Read the docs
TI-2026-74756 Aliases CVE-2026-98432GHSA-qp6h-4hvh-qqqc

Use-after-free in Linux kernel IPv4 socket options handling

Priority MEDIUM 43Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 42 fixed, 3 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

Linux kernel versions from 4.4 are affected. The IPv4 stack frees inet_opt and ireq_opt options without waiting for an RCU grace period, so a concurrent retransmitted SYN can still use them while building a SYNACK. This leads to a use-after-free, which a remote, unauthenticated attacker can trigger with network traffic, with high impact on confidentiality, integrity and availability.

Written with Claude Haiku 5.5 from the sources below · 2026-11-07

Description from the CNA

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently process a retransmitted SYN for the same request socket, and send a SYNACK from tcp_check_req(). tcp_v4_send_synack() and inet_csk_route_req() read ireq->ireq_opt under rcu_read_lock() only, and ip_build_and_send_pkt() and ip_options_build() then read opt->optlen twice. Note that the SYNACK timer itself is not an issue: it holds a reference on its request socket, and inet_csk_reqsk_queue_drop() calls timer_delete_sync() before the child can be freed. Since commit 079096f103fa ("tcp/dccp: install syn_recv requests into ehash table"), request sockets are processed without holding the listener lock, so nothing prevents the child socket from being freed while the SYNACK is still being built. TCP child sockets do not have SOCK_RCU_FREE, and inet_sock_destruct() frees inet_opt with a plain kfree(), leading to a use-after-free in ip_options_build(). A similar issue exists with request socket migration (net.ipv4.tcp_migrate_req=1, or a BPF_SK_REUSEPORT_SELECT_OR_MIGRATE program). reqsk_timer_handler() clones the request socket with inet_reqsk_clone(), so that the old request socket and its clone share the same ireq_opt, then reqsk_migrate_reset() clears the pointer in the old one. Another cpu holding a reference on the old request socket can still be using these options (sending a SYNACK, or creating a child in tcp_v4_syn_recv_sock()) when the clone is freed, and tcp_v4_reqsk_destructor() also uses a plain kfree(). Readers already use RCU, and other paths replacing inet_opt (do_ip_setsockopt(), cipso_v4_sock_setattr()...) already use kfree_rcu(). Use kfree_rcu() in inet_sock_destruct() and tcp_v4_reqsk_destructor() as well. IPv6 is not affected by the first issue, because tcp_v6_syn_recv_sock() duplicates the options. tcp_v6_reqsk_destructor() has the same migration issue with ipv6_opt, which is only set by CALIPSO. This will be addressed in a separate patch.

Why it matters now

EPSS 0.0076 55th percentileScored 2026-11-07
Fix Partial Linux (Linux): 5.10.272, 5.15.223, 6.1.190 +5Red Hat: 14 advisoriesRed Hat: 42 fixed, 3 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
LinuxLinux4.4 and later5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56, 7.2.10, 7.3Patch availableCNA
  • Linux VendorLinux Affected 4.4 and later Fixed in 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56, 7.2.10, 7.3 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*——Linux
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions — — ·Linux

Remediation

Fixed Linux kernel versions: 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56, 7.2.10 and 7.3. Red Hat advisories: RHSA-2026:93412, RHSA-2026:93413, RHSA-2026:93414, RHSA-2026:93415, RHSA-2026:93775, RHSA-2026:94109, RHSA-2026:94303, RHSA-2026:94438, RHSA-2026:94477, RHSA-2026:94508, RHSA-2026:94558, RHSA-2026:94623, RHSA-2026:94996 and RHSA-2026:95346. Red Hat's plan for Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift Container Platform 4 and Red Hat OpenShift Container Platform 5 is none available.

Written with Claude Haiku 5.5 from the sources below · 2026-11-07

  • Fix · CNA Linux (Linux) Fixed in 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56, 7.2.10, 7.3

Red Hat 14 advisories

  • RHSA-2026:95346 Released 2026-11-06 · Red Hat rating Critical
    OpenShift Container Platform 4.22.22 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202611032353-0, rhcos-ppc64le-4.22.9.8.202611032353-0, rhcos-s390x-4.22.9.8.202611032353-0 +1
  • RHSA-2026:94996 Released 2026-11-04 · Red Hat rating Critical
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.227.1.el8_6, kernel-4.18.0-372.227.1.el8_6, kernel-abi-stablelists-4.18.0-372.227.1.el8_6 +14
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) bpftool-4.18.0-372.227.1.el8_6, kernel-4.18.0-372.227.1.el8_6, kernel-abi-stablelists-4.18.0-372.227.1.el8_6 +14
  • RHSA-2026:94623 Released 2026-11-03 · Red Hat rating Critical
    kernel security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.218.1.el8_4, kernel-4.18.0-305.218.1.el8_4, kernel-abi-stablelists-4.18.0-305.218.1.el8_4 +14
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bpftool-4.18.0-305.218.1.el8_4, kernel-4.18.0-305.218.1.el8_4, kernel-abi-stablelists-4.18.0-305.218.1.el8_4 +14
Show 11 more Red Hat advisories
  • RHSA-2026:94558 Released 2026-11-03 · Red Hat rating Critical
    kernel-rt security, bug fix, and enhancement update
    • Red Hat Enterprise Linux Real Time E4S (v.9.2) kernel-rt-5.14.0-284.202.1.rt14.487.el9_2, kernel-rt-core-5.14.0-284.202.1.rt14.487.el9_2, kernel-rt-debug-5.14.0-284.202.1.rt14.487.el9_2 +9
    • Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) kernel-rt-5.14.0-284.202.1.rt14.487.el9_2, kernel-rt-core-5.14.0-284.202.1.rt14.487.el9_2, kernel-rt-debug-5.14.0-284.202.1.rt14.487.el9_2 +11
  • RHSA-2026:94508 Released 2026-11-03 · Red Hat rating Critical
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.117.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.117.1.el10_0, kernel-64k-devel-6.12.0-55.117.1.el10_0 +12
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.117.1.el10_0, kernel-64k-6.12.0-55.117.1.el10_0, kernel-64k-core-6.12.0-55.117.1.el10_0 +28
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.117.1.el10_0, libperf-6.12.0-55.117.1.el10_0
    • Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.117.1.el10_0, kernel-rt-64k-6.12.0-55.117.1.el10_0, kernel-rt-64k-core-6.12.0-55.117.1.el10_0 +21
    • Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.117.1.el10_0, kernel-rt-core-6.12.0-55.117.1.el10_0, kernel-rt-debug-6.12.0-55.117.1.el10_0 +11
  • RHSA-2026:94477 Released 2026-11-03 · Red Hat rating Critical
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.202.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.202.1.el9_2, kernel-64k-devel-5.14.0-284.202.1.el9_2 +10
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.202.1.el9_2, kernel-5.14.0-284.202.1.el9_2, kernel-64k-5.14.0-284.202.1.el9_2 +29
  • RHSA-2026:94438 Released 2026-11-03 · Red Hat rating Critical
    kernel security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.154.1.el9_6, libperf-5.14.0-570.154.1.el9_6
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.154.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.154.1.el9_6, kernel-64k-devel-5.14.0-570.154.1.el9_6 +12
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.154.1.el9_6, kernel-64k-5.14.0-570.154.1.el9_6, kernel-64k-core-5.14.0-570.154.1.el9_6 +28
    • Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.154.1.el9_6, kernel-rt-64k-5.14.0-570.154.1.el9_6, kernel-rt-64k-core-5.14.0-570.154.1.el9_6 +21
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.154.1.el9_6, kernel-rt-core-5.14.0-570.154.1.el9_6, kernel-rt-debug-5.14.0-570.154.1.el9_6 +11
  • RHSA-2026:94303 Released 2026-11-03 · Red Hat rating Critical
    kernel security update
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.178.1.el8_8, kernel-4.18.0-477.178.1.el8_8, kernel-abi-stablelists-4.18.0-477.178.1.el8_8 +14
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.178.1.el8_8, kernel-4.18.0-477.178.1.el8_8, kernel-abi-stablelists-4.18.0-477.178.1.el8_8 +14
  • RHSA-2026:94109 Released 2026-11-02 · Red Hat rating Critical
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) kernel-64k-debug-devel-5.14.0-427.161.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.161.1.el9_4, kernel-64k-devel-5.14.0-427.161.1.el9_4 +11
    • Red Hat Enterprise Linux BaseOS E4S (v.9.4) bpftool-7.3.0-427.161.1.el9_4, kernel-5.14.0-427.161.1.el9_4, kernel-64k-5.14.0-427.161.1.el9_4 +29
    • Red Hat Enterprise Linux Real Time E4S (v.9.4) kernel-rt-5.14.0-427.161.1.el9_4, kernel-rt-core-5.14.0-427.161.1.el9_4, kernel-rt-debug-5.14.0-427.161.1.el9_4 +9
    • Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) kernel-rt-5.14.0-427.161.1.el9_4, kernel-rt-core-5.14.0-427.161.1.el9_4, kernel-rt-debug-5.14.0-427.161.1.el9_4 +11
  • RHSA-2026:93775 Released 2026-11-02 · Red Hat rating Important
    kernel security update
    • NVIDIA for RHEL 10 kernel-6.12.0-265.31.el10nv, kernel-64k-6.12.0-265.31.el10nv, kernel-64k-core-6.12.0-265.31.el10nv +38
  • RHSA-2026:93413 Released 2026-11-01 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • 10Base-SMTV kernel-modules-internal-6.12.0-211.72.1.el10_2
    • Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.72.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.72.1.el10_2, kernel-64k-devel-6.12.0-211.72.1.el10_2 +12
    • Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.72.1.el10_2, kernel-64k-6.12.0-211.72.1.el10_2, kernel-64k-core-6.12.0-211.72.1.el10_2 +29
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.72.1.el10_2, libperf-6.12.0-211.72.1.el10_2
    • Red Hat Enterprise Linux Hidden (v. 10) kernel-modules-internal-6.12.0-211.72.1.el10_2
    • Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.72.1.el10_2, kernel-rt-64k-6.12.0-211.72.1.el10_2, kernel-rt-64k-core-6.12.0-211.72.1.el10_2 +21
    • Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.72.1.el10_2, kernel-rt-core-6.12.0-211.72.1.el10_2, kernel-rt-debug-6.12.0-211.72.1.el10_2 +9
  • RHSA-2026:93412 Released 2026-11-01 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.64.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.64.1.el9_8, kernel-64k-devel-5.14.0-687.64.1.el9_8 +12
    • Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.64.1.el9_8, kernel-64k-5.14.0-687.64.1.el9_8, kernel-64k-core-5.14.0-687.64.1.el9_8 +28
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.64.1.el9_8, libperf-5.14.0-687.64.1.el9_8
    • Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.64.1.el9_8, kernel-rt-64k-5.14.0-687.64.1.el9_8, kernel-rt-64k-core-5.14.0-687.64.1.el9_8 +21
    • Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.64.1.el9_8, kernel-rt-core-5.14.0-687.64.1.el9_8, kernel-rt-debug-5.14.0-687.64.1.el9_8 +9
  • RHSA-2026:93414 Released 2026-11-01 · Red Hat rating Critical
    kernel security update
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.182.1.el8_10, kernel-4.18.0-553.182.1.el8_10, kernel-abi-stablelists-4.18.0-553.182.1.el8_10 +19
    • Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.182.1.el8_10
  • RHSA-2026:93415 Released 2026-11-01 · Red Hat rating Critical
    kernel-rt security update
    • Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.182.1.rt7.523.el8_10, kernel-rt-core-4.18.0-553.182.1.rt7.523.el8_10, kernel-rt-debug-4.18.0-553.182.1.rt7.523.el8_10 +9
    • Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.182.1.rt7.523.el8_10, kernel-rt-core-4.18.0-553.182.1.rt7.523.el8_10, kernel-rt-debug-4.18.0-553.182.1.rt7.523.el8_10 +7

Vendor assessments

Red Hat

Red Hat rating: Critical. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
10Base-SMTVFixed RHSA-2026:93413
NVIDIA for RHEL 10Fixed RHSA-2026:93775
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:94438
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:93413
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:93412
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:94477
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:94109
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:94508
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:94438
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:93413
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:93414
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:93412
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:94623
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:94996
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:94303
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:94477
Red Hat Enterprise Linux BaseOS E4S (v.9.4)Fixed RHSA-2026:94109
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:94508
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:94438
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:94623
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)Fixed RHSA-2026:94996
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:94303
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2026:93414
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:93413
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:93412
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:94508
Red Hat Enterprise Linux Hidden (v. 10)Fixed RHSA-2026:93413
Red Hat Enterprise Linux NFV (v. 8)Fixed RHSA-2026:93415
Red Hat Enterprise Linux RT (v. 8)Fixed RHSA-2026:93415
Red Hat Enterprise Linux Real Time (v. 10)Fixed RHSA-2026:93413
Red Hat Enterprise Linux Real Time (v. 9)Fixed RHSA-2026:93412
Red Hat Enterprise Linux Real Time E4S (v.9.2)Fixed RHSA-2026:94558
Red Hat Enterprise Linux Real Time E4S (v.9.4)Fixed RHSA-2026:94109
Red Hat Enterprise Linux Real Time EUS (v. 10.0)Fixed RHSA-2026:94508
Red Hat Enterprise Linux Real Time EUS (v.9.6)Fixed RHSA-2026:94438
Red Hat Enterprise Linux Real Time for NFV (v. 10)Fixed RHSA-2026:93413
Red Hat Enterprise Linux Real Time for NFV (v. 9)Fixed RHSA-2026:93412
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)Fixed RHSA-2026:94558
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)Fixed RHSA-2026:94109
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)Fixed RHSA-2026:94508
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)Fixed RHSA-2026:94438
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:95346
Not affected: 2 products
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-16 Threatist record created from CVE-2026-98432
  2. 2026-10-16 Affected versions changed · Red Hat
  3. 2026-10-16 CVSS score added · Red Hat
  4. 2026-10-19 Fix available: Linux/[email protected] · CNA
  5. 2026-10-24 CVSS score added · CNA
  6. 2026-10-24 Priority changed: LOW → MEDIUM
  7. 2026-10-24 Alias added: GHSA-qp6h-4hvh-qqqc
  8. 2026-10-29 Affected versions changed · Red Hat
  9. 2026-10-29 CVSS score changed · Red Hat
  10. 2026-10-30 Affected versions changed · Red Hat
  11. 2026-10-30 Affected versions changed · Red Hat
  12. 2026-10-30 CVSS score changed · Red Hat
  13. 2026-11-02 Fix available: RHSA-2026:93413 · Red Hat
  14. 2026-11-02 Fix available: RHSA-2026:93412 · Red Hat
  15. 2026-11-02 Fix available: RHSA-2026:93415 · Red Hat
  16. 2026-11-02 Fix available: RHSA-2026:93414 · Red Hat
  17. 2026-11-02 Fix available: 10Base-SMTV, Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux AppStream (v. 9) +13 · Red Hat
  18. 2026-11-02 Fix available: NVIDIA for RHEL 10 · Red Hat
  19. 2026-11-03 EPSS moved to the 50th–90th percentile
  20. 2026-11-03 Fix available: RHSA-2026:93775 · Red Hat
  21. 2026-11-03 Fix available: Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux BaseOS E4S (v.9.4), Red Hat Enterprise Linux Real Time E4S (v.9.4) +1 · Red Hat
  22. 2026-11-03 Fix available: RHSA-2026:94303 · Red Hat
  23. 2026-11-03 Fix available: RHSA-2026:94109 · Red Hat
  24. 2026-11-03 Fix available: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8) · Red Hat
  25. 2026-11-03 Fix available: RHSA-2026:94623 · Red Hat
  26. 2026-11-03 Fix available: RHSA-2026:94477 · Red Hat
  27. 2026-11-03 Fix available: RHSA-2026:94438 · Red Hat
  28. 2026-11-03 Fix available: RHSA-2026:94508 · Red Hat
  29. 2026-11-03 Fix available: RHSA-2026:94558 · Red Hat
  30. 2026-11-03 Fix available: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux AppStream EUS (v. 10.0) +13 · Red Hat
  31. 2026-11-04 Fix available: RHSA-2026:94996 · Red Hat
  32. 2026-11-04 Fix available: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) · Red Hat
  33. 2026-11-05 Affected versions changed · Red Hat
  34. 2026-11-07 Fix available: RHSA-2026:95346 · Red Hat
  35. 2026-11-07 Fix available: Red Hat OpenShift Container Platform 4.22 · Red Hat

References

Other 8

  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
  • TI-2021-02452 Incorrect authorization in Ubuntu linux kernel KEVCVSS 3.1HIGH 8.8
  • TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
  • TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
  • TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
See all 21741 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences