5.14.0-70.178.1.rt21.250.el9_0, kernel-rt-core-5.14.0-70.178.1.rt21.250.el9_0, kernel-rt-debug-5.14.0-70.178.1.rt21.250.el9_0 +9
    • Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt-5.14.0-70.178.1.rt21.250.el9_0, kernel-rt-core-5.14.0-70.178.1.rt21.250.el9_0, kernel-rt-debug-5.14.0-70.178.1.rt21.250.el9_0 +7
  • RHSA-2026:13936 Released 2026-05-06 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) kernel-debug-devel-5.14.0-70.178.1.el9_0, kernel-debug-devel-matched-5.14.0-70.178.1.el9_0, kernel-devel-5.14.0-70.178.1.el9_0 +5
    • Red Hat Enterprise Linux BaseOS E4S (v.9.0) bpftool-5.14.0-70.178.1.el9_0, kernel-5.14.0-70.178.1.el9_0, kernel-abi-stablelists-5.14.0-70.178.1.el9_0 +14
  • RHSA-2026:13734 Released 2026-05-05 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.169.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.169.1.el9_2, kernel-64k-devel-5.14.0-284.169.1.el9_2 +10
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.169.1.el9_2, kernel-5.14.0-284.169.1.el9_2, kernel-64k-5.14.0-284.169.1.el9_2 +29
  • RHSA-2026:13681 Released 2026-05-05 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.139.1.el8_8, kernel-4.18.0-477.139.1.el8_8, kernel-abi-stablelists-4.18.0-477.139.1.el8_8 +14
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.139.1.el8_8, kernel-4.18.0-477.139.1.el8_8, kernel-abi-stablelists-4.18.0-477.139.1.el8_8 +14
  • RHSA-2026:13664 Released 2026-05-05 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.190.1.el8_6, kernel-4.18.0-372.190.1.el8_6, kernel-abi-stablelists-4.18.0-372.190.1.el8_6 +14
    • Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.190.1.el8_6, kernel-4.18.0-372.190.1.el8_6, kernel-abi-stablelists-4.18.0-372.190.1.el8_6 +19
    • Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.190.1.el8_6, kernel-4.18.0-372.190.1.el8_6, kernel-abi-stablelists-4.18.0-372.190.1.el8_6 +14
  • RHSA-2026:11313 Released 2026-04-28 · Red Hat rating Moderate
    kernel security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.110.1.el9_6, libperf-5.14.0-570.110.1.el9_6
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.110.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.110.1.el9_6, kernel-64k-devel-5.14.0-570.110.1.el9_6 +12
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.110.1.el9_6, kernel-64k-5.14.0-570.110.1.el9_6, kernel-64k-core-5.14.0-570.110.1.el9_6 +28
    • Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.110.1.el9_6, kernel-rt-64k-5.14.0-570.110.1.el9_6, kernel-rt-64k-core-5.14.0-570.110.1.el9_6 +21
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.110.1.el9_6, kernel-rt-core-5.14.0-570.110.1.el9_6, kernel-rt-debug-5.14.0-570.110.1.el9_6 +11
  • RHSA-2026:10108 Released 2026-04-23 · Red Hat rating Important
    kernel security update
    • Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.121.1.el9_4, libperf-5.14.0-427.121.1.el9_4
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.121.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.121.1.el9_4, kernel-64k-devel-5.14.0-427.121.1.el9_4 +11
    • Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.121.1.el9_4, kernel-5.14.0-427.121.1.el9_4, kernel-64k-5.14.0-427.121.1.el9_4 +29
    • Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.121.1.el9_4, kernel-rt-core-5.14.0-427.121.1.el9_4, kernel-rt-debug-5.14.0-427.121.1.el9_4 +9
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.121.1.el9_4, kernel-rt-core-5.14.0-427.121.1.el9_4, kernel-rt-debug-5.14.0-427.121.1.el9_4 +11
  • RHSA-2026:4012 Released 2026-03-09 · Red Hat rating Moderate
    kernel security update
    • Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-124.43.1.el10_1, kernel-64k-debug-devel-matched-6.12.0-124.43.1.el10_1, kernel-64k-devel-6.12.0-124.43.1.el10_1 +12
    • Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-124.43.1.el10_1, kernel-64k-6.12.0-124.43.1.el10_1, kernel-64k-core-6.12.0-124.43.1.el10_1 +29
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-124.43.1.el10_1, libperf-6.12.0-124.43.1.el10_1
    • Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-124.43.1.el10_1, kernel-rt-64k-6.12.0-124.43.1.el10_1, kernel-rt-64k-core-6.12.0-124.43.1.el10_1 +21
    • Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-124.43.1.el10_1, kernel-rt-core-6.12.0-124.43.1.el10_1, kernel-rt-debug-6.12.0-124.43.1.el10_1 +9
  • RHSA-2026:3488 Released 2026-03-02 · Red Hat rating Moderate
    kernel security update
    • Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-611.36.1.el9_7, kernel-64k-debug-devel-matched-5.14.0-611.36.1.el9_7, kernel-64k-devel-5.14.0-611.36.1.el9_7 +12
    • Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-611.36.1.el9_7, kernel-64k-5.14.0-611.36.1.el9_7, kernel-64k-core-5.14.0-611.36.1.el9_7 +28
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-611.36.1.el9_7, libperf-5.14.0-611.36.1.el9_7
    • Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-611.36.1.el9_7, kernel-rt-64k-5.14.0-611.36.1.el9_7, kernel-rt-64k-core-5.14.0-611.36.1.el9_7 +21
    • Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-611.36.1.el9_7, kernel-rt-core-5.14.0-611.36.1.el9_7, kernel-rt-debug-5.14.0-611.36.1.el9_7 +9
  • RHSA-2026:3464 Released 2026-03-02 · Red Hat rating Moderate
    kernel security update
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.109.1.el8_10, kernel-4.18.0-553.109.1.el8_10, kernel-abi-stablelists-4.18.0-553.109.1.el8_10 +19
    • Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.109.1.el8_10
  • RHSA-2026:3463 Released 2026-03-02 · Red Hat rating Moderate
    kernel-rt security update
    • Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.109.1.rt7.450.el8_10, kernel-rt-core-4.18.0-553.109.1.rt7.450.el8_10, kernel-rt-debug-4.18.0-553.109.1.rt7.450.el8_10 +9
    • Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.109.1.rt7.450.el8_10, kernel-rt-core-4.18.0-553.109.1.rt7.450.el8_10, kernel-rt-debug-4.18.0-553.109.1.rt7.450.el8_10 +7

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat CodeReady Linux Builder EUS (v.9.4)Fixed RHSA-2026:10108
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:11313
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:4012
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:3488
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2026:13936
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:13734
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:15883
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:10108
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:11313
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:4012
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:3464
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:3488
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:26535
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:13664
Red Hat Enterprise Linux BaseOS E4S (v.8.6)Fixed RHSA-2026:13664
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:13681
Red Hat Enterprise Linux BaseOS E4S (v.9.0)Fixed RHSA-2026:13936
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:13734
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:15883
Red Hat Enterprise Linux BaseOS EUS (v.9.4)Fixed RHSA-2026:10108
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:11313
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:26535
Red Hat Enterprise Linux BaseOS TUS (v.8.6)Fixed RHSA-2026:13664
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:13681
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2026:3464
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:4012
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:3488
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:15883
Red Hat Enterprise Linux NFV (v. 8)Fixed RHSA-2026:3463
Red Hat Enterprise Linux NFV E4S (v.9.0)Fixed RHSA-2026:14137
Red Hat Enterprise Linux RT (v. 8)Fixed RHSA-2026:3463
Red Hat Enterprise Linux Real Time (v. 10)Fixed RHSA-2026:4012
Red Hat Enterprise Linux Real Time (v. 9)Fixed RHSA-2026:3488
Red Hat Enterprise Linux Real Time E4S (v.9.0)Fixed RHSA-2026:14137
Red Hat Enterprise Linux Real Time E4S (v.9.2)Fixed RHSA-2026:14301
Red Hat Enterprise Linux Real Time EUS (v. 10.0)Fixed RHSA-2026:15883
Red Hat Enterprise Linux Real Time EUS (v.9.4)Fixed RHSA-2026:10108
Red Hat Enterprise Linux Real Time EUS (v.9.6)Fixed RHSA-2026:11313
Red Hat Enterprise Linux Real Time for NFV (v. 10)Fixed RHSA-2026:4012
Red Hat Enterprise Linux Real Time for NFV (v. 9)Fixed RHSA-2026:3488
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)Fixed RHSA-2026:14301
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)Fixed RHSA-2026:15883
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4)Fixed RHSA-2026:10108
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)Fixed RHSA-2026:11313
Not affected: 1 product
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-23097
  2. 2026-10-03 Alias added: GHSA-3gqm-m375-7mp2
  3. 2026-10-19 Weakness changed · CISA ADP

References

Patch 7

  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
  • TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
  • TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
  • TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
  • TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
See all 15278 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences