RHSA-2026:94996
Vulnerability from csaf_redhat - Published: 2026-11-04 04:47 - Updated: 2026-11-06 22:24Summary
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Severity
Critical
Notes
Topic: An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)
* kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)
* kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)
* kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159)
* kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156)
* kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155)
* kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476)
* kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
* kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)
* kernel: ipvs: do not propagate one-packet flag to synced conns (CVE-2026-80714)
* kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
* kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432)
* kernel: ZDI-CAN-33367: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation Vulnerability ()
Bug Fix(es) and Enhancement(s):
* Critical Bug Fixes for customer issues with lpfc [rhel-8.6.z] (JIRA:RHEL-286150)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change zdi-disclosures@trendmicro.com says: The vulnerability is a race condition between `ets_qdisc_dequeue` and `ets_qdisc_change`. It leads to UAF on `struct Qdisc` object. Attacker requires the capability to create new user and network namespace in order to trigger the bug. See my additional commentary at the end of the analysis. Analysis: static int ets_qdisc_change(struct Qdisc *sch, struct nlattr *opt, struct netlink_ext_ack *extack) { ... // (1) this lock is preventing .change handler (`ets_qdisc_change`) //to race with .dequeue handler (`ets_qdisc_dequeue`) sch_tree_lock(sch); for (i = nbands; i < oldbands; i++) { if (i >= q->nstrict && q->classes[i].qdisc->q.qlen) list_del_init(&q->classes[i].alist); qdisc_purge_queue(q->classes[i].qdisc); } WRITE_ONCE(q->nbands, nbands); for (i = nstrict; i < q->nstrict; i++) { if (q->classes[i].qdisc->q.qlen) { // (2) the class is added to the q->active list_add_tail(&q->classes[i].alist, &q->active); q->classes[i].deficit = quanta[i]; } } WRITE_ONCE(q->nstrict, nstrict); memcpy(q->prio2band, priomap, sizeof(priomap)); for (i = 0; i < q->nbands; i++) WRITE_ONCE(q->classes[i].quantum, quanta[i]); for (i = oldbands; i < q->nbands; i++) { q->classes[i].qdisc = queues[i]; if (q->classes[i].qdisc != &noop_qdisc) qdisc_hash_add(q->classes[i].qdisc, true); } // (3) the qdisc is unlocked, now dequeue can be called in parallel // to the rest of .change handler sch_tree_unlock(sch); ets_offload_change(sch); for (i = q->nbands; i < oldbands; i++) { // (4) we're reducing the refcount for our class's qdisc and // freeing it qdisc_put(q->classes[i].qdisc); // (5) If we call .dequeue between (4) and (5), we will have // a strong UAF and we can control RIP q->classes[i].qdisc = NULL; WRITE_ONCE(q->classes[i].quantum, 0); q->classes[i].deficit = 0; gnet_stats_basic_sync_init(&q->classes[i].bstats); memset(&q->classes[i].qstats, 0, sizeof(q->classes[i].qstats)); } return 0; } Comment: This happens because some of the classes have their qdiscs assigned to NULL, but remain in the active list. This commit fixes this issue by always removing the class from the active list before deleting and freeing its associated qdisc Reproducer Steps (trimmed version of what was sent by zdi-disclosures@trendmicro.com) ``` DEV="${DEV:-lo}" ROOT_HANDLE="${ROOT_HANDLE:-1:}" BAND2_HANDLE="${BAND2_HANDLE:-20:}" # child under 1:2 PING_BYTES="${PING_BYTES:-48}" PING_COUNT="${PING_COUNT:-200000}" PING_DST="${PING_DST:-127.0.0.1}" SLOW_TBF_RATE="${SLOW_TBF_RATE:-8bit}" SLOW_TBF_BURST="${SLOW_TBF_BURST:-100b}" SLOW_TBF_LAT="${SLOW_TBF_LAT:-1s}" cleanup() { tc qdisc del dev "$DEV" root 2>/dev/null } trap cleanup EXIT ip link set "$DEV" up tc qdisc del dev "$DEV" root 2>/dev/null || true tc qdisc add dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2 tc qdisc add dev "$DEV" parent 1:2 handle "$BAND2_HANDLE" \ tbf rate "$SLOW_TBF_RATE" burst "$SLOW_TBF_BURST" latency "$SLOW_TBF_LAT" tc filter add dev "$DEV" parent 1: protocol all prio 1 u32 match u32 0 0 flowid 1:2 tc -s qdisc ls dev $DEV ping -I "$DEV" -f -c "$PING_COUNT" -s "$PING_BYTES" -W 0.001 "$PING_DST" \ >/dev/null 2>&1 & tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 0 tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2 tc -s qdisc ls dev $DEV tc qdisc del dev "$DEV" parent ---truncated---
6.2 (Medium)
Affected products
Fixed
50 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel's procfs component. When reading /proc/[pid]/stat, the do_task_stat() function accesses task->real_parent without proper Read-Copy-Update (RCU) protection. This missing protection creates a race condition, which can lead to a Use-After-Free (UAF) vulnerability. A local attacker could potentially exploit this to cause a system crash or achieve other unspecified impacts.
7.1 (High)
Affected products
Fixed
50 products, the same list as for
CVE-2025-71066
Threats
Impact
Moderate
A flaw was found in the Linux kernel's NVMe over TCP target (nvmet-tcp) implementation. When a data digest mismatch is detected, nvmet_req_uninit() is called unconditionally, but if the command was already in the INIT_FAILED state, the matching percpu_ref_tryget_live() was never performed. The resulting percpu_ref_put() underflows the reference counter, which can lead to premature freeing of the referenced object (use-after-free) and a permanent workqueue deadlock. A remote attacker with access to the NVMe/TCP target can exploit this by sending a packet with an invalid data digest to crash the target (Denial of Service), with potential for memory corruption through the refcount underflow.
7.5 (High)
Affected products
Fixed
50 products, the same list as for
CVE-2025-71066
Threats
Impact
Important
A flaw was found in the libceph component of the Linux kernel. A remote attacker could send a specially crafted monitor map (monmap) that advertises zero monitors. This malformed monmap is incorrectly processed as valid, which can lead to a client crash when attempting to open a session. This vulnerability results in a Denial of Service (DoS) for the client.
7.1 (High)
Affected products
Fixed
50 products, the same list as for
CVE-2025-71066
Threats
Impact
Moderate
A flaw was found in the `libceph` component of the Linux kernel. During an authorizer update, if the authorizer is rebuilt, a stale pointer to a freed memory region can be retained. A remote attacker could exploit this by triggering a specific network reconnection, leading to a use-after-free vulnerability. This memory corruption could result in a system crash or denial of service.
8.8 (High)
Affected products
Fixed
50 products, the same list as for
CVE-2025-71066
Threats
Impact
Important
A flaw was found in libceph in the Linux kernel. A remote attacker, acting as a malicious monitor, could send a specially crafted OSDMap (Object Storage Device Map) with an overly long pg_temp or pg_upmap entry. This could lead to a stack out-of-bounds write, resulting in a kernel bug and potentially a denial of service.
8.8 (High)
Affected products
Fixed
50 products, the same list as for
CVE-2025-71066
Threats
Impact
Important
A flaw was found in the Linux kernel's IP Virtual Server (IPVS) module. When processing network packets, a buffer reallocation can leave an IP header pointer referencing freed memory. An attacker could exploit this use-after-free condition to cause a Denial of Service (DoS) by crashing the system or potentially corrupt system memory.
7.0 (High)
Affected products
Fixed
50 products, the same list as for
CVE-2025-71066
Threats
Impact
Important
A flaw was found in the Advanced Linux Sound Architecture (ALSA) usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping (mmap) fault offset. This allows read-write access to arbitrary kernel memory, potentially leading to a denial of service (kernel crash) or privilege escalation.
7.0 (High)
Affected products
Fixed
50 products, the same list as for
CVE-2025-71066
Threats
Impact
Moderate
A flaw was found in the Linux kernel's IP Virtual Server (IPVS) component. When processing Internet Control Message Protocol (ICMP) errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet, leading to a stack out-of-bounds write. This vulnerability could result in a denial of service or potentially arbitrary code execution.
8.8 (High)
Affected products
Fixed
50 products, the same list as for
CVE-2025-71066
Threats
Impact
Important
A flaw was found in the Linux kernel's IP Virtual Server (IPVS) component. When a synced connection is established, it can incorrectly inherit a "one-packet" flag from its destination. This misconfiguration causes the connection's expiry process to mishandle its cleanup, leaving behind stale memory references. This issue could potentially be exploited by an attacker to cause a denial of service (DoS) or lead to system instability.
7.8 (High)
Affected products
Fixed
50 products, the same list as for
CVE-2025-71066
Threats
Impact
Important
A flaw was found in the Linux kernel's NVMe (Non-Volatile Memory Express) over TCP (nvme-tcp) component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer (R2T) command for a read request. The host system, failing to properly validate the request direction, will then send the contents of its read destination buffer to the controller. This can lead to the disclosure of stale kernel memory data, potentially revealing sensitive information.
7.1 (High)
Affected products
Fixed
50 products, the same list as for
CVE-2025-71066
Threats
Impact
Important
A flaw was found in the Linux kernel's IPv4 networking subsystem. A race condition occurs during concurrent processing of retransmitted Transmission Control Protocol (TCP) connection requests or socket migrations, allowing socket options to be freed while still in use. A remote attacker could exploit this vulnerability by sending specially timed network requests, triggering a use-after-free condition. This could results in system crash leading to a Denial of Service (DoS), memory corruption, or remote code execution.
9.8 (Critical)
Affected products
Fixed
50 products, the same list as for
CVE-2025-71066
Threats
Impact
Critical
References
78 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)\n\n* kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)\n\n* kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)\n\n* kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159)\n\n* kernel: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update (CVE-2026-68156)\n\n* kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155)\n\n* kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476)\n\n* kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)\n\n* kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)\n\n* kernel: ipvs: do not propagate one-packet flag to synced conns (CVE-2026-80714)\n\n* kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)\n\n* kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432)\n\n* kernel: ZDI-CAN-33367: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation Vulnerability ()\n\nBug Fix(es) and Enhancement(s):\n\n* Critical Bug Fixes for customer issues with lpfc [rhel-8.6.z] (JIRA:RHEL-286150)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:94996",
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2429036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429036"
},
{
"category": "external",
"summary": "2484477",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484477"
},
{
"category": "external",
"summary": "2507399",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507399"
},
{
"category": "external",
"summary": "2513165",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513165"
},
{
"category": "external",
"summary": "2513232",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513232"
},
{
"category": "external",
"summary": "2513295",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513295"
},
{
"category": "external",
"summary": "2516251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516251"
},
{
"category": "external",
"summary": "2521375",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521375"
},
{
"category": "external",
"summary": "2521436",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521436"
},
{
"category": "external",
"summary": "2525436",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525436"
},
{
"category": "external",
"summary": "2532184",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532184"
},
{
"category": "external",
"summary": "2553390",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553390"
},
{
"category": "external",
"summary": "2559835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2559835"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_94996.json"
}
],
"title": "Red Hat Security Advisory: kernel security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2026-11-06T22:24:22+00:00",
"generator": {
"date": "2026-11-06T22:24:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.5"
}
},
"id": "RHSA-2026:94996",
"initial_release_date": "2026-11-04T04:47:44+00:00",
"revision_history": [
{
"date": "2026-11-04T04:47:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-11-04T04:47:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-06T22:24:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.6::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-core@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-core@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-modules@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-modules-extra@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-modules@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-modules-extra@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-libs@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "perf-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "perf-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-perf@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool-debuginfo@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-x86_64@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-debuginfo@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product": {
"name": "python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product_id": "python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-perf-debuginfo@4.18.0-372.227.1.el8_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:4.18.0-372.227.1.el8_6.src",
"product": {
"name": "kernel-0:4.18.0-372.227.1.el8_6.src",
"product_id": "kernel-0:4.18.0-372.227.1.el8_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@4.18.0-372.227.1.el8_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"product": {
"name": "kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"product_id": "kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-abi-stablelists@4.18.0-372.227.1.el8_6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"product_id": "kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-doc@4.18.0-372.227.1.el8_6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-372.227.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src"
},
"product_reference": "kernel-0:4.18.0-372.227.1.el8_6.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-372.227.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "perf-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-372.227.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src"
},
"product_reference": "kernel-0:4.18.0-372.227.1.el8_6.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-372.227.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "perf-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
},
"product_reference": "python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-71066",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-01-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2429036"
}
],
"notes": [
{
"category": "description",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: ets: Always remove class from active list before deleting in ets_qdisc_change\n\nzdi-disclosures@trendmicro.com says:\n\nThe vulnerability is a race condition between `ets_qdisc_dequeue` and\n`ets_qdisc_change`. It leads to UAF on `struct Qdisc` object.\nAttacker requires the capability to create new user and network namespace\nin order to trigger the bug.\nSee my additional commentary at the end of the analysis.\n\nAnalysis:\n\nstatic int ets_qdisc_change(struct Qdisc *sch, struct nlattr *opt,\n struct netlink_ext_ack *extack)\n{\n...\n\n // (1) this lock is preventing .change handler (`ets_qdisc_change`)\n //to race with .dequeue handler (`ets_qdisc_dequeue`)\n sch_tree_lock(sch);\n\n for (i = nbands; i \u003c oldbands; i++) {\n if (i \u003e= q-\u003enstrict \u0026\u0026 q-\u003eclasses[i].qdisc-\u003eq.qlen)\n list_del_init(\u0026q-\u003eclasses[i].alist);\n qdisc_purge_queue(q-\u003eclasses[i].qdisc);\n }\n\n WRITE_ONCE(q-\u003enbands, nbands);\n for (i = nstrict; i \u003c q-\u003enstrict; i++) {\n if (q-\u003eclasses[i].qdisc-\u003eq.qlen) {\n\t\t // (2) the class is added to the q-\u003eactive\n list_add_tail(\u0026q-\u003eclasses[i].alist, \u0026q-\u003eactive);\n q-\u003eclasses[i].deficit = quanta[i];\n }\n }\n WRITE_ONCE(q-\u003enstrict, nstrict);\n memcpy(q-\u003eprio2band, priomap, sizeof(priomap));\n\n for (i = 0; i \u003c q-\u003enbands; i++)\n WRITE_ONCE(q-\u003eclasses[i].quantum, quanta[i]);\n\n for (i = oldbands; i \u003c q-\u003enbands; i++) {\n q-\u003eclasses[i].qdisc = queues[i];\n if (q-\u003eclasses[i].qdisc != \u0026noop_qdisc)\n qdisc_hash_add(q-\u003eclasses[i].qdisc, true);\n }\n\n // (3) the qdisc is unlocked, now dequeue can be called in parallel\n // to the rest of .change handler\n sch_tree_unlock(sch);\n\n ets_offload_change(sch);\n for (i = q-\u003enbands; i \u003c oldbands; i++) {\n\t // (4) we\u0027re reducing the refcount for our class\u0027s qdisc and\n\t // freeing it\n qdisc_put(q-\u003eclasses[i].qdisc);\n\t // (5) If we call .dequeue between (4) and (5), we will have\n\t // a strong UAF and we can control RIP\n q-\u003eclasses[i].qdisc = NULL;\n WRITE_ONCE(q-\u003eclasses[i].quantum, 0);\n q-\u003eclasses[i].deficit = 0;\n gnet_stats_basic_sync_init(\u0026q-\u003eclasses[i].bstats);\n memset(\u0026q-\u003eclasses[i].qstats, 0, sizeof(q-\u003eclasses[i].qstats));\n }\n return 0;\n}\n\nComment:\nThis happens because some of the classes have their qdiscs assigned to\nNULL, but remain in the active list. This commit fixes this issue by always\nremoving the class from the active list before deleting and freeing its\nassociated qdisc\n\nReproducer Steps\n(trimmed version of what was sent by zdi-disclosures@trendmicro.com)\n\n```\nDEV=\"${DEV:-lo}\"\nROOT_HANDLE=\"${ROOT_HANDLE:-1:}\"\nBAND2_HANDLE=\"${BAND2_HANDLE:-20:}\" # child under 1:2\nPING_BYTES=\"${PING_BYTES:-48}\"\nPING_COUNT=\"${PING_COUNT:-200000}\"\nPING_DST=\"${PING_DST:-127.0.0.1}\"\n\nSLOW_TBF_RATE=\"${SLOW_TBF_RATE:-8bit}\"\nSLOW_TBF_BURST=\"${SLOW_TBF_BURST:-100b}\"\nSLOW_TBF_LAT=\"${SLOW_TBF_LAT:-1s}\"\n\ncleanup() {\n tc qdisc del dev \"$DEV\" root 2\u003e/dev/null\n}\ntrap cleanup EXIT\n\nip link set \"$DEV\" up\n\ntc qdisc del dev \"$DEV\" root 2\u003e/dev/null || true\n\ntc qdisc add dev \"$DEV\" root handle \"$ROOT_HANDLE\" ets bands 2 strict 2\n\ntc qdisc add dev \"$DEV\" parent 1:2 handle \"$BAND2_HANDLE\" \\\n tbf rate \"$SLOW_TBF_RATE\" burst \"$SLOW_TBF_BURST\" latency \"$SLOW_TBF_LAT\"\n\ntc filter add dev \"$DEV\" parent 1: protocol all prio 1 u32 match u32 0 0 flowid 1:2\ntc -s qdisc ls dev $DEV\n\nping -I \"$DEV\" -f -c \"$PING_COUNT\" -s \"$PING_BYTES\" -W 0.001 \"$PING_DST\" \\\n \u003e/dev/null 2\u003e\u00261 \u0026\ntc qdisc change dev \"$DEV\" root handle \"$ROOT_HANDLE\" ets bands 2 strict 0\ntc qdisc change dev \"$DEV\" root handle \"$ROOT_HANDLE\" ets bands 2 strict 2\ntc -s qdisc ls dev $DEV\ntc qdisc del dev \"$DEV\" parent \n---truncated---",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A race between ets_qdisc_change() and ets_qdisc_dequeue() can leave an ETS class on the active list while its associated struct Qdisc is being freed, leading to a use-after-free in the dequeue path. The issue is triggered via local traffic-control reconfiguration (tc/netlink) combined with concurrent packet transmission, typically within user/network namespaces.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-71066"
},
{
"category": "external",
"summary": "RHBZ#2429036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429036"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-71066",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-71066"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-71066",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-71066"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026011323-CVE-2025-71066-f1fa@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026011323-CVE-2025-71066-f1fa@gregkh/T"
}
],
"release_date": "2026-01-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T04:47:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change"
},
{
"cve": "CVE-2026-46259",
"cwe": {
"id": "CWE-820",
"name": "Missing Synchronization"
},
"discovery_date": "2026-06-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484477"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s procfs component. When reading /proc/[pid]/stat, the do_task_stat() function accesses task-\u003ereal_parent without proper Read-Copy-Update (RCU) protection. This missing protection creates a race condition, which can lead to a Use-After-Free (UAF) vulnerability. A local attacker could potentially exploit this to cause a system crash or achieve other unspecified impacts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46259"
},
{
"category": "external",
"summary": "RHBZ#2484477",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484477"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46259",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46259"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46259",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46259"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060336-CVE-2026-46259-6c94@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026060336-CVE-2026-46259-6c94@gregkh/T"
}
],
"release_date": "2026-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T04:47:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat()"
},
{
"cve": "CVE-2026-64534",
"cwe": {
"id": "CWE-911",
"name": "Improper Update of Reference Count"
},
"discovery_date": "2026-07-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507399"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s NVMe over TCP target (nvmet-tcp) implementation. When a data digest mismatch is detected, nvmet_req_uninit() is called unconditionally, but if the command was already in the INIT_FAILED state, the matching percpu_ref_tryget_live() was never performed. The resulting percpu_ref_put() underflows the reference counter, which can lead to premature freeing of the referenced object (use-after-free) and a permanent workqueue deadlock. A remote attacker with access to the NVMe/TCP target can exploit this by sending a packet with an invalid data digest to crash the target (Denial of Service), with potential for memory corruption through the refcount underflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-64534"
},
{
"category": "external",
"summary": "RHBZ#2507399",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507399"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-64534",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64534"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64534",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64534"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026072734-CVE-2026-64534-434b@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026072734-CVE-2026-64534-434b@gregkh/T"
}
],
"release_date": "2026-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T04:47:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
},
{
"category": "workaround",
"details": "If NVMe over TCP target functionality is not required, the vulnerable code path can be avoided by not loading or by blacklisting the nvmet-tcp kernel module. For systems where NVMe/TCP targets are needed, restrict access to trusted initiators via host NQN allowlists and network segmentation to reduce the attack surface.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path"
},
{
"cve": "CVE-2026-68155",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-08-10T12:29:03.366947+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2513295"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the libceph component of the Linux kernel. A remote attacker could send a specially crafted monitor map (monmap) that advertises zero monitors. This malformed monmap is incorrectly processed as valid, which can lead to a client crash when attempting to open a session. This vulnerability results in a Denial of Service (DoS) for the client.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-68155"
},
{
"category": "external",
"summary": "RHBZ#2513295",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513295"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-68155",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68155"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68155",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68155"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026081002-CVE-2026-68155-b80d@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026081002-CVE-2026-68155-b80d@gregkh/T"
}
],
"release_date": "2026-08-10T11:59:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T04:47:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps"
},
{
"cve": "CVE-2026-68156",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-08-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2513232"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `libceph` component of the Linux kernel. During an authorizer update, if the authorizer is rebuilt, a stale pointer to a freed memory region can be retained. A remote attacker could exploit this by triggering a specific network reconnection, leading to a use-after-free vulnerability. This memory corruption could result in a system crash or denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This use-after-free flaw in the Linux kernel\u0027s `libceph` module can be triggered during Ceph client reconnection. An attacker could exploit this by manipulating Ceph authentication, potentially leading to a system crash or privilege escalation. The impact is significant due to the kernel context, but requires specific Ceph client usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-68156"
},
{
"category": "external",
"summary": "RHBZ#2513232",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513232"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-68156",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68156"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68156",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68156"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026081003-CVE-2026-68156-72bf@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026081003-CVE-2026-68156-72bf@gregkh/T"
}
],
"release_date": "2026-08-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T04:47:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, prevent the `ceph` kernel module from loading if Ceph client functionality is not in use. Create a file `/etc/modprobe.d/ceph.conf` with `install ceph /bin/true`. If the module is currently loaded, unload it using `rmmod ceph`. A system reboot is required for the changes to take full effect and ensure the module is not reloaded. Unloading the `ceph` module will impact systems actively using Ceph client features.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: libceph: refresh auth-\u003eauthorizer_buf{,_len} after authorizer update"
},
{
"cve": "CVE-2026-68159",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-10T12:22:26.008867+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2513165"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libceph in the Linux kernel. A remote attacker, acting as a malicious monitor, could send a specially crafted OSDMap (Object Storage Device Map) with an overly long pg_temp or pg_upmap entry. This could lead to a stack out-of-bounds write, resulting in a kernel bug and potentially a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because a rogue or compromised Ceph monitor can induce stack corruption within the host operating system, potentially leading to privilege escalation or a kernel panic. Standard Red Hat Enterprise Linux installations do not load the Ceph network client drivers by default, significantly limiting ambient exposure. Systems are only vulnerable when configured to mount kernel CephFS filesystems or map RBD block storage devices across untrusted network boundaries.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-68159"
},
{
"category": "external",
"summary": "RHBZ#2513165",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513165"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-68159",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68159"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68159",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68159"
},
{
"category": "external",
"summary": "https://git.kernel.org/stable/c/9f00f9cf2be293efe899db67dc5272e3a9c62717",
"url": "https://git.kernel.org/stable/c/9f00f9cf2be293efe899db67dc5272e3a9c62717"
},
{
"category": "external",
"summary": "https://git.kernel.org/stable/c/e36663145abd7024f0281dfb22fdef65f185845b",
"url": "https://git.kernel.org/stable/c/e36663145abd7024f0281dfb22fdef65f185845b"
}
],
"release_date": "2026-08-10T11:59:25.697000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T04:47:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
},
{
"category": "workaround",
"details": "If the system does not require the `libceph` module for Ceph cluster connectivity, prevent the `ceph` kernel module from loading by blacklisting it. Create a file `/etc/modprobe.d/ceph.conf` with the content `blacklist ceph`. After creating the file, regenerate the initramfs using `dracut -f -v` and reboot the system for the changes to take effect. If `libceph` is in use, restrict network access to Ceph monitors to trusted hosts through firewall rules to reduce the attack surface.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap"
},
{
"cve": "CVE-2026-68476",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-08-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2516251"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IP Virtual Server (IPVS) module. When processing network packets, a buffer reallocation can leave an IP header pointer referencing freed memory. An attacker could exploit this use-after-free condition to cause a Denial of Service (DoS) by crashing the system or potentially corrupt system memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ipvs: reload ip header after head reallocation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated this vulnerability as Important rather than Moderate because improper memory handling during packet processing can lead to kernel memory corruption or an abrupt system crash. The issue specifically affects environments running IP Virtual Server (IPVS) functionality, which is not enabled or loaded by default across standard installations. Consequently, exposure is limited to hosts actively configured for IPVS packet forwarding or load-balancing clusters.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-68476"
},
{
"category": "external",
"summary": "RHBZ#2516251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-68476",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68476"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68476",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68476"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026081505-CVE-2026-68476-47ba@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026081505-CVE-2026-68476-47ba@gregkh/T"
}
],
"release_date": "2026-08-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T04:47:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: ipvs: reload ip header after head reallocation"
},
{
"cve": "CVE-2026-74641",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2521436"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Advanced Linux Sound Architecture (ALSA) usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping (mmap) fault offset. This allows read-write access to arbitrary kernel memory, potentially leading to a denial of service (kernel crash) or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ALSA: usx2y: bound the hwdep mmap fault offset",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "ALSA usx2y hwdep mmap fault handling can use an attacker controlled page offset without a bounds check and convert an address outside the shared buffer into a mapped struct page. A local process that can open the hwdep node for an attached US-X2Y device can choose the mmap offset and may obtain read-write access to kernel memory outside the intended object. The buf is not triggerable if no hardware that is being used by snd-usb-usx2y driver (that is Kernel module).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74641"
},
{
"category": "external",
"summary": "RHBZ#2521436",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521436"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74641",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74641"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74641",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74641"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026082223-CVE-2026-74641-92d7@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026082223-CVE-2026-74641-92d7@gregkh/T"
}
],
"release_date": "2026-08-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T04:47:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent module snd-usb-usx2y and ALSA (Advanced Linux Sound Architecture) from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: ALSA: usx2y: bound the hwdep mmap fault offset"
},
{
"cve": "CVE-2026-74669",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2521375"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IP Virtual Server (IPVS) component. When processing Internet Control Message Protocol (ICMP) errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet, leading to a stack out-of-bounds write. This vulnerability could result in a denial of service or potentially arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated with an Important severity because a remote attacker can cause kernel stack memory corruption by sending malicious network packets, which can lead to a denial of service or potential code execution. In standard Red Hat Enterprise Linux installations, the IP Virtual Server (IPVS) kernel module is not loaded by default, limiting risk to systems configured as load balancers. Exploitation requires the host to actively handle encapsulated network flows and process ICMP error messages for tunneled sessions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-74669"
},
{
"category": "external",
"summary": "RHBZ#2521375",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521375"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-74669",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-74669"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74669",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74669"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026082229-CVE-2026-74669-f574@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026082229-CVE-2026-74669-f574@gregkh/T"
}
],
"release_date": "2026-08-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T04:47:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent the `ip_vs` kernel module from loading. This can be achieved by creating a blacklist rule.\n1. Unload the module if currently loaded:\n `sudo modprobe -r ip_vs`\n2. Create a blacklist configuration file:\n `echo \"blacklist ip_vs\" | sudo tee /etc/modprobe.d/disable-ip_vs.conf`\n3. Rebuild the initial RAM disk to ensure the module is not loaded at boot:\n `sudo dracut -f`\nA system reboot is required for the changes to take full effect. Disabling this module will prevent the use of IP Virtual Server (IPVS) functionality.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors"
},
{
"cve": "CVE-2026-80714",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-08-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2525436"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IP Virtual Server (IPVS) component. When a synced connection is established, it can incorrectly inherit a \"one-packet\" flag from its destination. This misconfiguration causes the connection\u0027s expiry process to mishandle its cleanup, leaving behind stale memory references. This issue could potentially be exploited by an attacker to cause a denial of service (DoS) or lead to system instability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ipvs: do not propagate one-packet flag to synced conns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because an authenticated local user could exploit improper connection cleanup in the kernel to trigger memory corruption, potentially leading to a denial of service or local privilege escalation. On default Red Hat Enterprise Linux deployments, IP Virtual Server synchronization is not enabled unless the system is specifically configured as a load-balancing node or cluster proxy. Hosts that do not load the IPVS subsystem or participate in connection state replication are not exposed to this flaw during standard operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-80714"
},
{
"category": "external",
"summary": "RHBZ#2525436",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525436"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-80714",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-80714"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-80714",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80714"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026082809-CVE-2026-80714-799a@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026082809-CVE-2026-80714-799a@gregkh/T"
}
],
"release_date": "2026-08-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T04:47:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent the `ip_vs` kernel module from loading. This can be achieved by creating a blacklist rule. Note that this may impact systems utilizing IPVS for load balancing.\n\n1. Create a configuration file to blacklist the module:\n `echo \"blacklist ip_vs\" \u003e /etc/modprobe.d/disable-ip_vs.conf`\n\n2. Regenerate the initramfs to ensure the blacklist is applied at boot:\n `dracut -f -v`\n\n3. Reboot the system for the changes to take effect:\n `reboot`\n\nAlternatively, if the module is currently loaded, it can be unloaded (if no dependencies exist):\n`rmmod ip_vs`\nHowever, a system reboot is recommended to ensure the module is not loaded on subsequent boots.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: ipvs: do not propagate one-packet flag to synced conns"
},
{
"cve": "CVE-2026-89481",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-09-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2532184"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s NVMe (Non-Volatile Memory Express) over TCP (nvme-tcp) component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer (R2T) command for a read request. The host system, failing to properly validate the request direction, will then send the contents of its read destination buffer to the controller. This can lead to the disclosure of stale kernel memory data, potentially revealing sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: nvme-tcp: fix host memory disclosure on R2T for a read command",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because it allows a rogue or compromised network storage controller to leak host kernel memory over the network without requiring local privileges on the client. Red Hat Enterprise Linux systems are exposed only when acting as NVMe-oF TCP initiator clients that communicate with unverified or hostile storage targets. The attack surface is limited to environments actively using NVMe over TCP across untrusted network segments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89481"
},
{
"category": "external",
"summary": "RHBZ#2532184",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532184"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89481",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89481"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89481",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89481"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89481.mbox",
"url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89481.mbox"
}
],
"release_date": "2026-09-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T04:47:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
},
{
"category": "workaround",
"details": "Prevent the nvme-tcp kernel module from loading if NVMe over TCP storage is not required on the system.\n\n1. Add an entry to /etc/modprobe.d to prevent the module from loading:\n# echo \"install nvme-tcp /bin/true\" \u003e\u003e /etc/modprobe.d/disable-nvme-tcp.conf\n\n2. If the module is currently loaded and not in use by any storage target, unload it:\n# modprobe -r nvme-tcp\n\nCaveats:\nDisabling this module prevents the system from connecting to NVMe over TCP block storage devices.\n\nWarning:\nDo not attempt to unload this module if active NVMe over TCP storage is mounted or in use, as doing so will cause I/O failure and potential data loss. If the module cannot be cleanly unloaded, a system restart is required for the change to take full effect. Additionally, restrict NVMe-oF connections to verified, trusted storage targets over isolated or encrypted network fabrics.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: nvme-tcp: fix host memory disclosure on R2T for a read command"
},
{
"cve": "CVE-2026-98432",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-10-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2553390"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv4 networking subsystem. A race condition occurs during concurrent processing of retransmitted Transmission Control Protocol (TCP) connection requests or socket migrations, allowing socket options to be freed while still in use. A remote attacker could exploit this vulnerability by sending specially timed network requests, triggering a use-after-free condition. This could results in system crash leading to a Denial of Service (DoS), memory corruption, or remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Critical severity for Red Hat Enterprise Linux because it allows an unauthenticated remote attacker to cause kernel memory corruption or an immediate system crash over standard IPv4 TCP network traffic without requiring local privileges or user interaction. In default enterprise configurations across Red Hat environments, TCP services accept incoming connections without specialized tuning, making the concurrent connection handling paths inherently exposed to remote networks. Although reliably executing arbitrary code through this timing-sensitive use-after-free scenario requires precise heap control, the lack of network prerequisites and the potential for severe system instability elevate the impact above Important.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-98432"
},
{
"category": "external",
"summary": "RHBZ#2553390",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553390"
},
{
"category": "external",
"summary": "RHSB-2026-016",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-016"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-98432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-98432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-98432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98432"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98432.mbox",
"url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98432.mbox"
}
],
"release_date": "2026-10-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-04T04:47:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel\u0027s fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers\u0027 overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat\u0027s CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:94996"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.227.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.227.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.227.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.