RHSA-2026:59143
Vulnerability from csaf_redhat - Published: 2026-08-24 17:54 - Updated: 2026-08-24 20:28Summary
Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 security update
Severity
Important
Notes
Topic: An update for kpatch-patch-6_12_0-211_16_1 is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-6.12.0-211.16.1.el10_2.
Security Fix(es):
* kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499)
* kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984)
* kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)
* kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
* kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Linux kernel. When the kernel's real-time mutex (rtmutex) component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' (UAF) vulnerability, where the system attempts to use memory that has already been released. A local attacker could potentially exploit this to gain elevated privileges or execute unauthorized code.
7.8 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could allow a local attacker to cause system instability or a denial of service (DoS).
7.8 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the Linux kernel's `xfrm` (IPSec framework) subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of `xfrm_state` lists. An attacker with local access could exploit this flaw by triggering specific operations, leading to memory corruption. This could cause the system to become unstable, resulting in crashes or a Denial of Service (DoS), and potentially allow for unauthorized access to sensitive information or increased privileges.
7.0 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. A race condition exists in the `SCTP_SENDALL` path where a cached list entry is not properly revalidated after the socket lock is temporarily released. This allows a local attacker or a remote attacker (via a network abort) to trigger a use-after-free or type confusion vulnerability. Successful exploitation can lead to a controlled indirect call, potentially resulting in arbitrary code execution.
7.0 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Open vSwitch in the Linux kernel. Improper handling of oversized nested action attributes can lead to a truncated length field, which could be exploited by a local attacker to alter kernel memory. This alteration might result in the disclosure of sensitive information or a local privilege escalation (LPE).
7.8 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
34 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for kpatch-patch-6_12_0-211_16_1 is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-6.12.0-211.16.1.el10_2.\n\nSecurity Fix(es):\n\n* kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499)\n\n* kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984)\n\n* kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)\n\n* kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)\n\n* kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:59143",
"url": "https://access.redhat.com/errata/RHSA-2026:59143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2480453",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480453"
},
{
"category": "external",
"summary": "2481922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481922"
},
{
"category": "external",
"summary": "2482523",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482523"
},
{
"category": "external",
"summary": "2482564",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482564"
},
{
"category": "external",
"summary": "2507402",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507402"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59143.json"
}
],
"title": "Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 security update",
"tracking": {
"current_release_date": "2026-08-24T20:28:15+00:00",
"generator": {
"date": "2026-08-24T20:28:15+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:59143",
"initial_release_date": "2026-08-24T17:54:52+00:00",
"revision_history": [
{
"date": "2026-08-24T17:54:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-24T17:54:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-24T20:28:15+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"product": {
"name": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"product_id": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-6_12_0-211_16_1@1-7.el10_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"product": {
"name": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"product_id": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-6_12_0-211_16_1@1-7.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le",
"product": {
"name": "kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le",
"product_id": "kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-6_12_0-211_16_1-debugsource@1-7.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"product": {
"name": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"product_id": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-6_12_0-211_16_1-debuginfo@1-7.el10_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"product": {
"name": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"product_id": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-6_12_0-211_16_1@1-7.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"product": {
"name": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"product_id": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-6_12_0-211_16_1-debuginfo@1-7.el10_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le"
},
"product_reference": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src"
},
"product_reference": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64"
},
"product_reference": "kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le"
},
"product_reference": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64"
},
"product_reference": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
},
"product_reference": "kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-43499",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480453"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel. When the kernel\u0027s real-time mutex (rtmutex) component performs a specific operation called \u0027proxy-lock rollback\u0027 during futex requeue, it incorrectly handles task pointers. This can lead to a \u0027Use-After-Free\u0027 (UAF) vulnerability, where the system attempts to use memory that has already been released. A local attacker could potentially exploit this to gain elevated privileges or execute unauthorized code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: rtmutex: Use waiter::task instead of current in remove_waiter()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43499"
},
{
"category": "external",
"summary": "RHBZ#2480453",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480453"
},
{
"category": "external",
"summary": "RHSB-2026-010",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-010"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43499"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026052158-CVE-2026-43499-1294@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026052158-CVE-2026-43499-1294@gregkh/T"
}
],
"release_date": "2026-05-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T17:54:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:59143"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: rtmutex: Use waiter::task instead of current in remove_waiter()"
},
{
"cve": "CVE-2026-45984",
"cwe": {
"id": "CWE-826",
"name": "Premature Release of Resource During Expected Lifetime"
},
"discovery_date": "2026-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481922"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could allow a local attacker to cause system instability or a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: gfs2: Fix use-after-free in iomap inline data write path",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45984"
},
{
"category": "external",
"summary": "RHBZ#2481922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481922"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45984",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45984"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45984",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45984"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026052739-CVE-2026-45984-107d@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026052739-CVE-2026-45984-107d@gregkh/T"
}
],
"release_date": "2026-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T17:54:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:59143"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: gfs2: Fix use-after-free in iomap inline data write path"
},
{
"cve": "CVE-2026-46116",
"cwe": {
"id": "CWE-763",
"name": "Release of Invalid Pointer or Reference"
},
"discovery_date": "2026-05-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482523"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s `xfrm` (IPSec framework) subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of `xfrm_state` lists. An attacker with local access could exploit this flaw by triggering specific operations, leading to memory corruption. This could cause the system to become unstable, resulting in crashes or a Denial of Service (DoS), and potentially allow for unauthorized access to sensitive information or increased privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46116"
},
{
"category": "external",
"summary": "RHBZ#2482523",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482523"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46116",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46116"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46116",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46116"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026052814-CVE-2026-46116-73b8@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026052814-CVE-2026-46116-73b8@gregkh/T"
}
],
"release_date": "2026-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T17:54:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:59143"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete"
},
{
"cve": "CVE-2026-46227",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-05-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482564"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s Stream Control Transmission Protocol (SCTP) implementation. A race condition exists in the `SCTP_SENDALL` path where a cached list entry is not properly revalidated after the socket lock is temporarily released. This allows a local attacker or a remote attacker (via a network abort) to trigger a use-after-free or type confusion vulnerability. Successful exploitation can lead to a controlled indirect call, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A stale list cursor in the SCTP_SENDALL path can be used after sctp_sendmsg_to_asoc() temporarily drops the socket lock while waiting for send buffer space. During this window another local thread can peel off or close the cached next association, or the association can be removed by a network ABORT, leaving the iterator to advance to a freed or migrated object. This creates a use after free or type confusion in the SCTP association list walk and may allow kernel memory corruption. For the CVSS the PR:L is used because triggering requires a local unprivileged process with access to SCTP socket operations, not administrator rights. The issue is not a pure remote network bug because local code execution is needed to drive SCTP_SENDALL and related socket operations, although network ABORT traffic can participate in one removal path.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46227"
},
{
"category": "external",
"summary": "RHBZ#2482564",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482564"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46227",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46227"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026052838-CVE-2026-46227-4bf1@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026052838-CVE-2026-46227-4bf1@gregkh/T"
}
],
"release_date": "2026-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T17:54:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:59143"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent module sctp from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
"product_ids": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL"
},
{
"cve": "CVE-2026-64531",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"discovery_date": "2026-07-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507402"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Open vSwitch in the Linux kernel. Improper handling of oversized nested action attributes can lead to a truncated length field, which could be exploited by a local attacker to alter kernel memory. This alteration might result in the disclosure of sensitive information or a local privilege escalation (LPE).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net: openvswitch: reject oversized nested action attrs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Note that Red Hat Enterprise Linux 9.6 and layered products which include the 9.6 kernel do not contain the commits that introduced this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-64531"
},
{
"category": "external",
"summary": "RHBZ#2507402",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507402"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-64531",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64531"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64531",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64531"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026072732-CVE-2026-64531-e4ce@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026072732-CVE-2026-64531-e4ce@gregkh/T"
}
],
"release_date": "2026-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-24T17:54:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:59143"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-7.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-7.el10_2.ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: net: openvswitch: reject oversized nested action attrs"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…