Vulnerability-Lookup

RHSA-2026:91493

Vulnerability from csaf_redhat - Published: 2026-10-28 00:54 - Updated: 2026-10-30 06:30

Summary

Red Hat Security Advisory: kernel security update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972) * kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831) * kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243) * kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-46086

A flaw was found in the Linux kernel. Inconsistent handling of local Forwarding Database (FDB) entries in the bridge networking component's RCU (Read-Copy-Update) readers can lead to a null-pointer dereference. A local attacker could exploit this by triggering a concurrent update to an FDB entry, causing the system to crash and resulting in a Denial of Service (DoS).

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Affected products

Fixed 50 products

Product	Version	Remediation
Unresolved product id: BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2026-52972

A flaw was found in the Linux kernel's `af_alg` cryptography module. This vulnerability involves an arithmetic overflow when processing associated data lengths during the transmit buffer size check. A remote attacker could exploit this flaw by providing a specially crafted associated data length, potentially leading to a denial of service (DoS) due to system instability.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 50 products, the same list as for CVE-2026-46086

Threats

Impact Important

CVE-2026-63831

A flaw was found in the Linux kernel's mac802154 (IEEE 802.15.4 MAC security) component. This vulnerability allows for data corruption and potential kernel crashes when cryptographic transformations are performed on shared network packet data without proper isolation. A remote attacker could exploit this by sending specific 802.15.4 traffic, leading to system instability or denial of service.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-820 - Missing Synchronization

Affected products

Fixed 50 products, the same list as for CVE-2026-46086

Threats

Impact Important

CVE-2026-72243

A flaw was found in the Linux kernel's Security-Enhanced Linux (SELinux) module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network connections that should have been restricted by security policies.

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

Affected products

Fixed 50 products, the same list as for CVE-2026-46086

Threats

Impact Important

CVE-2026-89846

A flaw was found in the Linux kernel's `scsi: qla2xxx` driver. A remote attacker, by sending a specially crafted Fibre Channel Protocol (FCP) response, could cause an integer underflow. This underflow leads to an out-of-bounds read when handling sense data, potentially disclosing sensitive memory information from the kernel's heap.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 50 products, the same list as for CVE-2026-46086

Threats

Impact Important

References

33 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:91493	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2481989	external
https://bugzilla.redhat.com/show_bug.cgi?id=2492364	external
https://bugzilla.redhat.com/show_bug.cgi?id=2502243	external
https://bugzilla.redhat.com/show_bug.cgi?id=2516684	external
https://bugzilla.redhat.com/show_bug.cgi?id=2535391	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-46086	self
https://bugzilla.redhat.com/show_bug.cgi?id=2481989	external
https://www.cve.org/CVERecord?id=CVE-2026-46086	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46086	external
https://lore.kernel.org/linux-cve-announce/202605…	external
https://access.redhat.com/security/cve/CVE-2026-52972	self
https://bugzilla.redhat.com/show_bug.cgi?id=2492364	external
https://www.cve.org/CVERecord?id=CVE-2026-52972	external
https://nvd.nist.gov/vuln/detail/CVE-2026-52972	external
https://lore.kernel.org/linux-cve-announce/202606…	external
https://access.redhat.com/security/cve/CVE-2026-63831	self
https://bugzilla.redhat.com/show_bug.cgi?id=2502243	external
https://www.cve.org/CVERecord?id=CVE-2026-63831	external
https://nvd.nist.gov/vuln/detail/CVE-2026-63831	external
https://lore.kernel.org/linux-cve-announce/202607…	external
https://access.redhat.com/security/cve/CVE-2026-72243	self
https://bugzilla.redhat.com/show_bug.cgi?id=2516684	external
https://www.cve.org/CVERecord?id=CVE-2026-72243	external
https://nvd.nist.gov/vuln/detail/CVE-2026-72243	external
https://lore.kernel.org/linux-cve-announce/202608…	external
https://access.redhat.com/security/cve/CVE-2026-89846	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535391	external
https://www.cve.org/CVERecord?id=CVE-2026-89846	external
https://nvd.nist.gov/vuln/detail/CVE-2026-89846	external
https://git.kernel.org/pub/scm/linux/security/vul…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086)\n\n* kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)\n\n* kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831)\n\n* kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243)\n\n* kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:91493",
        "url": "https://access.redhat.com/errata/RHSA-2026:91493"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2481989",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481989"
      },
      {
        "category": "external",
        "summary": "2492364",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492364"
      },
      {
        "category": "external",
        "summary": "2502243",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502243"
      },
      {
        "category": "external",
        "summary": "2516684",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516684"
      },
      {
        "category": "external",
        "summary": "2535391",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535391"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_91493.json"
      }
    ],
    "title": "Red Hat Security Advisory: kernel security update",
    "tracking": {
      "current_release_date": "2026-10-30T06:30:10+00:00",
      "generator": {
        "date": "2026-10-30T06:30:10+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.3"
        }
      },
      "id": "RHSA-2026:91493",
      "initial_release_date": "2026-10-28T00:54:17+00:00",
      "revision_history": [
        {
          "date": "2026-10-28T00:54:17+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-28T00:54:17+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-30T06:30:10+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
                  "product_id": "BaseOS-8.6.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:8.6::baseos"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
                  "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftool@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-core@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-core@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-devel@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-modules@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-modules-extra@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-devel@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-modules@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-modules-extra@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-tools@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-tools-libs@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "perf-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "perf-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perf@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-perf@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftool-debuginfo@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-debuginfo@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debuginfo@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debuginfo-common-x86_64@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-tools-debuginfo@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perf-debuginfo@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                "product": {
                  "name": "python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_id": "python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-perf-debuginfo@4.18.0-372.225.1.el8_6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-0:4.18.0-372.225.1.el8_6.src",
                "product": {
                  "name": "kernel-0:4.18.0-372.225.1.el8_6.src",
                  "product_id": "kernel-0:4.18.0-372.225.1.el8_6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@4.18.0-372.225.1.el8_6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
                "product": {
                  "name": "kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
                  "product_id": "kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-abi-stablelists@4.18.0-372.225.1.el8_6?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
                "product": {
                  "name": "kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
                  "product_id": "kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-doc@4.18.0-372.225.1.el8_6?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:4.18.0-372.225.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src"
        },
        "product_reference": "kernel-0:4.18.0-372.225.1.el8_6.src",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch"
        },
        "product_reference": "kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-core-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:4.18.0-372.225.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch"
        },
        "product_reference": "kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "perf-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-perf-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:4.18.0-372.225.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src"
        },
        "product_reference": "kernel-0:4.18.0-372.225.1.el8_6.src",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch"
        },
        "product_reference": "kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-core-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:4.18.0-372.225.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch"
        },
        "product_reference": "kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "perf-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-perf-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        },
        "product_reference": "python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-46086",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-05-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2481989"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel. Inconsistent handling of local Forwarding Database (FDB) entries in the bridge networking component\u0027s RCU (Read-Copy-Update) readers can lead to a null-pointer dereference. A local attacker could exploit this by triggering a concurrent update to an FDB entry, causing the system to crash and resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: net: bridge: use a stable FDB dst snapshot in RCU readers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Bridge FDB RCU readers could load f dst more than once while a local FDB update rewrites that pointer in place to another port or NULL. A concurrent update can make the reader pass a NULL check and later dereference a different NULL value, causing a kernel crash in paths such as br_fdb_fillbuf. Impact is denial of service only.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46086"
        },
        {
          "category": "external",
          "summary": "RHBZ#2481989",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481989"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46086",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46086"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46086",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46086"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-cve-announce/2026052701-CVE-2026-46086-d3c8@gregkh/T",
          "url": "https://lore.kernel.org/linux-cve-announce/2026052701-CVE-2026-46086-d3c8@gregkh/T"
        }
      ],
      "release_date": "2026-05-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-28T00:54:17+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:91493"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: net: bridge: use a stable FDB dst snapshot in RCU readers"
    },
    {
      "cve": "CVE-2026-52972",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-06-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2492364"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s `af_alg` cryptography module. This vulnerability involves an arithmetic overflow when processing associated data lengths during the transmit buffer size check. A remote attacker could exploit this flaw by providing a specially crafted associated data length, potentially leading to a denial of service (DoS) due to system instability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-52972"
        },
        {
          "category": "external",
          "summary": "RHBZ#2492364",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492364"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-52972",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-52972"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-52972",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52972"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-cve-announce/2026062439-CVE-2026-52972-7d96@gregkh/T",
          "url": "https://lore.kernel.org/linux-cve-announce/2026062439-CVE-2026-52972-7d96@gregkh/T"
        }
      ],
      "release_date": "2026-06-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-28T00:54:17+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:91493"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000"
    },
    {
      "cve": "CVE-2026-63831",
      "cwe": {
        "id": "CWE-820",
        "name": "Missing Synchronization"
      },
      "discovery_date": "2026-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2502243"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s mac802154 (IEEE 802.15.4 MAC security) component. This vulnerability allows for data corruption and potential kernel crashes when cryptographic transformations are performed on shared network packet data without proper isolation. A remote attacker could exploit this by sending specific 802.15.4 traffic, leading to system instability or denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: mac802154: llsec: add skb_cow_data() before in-place crypto",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-63831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2502243",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502243"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-63831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63831"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-cve-announce/2026071908-CVE-2026-63831-36ca@gregkh/T",
          "url": "https://lore.kernel.org/linux-cve-announce/2026071908-CVE-2026-63831-36ca@gregkh/T"
        }
      ],
      "release_date": "2026-07-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-28T00:54:17+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:91493"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: mac802154: llsec: add skb_cow_data() before in-place crypto"
    },
    {
      "cve": "CVE-2026-72243",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-08-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2516684"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s Security-Enhanced Linux (SELinux) module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network connections that should have been restricted by security policies.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: selinux: check connect-related permissions on TCP Fast Open",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-72243"
        },
        {
          "category": "external",
          "summary": "RHBZ#2516684",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516684"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-72243",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-72243"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-72243",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72243"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-cve-announce/2026081551-CVE-2026-72243-04e7@gregkh/T",
          "url": "https://lore.kernel.org/linux-cve-announce/2026081551-CVE-2026-72243-04e7@gregkh/T"
        }
      ],
      "release_date": "2026-08-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-28T00:54:17+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:91493"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, TCP Fast Open (TFO) can be disabled if not required by applications. Disabling TFO prevents the vulnerable code path from being exercised, thereby eliminating the SELinux permission bypass.\n\nTo disable TCP Fast Open:\n1.  Check the current setting:\n    `sysctl net.ipv4.tcp_fastopen`\n2.  To disable it temporarily:\n    `sudo sysctl -w net.ipv4.tcp_fastopen=0`\n3.  To make the change persistent across reboots, add or modify the following line in `/etc/sysctl.conf`:\n    `net.ipv4.tcp_fastopen = 0`\n4.  Apply the persistent changes:\n    `sudo sysctl -p`\n\nDisabling TCP Fast Open may impact the performance of applications that utilize this feature for faster connection establishment.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: selinux: check connect-related permissions on TCP Fast Open"
    },
    {
      "cve": "CVE-2026-89846",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535391"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Linux kernel\u0027s `scsi: qla2xxx` driver. A remote attacker, by sending a specially crafted Fibre Channel Protocol (FCP) response, could cause an integer underflow. This underflow leads to an out-of-bounds read when handling sense data, potentially disclosing sensitive memory information from the kernel\u0027s heap.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
          "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-89846"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535391",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535391"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-89846",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-89846"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89846",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89846"
        },
        {
          "category": "external",
          "summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89846.mbox",
          "url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89846.mbox"
        }
      ],
      "release_date": "2026-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-28T00:54:17+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:91493"
        },
        {
          "category": "workaround",
          "details": "If QLogic Fibre Channel HBAs are not in use, the \u0027qla2xxx\u0027 kernel module can be blacklisted to prevent it from loading. This can be achieved by creating a modprobe configuration file.\n\nTo blacklist the module:\n1. Create a file named `/etc/modprobe.d/blacklist-qla2xxx.conf` with the following content:\n   `blacklist qla2xxx`\n2. Regenerate the initramfs to ensure the blacklist is applied during boot:\n   `sudo dracut -f -v` (for RHEL 7/8/9)\n   `sudo mkinitcpio -P` (for Arch-based systems, if applicable)\n3. Reboot the system for the changes to take effect.\n\nWarning: Blacklisting this module will disable functionality for QLogic Fibre Channel HBAs. Ensure that this hardware is not required before applying this mitigation. A system reboot is required for the changes to take effect.",
          "product_ids": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.225.1.el8_6.noarch",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.225.1.el8_6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.225.1.el8_6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read"
    }
  ]
}

CVE-2026-46086 (GCVE-0-2026-46086)

Vulnerability from cvelistv5 – Published: 2026-05-27 12:58 – Updated: 2026-10-15 01:20

Title

net: bridge: use a stable FDB dst snapshot in RCU readers

Summary

In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be rewritten in place by `fdb_delete_local()`, which updates `f->dst` to another port or to `NULL` while keeping the entry alive. Several bridge RCU readers inspect `f->dst`, including `br_fdb_fillbuf()` through the `brforward_read()` sysfs path. These readers currently load `f->dst` multiple times and can therefore observe inconsistent values across the check and later dereference. In `br_fdb_fillbuf()`, this means a concurrent local-FDB update can change `f->dst` after the NULL check and before the `port_no` dereference, leading to a NULL-ptr-deref. Fix this by taking a single `READ_ONCE()` snapshot of `f->dst` in each affected RCU reader and using that snapshot for the rest of the access sequence. Also publish the in-place `f->dst` updates in `fdb_delete_local()` with `WRITE_ONCE()` so the readers and writer use matching access patterns.

Severity

No CVSS data available.

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 7033 records in the last 180 days details

References

11 references

URL	Tags
https://git.kernel.org/stable/c/c502fa9f094cb03d1…
https://git.kernel.org/stable/c/a6ae4511c07b91f59…
https://git.kernel.org/stable/c/1406c4e0ed1eaf8a2…
https://git.kernel.org/stable/c/0b9e4bbfb7c949151…
https://git.kernel.org/stable/c/81af4137a30c4c2dc…
https://git.kernel.org/stable/c/5424e678f9b304e14…
https://git.kernel.org/stable/c/9a2d9d4e657b23dc2…
https://git.kernel.org/stable/c/df4601653201de21b…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

9 products

Vendor	Product	Version
Linux	Linux	Affected: 960b589f86c74ce582922fcb996103271081f4de , < c502fa9f094cb03d1d1685c71e2105ab359bc2b8 (git) Affected: 960b589f86c74ce582922fcb996103271081f4de , < a6ae4511c07b91f597e461406c6330f0d4ff810e (git) Affected: 960b589f86c74ce582922fcb996103271081f4de , < 1406c4e0ed1eaf8a29801ab1163d00fb7ee4359a (git) Affected: 960b589f86c74ce582922fcb996103271081f4de , < 0b9e4bbfb7c949151e3acd44ed4aa33614d2e110 (git) Affected: 960b589f86c74ce582922fcb996103271081f4de , < 81af4137a30c4c2dc694dea8cacb180bd66000ef (git) Affected: 960b589f86c74ce582922fcb996103271081f4de , < 5424e678f9b304e148cf5dcc047cffc7a56a3bb5 (git) Affected: 960b589f86c74ce582922fcb996103271081f4de , < 9a2d9d4e657b23dc21f24cf139e3aeff0b61341f (git) Affected: 960b589f86c74ce582922fcb996103271081f4de , < df4601653201de21b487c3e7fffd464790cab808 (git)
Linux	Linux	Affected: 3.14 Unaffected: 0 , < 3.14 (semver) Unaffected: 5.10.259 , ≤ 5.10.* (semver) Unaffected: 5.15.210 , ≤ 5.15.* (semver) Unaffected: 6.1.176 , ≤ 6.1.* (semver) Unaffected: 6.6.140 , ≤ 6.6.* (semver) Unaffected: 6.12.86 , ≤ 6.12.* (semver) Unaffected: 6.18.27 , ≤ 6.18.* (semver) Unaffected: 7.0.4 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.7 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.7 , < * (custom)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.7 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.7",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.7",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.7",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.7",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.7",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T01:20:24.801Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-457936.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bridge/br_arp_nd_proxy.c",
            "net/bridge/br_fdb.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c502fa9f094cb03d1d1685c71e2105ab359bc2b8",
              "status": "affected",
              "version": "960b589f86c74ce582922fcb996103271081f4de",
              "versionType": "git"
            },
            {
              "lessThan": "a6ae4511c07b91f597e461406c6330f0d4ff810e",
              "status": "affected",
              "version": "960b589f86c74ce582922fcb996103271081f4de",
              "versionType": "git"
            },
            {
              "lessThan": "1406c4e0ed1eaf8a29801ab1163d00fb7ee4359a",
              "status": "affected",
              "version": "960b589f86c74ce582922fcb996103271081f4de",
              "versionType": "git"
            },
            {
              "lessThan": "0b9e4bbfb7c949151e3acd44ed4aa33614d2e110",
              "status": "affected",
              "version": "960b589f86c74ce582922fcb996103271081f4de",
              "versionType": "git"
            },
            {
              "lessThan": "81af4137a30c4c2dc694dea8cacb180bd66000ef",
              "status": "affected",
              "version": "960b589f86c74ce582922fcb996103271081f4de",
              "versionType": "git"
            },
            {
              "lessThan": "5424e678f9b304e148cf5dcc047cffc7a56a3bb5",
              "status": "affected",
              "version": "960b589f86c74ce582922fcb996103271081f4de",
              "versionType": "git"
            },
            {
              "lessThan": "9a2d9d4e657b23dc21f24cf139e3aeff0b61341f",
              "status": "affected",
              "version": "960b589f86c74ce582922fcb996103271081f4de",
              "versionType": "git"
            },
            {
              "lessThan": "df4601653201de21b487c3e7fffd464790cab808",
              "status": "affected",
              "version": "960b589f86c74ce582922fcb996103271081f4de",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bridge/br_arp_nd_proxy.c",
            "net/bridge/br_fdb.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.14"
            },
            {
              "lessThan": "3.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.259",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.210",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.176",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.86",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.27",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.259",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.210",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.176",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.86",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.27",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.4",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: use a stable FDB dst snapshot in RCU readers\n\nLocal FDB entries can be rewritten in place by `fdb_delete_local()`, which\nupdates `f-\u003edst` to another port or to `NULL` while keeping the entry\nalive. Several bridge RCU readers inspect `f-\u003edst`, including\n`br_fdb_fillbuf()` through the `brforward_read()` sysfs path.\n\nThese readers currently load `f-\u003edst` multiple times and can therefore\nobserve inconsistent values across the check and later dereference.\nIn `br_fdb_fillbuf()`, this means a concurrent local-FDB update can change\n`f-\u003edst` after the NULL check and before the `port_no` dereference,\nleading to a NULL-ptr-deref.\n\nFix this by taking a single `READ_ONCE()` snapshot of `f-\u003edst` in each\naffected RCU reader and using that snapshot for the rest of the access\nsequence. Also publish the in-place `f-\u003edst` updates in `fdb_delete_local()`\nwith `WRITE_ONCE()` so the readers and writer use matching access patterns."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-19T11:59:23.674Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c502fa9f094cb03d1d1685c71e2105ab359bc2b8"
        },
        {
          "url": "https://git.kernel.org/stable/c/a6ae4511c07b91f597e461406c6330f0d4ff810e"
        },
        {
          "url": "https://git.kernel.org/stable/c/1406c4e0ed1eaf8a29801ab1163d00fb7ee4359a"
        },
        {
          "url": "https://git.kernel.org/stable/c/0b9e4bbfb7c949151e3acd44ed4aa33614d2e110"
        },
        {
          "url": "https://git.kernel.org/stable/c/81af4137a30c4c2dc694dea8cacb180bd66000ef"
        },
        {
          "url": "https://git.kernel.org/stable/c/5424e678f9b304e148cf5dcc047cffc7a56a3bb5"
        },
        {
          "url": "https://git.kernel.org/stable/c/9a2d9d4e657b23dc21f24cf139e3aeff0b61341f"
        },
        {
          "url": "https://git.kernel.org/stable/c/df4601653201de21b487c3e7fffd464790cab808"
        }
      ],
      "title": "net: bridge: use a stable FDB dst snapshot in RCU readers",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46086",
    "datePublished": "2026-05-27T12:58:28.137Z",
    "dateReserved": "2026-05-13T15:03:33.096Z",
    "dateUpdated": "2026-10-15T01:20:24.801Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-52972 (GCVE-0-2026-52972)

Vulnerability from cvelistv5 – Published: 2026-06-24 16:28 – Updated: 2026-08-17 04:50

Title

crypto: af_alg - Cap AEAD AD length to 0x80000000

Summary

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when checking the TX buffer size, cap the associated data length to 0x80000000.

Severity

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-190 - Integer Overflow or Wraparound

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 7033 records in the last 180 days details

References

12 references

URL	Tags
https://git.kernel.org/stable/c/f8a5203596797f394…
https://git.kernel.org/stable/c/a9f68d9ed38dd6e5a…
https://git.kernel.org/stable/c/a4fe4eb580bbc7439…
https://git.kernel.org/stable/c/e4c4a5074532eaaa1…
https://git.kernel.org/stable/c/265ac26d1c5e17b34…
https://git.kernel.org/stable/c/a1c5672faf8e93e38…
https://git.kernel.org/stable/c/97948906dc8e0ea84…
https://git.kernel.org/stable/c/0b3a57d218618cb1c…
https://git.kernel.org/stable/c/e4c06479d7059888a…
https://access.redhat.com/security/cve/CVE-2026-52972	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2492364	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex

Impacted products

7 products

Vendor	Product	Version
Linux	Linux	Affected: 400c40cf78da00c16e561a3a253ca272455c42ef , < f8a5203596797f394ff3f9aa4005597a92249802 (git) Affected: 400c40cf78da00c16e561a3a253ca272455c42ef , < a9f68d9ed38dd6e5a6c6d75b03d25c1c133e321d (git) Affected: 400c40cf78da00c16e561a3a253ca272455c42ef , < a4fe4eb580bbc7439f649a496d4cf38415a4021c (git) Affected: 400c40cf78da00c16e561a3a253ca272455c42ef , < e4c4a5074532eaaa14951994a3aad0d479aa7431 (git) Affected: 400c40cf78da00c16e561a3a253ca272455c42ef , < 265ac26d1c5e17b34d497cbda1f754a1ec8552bc (git) Affected: 400c40cf78da00c16e561a3a253ca272455c42ef , < a1c5672faf8e93e38c2deac3979cc767ca5cf918 (git) Affected: 400c40cf78da00c16e561a3a253ca272455c42ef , < 97948906dc8e0ea84775e03e35b60a2063c70193 (git) Affected: 400c40cf78da00c16e561a3a253ca272455c42ef , < 0b3a57d218618cb1cc78ddc9ba02c07de84b46f4 (git) Affected: 400c40cf78da00c16e561a3a253ca272455c42ef , < e4c06479d7059888adf2f22bc1ebcf053bf691a2 (git)
Linux	Linux	Affected: 4.1 Unaffected: 0 , < 4.1 (semver) Unaffected: 5.10.258 , ≤ 5.10.* (semver) Unaffected: 5.15.209 , ≤ 5.15.* (semver) Unaffected: 6.1.175 , ≤ 6.1.* (semver) Unaffected: 6.6.141 , ≤ 6.6.* (semver) Unaffected: 6.12.91 , ≤ 6.12.* (semver) Unaffected: 6.18.33 , ≤ 6.18.* (semver) Unaffected: 7.0.10 , ≤ 7.0.* (semver) Unaffected: 7.1.5 , ≤ 7.1.* (semver) Unaffected: 7.2 , ≤ * (original_commit_for_fix)
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-24T00:00:00.000Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the Linux kernel\u0027s `af_alg` cryptography module. This vulnerability involves an arithmetic overflow when processing associated data lengths during the transmit buffer size check. A remote attacker could exploit this flaw by providing a specially crafted associated data length, potentially leading to a denial of service (DoS) due to system instability."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-190",
                "description": "Integer Overflow or Wraparound",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T02:46:50.271Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-52972"
          },
          {
            "name": "RHBZ#2492364",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492364"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52972.json"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-24T00:00:00.000Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-24T00:00:00.000Z",
            "value": "Made public."
          }
        ],
        "title": "kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "crypto/af_alg.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f8a5203596797f394ff3f9aa4005597a92249802",
              "status": "affected",
              "version": "400c40cf78da00c16e561a3a253ca272455c42ef",
              "versionType": "git"
            },
            {
              "lessThan": "a9f68d9ed38dd6e5a6c6d75b03d25c1c133e321d",
              "status": "affected",
              "version": "400c40cf78da00c16e561a3a253ca272455c42ef",
              "versionType": "git"
            },
            {
              "lessThan": "a4fe4eb580bbc7439f649a496d4cf38415a4021c",
              "status": "affected",
              "version": "400c40cf78da00c16e561a3a253ca272455c42ef",
              "versionType": "git"
            },
            {
              "lessThan": "e4c4a5074532eaaa14951994a3aad0d479aa7431",
              "status": "affected",
              "version": "400c40cf78da00c16e561a3a253ca272455c42ef",
              "versionType": "git"
            },
            {
              "lessThan": "265ac26d1c5e17b34d497cbda1f754a1ec8552bc",
              "status": "affected",
              "version": "400c40cf78da00c16e561a3a253ca272455c42ef",
              "versionType": "git"
            },
            {
              "lessThan": "a1c5672faf8e93e38c2deac3979cc767ca5cf918",
              "status": "affected",
              "version": "400c40cf78da00c16e561a3a253ca272455c42ef",
              "versionType": "git"
            },
            {
              "lessThan": "97948906dc8e0ea84775e03e35b60a2063c70193",
              "status": "affected",
              "version": "400c40cf78da00c16e561a3a253ca272455c42ef",
              "versionType": "git"
            },
            {
              "lessThan": "0b3a57d218618cb1cc78ddc9ba02c07de84b46f4",
              "status": "affected",
              "version": "400c40cf78da00c16e561a3a253ca272455c42ef",
              "versionType": "git"
            },
            {
              "lessThan": "e4c06479d7059888adf2f22bc1ebcf053bf691a2",
              "status": "affected",
              "version": "400c40cf78da00c16e561a3a253ca272455c42ef",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "crypto/af_alg.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.1"
            },
            {
              "lessThan": "4.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.141",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.91",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.33",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.141",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.91",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.33",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.10",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Cap AEAD AD length to 0x80000000\n\nIn order to prevent arithmetic overflows when checking the TX\nbuffer size, cap the associated data length to 0x80000000."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T04:50:24.931Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f8a5203596797f394ff3f9aa4005597a92249802"
        },
        {
          "url": "https://git.kernel.org/stable/c/a9f68d9ed38dd6e5a6c6d75b03d25c1c133e321d"
        },
        {
          "url": "https://git.kernel.org/stable/c/a4fe4eb580bbc7439f649a496d4cf38415a4021c"
        },
        {
          "url": "https://git.kernel.org/stable/c/e4c4a5074532eaaa14951994a3aad0d479aa7431"
        },
        {
          "url": "https://git.kernel.org/stable/c/265ac26d1c5e17b34d497cbda1f754a1ec8552bc"
        },
        {
          "url": "https://git.kernel.org/stable/c/a1c5672faf8e93e38c2deac3979cc767ca5cf918"
        },
        {
          "url": "https://git.kernel.org/stable/c/97948906dc8e0ea84775e03e35b60a2063c70193"
        },
        {
          "url": "https://git.kernel.org/stable/c/0b3a57d218618cb1cc78ddc9ba02c07de84b46f4"
        },
        {
          "url": "https://git.kernel.org/stable/c/e4c06479d7059888adf2f22bc1ebcf053bf691a2"
        }
      ],
      "title": "crypto: af_alg - Cap AEAD AD length to 0x80000000",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-52972",
    "datePublished": "2026-06-24T16:28:50.425Z",
    "dateReserved": "2026-06-09T07:44:35.375Z",
    "dateUpdated": "2026-08-17T04:50:24.931Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63831 (GCVE-0-2026-63831)

Vulnerability from cvelistv5 – Published: 2026-07-19 12:02 – Updated: 2026-10-19 20:07

Title

mac802154: llsec: add skb_cow_data() before in-place crypto

Summary

In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_data() before in-place crypto llsec_do_encrypt_unauth(), llsec_do_encrypt_auth(), llsec_do_decrypt_unauth(), and llsec_do_decrypt_auth() all perform in-place cryptographic transformations on skb data. They build a scatterlist with sg_init_one() pointing into the skb's linear data area and then pass the same scatterlist as both src and dst to the crypto API (e.g. crypto_skcipher_encrypt/decrypt, crypto_aead_encrypt/decrypt). On the RX path, __ieee802154_rx_handle_packet() clones the received skb before handing it to each subscriber via ieee802154_subif_frame(). The cloned skb shares the same underlying data buffer via reference counting. When llsec_do_decrypt() subsequently modifies this shared buffer in place, it corrupts data that other clones -- potentially belonging to other sockets or subsystems -- still reference. On the TX path, similar data sharing can occur when an skb's head has been cloned (skb_cloned() returns true). The fix is to call skb_cow_data() before performing any in-place crypto operation. skb_cow_data() ensures that the skb's data area is not shared: if the skb head is cloned or the data spans multiple fragments, it copies the data into a private buffer that can be safely modified in place. This is the same pattern used by: - ESP (net/ipv4/esp4.c, net/ipv6/esp6.c) - MACsec (drivers/net/macsec.c) - WireGuard (drivers/net/wireguard/receive.c) - TIPC (net/tipc/crypto.c) Without this guard, in-place crypto on shared skb data leads to: - Silent data corruption of other skb clones - Use-after-free when the crypto API scatterwalk writes through a page that has already been freed by another clone's kfree_skb() - Kernel crashes under concurrent 802.15.4 traffic with security enabled (KASAN/KMSAN reports slab-use-after-free) Found by 0sec (https://0sec.ai) using automated source analysis.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-16 15:31 UTC

CWE

CWE-416 - Use After Free

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 7033 records in the last 180 days details

References

8 references

URL	Tags
https://git.kernel.org/stable/c/3a2b378b3a9ca75d3…
https://git.kernel.org/stable/c/7a831bcd048678828…
https://git.kernel.org/stable/c/ff976ef7c39199ebf…
https://git.kernel.org/stable/c/e28e7fd34c4490283…
https://git.kernel.org/stable/c/993fd674fe85d114e…
https://git.kernel.org/stable/c/bd968bdd568beacfd…
https://git.kernel.org/stable/c/86d531337ea1ba02d…
https://git.kernel.org/stable/c/84a04eb5b210643bd…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 03556e4d0dbbbf4af9df76f4a3839c86f6afb015 , < 3a2b378b3a9ca75d3518d879148d2ad25b5714a9 (git) Affected: 03556e4d0dbbbf4af9df76f4a3839c86f6afb015 , < 7a831bcd0486788283ef35e396d4282ee01bb0d5 (git) Affected: 03556e4d0dbbbf4af9df76f4a3839c86f6afb015 , < ff976ef7c39199ebff33c18034636595016db9f0 (git) Affected: 03556e4d0dbbbf4af9df76f4a3839c86f6afb015 , < e28e7fd34c449028325322a3f5127b92594b7396 (git) Affected: 03556e4d0dbbbf4af9df76f4a3839c86f6afb015 , < 993fd674fe85d114e6a8d3963033d4fbbc2170a8 (git) Affected: 03556e4d0dbbbf4af9df76f4a3839c86f6afb015 , < bd968bdd568beacfdf98ec537a87527e85f1d0cf (git) Affected: 03556e4d0dbbbf4af9df76f4a3839c86f6afb015 , < 86d531337ea1ba02d9f2bc830d07c683d9bfaade (git) Affected: 03556e4d0dbbbf4af9df76f4a3839c86f6afb015 , < 84a04eb5b210643bd67aab81ff805d32f62aa865 (git)
Linux	Linux	Affected: 3.16 Unaffected: 0 , < 3.16 (semver) Unaffected: 5.10.260 , ≤ 5.10.* (semver) Unaffected: 5.15.211 , ≤ 5.15.* (semver) Unaffected: 6.1.177 , ≤ 6.1.* (semver) Unaffected: 6.6.144 , ≤ 6.6.* (semver) Unaffected: 6.12.95 , ≤ 6.12.* (semver) Unaffected: 6.18.38 , ≤ 6.18.* (semver) Unaffected: 7.1.3 , ≤ 7.1.* (semver) Unaffected: 7.2 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63831",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T15:31:21.214861Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T20:07:49.327Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/mac802154/llsec.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "3a2b378b3a9ca75d3518d879148d2ad25b5714a9",
              "status": "affected",
              "version": "03556e4d0dbbbf4af9df76f4a3839c86f6afb015",
              "versionType": "git"
            },
            {
              "lessThan": "7a831bcd0486788283ef35e396d4282ee01bb0d5",
              "status": "affected",
              "version": "03556e4d0dbbbf4af9df76f4a3839c86f6afb015",
              "versionType": "git"
            },
            {
              "lessThan": "ff976ef7c39199ebff33c18034636595016db9f0",
              "status": "affected",
              "version": "03556e4d0dbbbf4af9df76f4a3839c86f6afb015",
              "versionType": "git"
            },
            {
              "lessThan": "e28e7fd34c449028325322a3f5127b92594b7396",
              "status": "affected",
              "version": "03556e4d0dbbbf4af9df76f4a3839c86f6afb015",
              "versionType": "git"
            },
            {
              "lessThan": "993fd674fe85d114e6a8d3963033d4fbbc2170a8",
              "status": "affected",
              "version": "03556e4d0dbbbf4af9df76f4a3839c86f6afb015",
              "versionType": "git"
            },
            {
              "lessThan": "bd968bdd568beacfdf98ec537a87527e85f1d0cf",
              "status": "affected",
              "version": "03556e4d0dbbbf4af9df76f4a3839c86f6afb015",
              "versionType": "git"
            },
            {
              "lessThan": "86d531337ea1ba02d9f2bc830d07c683d9bfaade",
              "status": "affected",
              "version": "03556e4d0dbbbf4af9df76f4a3839c86f6afb015",
              "versionType": "git"
            },
            {
              "lessThan": "84a04eb5b210643bd67aab81ff805d32f62aa865",
              "status": "affected",
              "version": "03556e4d0dbbbf4af9df76f4a3839c86f6afb015",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/mac802154/llsec.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.16"
            },
            {
              "lessThan": "3.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.260",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.211",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.177",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.144",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.95",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.38",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.260",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.211",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.177",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.144",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.95",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.38",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.3",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac802154: llsec: add skb_cow_data() before in-place crypto\n\nllsec_do_encrypt_unauth(), llsec_do_encrypt_auth(),\nllsec_do_decrypt_unauth(), and llsec_do_decrypt_auth() all perform\nin-place cryptographic transformations on skb data.  They build a\nscatterlist with sg_init_one() pointing into the skb\u0027s linear data area\nand then pass the same scatterlist as both src and dst to the crypto API\n(e.g. crypto_skcipher_encrypt/decrypt, crypto_aead_encrypt/decrypt).\n\nOn the RX path, __ieee802154_rx_handle_packet() clones the received skb\nbefore handing it to each subscriber via ieee802154_subif_frame().  The\ncloned skb shares the same underlying data buffer via reference\ncounting.  When llsec_do_decrypt() subsequently modifies this shared\nbuffer in place, it corrupts data that other clones -- potentially\nbelonging to other sockets or subsystems -- still reference.\n\nOn the TX path, similar data sharing can occur when an skb\u0027s head has\nbeen cloned (skb_cloned() returns true).\n\nThe fix is to call skb_cow_data() before performing any in-place crypto\noperation.  skb_cow_data() ensures that the skb\u0027s data area is not\nshared: if the skb head is cloned or the data spans multiple fragments,\nit copies the data into a private buffer that can be safely modified in\nplace.  This is the same pattern used by:\n\n  - ESP (net/ipv4/esp4.c, net/ipv6/esp6.c)\n  - MACsec (drivers/net/macsec.c)\n  - WireGuard (drivers/net/wireguard/receive.c)\n  - TIPC (net/tipc/crypto.c)\n\nWithout this guard, in-place crypto on shared skb data leads to:\n  - Silent data corruption of other skb clones\n  - Use-after-free when the crypto API scatterwalk writes through a\n    page that has already been freed by another clone\u0027s kfree_skb()\n  - Kernel crashes under concurrent 802.15.4 traffic with security\n    enabled (KASAN/KMSAN reports slab-use-after-free)\n\nFound by 0sec (https://0sec.ai) using automated source analysis."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - The bug is reached when the kernel processes incoming IEEE 802.15.4 frames from a radio driver (ieee802154_rx \u2192 llsec_do_decrypt), which requires an attacker within WPAN radio range, analogous to Bluetooth/WiFi adjacent-segment attacks.\nAC:L - An attacker can reliably trigger the flaw by transmitting valid LLSEC-protected 802.15.4 frames (including broadcast frames fanning out to multiple virtual interfaces) and controlling traffic timing; the skb_clone sharing is deterministic on the RX path.\nPR:N - Exploitation requires no local privileges on the victim\u2014only the ability to send 802.15.4 radio frames as a PAN participant with valid LLSEC credentials, which is a network-position requirement rather than elevated kernel access.\nUI:N - No end-user action is needed at exploitation time; triggering the bug only requires the target to already be running mac802154 with LLSEC enabled and receiving attacker-crafted wireless frames.\nS:U - Impact is confined to kernel memory/subsystems on the affected host (UAF, data corruption, crash); it does not inherently cross a VM, container, or IOMMU security boundary.\nC:H - The commit and fix description confirm slab use-after-free from in-place crypto scatterwalk writes through skb data pages freed by sibling clones, enabling arbitrary kernel memory reads.\nI:H - Writing through freed/shared skb pages during in-place decrypt/encrypt corrupts kernel heap contents and provides a standard exploitable memory-corruption primitive for arbitrary modification or code execution.\nA:H - Concurrent LLSEC-enabled 802.15.4 traffic can cause kernel oops/panic, and KASAN/KMSAN reports confirm slab-use-after-free crashes under the vulnerable code path."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T04:51:40.171Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/3a2b378b3a9ca75d3518d879148d2ad25b5714a9"
        },
        {
          "url": "https://git.kernel.org/stable/c/7a831bcd0486788283ef35e396d4282ee01bb0d5"
        },
        {
          "url": "https://git.kernel.org/stable/c/ff976ef7c39199ebff33c18034636595016db9f0"
        },
        {
          "url": "https://git.kernel.org/stable/c/e28e7fd34c449028325322a3f5127b92594b7396"
        },
        {
          "url": "https://git.kernel.org/stable/c/993fd674fe85d114e6a8d3963033d4fbbc2170a8"
        },
        {
          "url": "https://git.kernel.org/stable/c/bd968bdd568beacfdf98ec537a87527e85f1d0cf"
        },
        {
          "url": "https://git.kernel.org/stable/c/86d531337ea1ba02d9f2bc830d07c683d9bfaade"
        },
        {
          "url": "https://git.kernel.org/stable/c/84a04eb5b210643bd67aab81ff805d32f62aa865"
        }
      ],
      "title": "mac802154: llsec: add skb_cow_data() before in-place crypto",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-63831",
    "datePublished": "2026-07-19T12:02:24.320Z",
    "dateReserved": "2026-07-19T07:54:57.015Z",
    "dateUpdated": "2026-10-19T20:07:49.327Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-72243 (GCVE-0-2026-72243)

Vulnerability from cvelistv5 – Published: 2026-08-15 05:54 – Updated: 2026-10-16 18:45

Title

selinux: check connect-related permissions on TCP Fast Open

Summary

In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not updated when TCP Fast Open support was introduced to ensure connect-related permissions are checked when using TCP Fast Open. Update its socket_sendmsg() hook to call selinux_socket_connect() when MSG_FASTOPEN is passed.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-16 18:44 UTC

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 7033 records in the last 180 days details

References

6 references

URL	Tags
https://git.kernel.org/stable/c/11406d0d7e11b4e52…
https://git.kernel.org/stable/c/e507633bf76bccf1a…
https://git.kernel.org/stable/c/d028bc080a0dcd6a7…
https://git.kernel.org/stable/c/fc633a598206d4f23…
https://git.kernel.org/stable/c/646ebbc5f2ff9147d…
https://git.kernel.org/stable/c/44c74d27d1b9aaa99…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < 11406d0d7e11b4e525bb2ace2c70107031d058da (git) Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < e507633bf76bccf1a6af27771fb0d6e2862b7eac (git) Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < d028bc080a0dcd6a7f8e1ae1bd32dda696505ba3 (git) Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < fc633a598206d4f23af782db7c0b5f3a82751d2c (git) Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < 646ebbc5f2ff9147d084e1213143f091026a611c (git) Affected: cf60af03ca4e71134206809ea892e49b92a88896 , < 44c74d27d1b9aaa99fa8a83640c1223575262b80 (git)
Linux	Linux	Affected: 3.6 Unaffected: 0 , < 3.6 (semver) Unaffected: 6.1.178 , ≤ 6.1.* (semver) Unaffected: 6.6.145 , ≤ 6.6.* (semver) Unaffected: 6.12.97 , ≤ 6.12.* (semver) Unaffected: 6.18.40 , ≤ 6.18.* (semver) Unaffected: 7.1.5 , ≤ 7.1.* (semver) Unaffected: 7.2 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-72243",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T18:44:53.438037Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T18:45:04.616Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "security/selinux/hooks.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "11406d0d7e11b4e525bb2ace2c70107031d058da",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            },
            {
              "lessThan": "e507633bf76bccf1a6af27771fb0d6e2862b7eac",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            },
            {
              "lessThan": "d028bc080a0dcd6a7f8e1ae1bd32dda696505ba3",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            },
            {
              "lessThan": "fc633a598206d4f23af782db7c0b5f3a82751d2c",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            },
            {
              "lessThan": "646ebbc5f2ff9147d084e1213143f091026a611c",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            },
            {
              "lessThan": "44c74d27d1b9aaa99fa8a83640c1223575262b80",
              "status": "affected",
              "version": "cf60af03ca4e71134206809ea892e49b92a88896",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "security/selinux/hooks.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.6"
            },
            {
              "lessThan": "3.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.97",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.40",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: check connect-related permissions on TCP Fast Open\n\nSimilar to Landlock, SELinux was not updated when TCP Fast Open\nsupport was introduced to ensure connect-related permissions are\nchecked when using TCP Fast Open. Update its socket_sendmsg() hook to\ncall selinux_socket_connect() when MSG_FASTOPEN is passed."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Exploitation requires a confined local process to invoke sendmsg(2)/sendto(2) with MSG_FASTOPEN; the vulnerable selinux_socket_sendmsg() LSM hook runs on the syscall path before TCP fast-open performs its implicit connect.\nAC:L - A confined task with SOCKET__WRITE can reliably trigger the bypass with one sendmsg/sendto using MSG_FASTOPEN and a destination address; TFO client is enabled by default (sysctl_tcp_fastopen=TFO_CLIENT_ENABLE) and no race or special victim state is needed.\nPR:L - The attacker must be an unprivileged process in a SELinux domain that grants socket write but denies connect/name_connect (e.g., confined Android apps, container workloads, hardened service domains); no real root or init-namespace privileges are required.\nUI:N - No victim interaction is required; the confined attacker process directly issues the bypassing syscall without needing another user or administrator to perform any action.\nS:C - Successful exploitation crosses the SELinux MAC confinement boundary, allowing a sandboxed domain to establish outbound TCP/MPTCP connections that connect(2) and name_connect policy would have blocked, escaping the intended network policy scope.\nC:H - Bypassing connect and name_connect mediation lets a confined process open TCP/MPTCP sessions to SELinux-forbidden destinations and read arbitrary response data from those services (internal APIs, metadata endpoints, databases), constituting unauthorized information disclosure.\nI:H - The bypass enables unauthorized outbound connection establishment and transmission of arbitrary application data (including SYN-cookie payload) to hosts and ports explicitly denied by SELinux connect/name_connect rules, violating integrity of the confinement policy.\nA:N - This is a pure SELinux LSM policy-bypass flaw with no kernel memory corruption, panic, oops, hang, or resource exhaustion; exploitation does not impact system availability."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-18T06:56:32.099Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/11406d0d7e11b4e525bb2ace2c70107031d058da"
        },
        {
          "url": "https://git.kernel.org/stable/c/e507633bf76bccf1a6af27771fb0d6e2862b7eac"
        },
        {
          "url": "https://git.kernel.org/stable/c/d028bc080a0dcd6a7f8e1ae1bd32dda696505ba3"
        },
        {
          "url": "https://git.kernel.org/stable/c/fc633a598206d4f23af782db7c0b5f3a82751d2c"
        },
        {
          "url": "https://git.kernel.org/stable/c/646ebbc5f2ff9147d084e1213143f091026a611c"
        },
        {
          "url": "https://git.kernel.org/stable/c/44c74d27d1b9aaa99fa8a83640c1223575262b80"
        }
      ],
      "title": "selinux: check connect-related permissions on TCP Fast Open",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-72243",
    "datePublished": "2026-08-15T05:54:31.117Z",
    "dateReserved": "2026-08-09T03:40:39.914Z",
    "dateUpdated": "2026-10-16T18:45:04.616Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-89846 (GCVE-0-2026-89846)

Vulnerability from cvelistv5 – Published: 2026-09-16 10:31 – Updated: 2026-10-19 08:53

Title

scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read

Summary

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read In qla2x00_status_entry(), the FWI2 status path advances sense_data and shrinks par_sense_len by rsp_info_len: if (IS_FWI2_CAPABLE(ha)) { sense_data += rsp_info_len; par_sense_len -= rsp_info_len; } rsp_info_len is a 32-bit value taken directly from the target's FCP response (sf.rsp_data_len), while par_sense_len is the IOCB data area size (28 bytes for 24xx, 60 bytes for 29xx). A hostile or buggy target reporting an rsp_info_len larger than par_sense_len makes the unsigned subtraction underflow to a huge value and advances sense_data out of bounds. The underflowed par_sense_len then defeats the cap in qla2x00_handle_sense(): if (sense_len > par_sense_len) sense_len = par_sense_len; memcpy(cp->sense_buffer, sense_data, sense_len); so the memcpy reads up to SCSI_SENSE_BUFFERSIZE bytes from the out-of-bounds sense_data pointer, leaking adjacent response-ring/heap memory into the command's sense buffer. Clamp rsp_info_len to par_sense_len before the subtraction so par_sense_len can never underflow and sense_data stays within the IOCB data area. The fix sits before the comp_status switch, covering both qla2x00_handle_sense() call sites.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 7033 records in the last 180 days details

References

8 references

URL	Tags
https://git.kernel.org/stable/c/125b12861c726e584…
https://git.kernel.org/stable/c/e57ace988bda5693f…
https://git.kernel.org/stable/c/6b08c0cb110a1fba9…
https://git.kernel.org/stable/c/be75ab791c9b3baca…
https://git.kernel.org/stable/c/ebc41dfc59d190956…
https://git.kernel.org/stable/c/d7f7746ff031ae457…
https://git.kernel.org/stable/c/f6e8977bce887481b…
https://git.kernel.org/stable/c/ca6d880d6c70cb794…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 5544213be7b4fb693730106a6d70a8cc1aa7cdf6 , < 125b12861c726e58448bb95d55b04851fb131d1f (git) Affected: 5544213be7b4fb693730106a6d70a8cc1aa7cdf6 , < e57ace988bda5693f7b3645f652ea4b4220870ee (git) Affected: 5544213be7b4fb693730106a6d70a8cc1aa7cdf6 , < 6b08c0cb110a1fba92f99d655020198489699815 (git) Affected: 5544213be7b4fb693730106a6d70a8cc1aa7cdf6 , < be75ab791c9b3baca66c70ce03443afebc83acda (git) Affected: 5544213be7b4fb693730106a6d70a8cc1aa7cdf6 , < ebc41dfc59d190956e0113e8bd90c28f6f21e8b9 (git) Affected: 5544213be7b4fb693730106a6d70a8cc1aa7cdf6 , < d7f7746ff031ae45724881261804f4bf5317c985 (git) Affected: 5544213be7b4fb693730106a6d70a8cc1aa7cdf6 , < f6e8977bce887481b2b2b0e2e14a791270741cfb (git) Affected: 5544213be7b4fb693730106a6d70a8cc1aa7cdf6 , < ca6d880d6c70cb7946e7b3e05d7285f271b6d99e (git)
Linux	Linux	Affected: 2.6.36 Unaffected: 0 , < 2.6.36 (semver) Unaffected: 5.10.270 , ≤ 5.10.* (semver) Unaffected: 5.15.221 , ≤ 5.15.* (semver) Unaffected: 6.1.188 , ≤ 6.1.* (semver) Unaffected: 6.6.157 , ≤ 6.6.* (semver) Unaffected: 6.12.110 , ≤ 6.12.* (semver) Unaffected: 6.18.51 , ≤ 6.18.* (semver) Unaffected: 7.2.5 , ≤ 7.2.* (semver) Unaffected: 7.3 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/qla2xxx/qla_isr.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "125b12861c726e58448bb95d55b04851fb131d1f",
              "status": "affected",
              "version": "5544213be7b4fb693730106a6d70a8cc1aa7cdf6",
              "versionType": "git"
            },
            {
              "lessThan": "e57ace988bda5693f7b3645f652ea4b4220870ee",
              "status": "affected",
              "version": "5544213be7b4fb693730106a6d70a8cc1aa7cdf6",
              "versionType": "git"
            },
            {
              "lessThan": "6b08c0cb110a1fba92f99d655020198489699815",
              "status": "affected",
              "version": "5544213be7b4fb693730106a6d70a8cc1aa7cdf6",
              "versionType": "git"
            },
            {
              "lessThan": "be75ab791c9b3baca66c70ce03443afebc83acda",
              "status": "affected",
              "version": "5544213be7b4fb693730106a6d70a8cc1aa7cdf6",
              "versionType": "git"
            },
            {
              "lessThan": "ebc41dfc59d190956e0113e8bd90c28f6f21e8b9",
              "status": "affected",
              "version": "5544213be7b4fb693730106a6d70a8cc1aa7cdf6",
              "versionType": "git"
            },
            {
              "lessThan": "d7f7746ff031ae45724881261804f4bf5317c985",
              "status": "affected",
              "version": "5544213be7b4fb693730106a6d70a8cc1aa7cdf6",
              "versionType": "git"
            },
            {
              "lessThan": "f6e8977bce887481b2b2b0e2e14a791270741cfb",
              "status": "affected",
              "version": "5544213be7b4fb693730106a6d70a8cc1aa7cdf6",
              "versionType": "git"
            },
            {
              "lessThan": "ca6d880d6c70cb7946e7b3e05d7285f271b6d99e",
              "status": "affected",
              "version": "5544213be7b4fb693730106a6d70a8cc1aa7cdf6",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/qla2xxx/qla_isr.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.36"
            },
            {
              "lessThan": "2.6.36",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.51",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.270",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.221",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.188",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.157",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.110",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.51",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.5",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read\n\nIn qla2x00_status_entry(), the FWI2 status path advances sense_data and\nshrinks par_sense_len by rsp_info_len:\n\n\tif (IS_FWI2_CAPABLE(ha)) {\n\t\tsense_data += rsp_info_len;\n\t\tpar_sense_len -= rsp_info_len;\n\t}\n\nrsp_info_len is a 32-bit value taken directly from the target\u0027s FCP\nresponse (sf.rsp_data_len), while par_sense_len is the IOCB data area\nsize (28 bytes for 24xx, 60 bytes for 29xx). A hostile or buggy target\nreporting an rsp_info_len larger than par_sense_len makes the unsigned\nsubtraction underflow to a huge value and advances sense_data out of\nbounds.\n\nThe underflowed par_sense_len then defeats the cap in\nqla2x00_handle_sense():\n\n\tif (sense_len \u003e par_sense_len)\n\t\tsense_len = par_sense_len;\n\tmemcpy(cp-\u003esense_buffer, sense_data, sense_len);\n\nso the memcpy reads up to SCSI_SENSE_BUFFERSIZE bytes from the\nout-of-bounds sense_data pointer, leaking adjacent response-ring/heap\nmemory into the command\u0027s sense buffer.\n\nClamp rsp_info_len to par_sense_len before the subtraction so\npar_sense_len can never underflow and sense_data stays within the IOCB\ndata area. The fix sits before the comp_status switch, covering both\nqla2x00_handle_sense() call sites."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - qla2xxx builds initiator status IOCBs from a remote Fibre Channel or FCoE target\u0027s FCP_RSP; QLogic CNAs speak FCoE and SAN fabrics are stretched across sites via FCIP/inter-fabric routing, so a malicious or compromised target delivers the crafted rsp_data_len over the storage network with no local access.\nAC:L - A hostile target fully controls FCP_RSP (SS_RESPONSE_INFO_LEN_VALID, rsp_data_len, sense_len, CHECK CONDITION, rsp_info[3]==0) and can return them on ordinary initiator I/O such as INQUIRY during fabric scan; no race, rare config, or victim state beyond a FWI2-capable HBA is required.\nPR:N - Completions are handled in the HBA interrupt/response-queue path (qla24xx_process_response_queue to qla2x00_status_entry) with no Linux credential or capability check; the attacker only needs to act as an FC/FCoE target on the fabric.\nUI:N - Once the target is visible on the fabric, the SCSI midlayer automatically issues commands (scan, path checks, mounted-filesystem I/O) whose STATUS_TYPE completions take the vulnerable path; no user mount, open, or other interactive step is required at exploit time.\nS:U - The out-of-bounds read and any resulting oops stay inside the host kernel that owns the qla2xxx driver and do not cross a VM, IOMMU, or other separate security authority.\nC:H - Attacker-controlled 32-bit rsp_info_len advances sense_data out of the 28-byte IOCB data area and underflows par_sense_len so qla2x00_handle_sense() copies up to SCSI_SENSE_BUFFERSIZE (96) bytes of adjacent response-ring or kernel memory into the command sense buffer, which userspace can read via SCSI completion, SG_IO, and BSG.\nI:N - The memcpy destination is the in-bounds SCSI sense buffer already capped at SCSI_SENSE_BUFFERSIZE; this is a source over-read only, with no out-of-bounds write, use-after-free, or control-flow hijack primitive.\nA:H - Adding a 32-bit attacker-chosen rsp_info_len to sense_data yields a wild kernel pointer; memcpy from an unmapped address in the interrupt-context response-queue path oopses or panics the host, and the target can repeat this on every command."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T08:53:39.169Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/125b12861c726e58448bb95d55b04851fb131d1f"
        },
        {
          "url": "https://git.kernel.org/stable/c/e57ace988bda5693f7b3645f652ea4b4220870ee"
        },
        {
          "url": "https://git.kernel.org/stable/c/6b08c0cb110a1fba92f99d655020198489699815"
        },
        {
          "url": "https://git.kernel.org/stable/c/be75ab791c9b3baca66c70ce03443afebc83acda"
        },
        {
          "url": "https://git.kernel.org/stable/c/ebc41dfc59d190956e0113e8bd90c28f6f21e8b9"
        },
        {
          "url": "https://git.kernel.org/stable/c/d7f7746ff031ae45724881261804f4bf5317c985"
        },
        {
          "url": "https://git.kernel.org/stable/c/f6e8977bce887481b2b2b0e2e14a791270741cfb"
        },
        {
          "url": "https://git.kernel.org/stable/c/ca6d880d6c70cb7946e7b3e05d7285f271b6d99e"
        }
      ],
      "title": "scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-89846",
    "datePublished": "2026-09-16T10:31:20.306Z",
    "dateReserved": "2026-09-11T19:38:34.770Z",
    "dateUpdated": "2026-10-19T08:53:39.169Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:91493

CVE-2026-46086 (GCVE-0-2026-46086)

CVE-2026-52972 (GCVE-0-2026-52972)

CVE-2026-63831 (GCVE-0-2026-63831)

CVE-2026-72243 (GCVE-0-2026-72243)

CVE-2026-89846 (GCVE-0-2026-89846)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour