Read the docs
TI-2026-46128 Aliases CVE-2026-64564GHSA-xw85-w2q2-369x

sctp: don't free the ASCONF's own transport in DEL-IP processing

Priority MEDIUM 52CWE-416Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 49 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-416 and the CVSS impact.

Summary

In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asconf->transport (== chunk->transport, set once in sctp_rcv()). For an ASCONF located through its Address Parameter by __sctp_rcv_asconf_lookup(), that cached transport corresponds to the Address Parameter, which need not be the packet's source address. sctp_process_asconf_param() rejects a DEL-IP for the packet source address (ADDIP D8, SCTP_ERROR_DEL_SRC_IP), but nothing protects asconf->transport. A single ASCONF can therefore carry, in order: [Address Parameter L] [DEL-IP L] [DEL-IP 0.0.0.0] where L differs from the source. The DEL-IP for L passes the D8 check and calls sctp_assoc_rm_peer() on the transport that asconf->transport still points at, freeing it (RCU-deferred). The following wildcard DEL-IP then reuses the now-dangling asconf->transport in sctp_assoc_set_primary() and sctp_assoc_del_nonprimary_peers(): set_primary() dereferences the freed transport (->ipaddr, ->state) and plants the dangling pointer into asoc->peer.primary_path / active_path, and del_nonprimary_peers(), keeping only the pointer that is no longer on the list, removes every real transport, leaving the association with a transport_count of 0 and primary_path/active_path pointing at freed memory. Reject a DEL-IP that targets the transport the ASCONF is being processed against, mirroring the existing source-address guard, so the wildcard branch can never reuse a freed transport.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01432 73rd percentileScored 2026-11-07
Fix Partial Linux (Linux): 5.10.265, 5.15.216, 6.1.183 +5Red Hat: 22 advisoriesRed Hat: 49 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
LinuxLinux2.6.25 and later5.10.265, 5.15.216, 6.1.183, 6.6.148, 6.12.101, 6.18.42, 7.1.6, 7.2Patch availableCNA
  • Linux VendorLinux Affected 2.6.25 and later Fixed in 5.10.265, 5.15.216, 6.1.183, 6.6.148, 6.12.101, 6.18.42, 7.1.6, 7.2 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*——Linux
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions — — ·Linux

Remediation

  • Fix · CNA Linux (Linux) Fixed in 5.10.265, 5.15.216, 6.1.183, 6.6.148, 6.12.101, 6.18.42, 7.1.6, 7.2

Red Hat 22 advisories

  • RHSA-2026:89197 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.22.20 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202610241758-0, rhcos-ppc64le-4.22.9.8.202610241758-0, rhcos-s390x-4.22.9.8.202610241758-0 +1
  • RHSA-2026:89714 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.16.74 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202610242150-0, rhcos-ppc64le-416.94.202610242150-0, rhcos-s390x-416.94.202610242150-0 +1
  • RHSA-2026:90272 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.12.102 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202610250235-0
Show 19 more Red Hat advisories
  • RHSA-2026:89838 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.14.77 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202610242240-0, rhcos-ppc64le-414.92.202610242240-0, rhcos-s390x-414.92.202610242240-0 +1
  • RHSA-2026:89725 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.18.59 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202610242013-0, rhcos-ppc64le-418.94.202610242013-0, rhcos-s390x-418.94.202610242013-0 +1
  • RHSA-2026:89651 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.19.53 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202610241701-0, rhcos-ppc64le-4.19.9.6.202610241701-0, rhcos-s390x-4.19.9.6.202610241701-0 +1
  • RHSA-2026:89232 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.21.40 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 rhcos-aarch64-4.21.9.6.202610241345-0, rhcos-ppc64le-4.21.9.6.202610241345-0, rhcos-s390x-4.21.9.6.202610241345-0 +1
  • RHSA-2026:89333 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.20.44 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 rhcos-aarch64-4.20.9.6.202610242033-0, rhcos-ppc64le-4.20.9.6.202610242033-0, rhcos-s390x-4.20.9.6.202610242033-0 +1
  • RHSA-2026:71232 Released 2026-09-24 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.51.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.51.1.el9_8, kernel-64k-devel-5.14.0-687.51.1.el9_8 +12
    • Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.51.1.el9_8, kernel-64k-5.14.0-687.51.1.el9_8, kernel-64k-core-5.14.0-687.51.1.el9_8 +28
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.51.1.el9_8, libperf-5.14.0-687.51.1.el9_8
    • Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.51.1.el9_8, kernel-rt-64k-5.14.0-687.51.1.el9_8, kernel-rt-64k-core-5.14.0-687.51.1.el9_8 +21
    • Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.51.1.el9_8, kernel-rt-core-5.14.0-687.51.1.el9_8, kernel-rt-debug-5.14.0-687.51.1.el9_8 +9
  • RHSA-2026:71233 Released 2026-09-24 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.59.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.59.1.el10_2, kernel-64k-devel-6.12.0-211.59.1.el10_2 +12
    • Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.59.1.el10_2, kernel-64k-6.12.0-211.59.1.el10_2, kernel-64k-core-6.12.0-211.59.1.el10_2 +29
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.59.1.el10_2, libperf-6.12.0-211.59.1.el10_2
    • Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.59.1.el10_2, kernel-rt-64k-6.12.0-211.59.1.el10_2, kernel-rt-64k-core-6.12.0-211.59.1.el10_2 +21
    • Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.59.1.el10_2, kernel-rt-core-6.12.0-211.59.1.el10_2, kernel-rt-debug-6.12.0-211.59.1.el10_2 +9
  • RHSA-2026:71213 Released 2026-09-24 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.167.1.el8_10, kernel-4.18.0-553.167.1.el8_10, kernel-abi-stablelists-4.18.0-553.167.1.el8_10 +19
    • Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.167.1.el8_10
  • RHSA-2026:71016 Released 2026-09-23 · Red Hat rating Important
    kernel-rt security, bug fix, and enhancement update
    • Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.167.1.rt7.508.el8_10, kernel-rt-core-4.18.0-553.167.1.rt7.508.el8_10, kernel-rt-debug-4.18.0-553.167.1.rt7.508.el8_10 +9
    • Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.167.1.rt7.508.el8_10, kernel-rt-core-4.18.0-553.167.1.rt7.508.el8_10, kernel-rt-debug-4.18.0-553.167.1.rt7.508.el8_10 +7
  • RHSA-2026:70484 Released 2026-09-23 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.142.1.el9_6, libperf-5.14.0-570.142.1.el9_6
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.142.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.142.1.el9_6, kernel-64k-devel-5.14.0-570.142.1.el9_6 +12
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.142.1.el9_6, kernel-64k-5.14.0-570.142.1.el9_6, kernel-64k-core-5.14.0-570.142.1.el9_6 +28
    • Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.142.1.el9_6, kernel-rt-64k-5.14.0-570.142.1.el9_6, kernel-rt-64k-core-5.14.0-570.142.1.el9_6 +21
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.142.1.el9_6, kernel-rt-core-5.14.0-570.142.1.el9_6, kernel-rt-debug-5.14.0-570.142.1.el9_6 +11
  • RHSA-2026:70482 Released 2026-09-23 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.193.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.193.1.el9_2, kernel-64k-devel-5.14.0-284.193.1.el9_2 +10
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.193.1.el9_2, kernel-5.14.0-284.193.1.el9_2, kernel-64k-5.14.0-284.193.1.el9_2 +29
  • RHSA-2026:70483 Released 2026-09-23 · Red Hat rating Important
    kernel-rt security, bug fix, and enhancement update
    • Red Hat Enterprise Linux Real Time E4S (v.9.2) kernel-rt-5.14.0-284.193.1.rt14.478.el9_2, kernel-rt-core-5.14.0-284.193.1.rt14.478.el9_2, kernel-rt-debug-5.14.0-284.193.1.rt14.478.el9_2 +9
    • Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) kernel-rt-5.14.0-284.193.1.rt14.478.el9_2, kernel-rt-core-5.14.0-284.193.1.rt14.478.el9_2, kernel-rt-debug-5.14.0-284.193.1.rt14.478.el9_2 +11
  • RHSA-2026:70290 Released 2026-09-22 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) bpftool-3.10.0-1160.162.1.el7, kernel-3.10.0-1160.162.1.el7, kernel-abi-whitelists-3.10.0-1160.162.1.el7 +11
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) kernel-debug-devel-3.10.0-1160.162.1.el7, kernel-tools-libs-devel-3.10.0-1160.162.1.el7
  • RHSA-2026:70308 Released 2026-09-22 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux for Real Time (v. 7 ELS) kernel-rt-3.10.0-1160.162.1.rt56.1314.el7, kernel-rt-debug-3.10.0-1160.162.1.rt56.1314.el7, kernel-rt-debug-devel-3.10.0-1160.162.1.rt56.1314.el7 +4
  • RHSA-2026:69908 Released 2026-09-22 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) kernel-64k-debug-devel-5.14.0-427.151.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.151.1.el9_4, kernel-64k-devel-5.14.0-427.151.1.el9_4 +11
    • Red Hat Enterprise Linux BaseOS E4S (v.9.4) bpftool-7.3.0-427.151.1.el9_4, kernel-5.14.0-427.151.1.el9_4, kernel-64k-5.14.0-427.151.1.el9_4 +29
    • Red Hat Enterprise Linux Real Time E4S (v.9.4) kernel-rt-5.14.0-427.151.1.el9_4, kernel-rt-core-5.14.0-427.151.1.el9_4, kernel-rt-debug-5.14.0-427.151.1.el9_4 +9
    • Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) kernel-rt-5.14.0-427.151.1.el9_4, kernel-rt-core-5.14.0-427.151.1.el9_4, kernel-rt-debug-5.14.0-427.151.1.el9_4 +11
  • RHSA-2026:69906 Released 2026-09-22 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.216.1.el8_6, kernel-4.18.0-372.216.1.el8_6, kernel-abi-stablelists-4.18.0-372.216.1.el8_6 +14
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) bpftool-4.18.0-372.216.1.el8_6, kernel-4.18.0-372.216.1.el8_6, kernel-abi-stablelists-4.18.0-372.216.1.el8_6 +19
  • RHSA-2026:69874 Released 2026-09-22 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.208.1.el8_4, kernel-4.18.0-305.208.1.el8_4, kernel-abi-stablelists-4.18.0-305.208.1.el8_4 +14
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bpftool-4.18.0-305.208.1.el8_4, kernel-4.18.0-305.208.1.el8_4, kernel-abi-stablelists-4.18.0-305.208.1.el8_4 +19
  • RHSA-2026:69837 Released 2026-09-22 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.168.1.el8_8, kernel-4.18.0-477.168.1.el8_8, kernel-abi-stablelists-4.18.0-477.168.1.el8_8 +14
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.168.1.el8_8, kernel-4.18.0-477.168.1.el8_8, kernel-abi-stablelists-4.18.0-477.168.1.el8_8 +14
  • RHSA-2026:69089 Released 2026-09-21 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.105.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.105.1.el10_0, kernel-64k-devel-6.12.0-55.105.1.el10_0 +12
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.105.1.el10_0, kernel-64k-6.12.0-55.105.1.el10_0, kernel-64k-core-6.12.0-55.105.1.el10_0 +28
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.105.1.el10_0, libperf-6.12.0-55.105.1.el10_0
    • Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.105.1.el10_0, kernel-rt-64k-6.12.0-55.105.1.el10_0, kernel-rt-64k-core-6.12.0-55.105.1.el10_0 +21
    • Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.105.1.el10_0, kernel-rt-core-6.12.0-55.105.1.el10_0, kernel-rt-debug-6.12.0-55.105.1.el10_0 +11

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:70484
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:71233
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:71232
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:70482
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:69908
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:69089
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:70484
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:71233
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:71213
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:71232
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:69874
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:69906
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:69837
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:70482
Red Hat Enterprise Linux BaseOS E4S (v.9.4)Fixed RHSA-2026:69908
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:69089
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:70484
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:69874
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)Fixed RHSA-2026:69906
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:69837
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2026:71213
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:71233
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:71232
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:69089
Red Hat Enterprise Linux NFV (v. 8)Fixed RHSA-2026:71016
Red Hat Enterprise Linux RT (v. 8)Fixed RHSA-2026:71016
Red Hat Enterprise Linux Real Time (v. 10)Fixed RHSA-2026:71233
Red Hat Enterprise Linux Real Time (v. 9)Fixed RHSA-2026:71232
Red Hat Enterprise Linux Real Time E4S (v.9.2)Fixed RHSA-2026:70483
Red Hat Enterprise Linux Real Time E4S (v.9.4)Fixed RHSA-2026:69908
Red Hat Enterprise Linux Real Time EUS (v. 10.0)Fixed RHSA-2026:69089
Red Hat Enterprise Linux Real Time EUS (v.9.6)Fixed RHSA-2026:70484
Red Hat Enterprise Linux Real Time for NFV (v. 10)Fixed RHSA-2026:71233
Red Hat Enterprise Linux Real Time for NFV (v. 9)Fixed RHSA-2026:71232
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)Fixed RHSA-2026:70483
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)Fixed RHSA-2026:69908
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)Fixed RHSA-2026:69089
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)Fixed RHSA-2026:70484
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:70290
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2026:70290
Red Hat Enterprise Linux for Real Time (v. 7 ELS)Fixed RHSA-2026:70308
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:90272
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:89838
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:89714
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:89725
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:89651
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:89333
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:89232
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:89197
Not affected: 1 product
  • Red Hat Enterprise Linux 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-64564
  2. 2026-10-03 Alias added: GHSA-xw85-w2q2-369x
  3. 2026-10-07 Affected versions changed · Red Hat
  4. 2026-10-16 CISA SSVC decision points changed
  5. 2026-10-20 Weakness changed · CISA ADP
  6. 2026-10-27 Fix available: Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.16 +1 · Red Hat
  7. 2026-10-28 Fix available: Red Hat OpenShift Container Platform 4.22 · Red Hat
  8. 2026-10-28 Fix available: Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.20 · Red Hat
  9. 2026-10-29 Fix available: Red Hat OpenShift Container Platform 4.21 · Red Hat
  10. 2026-10-29 Fix available: RHSA-2026:89838 · Red Hat
  11. 2026-10-29 Fix available: RHSA-2026:89232 · Red Hat
  12. 2026-10-29 Fix available: RHSA-2026:89651 · Red Hat
  13. 2026-10-29 Fix available: RHSA-2026:89197 · Red Hat
  14. 2026-10-29 Fix available: RHSA-2026:89714 · Red Hat
  15. 2026-10-29 Fix available: RHSA-2026:90272 · Red Hat
  16. 2026-10-29 Fix available: RHSA-2026:89725 · Red Hat
  17. 2026-10-29 Fix available: RHSA-2026:89333 · Red Hat
  18. 2026-10-30 Affected versions changed · Red Hat

References

Other 9

  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
  • TI-2021-02452 Incorrect authorization in Ubuntu linux kernel KEVCVSS 3.1HIGH 8.8
  • TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
  • TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
  • TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
See all 21741 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences