Read the docs
TI-2026-74757 Aliases CVE-2026-99999

Linux kernel IPv4 checksum handling can corrupt network headers

Priority MEDIUM 43CWE-20Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 54 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

The Linux kernel from 2.6.27 is affected. Packets with bad checksum metadata entering the IPv4 stack can cause skb_checksum_help to corrupt the network header, a flaw of improper input validation (CWE-20). A local attacker with no privileges can trigger it.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum. A more complete validation at input is forthcoming, but needs more work.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00788 56th percentileScored 2026-11-07
Fix Partial Linux (Linux): 5.10.272, 5.15.223, 6.1.190 +5Red Hat: 26 advisoriesRed Hat: 54 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
LinuxLinux2.6.27 and later5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.57, 7.2.11, 7.3Patch availableCNA
  • Linux VendorLinux Affected 2.6.27 and later Fixed in 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.57, 7.2.11, 7.3 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*——Linux
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions — — ·Linux

Remediation

Upgrade to Linux kernel 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.57, 7.2.11 or 7.3. Red Hat fixes it in advisories such as RHSA-2026:95556, RHSA-2026:89083 and RHSA-2026:88206, and its plan for Red Hat OpenShift Container Platform 5 is listed as none_available.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

  • Fix · CNA Linux (Linux) Fixed in 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.57, 7.2.11, 7.3

Red Hat 26 advisories

  • RHSA-2026:95721 Released 2026-11-05 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux for Real Time (v. 7 ELS) kernel-rt-3.10.0-1160.169.1.rt56.1321.el7, kernel-rt-debug-3.10.0-1160.169.1.rt56.1321.el7, kernel-rt-debug-devel-3.10.0-1160.169.1.rt56.1321.el7 +4
  • RHSA-2026:95556 Released 2026-11-05 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) bpftool-3.10.0-1160.169.1.el7, kernel-3.10.0-1160.169.1.el7, kernel-abi-whitelists-3.10.0-1160.169.1.el7 +11
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) kernel-debug-devel-3.10.0-1160.169.1.el7, kernel-tools-libs-devel-3.10.0-1160.169.1.el7
  • RHSA-2026:89197 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.22.20 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202610241758-0, rhcos-ppc64le-4.22.9.8.202610241758-0, rhcos-s390x-4.22.9.8.202610241758-0 +1
Show 23 more Red Hat advisories
  • RHSA-2026:90933 Released 2026-10-27 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) kernel-2.6.32-754.66.1.el6, kernel-abi-whitelists-2.6.32-754.66.1.el6, kernel-debug-2.6.32-754.66.1.el6 +7
    • Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) python-perf-2.6.32-754.66.1.el6
  • RHSA-2026:89714 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.16.74 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202610242150-0, rhcos-ppc64le-416.94.202610242150-0, rhcos-s390x-416.94.202610242150-0 +1
  • RHSA-2026:90272 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.12.102 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202610250235-0
  • RHSA-2026:89838 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.14.77 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202610242240-0, rhcos-ppc64le-414.92.202610242240-0, rhcos-s390x-414.92.202610242240-0 +1
  • RHSA-2026:89725 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.18.59 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202610242013-0, rhcos-ppc64le-418.94.202610242013-0, rhcos-s390x-418.94.202610242013-0 +1
  • RHSA-2026:89651 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.19.53 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202610241701-0, rhcos-ppc64le-4.19.9.6.202610241701-0, rhcos-s390x-4.19.9.6.202610241701-0 +1
  • RHSA-2026:89232 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.21.40 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 rhcos-aarch64-4.21.9.6.202610241345-0, rhcos-ppc64le-4.21.9.6.202610241345-0, rhcos-s390x-4.21.9.6.202610241345-0 +1
  • RHSA-2026:89333 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.20.44 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 rhcos-aarch64-4.20.9.6.202610242033-0, rhcos-ppc64le-4.20.9.6.202610242033-0, rhcos-s390x-4.20.9.6.202610242033-0 +1
  • RHSA-2026:89083 Released 2026-10-24 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.178.1.el8_10, kernel-4.18.0-553.178.1.el8_10, kernel-abi-stablelists-4.18.0-553.178.1.el8_10 +19
    • Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.178.1.el8_10
  • RHSA-2026:89082 Released 2026-10-24 · Red Hat rating Important
    kernel-rt security, bug fix, and enhancement update
    • Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.178.1.rt7.519.el8_10, kernel-rt-core-4.18.0-553.178.1.rt7.519.el8_10, kernel-rt-debug-4.18.0-553.178.1.rt7.519.el8_10 +9
    • Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.178.1.rt7.519.el8_10, kernel-rt-core-4.18.0-553.178.1.rt7.519.el8_10, kernel-rt-debug-4.18.0-553.178.1.rt7.519.el8_10 +7
  • RHSA-2026:88206 Released 2026-10-22 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) bpftool-3.10.0-1160.167.2.el7, kernel-3.10.0-1160.167.2.el7, kernel-abi-whitelists-3.10.0-1160.167.2.el7 +11
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) kernel-debug-devel-3.10.0-1160.167.2.el7, kernel-tools-libs-devel-3.10.0-1160.167.2.el7
  • RHSA-2026:88204 Released 2026-10-22 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux for Real Time (v. 7 ELS) kernel-rt-3.10.0-1160.167.2.rt56.1320.el7, kernel-rt-debug-3.10.0-1160.167.2.rt56.1320.el7, kernel-rt-debug-devel-3.10.0-1160.167.2.rt56.1320.el7 +4
  • RHSA-2026:87821 Released 2026-10-22 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.199.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.199.1.el9_2, kernel-64k-devel-5.14.0-284.199.1.el9_2 +10
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.199.1.el9_2, kernel-5.14.0-284.199.1.el9_2, kernel-64k-5.14.0-284.199.1.el9_2 +29
  • RHSA-2026:87822 Released 2026-10-22 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux Real Time E4S (v.9.2) kernel-rt-5.14.0-284.199.1.rt14.484.el9_2, kernel-rt-core-5.14.0-284.199.1.rt14.484.el9_2, kernel-rt-debug-5.14.0-284.199.1.rt14.484.el9_2 +9
    • Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) kernel-rt-5.14.0-284.199.1.rt14.484.el9_2, kernel-rt-core-5.14.0-284.199.1.rt14.484.el9_2, kernel-rt-debug-5.14.0-284.199.1.rt14.484.el9_2 +11
  • RHSA-2026:87264 Released 2026-10-22 · Red Hat rating Important
    kernel security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.150.1.el9_6, libperf-5.14.0-570.150.1.el9_6
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.150.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.150.1.el9_6, kernel-64k-devel-5.14.0-570.150.1.el9_6 +12
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.150.1.el9_6, kernel-64k-5.14.0-570.150.1.el9_6, kernel-64k-core-5.14.0-570.150.1.el9_6 +28
    • Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.150.1.el9_6, kernel-rt-64k-5.14.0-570.150.1.el9_6, kernel-rt-64k-core-5.14.0-570.150.1.el9_6 +21
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.150.1.el9_6, kernel-rt-core-5.14.0-570.150.1.el9_6, kernel-rt-debug-5.14.0-570.150.1.el9_6 +11
  • RHSA-2026:85928 Released 2026-10-22 · Red Hat rating Important
    kernel security update
    • NVIDIA for RHEL 10 kernel-6.12.0-265.29.el10nv, kernel-64k-6.12.0-265.29.el10nv, kernel-64k-core-6.12.0-265.29.el10nv +38
  • RHSA-2026:87091 Released 2026-10-21 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.215.1.el8_4, kernel-4.18.0-305.215.1.el8_4, kernel-abi-stablelists-4.18.0-305.215.1.el8_4 +14
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bpftool-4.18.0-305.215.1.el8_4, kernel-4.18.0-305.215.1.el8_4, kernel-abi-stablelists-4.18.0-305.215.1.el8_4 +14
  • RHSA-2026:87098 Released 2026-10-21 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.176.1.el8_8, kernel-4.18.0-477.176.1.el8_8, kernel-abi-stablelists-4.18.0-477.176.1.el8_8 +14
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.176.1.el8_8, kernel-4.18.0-477.176.1.el8_8, kernel-abi-stablelists-4.18.0-477.176.1.el8_8 +14
  • RHSA-2026:87086 Released 2026-10-21 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.224.1.el8_6, kernel-4.18.0-372.224.1.el8_6, kernel-abi-stablelists-4.18.0-372.224.1.el8_6 +14
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) bpftool-4.18.0-372.224.1.el8_6, kernel-4.18.0-372.224.1.el8_6, kernel-abi-stablelists-4.18.0-372.224.1.el8_6 +14
  • RHSA-2026:86033 Released 2026-10-20 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.59.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.59.1.el9_8, kernel-64k-devel-5.14.0-687.59.1.el9_8 +12
    • Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.59.1.el9_8, kernel-64k-5.14.0-687.59.1.el9_8, kernel-64k-core-5.14.0-687.59.1.el9_8 +28
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.59.1.el9_8, libperf-5.14.0-687.59.1.el9_8
    • Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.59.1.el9_8, kernel-rt-64k-5.14.0-687.59.1.el9_8, kernel-rt-64k-core-5.14.0-687.59.1.el9_8 +21
    • Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.59.1.el9_8, kernel-rt-core-5.14.0-687.59.1.el9_8, kernel-rt-debug-5.14.0-687.59.1.el9_8 +9
  • RHSA-2026:86089 Released 2026-10-20 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) kernel-64k-debug-devel-5.14.0-427.157.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.157.1.el9_4, kernel-64k-devel-5.14.0-427.157.1.el9_4 +11
    • Red Hat Enterprise Linux BaseOS E4S (v.9.4) bpftool-7.3.0-427.157.1.el9_4, kernel-5.14.0-427.157.1.el9_4, kernel-64k-5.14.0-427.157.1.el9_4 +29
    • Red Hat Enterprise Linux Real Time E4S (v.9.4) kernel-rt-5.14.0-427.157.1.el9_4, kernel-rt-core-5.14.0-427.157.1.el9_4, kernel-rt-debug-5.14.0-427.157.1.el9_4 +9
    • Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) kernel-rt-5.14.0-427.157.1.el9_4, kernel-rt-core-5.14.0-427.157.1.el9_4, kernel-rt-debug-5.14.0-427.157.1.el9_4 +11
  • RHSA-2026:85979 Released 2026-10-20 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.112.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.112.1.el10_0, kernel-64k-devel-6.12.0-55.112.1.el10_0 +12
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.112.1.el10_0, kernel-64k-6.12.0-55.112.1.el10_0, kernel-64k-core-6.12.0-55.112.1.el10_0 +28
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.112.1.el10_0, libperf-6.12.0-55.112.1.el10_0
    • Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.112.1.el10_0, kernel-rt-64k-6.12.0-55.112.1.el10_0, kernel-rt-64k-core-6.12.0-55.112.1.el10_0 +21
    • Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.112.1.el10_0, kernel-rt-core-6.12.0-55.112.1.el10_0, kernel-rt-debug-6.12.0-55.112.1.el10_0 +11
  • RHSA-2026:85321 Released 2026-10-19 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • 10Base-SMTV kernel-modules-internal-6.12.0-211.67.1.el10_2
    • Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.67.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.67.1.el10_2, kernel-64k-devel-6.12.0-211.67.1.el10_2 +12
    • Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.67.1.el10_2, kernel-64k-6.12.0-211.67.1.el10_2, kernel-64k-core-6.12.0-211.67.1.el10_2 +29
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.67.1.el10_2, libperf-6.12.0-211.67.1.el10_2
    • Red Hat Enterprise Linux Hidden (v. 10) kernel-modules-internal-6.12.0-211.67.1.el10_2
    • Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.67.1.el10_2, kernel-rt-64k-6.12.0-211.67.1.el10_2, kernel-rt-64k-core-6.12.0-211.67.1.el10_2 +21
    • Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.67.1.el10_2, kernel-rt-core-6.12.0-211.67.1.el10_2, kernel-rt-debug-6.12.0-211.67.1.el10_2 +9

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift Container Platform 5AffectedNo fix yet
10Base-SMTVFixed RHSA-2026:85321
NVIDIA for RHEL 10Fixed RHSA-2026:85928
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:87264
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:85321
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:86033
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:87821
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:86089
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:85979
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:87264
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:85321
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:89083
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:86033
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:87091
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:87086
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:87098
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:87821
Red Hat Enterprise Linux BaseOS E4S (v.9.4)Fixed RHSA-2026:86089
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:85979
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:87264
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:87091
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)Fixed RHSA-2026:87086
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:87098
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2026:89083
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:85321
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:86033
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:85979
Red Hat Enterprise Linux Hidden (v. 10)Fixed RHSA-2026:85321
Red Hat Enterprise Linux NFV (v. 8)Fixed RHSA-2026:89082
Red Hat Enterprise Linux RT (v. 8)Fixed RHSA-2026:89082
Red Hat Enterprise Linux Real Time (v. 10)Fixed RHSA-2026:85321
Red Hat Enterprise Linux Real Time (v. 9)Fixed RHSA-2026:86033
Red Hat Enterprise Linux Real Time E4S (v.9.2)Fixed RHSA-2026:87822
Red Hat Enterprise Linux Real Time E4S (v.9.4)Fixed RHSA-2026:86089
Red Hat Enterprise Linux Real Time EUS (v. 10.0)Fixed RHSA-2026:85979
Red Hat Enterprise Linux Real Time EUS (v.9.6)Fixed RHSA-2026:87264
Red Hat Enterprise Linux Real Time for NFV (v. 10)Fixed RHSA-2026:85321
Red Hat Enterprise Linux Real Time for NFV (v. 9)Fixed RHSA-2026:86033
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)Fixed RHSA-2026:87822
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)Fixed RHSA-2026:86089
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)Fixed RHSA-2026:85979
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)Fixed RHSA-2026:87264
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:88206, RHSA-2026:95556
Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)Fixed RHSA-2026:90933
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2026:88206, RHSA-2026:95556
Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)Fixed RHSA-2026:90933
Red Hat Enterprise Linux for Real Time (v. 7 ELS)Fixed RHSA-2026:88204, RHSA-2026:95721
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:90272
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:89838
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:89714
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:89725
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:89651
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:89333
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:89232
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:89197

Timeline

  1. 2026-10-16 Threatist record created from CVE-2026-99999
  2. 2026-10-16 Priority changed: MEDIUM → LOW
  3. 2026-10-16 Affected versions changed · Red Hat
  4. 2026-10-16 CVSS score added · Red Hat
  5. 2026-10-16 CISA SSVC decision points changed
  6. 2026-10-16 Priority changed: LOW → MEDIUM
  7. 2026-10-18 1 new reference · CNA
  8. 2026-10-18 Affected versions changed · Red Hat
  9. 2026-10-19 Fix available: Linux/[email protected] · CNA
  10. 2026-10-20 Weakness changed · CISA ADP
  11. 2026-10-21 Fix available: RHSA-2026:85979 · Red Hat
  12. 2026-10-21 Fix available: RHSA-2026:86033 · Red Hat
  13. 2026-10-21 Fix available: RHSA-2026:86089 · Red Hat
  14. 2026-10-21 Fix available: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux AppStream EUS (v. 10.0) +11 · Red Hat
  15. 2026-10-21 Fix available: RHSA-2026:87086 · Red Hat
  16. 2026-10-21 Fix available: RHSA-2026:87098 · Red Hat
  17. 2026-10-21 Fix available: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) +1 · Red Hat
  18. 2026-10-22 Fix available: RHSA-2026:87091 · Red Hat
  19. 2026-10-22 Fix available: RHSA-2026:87822 · Red Hat
  20. 2026-10-23 Fix available: RHSA-2026:85321 · Red Hat
  21. 2026-10-23 Fix available: RHSA-2026:87264 · Red Hat
  22. 2026-10-23 Fix available: RHSA-2026:87821 · Red Hat
  23. 2026-10-23 Fix available: RHSA-2026:88206 · Red Hat
  24. 2026-10-23 Fix available: RHSA-2026:88204 · Red Hat
  25. 2026-10-23 Fix available: RHSA-2026:85928 · Red Hat
  26. 2026-10-23 Fix available: 10Base-SMTV, NVIDIA for RHEL 10, Red Hat CodeReady Linux Builder EUS (v.9.6) +19 · Red Hat
  27. 2026-10-25 EPSS moved to the 50th–90th percentile
  28. 2026-10-26 Fix available: RHSA-2026:89083 · Red Hat
  29. 2026-10-26 Fix available: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8) · Red Hat
  30. 2026-10-26 Fix available: RHSA-2026:89082 · Red Hat
  31. 2026-10-26 Fix available: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8) · Red Hat
  32. 2026-10-27 Fix available: Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION), Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION), Red Hat OpenShift Container Platform 4.12 +3 · Red Hat
  33. 2026-10-28 Fix available: Red Hat OpenShift Container Platform 4.22 · Red Hat
  34. 2026-10-28 Fix available: Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.20 · Red Hat
  35. 2026-10-29 Fix available: Red Hat OpenShift Container Platform 4.21 · Red Hat
  36. 2026-10-29 Fix available: RHSA-2026:90933 · Red Hat
  37. 2026-10-29 Fix available: RHSA-2026:89838 · Red Hat
  38. 2026-10-29 Fix available: RHSA-2026:89232 · Red Hat
  39. 2026-10-29 Fix available: RHSA-2026:89651 · Red Hat
  40. 2026-10-29 Fix available: RHSA-2026:89197 · Red Hat
  41. 2026-10-29 Fix available: RHSA-2026:89714 · Red Hat
  42. 2026-10-29 Fix available: RHSA-2026:90272 · Red Hat
  43. 2026-10-29 Fix available: RHSA-2026:89725 · Red Hat
  44. 2026-10-29 Fix available: RHSA-2026:89333 · Red Hat
  45. 2026-10-30 Affected versions changed · Red Hat
  46. 2026-11-05 Affected versions changed · Red Hat
  47. 2026-11-06 Affected versions changed · Red Hat
  48. 2026-11-06 Fix available: RHSA-2026:95556 · Red Hat
  49. 2026-11-06 Fix available: RHSA-2026:95721 · Red Hat

References

Other 10

  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
  • TI-2021-02452 Incorrect authorization in Ubuntu linux kernel KEVCVSS 3.1HIGH 8.8
  • TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
  • TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
  • TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
See all 21741 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences