Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-46243 (GCVE-0-2026-46243)
Vulnerability from cvelistv5 – Published: 2026-06-01 16:22 – Updated: 2026-08-07 12:04
VLAI
EPSS
VEX
Title
smb: client: reject userspace cifs.spnego descriptions
Summary
In the Linux kernel, the following vulnerability has been resolved:
smb: client: reject userspace cifs.spnego descriptions
cifs.spnego key descriptions contain authority-bearing fields such as
pid, uid, creduid, and upcall_target that cifs.upcall treats as
kernel-originating inputs. However, userspace can also create keys of
this type through request_key(2) or add_key(2), allowing those fields to
be supplied without CIFS origin.
Only accept cifs.spnego descriptions while CIFS is using its private
spnego_cred to request the key.
Severity
7.1 (High)
7.8 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
47 references
Impacted products
38 products
| Vendor | Product | Version | |
|---|---|---|---|
| Linux | Linux |
Affected:
f1d662a7d5e5322e583aad6b3cfec03d8f27b435 , < 7713bd320ed4fc3d08a227cd8e41242219a16981
(git)
Affected: f1d662a7d5e5322e583aad6b3cfec03d8f27b435 , < 9544559e59438a4b609b2fdfa0763d8360572824 (git) Affected: f1d662a7d5e5322e583aad6b3cfec03d8f27b435 , < cf20038657d6d4974349556a34e08fe0490bebbc (git) Affected: f1d662a7d5e5322e583aad6b3cfec03d8f27b435 , < 2035acfb17221729b1b8ac335e941868a04ca079 (git) Affected: f1d662a7d5e5322e583aad6b3cfec03d8f27b435 , < a3bbda6502a9398b816fa2e71c9a3f955f58013d (git) Affected: f1d662a7d5e5322e583aad6b3cfec03d8f27b435 , < 91f89c1d83e80417629791fcef6af8140d7d01c8 (git) Affected: f1d662a7d5e5322e583aad6b3cfec03d8f27b435 , < 0aece6685fc80a8de492688ca2315fb86ec379c7 (git) Affected: f1d662a7d5e5322e583aad6b3cfec03d8f27b435 , < 3da1fdf4efbc490041eb4f836bf596201203f8f2 (git) |
|
| Linux | Linux |
Affected:
2.6.24
Unaffected: 0 , < 2.6.24 (semver) Unaffected: 5.10.258 , ≤ 5.10.* (semver) Unaffected: 5.15.209 , ≤ 5.15.* (semver) Unaffected: 6.1.175 , ≤ 6.1.* (semver) Unaffected: 6.6.142 , ≤ 6.6.* (semver) Unaffected: 6.12.92 , ≤ 6.12.* (semver) Unaffected: 6.18.34 , ≤ 6.18.* (semver) Unaffected: 7.0.11 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix) |
|
| Red Hat | NVIDIA for RHEL 10 |
Unaffected:
0:6.12.0-212.9.el10nv , < *
(rpm)
Unaffected: 0:6.12.0-231.12.el10nv , < * (rpm) cpe:/a:redhat:enterprise_linux_nvidia:10::el10 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:6.12.0-211.20.1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:6.12.0-55.79.1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION |
Unaffected:
0:2.6.32-754.61.1.el6 , < *
(rpm)
cpe:/o:redhat:rhel_els:6 |
|
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:3.10.0-1160.155.1.rt56.1307.el7 , < *
(rpm)
cpe:/a:redhat:rhel_extras_rt_els:7 |
|
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:3.10.0-1160.153.1.el7 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:4.18.0-553.129.1.rt7.470.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::nfv |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:4.18.0-553.129.1.el8_10 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:4.18.0-305.194.1.el8_4 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:4.18.0-305.194.1.el8_4 , < *
(rpm)
cpe:/o:redhat:rhel_eus_long_life:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:4.18.0-372.196.1.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On |
Unaffected:
0:4.18.0-372.196.1.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_eus_long_life:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:4.18.0-477.147.1.el8_8 , < *
(rpm)
cpe:/o:redhat:rhel_tus:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:4.18.0-477.147.1.el8_8 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
cpe:/o:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:5.14.0-687.13.1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:5.14.0-284.176.1.el9_2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:5.14.0-284.176.1.rt14.461.el9_2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2::nfv |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
cpe:/o:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:5.14.0-427.132.1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
cpe:/o:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:5.14.0-570.123.1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
cpe:/o:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.12 |
Unaffected:
412.86.202606251120-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.12::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.13 |
Unaffected:
413.92.202607141229-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.13::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.14 |
Unaffected:
414.92.202606231112-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.14::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.15 |
Unaffected:
415.92.202606200237-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.15::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.16 |
Unaffected:
416.94.202607021016-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.16::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
417.94.202607240132-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
418.94.202606250458-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
4.19.9.6.202606302000-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
4.20.9.6.202607010620-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
4.21.9.6.202607011303-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-46243",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-01T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20 Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-02T03:56:00.563Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/manizada/CIFSwitch"
}
],
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2026-06-01T18:55:00.540Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2026/06/01/6"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_nvidia:10::el10"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "NVIDIA for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:6.12.0-212.9.el10nv",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "0:6.12.0-231.12.el10nv",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:6.12.0-211.20.1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "unaffected",
"packageName": "kpatch-patch",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:6.12.0-55.79.1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:6"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.32-754.61.1.el6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_extras_rt_els:7"
],
"defaultStatus": "affected",
"packageName": "kernel-rt",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.10.0-1160.155.1.rt56.1307.el7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.10.0-1160.153.1.el7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::nfv"
],
"defaultStatus": "affected",
"packageName": "kernel-rt",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-553.129.1.rt7.470.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-553.129.1.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "kpatch-patch",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-305.194.1.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_eus_long_life:8.4"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-305.194.1.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-372.196.1.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_eus_long_life:8.6"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-372.196.1.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-477.147.1.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-477.147.1.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8"
],
"defaultStatus": "unaffected",
"packageName": "kpatch-patch",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9",
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-687.13.1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "kpatch-patch",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-284.176.1.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::nfv"
],
"defaultStatus": "affected",
"packageName": "kernel-rt",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-284.176.1.rt14.461.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.2"
],
"defaultStatus": "unaffected",
"packageName": "kpatch-patch",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-427.132.1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.4"
],
"defaultStatus": "unaffected",
"packageName": "kpatch-patch",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-570.123.1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_eus:9.6"
],
"defaultStatus": "unaffected",
"packageName": "kpatch-patch",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.12::el8"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "412.86.202606251120-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "413.92.202607141229-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "414.92.202606231112-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "415.92.202606200237-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "416.94.202607021016-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "417.94.202607240132-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "418.94.202606250458-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.19.9.6.202606302000-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.20.9.6.202607010620-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.21.9.6.202607011303-0",
"versionType": "rpm"
}
]
}
],
"datePublic": "2026-05-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-825",
"description": "Expired Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-07T12:04:39.408Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"name": "RHBZ#2481486",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46243.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23395"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33486"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27719"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27729"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34048"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40021"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28962"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36620"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47727"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34815"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34757"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34788"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34764"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25908"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23329"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26515"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27735"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27708"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24381"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33225"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23258"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33220"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26535"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26570"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26563"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33219"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33221"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33222"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33223"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33224"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23259"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26462"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:23395: NVIDIA for RHEL 10"
},
{
"lang": "en",
"value": "RHSA-2026:33486: NVIDIA for RHEL 10"
},
{
"lang": "en",
"value": "RHSA-2026:27719: Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION), Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)"
},
{
"lang": "en",
"value": "RHSA-2026:27729: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:41236: Red Hat Enterprise Linux for Real Time (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:34048: Red Hat OpenShift Container Platform 4.12"
},
{
"lang": "en",
"value": "RHSA-2026:40021: Red Hat OpenShift Container Platform 4.13"
},
{
"lang": "en",
"value": "RHSA-2026:28887: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:28962: Red Hat OpenShift Container Platform 4.15"
},
{
"lang": "en",
"value": "RHSA-2026:36620: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:47727: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:34815: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:34757: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:34788: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:34764: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:25908: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:23329: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:26515: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:27735: Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux BaseOS E4S (v.9.4), Red Hat Enterprise Linux Real Time E4S (v.9.4), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:27708: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat Enterprise Linux Real Time EUS (v.9.6), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:24381: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:33225: Red Hat Enterprise Linux BaseOS (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:23258: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:33220: Red Hat Enterprise Linux BaseOS (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:26535: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:26570: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:26563: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:33219: Red Hat Enterprise Linux BaseOS E4S (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:33221: Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:33222: Red Hat Enterprise Linux BaseOS E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:33223: Red Hat Enterprise Linux BaseOS EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:33224: Red Hat Enterprise Linux BaseOS (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:23259: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:26462: Red Hat Enterprise Linux Real Time E4S (v.9.2), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-26T15:07:49.955Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-26T00:00:00.000Z",
"value": "Made public."
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"workarounds": [
{
"lang": "en",
"value": "See the security bulletin for a detailed mitigation procedure."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"fs/smb/client/cifs_spnego.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "7713bd320ed4fc3d08a227cd8e41242219a16981",
"status": "affected",
"version": "f1d662a7d5e5322e583aad6b3cfec03d8f27b435",
"versionType": "git"
},
{
"lessThan": "9544559e59438a4b609b2fdfa0763d8360572824",
"status": "affected",
"version": "f1d662a7d5e5322e583aad6b3cfec03d8f27b435",
"versionType": "git"
},
{
"lessThan": "cf20038657d6d4974349556a34e08fe0490bebbc",
"status": "affected",
"version": "f1d662a7d5e5322e583aad6b3cfec03d8f27b435",
"versionType": "git"
},
{
"lessThan": "2035acfb17221729b1b8ac335e941868a04ca079",
"status": "affected",
"version": "f1d662a7d5e5322e583aad6b3cfec03d8f27b435",
"versionType": "git"
},
{
"lessThan": "a3bbda6502a9398b816fa2e71c9a3f955f58013d",
"status": "affected",
"version": "f1d662a7d5e5322e583aad6b3cfec03d8f27b435",
"versionType": "git"
},
{
"lessThan": "91f89c1d83e80417629791fcef6af8140d7d01c8",
"status": "affected",
"version": "f1d662a7d5e5322e583aad6b3cfec03d8f27b435",
"versionType": "git"
},
{
"lessThan": "0aece6685fc80a8de492688ca2315fb86ec379c7",
"status": "affected",
"version": "f1d662a7d5e5322e583aad6b3cfec03d8f27b435",
"versionType": "git"
},
{
"lessThan": "3da1fdf4efbc490041eb4f836bf596201203f8f2",
"status": "affected",
"version": "f1d662a7d5e5322e583aad6b3cfec03d8f27b435",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"fs/smb/client/cifs_spnego.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "2.6.24"
},
{
"lessThan": "2.6.24",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"version": "5.10.258",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.209",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.175",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.142",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.92",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.34",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.0.*",
"status": "unaffected",
"version": "7.0.11",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.1",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.258",
"versionStartIncluding": "2.6.24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.209",
"versionStartIncluding": "2.6.24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.175",
"versionStartIncluding": "2.6.24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.142",
"versionStartIncluding": "2.6.24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.12.92",
"versionStartIncluding": "2.6.24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.18.34",
"versionStartIncluding": "2.6.24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.0.11",
"versionStartIncluding": "2.6.24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.1",
"versionStartIncluding": "2.6.24",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject userspace cifs.spnego descriptions\n\ncifs.spnego key descriptions contain authority-bearing fields such as\npid, uid, creduid, and upcall_target that cifs.upcall treats as\nkernel-originating inputs. However, userspace can also create keys of\nthis type through request_key(2) or add_key(2), allowing those fields to\nbe supplied without CIFS origin.\n\nOnly accept cifs.spnego descriptions while CIFS is using its private\nspnego_cred to request the key."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"scenarios": [
{
"lang": "en",
"value": "AV:L - Exploitation requires local `request_key(2)` or `add_key(2)` from an unprivileged process; the flaw is missing origin validation in the keyring path, not remote SMB/CIFS protocol input.\nAC:L - On typical affected systems (CIFS module with upcall, cifs-utils request-key rule, unprivileged user/mount namespaces), the attacker fully controls the forged description, target pid, and namespace layout for a reliable root upcall chain.\nPR:L - Any local unprivileged user account can invoke the key syscalls; user/mount namespaces are part of the standard exploit setup and map to basic local user capability, not root-only access.\nUI:N - No victim action such as mounting a Kerberos CIFS share is required; the attacker forges the key request directly without depending on another user\u2019s mount or session.\nS:U - Successful exploitation elevates privileges within the same host/kernel security domain (local root) and does not cross a VM/hypervisor or hardware isolation boundary by itself.\nC:H - The attack chain yields root-equivalent access in the root upcall helper, enabling arbitrary read of host data (full confidentiality compromise of the system).\nI:H - Malicious NSS modules run as root inside `cifs.upcall`, giving arbitrary code execution and full integrity compromise of the host, not merely limited data modification.\nA:N - The kernel bug is a trust-boundary failure without memory corruption or guaranteed kernel panic; primary impact is privilege escalation rather than kernel crash or sustained denial of service."
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T12:30:42.627Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/7713bd320ed4fc3d08a227cd8e41242219a16981"
},
{
"url": "https://git.kernel.org/stable/c/9544559e59438a4b609b2fdfa0763d8360572824"
},
{
"url": "https://git.kernel.org/stable/c/cf20038657d6d4974349556a34e08fe0490bebbc"
},
{
"url": "https://git.kernel.org/stable/c/2035acfb17221729b1b8ac335e941868a04ca079"
},
{
"url": "https://git.kernel.org/stable/c/a3bbda6502a9398b816fa2e71c9a3f955f58013d"
},
{
"url": "https://git.kernel.org/stable/c/91f89c1d83e80417629791fcef6af8140d7d01c8"
},
{
"url": "https://git.kernel.org/stable/c/0aece6685fc80a8de492688ca2315fb86ec379c7"
},
{
"url": "https://git.kernel.org/stable/c/3da1fdf4efbc490041eb4f836bf596201203f8f2"
}
],
"title": "smb: client: reject userspace cifs.spnego descriptions",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2026-46243",
"datePublished": "2026-06-01T16:22:29.211Z",
"dateReserved": "2026-05-13T15:03:33.107Z",
"dateUpdated": "2026-08-07T12:04:39.408Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-46243",
"date": "2026-08-12",
"epss": "0.00377",
"percentile": "0.30638"
},
"microsoft_vex": {
"current_release_date": "2026-06-28T01:53:04.000Z",
"cve": "CVE-2026-46243",
"id": "msrc_CVE-2026-46243",
"initial_release_date": "2026-06-02T00:00:00.000Z",
"product_status:fixed": "1",
"product_status:known_affected": "2",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "smb: client: reject userspace cifs.spnego descriptions",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46243.json",
"version": "4"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-46243\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-06-01T17:17:34.173\",\"lastModified\":\"2026-08-07T12:17:58.763\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nsmb: client: reject userspace cifs.spnego descriptions\\n\\ncifs.spnego key descriptions contain authority-bearing fields such as\\npid, uid, creduid, and upcall_target that cifs.upcall treats as\\nkernel-originating inputs. However, userspace can also create keys of\\nthis type through request_key(2) or add_key(2), allowing those fields to\\nbe supplied without CIFS origin.\\n\\nOnly accept cifs.spnego descriptions while CIFS is using its private\\nspnego_cred to request the key.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\\n\\nsmb: cliente: rechazar descripciones de cifs.spnego del espacio de usuario\\n\\nLas descripciones de claves de cifs.spnego contienen campos que confieren autoridad, como pid, uid, creduid y upcall_target, que cifs.upcall trata como entradas con origen en el kernel. Sin embargo, el espacio de usuario tambi\u00e9n puede crear claves de este tipo a trav\u00e9s de request_key(2) o add_key(2), permitiendo que esos campos sean proporcionados sin origen CIFS.\\n\\nSolo aceptar descripciones de cifs.spnego mientras CIFS est\u00e9 usando su spnego_cred privado para solicitar la clave.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/smb/client/cifs_spnego.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\",\"lessThan\":\"7713bd320ed4fc3d08a227cd8e41242219a16981\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\",\"lessThan\":\"9544559e59438a4b609b2fdfa0763d8360572824\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\",\"lessThan\":\"cf20038657d6d4974349556a34e08fe0490bebbc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\",\"lessThan\":\"2035acfb17221729b1b8ac335e941868a04ca079\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\",\"lessThan\":\"a3bbda6502a9398b816fa2e71c9a3f955f58013d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\",\"lessThan\":\"91f89c1d83e80417629791fcef6af8140d7d01c8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\",\"lessThan\":\"0aece6685fc80a8de492688ca2315fb86ec379c7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\",\"lessThan\":\"3da1fdf4efbc490041eb4f836bf596201203f8f2\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/smb/client/cifs_spnego.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.24\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.24\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.258\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.175\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.142\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.92\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.34\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.11\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"NVIDIA for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_nvidia:10::el10\"],\"versions\":[{\"version\":\"0:6.12.0-212.9.el10nv\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"0:6.12.0-231.12.el10nv\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:6.12.0-211.20.1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kpatch-patch\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:6.12.0-55.79.1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_els:6\"],\"versions\":[{\"version\":\"0:2.6.32-754.61.1.el6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel-rt\",\"cpes\":[\"cpe:/a:redhat:rhel_extras_rt_els:7\"],\"versions\":[{\"version\":\"0:3.10.0-1160.155.1.rt56.1307.el7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:3.10.0-1160.153.1.el7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel-rt\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::nfv\"],\"versions\":[{\"version\":\"0:4.18.0-553.129.1.rt7.470.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:4.18.0-553.129.1.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kpatch-patch\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.4\"],\"versions\":[{\"version\":\"0:4.18.0-305.194.1.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_eus_long_life:8.4\"],\"versions\":[{\"version\":\"0:4.18.0-305.194.1.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"0:4.18.0-372.196.1.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_eus_long_life:8.6\"],\"versions\":[{\"version\":\"0:4.18.0-372.196.1.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"0:4.18.0-477.147.1.el8_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"0:4.18.0-477.147.1.el8_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kpatch-patch\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\",\"cpe:/o:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:5.14.0-687.13.1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kpatch-patch\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"0:5.14.0-284.176.1.el9_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel-rt\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::nfv\"],\"versions\":[{\"version\":\"0:5.14.0-284.176.1.rt14.461.el9_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kpatch-patch\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:9.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:5.14.0-427.132.1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kpatch-patch\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:9.4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:5.14.0-570.123.1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kpatch-patch\",\"cpes\":[\"cpe:/o:redhat:rhel_eus:9.6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.12::el8\"],\"versions\":[{\"version\":\"412.86.202606251120-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.13::el9\"],\"versions\":[{\"version\":\"413.92.202607141229-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el9\"],\"versions\":[{\"version\":\"414.92.202606231112-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.15::el9\"],\"versions\":[{\"version\":\"415.92.202606200237-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el9\"],\"versions\":[{\"version\":\"416.94.202607021016-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"417.94.202607240132-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"418.94.202606250458-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"4.19.9.6.202606302000-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"4.20.9.6.202607010620-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"4.21.9.6.202607011303-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-01T00:00:00+00:00\",\"id\":\"CVE-2026-46243\",\"options\":[{\"exploitation\":\"poc\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-825\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.24.1\",\"versionEndExcluding\":\"5.10.258\",\"matchCriteriaId\":\"3E43C0F1-F2DB-4268-8DB8-64602E14F05D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.209\",\"matchCriteriaId\":\"919C10A9-7951-4A74-BADD-C135A0A8D8B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.175\",\"matchCriteriaId\":\"92385813-D91D-480D-83A1-F423D2CBB2BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.142\",\"matchCriteriaId\":\"FBFF77B0-526A-4AF1-84D0-ED7187624A67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.92\",\"matchCriteriaId\":\"9CB90BD9-95B7-4D7F-9F17-4ECE6CFB66C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.34\",\"matchCriteriaId\":\"A4B1EF6D-18D7-4838-BC37-7499D5DCC3C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.11\",\"matchCriteriaId\":\"0520D091-FC52-4A50-AF07-70AE7D08B750\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.6.24:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F3E61F3-1CF1-4176-94CD-89A408BCFC96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF6588E7-F4FA-40F5-8945-FC7B6094376E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE87E13E-ACF7-4F74-8938-729F3B0D694C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4965A12-1BBA-4494-A5C1-43E0C0F48C14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.6.24:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7A18909-B468-4A5C-8DCC-2690F1F1D6C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.6.24:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"AEFCCCBD-B3EA-4A78-BEF9-6BD4793AAE10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.6.24:rc8:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8AF0C46-6BF2-46A3-8AD8-1E521E736169\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1EF7059-E670-45F4-B422-54C40FA86390\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D38F0BF-A728-4133-A358-D44A2F7EE6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC732D08-5F7B-46D9-B154-E60C7F4F0A97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5910A9D-F60A-409A-B486-FE66BFEBA9B9\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0aece6685fc80a8de492688ca2315fb86ec379c7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2035acfb17221729b1b8ac335e941868a04ca079\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3da1fdf4efbc490041eb4f836bf596201203f8f2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7713bd320ed4fc3d08a227cd8e41242219a16981\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/91f89c1d83e80417629791fcef6af8140d7d01c8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9544559e59438a4b609b2fdfa0763d8360572824\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a3bbda6502a9398b816fa2e71c9a3f955f58013d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cf20038657d6d4974349556a34e08fe0490bebbc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/06/01/6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23258\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23259\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23329\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23395\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24381\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25908\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26462\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26515\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26535\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26563\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26570\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27708\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27719\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27729\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27735\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28887\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28962\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33219\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33220\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33221\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33222\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33223\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33224\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33225\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33486\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34048\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34757\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34764\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34788\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34815\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36620\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40021\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41236\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47727\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-46243\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2481486\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://github.com/manizada/CIFSwitch\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46243.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-06T14:57:54+00:00",
"cve": "CVE-2026-46243",
"id": "CVE-2026-46243",
"initial_release_date": "2026-05-26T00:00:00+00:00",
"product_status:fixed": "2455",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46243.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-08-10T16:31:16Z",
"cve": "CVE-2026-46243",
"id": "CVE-2026-46243",
"initial_release_date": "2026-06-02T01:37:14Z",
"product_status:first_fixed": "315",
"product_status:known_affected": "451",
"product_status:known_not_affected": "4",
"product_status:recommended": "794",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-46243",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46243.json",
"version": "35"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.openwall.com/lists/oss-security/2026/06/01/6\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2026-06-01T18:55:00.540Z\"}}, {\"title\": \"kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:enterprise_linux_nvidia:10::el10\"], \"vendor\": \"Red Hat\", \"product\": \"NVIDIA for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:6.12.0-212.9.el10nv\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"0:6.12.0-231.12.el10nv\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:6.12.0-211.20.1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"kpatch-patch\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:6.12.0-55.79.1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.6.32-754.61.1.el6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_extras_rt_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.10.0-1160.155.1.rt56.1307.el7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel-rt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.10.0-1160.153.1.el7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::nfv\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.18.0-553.129.1.rt7.470.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel-rt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.18.0-553.129.1.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"kpatch-patch\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.18.0-305.194.1.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus_long_life:8.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.18.0-305.194.1.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.18.0-372.196.1.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus_long_life:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.18.0-372.196.1.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_tus:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.18.0-477.147.1.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.18.0-477.147.1.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"packageName\": \"kpatch-patch\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\", \"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.14.0-687.13.1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"kpatch-patch\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.14.0-284.176.1.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::nfv\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.14.0-284.176.1.rt14.461.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel-rt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"packageName\": \"kpatch-patch\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.14.0-427.132.1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"packageName\": \"kpatch-patch\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.14.0-570.123.1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"kernel\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"packageName\": \"kpatch-patch\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"412.86.202606251120-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"413.92.202607141229-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"414.92.202606231112-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"415.92.202606200237-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"416.94.202607021016-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"417.94.202607240132-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"418.94.202606250458-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.19.9.6.202606302000-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.20.9.6.202607010620-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.21.9.6.202607011303-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-26T15:07:49.955Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-05-26T00:00:00.000Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:23395: NVIDIA for RHEL 10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33486: NVIDIA for RHEL 10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27719: Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION), Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27729: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41236: Red Hat Enterprise Linux for Real Time (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34048: Red Hat OpenShift Container Platform 4.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40021: Red Hat OpenShift Container Platform 4.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28887: Red Hat OpenShift Container Platform 4.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28962: Red Hat OpenShift Container Platform 4.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36620: Red Hat OpenShift Container Platform 4.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47727: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34815: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34757: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34788: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34764: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25908: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23329: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26515: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27735: Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux BaseOS E4S (v.9.4), Red Hat Enterprise Linux Real Time E4S (v.9.4), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27708: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat Enterprise Linux Real Time EUS (v.9.6), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24381: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33225: Red Hat Enterprise Linux BaseOS (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23258: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33220: Red Hat Enterprise Linux BaseOS (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26535: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26570: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26563: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33219: Red Hat Enterprise Linux BaseOS E4S (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33221: Red Hat Enterprise Linux BaseOS E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33222: Red Hat Enterprise Linux BaseOS E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33223: Red Hat Enterprise Linux BaseOS EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33224: Red Hat Enterprise Linux BaseOS (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23259: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26462: Red Hat Enterprise Linux Real Time E4S (v.9.2), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-05-26T00:00:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-46243\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2481486\", \"name\": \"RHBZ#2481486\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46243.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23395\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33486\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27719\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27729\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41236\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34048\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40021\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28887\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28962\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36620\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47727\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34815\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34757\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34788\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34764\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25908\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23329\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26515\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27735\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27708\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24381\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33225\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23258\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33220\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26535\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26570\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26563\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33219\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33221\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33222\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33223\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33224\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23259\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26462\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"See the security bulletin for a detailed mitigation procedure.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-825\", \"description\": \"Expired Pointer Dereference\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-07T12:04:39.408Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-46243\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-01T17:52:03.133770Z\"}}}], \"references\": [{\"url\": \"https://github.com/manizada/CIFSwitch\", \"tags\": [\"exploit\"]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-20\", \"description\": \"CWE-20 Improper Input Validation\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-01T17:50:56.636Z\"}}], \"cna\": {\"title\": \"smb: client: reject userspace cifs.spnego descriptions\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.1, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:L - Exploitation requires local `request_key(2)` or `add_key(2)` from an unprivileged process; the flaw is missing origin validation in the keyring path, not remote SMB/CIFS protocol input.\\nAC:L - On typical affected systems (CIFS module with upcall, cifs-utils request-key rule, unprivileged user/mount namespaces), the attacker fully controls the forged description, target pid, and namespace layout for a reliable root upcall chain.\\nPR:L - Any local unprivileged user account can invoke the key syscalls; user/mount namespaces are part of the standard exploit setup and map to basic local user capability, not root-only access.\\nUI:N - No victim action such as mounting a Kerberos CIFS share is required; the attacker forges the key request directly without depending on another user\\u2019s mount or session.\\nS:U - Successful exploitation elevates privileges within the same host/kernel security domain (local root) and does not cross a VM/hypervisor or hardware isolation boundary by itself.\\nC:H - The attack chain yields root-equivalent access in the root upcall helper, enabling arbitrary read of host data (full confidentiality compromise of the system).\\nI:H - Malicious NSS modules run as root inside `cifs.upcall`, giving arbitrary code execution and full integrity compromise of the host, not merely limited data modification.\\nA:N - The kernel bug is a trust-boundary failure without memory corruption or guaranteed kernel panic; primary impact is privilege escalation rather than kernel crash or sustained denial of service.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\", \"lessThan\": \"7713bd320ed4fc3d08a227cd8e41242219a16981\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\", \"lessThan\": \"9544559e59438a4b609b2fdfa0763d8360572824\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\", \"lessThan\": \"cf20038657d6d4974349556a34e08fe0490bebbc\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\", \"lessThan\": \"2035acfb17221729b1b8ac335e941868a04ca079\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\", \"lessThan\": \"a3bbda6502a9398b816fa2e71c9a3f955f58013d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\", \"lessThan\": \"91f89c1d83e80417629791fcef6af8140d7d01c8\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\", \"lessThan\": \"0aece6685fc80a8de492688ca2315fb86ec379c7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f1d662a7d5e5322e583aad6b3cfec03d8f27b435\", \"lessThan\": \"3da1fdf4efbc490041eb4f836bf596201203f8f2\", \"versionType\": \"git\"}], \"programFiles\": [\"fs/smb/client/cifs_spnego.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.24\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.24\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.10.258\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.209\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.175\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.142\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12.92\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.12.*\"}, {\"status\": \"unaffected\", \"version\": \"6.18.34\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.18.*\"}, {\"status\": \"unaffected\", \"version\": \"7.0.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.0.*\"}, {\"status\": \"unaffected\", \"version\": \"7.1\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/smb/client/cifs_spnego.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/7713bd320ed4fc3d08a227cd8e41242219a16981\"}, {\"url\": \"https://git.kernel.org/stable/c/9544559e59438a4b609b2fdfa0763d8360572824\"}, {\"url\": \"https://git.kernel.org/stable/c/cf20038657d6d4974349556a34e08fe0490bebbc\"}, {\"url\": \"https://git.kernel.org/stable/c/2035acfb17221729b1b8ac335e941868a04ca079\"}, {\"url\": \"https://git.kernel.org/stable/c/a3bbda6502a9398b816fa2e71c9a3f955f58013d\"}, {\"url\": \"https://git.kernel.org/stable/c/91f89c1d83e80417629791fcef6af8140d7d01c8\"}, {\"url\": \"https://git.kernel.org/stable/c/0aece6685fc80a8de492688ca2315fb86ec379c7\"}, {\"url\": \"https://git.kernel.org/stable/c/3da1fdf4efbc490041eb4f836bf596201203f8f2\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nsmb: client: reject userspace cifs.spnego descriptions\\n\\ncifs.spnego key descriptions contain authority-bearing fields such as\\npid, uid, creduid, and upcall_target that cifs.upcall treats as\\nkernel-originating inputs. However, userspace can also create keys of\\nthis type through request_key(2) or add_key(2), allowing those fields to\\nbe supplied without CIFS origin.\\n\\nOnly accept cifs.spnego descriptions while CIFS is using its private\\nspnego_cred to request the key.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.258\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.209\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.175\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.142\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12.92\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.18.34\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.0.11\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.1\", \"versionStartIncluding\": \"2.6.24\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T12:30:42.627Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-46243\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-07T12:04:39.408Z\", \"dateReserved\": \"2026-05-13T15:03:33.107Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2026-06-01T16:22:29.211Z\", \"assignerShortName\": \"Linux\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:33486
Vulnerability from csaf_redhat - Published: 2026-06-30 11:30 - Updated: 2026-08-11 15:20Summary
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Severity
Critical
Notes
Topic: An update for kernel is now available for Red Hat Enterprise Linux for NVIDIA.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: A special build of the kernel packages for Red Hat Enterprise Linux for
NVIDIA.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
For detailed information on changes in this release, see the RHEL for NVIDIA Release Notes linked from the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Linux kernel's algif_aead cryptographic algorithm interface. An incorrect in-place operation causes source and destination data mappings to differ during cryptographic processing. A low-privileged local attacker can exploit this flaw to corrupt the contents of sensitive system files and escalate to root privileges.
7.8 (High)
Affected products
Fixed
47 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
8.8 (High)
Affected products
Fixed
47 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The xfrm-ESP variant requires unprivileged user or network namespace creation, while the RxRPC variant depends on the rxrpc module being available on the target system.
7.8 (High)
Affected products
Fixed
47 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Linux kernel's networking (skbuff) component. When skb_try_coalesce() attaches paged fragments, it can lose the SKBFL_SHARED_FRAG marker. This can lead to the Encapsulating Security Payload (ESP) input decrypting data in place over page-cache backed fragments, potentially resulting in data corruption.
7.0 (High)
Affected products
Fixed
47 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
47 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.
7.8 (High)
Affected products
Fixed
47 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A vulnerability was found in the Linux kernel that allows an unprivileged local user to read sensitive files normally restricted to the root user. The flaw occurs during process exit, where a brief window allows an attacker to intercept file access from a privileged process before it fully terminates. Successful exploitation may lead to the disclosure of sensitive data such as SSH host private keys or /etc/shadow contents.
7.8 (High)
Affected products
Fixed
47 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
83 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for kernel is now available for Red Hat Enterprise Linux for NVIDIA.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "A special build of the kernel packages for Red Hat Enterprise Linux for\nNVIDIA.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nFor detailed information on changes in this release, see the RHEL for NVIDIA Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:33486",
"url": "https://access.redhat.com/errata/RHSA-2026:33486"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_for_nvidia/",
"url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_for_nvidia/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2460538",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460538"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "2467771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467771"
},
{
"category": "external",
"summary": "2477015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
},
{
"category": "external",
"summary": "2477802",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477802"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "VOYAGER-10",
"url": "https://issues.redhat.com/browse/VOYAGER-10"
},
{
"category": "external",
"summary": "VOYAGER-1034",
"url": "https://issues.redhat.com/browse/VOYAGER-1034"
},
{
"category": "external",
"summary": "VOYAGER-222",
"url": "https://issues.redhat.com/browse/VOYAGER-222"
},
{
"category": "external",
"summary": "VOYAGER-223",
"url": "https://issues.redhat.com/browse/VOYAGER-223"
},
{
"category": "external",
"summary": "VOYAGER-224",
"url": "https://issues.redhat.com/browse/VOYAGER-224"
},
{
"category": "external",
"summary": "VOYAGER-238",
"url": "https://issues.redhat.com/browse/VOYAGER-238"
},
{
"category": "external",
"summary": "VOYAGER-239",
"url": "https://issues.redhat.com/browse/VOYAGER-239"
},
{
"category": "external",
"summary": "VOYAGER-240",
"url": "https://issues.redhat.com/browse/VOYAGER-240"
},
{
"category": "external",
"summary": "VOYAGER-256",
"url": "https://issues.redhat.com/browse/VOYAGER-256"
},
{
"category": "external",
"summary": "VOYAGER-281",
"url": "https://issues.redhat.com/browse/VOYAGER-281"
},
{
"category": "external",
"summary": "VOYAGER-286",
"url": "https://issues.redhat.com/browse/VOYAGER-286"
},
{
"category": "external",
"summary": "VOYAGER-418",
"url": "https://issues.redhat.com/browse/VOYAGER-418"
},
{
"category": "external",
"summary": "VOYAGER-419",
"url": "https://issues.redhat.com/browse/VOYAGER-419"
},
{
"category": "external",
"summary": "VOYAGER-488",
"url": "https://issues.redhat.com/browse/VOYAGER-488"
},
{
"category": "external",
"summary": "VOYAGER-490",
"url": "https://issues.redhat.com/browse/VOYAGER-490"
},
{
"category": "external",
"summary": "VOYAGER-6",
"url": "https://issues.redhat.com/browse/VOYAGER-6"
},
{
"category": "external",
"summary": "VOYAGER-72",
"url": "https://issues.redhat.com/browse/VOYAGER-72"
},
{
"category": "external",
"summary": "VOYAGER-73",
"url": "https://issues.redhat.com/browse/VOYAGER-73"
},
{
"category": "external",
"summary": "VOYAGER-732",
"url": "https://issues.redhat.com/browse/VOYAGER-732"
},
{
"category": "external",
"summary": "VOYAGER-74",
"url": "https://issues.redhat.com/browse/VOYAGER-74"
},
{
"category": "external",
"summary": "VOYAGER-75",
"url": "https://issues.redhat.com/browse/VOYAGER-75"
},
{
"category": "external",
"summary": "VOYAGER-82",
"url": "https://issues.redhat.com/browse/VOYAGER-82"
},
{
"category": "external",
"summary": "VOYAGER-83",
"url": "https://issues.redhat.com/browse/VOYAGER-83"
},
{
"category": "external",
"summary": "VOYAGER-89",
"url": "https://issues.redhat.com/browse/VOYAGER-89"
},
{
"category": "external",
"summary": "VOYAGER-93",
"url": "https://issues.redhat.com/browse/VOYAGER-93"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33486.json"
}
],
"title": "Red Hat Security Advisory: kernel security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2026-08-11T15:20:50+00:00",
"generator": {
"date": "2026-08-11T15:20:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:33486",
"initial_release_date": "2026-06-30T11:30:57+00:00",
"revision_history": [
{
"date": "2026-06-30T11:30:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-30T11:30:57+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T15:20:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "NVIDIA for RHEL 10",
"product": {
"name": "NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux_nvidia:10::el10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux for NVIDIA"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:6.12.0-231.12.el10nv.src",
"product": {
"name": "kernel-0:6.12.0-231.12.el10nv.src",
"product_id": "kernel-0:6.12.0-231.12.el10nv.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@6.12.0-231.12.el10nv?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-64k@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-64k-core@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-64k-debug@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-64k-debug-core@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-64k-debug-modules@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-64k-debug-modules-core@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-64k-debug-modules-extra@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-64k-modules@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-64k-modules-core@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-64k-modules-extra@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-core@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-core@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel-matched@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-modules@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-modules-core@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-modules-extra@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel-matched@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-modules@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-modules-core@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-modules-extra@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-modules-extra-matched@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-libs@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-uki-virt@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-uki-virt-addons@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "perf-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "perf-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "perf-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-perf@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rtla-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "rtla-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "rtla-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rtla@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rv-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "rv-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "rv-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rv@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-64k-debug-debuginfo@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-64k-debuginfo@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-aarch64@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-debuginfo@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libperf-debuginfo@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-perf-debuginfo@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rtla-debuginfo@6.12.0-231.12.el10nv?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product": {
"name": "rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_id": "rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rv-debuginfo@6.12.0-231.12.el10nv?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"product": {
"name": "kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"product_id": "kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-abi-stablelists@6.12.0-231.12.el10nv?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"product": {
"name": "kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"product_id": "kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-doc@6.12.0-231.12.el10nv?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:6.12.0-231.12.el10nv.src as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src"
},
"product_reference": "kernel-0:6.12.0-231.12.el10nv.src",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-64k-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch"
},
"product_reference": "kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:6.12.0-231.12.el10nv.noarch as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch"
},
"product_reference": "kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "perf-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rtla-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "rtla-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rv-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "rv-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10",
"product_id": "10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
},
"product_reference": "rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"relates_to_product_reference": "10Base-RHEL-Nvidia"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-31431",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2026-04-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460538"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s algif_aead cryptographic algorithm interface. An incorrect in-place operation causes source and destination data mappings to differ during cryptographic processing. A low-privileged local attacker can exploit this flaw to corrupt the contents of sensitive system files and escalate to root privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: crypto: algif_aead - Revert to operating out-of-place",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s cryptographic interface to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-31431"
},
{
"category": "external",
"summary": "RHBZ#2460538",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460538"
},
{
"category": "external",
"summary": "RHSB-2026-002",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-002"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-31431",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31431"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-31431",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31431"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/7141989",
"url": "https://access.redhat.com/articles/7141989"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/7141931",
"url": "https://access.redhat.com/solutions/7141931"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/7141979",
"url": "https://access.redhat.com/solutions/7141979"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/7141990",
"url": "https://access.redhat.com/solutions/7141990"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/7141996",
"url": "https://access.redhat.com/solutions/7141996"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/7142032",
"url": "https://access.redhat.com/solutions/7142032"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/managing_monitoring_and_updating_the_kernel/configuring-kernel-command-line-parameters_managing-monitoring-and-updating-the-kernel",
"url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/managing_monitoring_and_updating_the_kernel/configuring-kernel-command-line-parameters_managing-monitoring-and-updating-the-kernel"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/T"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2026-04-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T11:30:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33486"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2026-05-01T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: crypto: algif_aead - Revert to operating out-of-place"
},
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T11:30:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33486"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
},
{
"cve": "CVE-2026-43284",
"cwe": {
"id": "CWE-123",
"name": "Write-what-where Condition"
},
"discovery_date": "2026-05-07T15:56:04.044000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467771"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The xfrm-ESP variant requires unprivileged user or network namespace creation, while the RxRPC variant depends on the rxrpc module being available on the target system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: \"Dirty Frag\" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s xfrm-ESP and RxRPC subsystems to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43284"
},
{
"category": "external",
"summary": "RHBZ#2467771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467771"
},
{
"category": "external",
"summary": "RHSB-2026-003",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43284",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43284"
},
{
"category": "external",
"summary": "https://dirtyfrag.io/",
"url": "https://dirtyfrag.io/"
}
],
"release_date": "2026-05-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T11:30:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33486"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: \"Dirty Frag\" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
},
{
"cve": "CVE-2026-43503",
"cwe": {
"id": "CWE-664",
"name": "Improper Control of a Resource Through its Lifetime"
},
"discovery_date": "2026-05-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480902"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s networking (skbuff) component. When skb_try_coalesce() attaches paged fragments, it can lose the SKBFL_SHARED_FRAG marker. This can lead to the Encapsulating Security Payload (ESP) input decrypting data in place over page-cache backed fragments, potentially resulting in data corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Impact is rated as Important because the privileged file-backed cache pages may be modified through a shared-page ownership bypass. Within Red Hat Enterprise Linux and Red Hat OpenShift Container Platform, this vulnerability was fixed at the same time as CVE-2026-46300.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43503"
},
{
"category": "external",
"summary": "RHBZ#2480902",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480902"
},
{
"category": "external",
"summary": "RHSB-2026-003",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43503",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43503"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox",
"url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox"
}
],
"release_date": "2026-05-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T11:30:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33486"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers"
},
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits, preventing privilege escalation. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to escalate privileges within the container, not on the host or across pods.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T11:30:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33486"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
},
{
"cve": "CVE-2026-46300",
"cwe": {
"id": "CWE-123",
"name": "Write-what-where Condition"
},
"discovery_date": "2026-05-13T13:28:21.270000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477015"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46300"
},
{
"category": "external",
"summary": "RHBZ#2477015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
},
{
"category": "external",
"summary": "RHSB-2026-003",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300"
}
],
"release_date": "2026-05-13T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T11:30:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33486"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
},
{
"cve": "CVE-2026-46333",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"discovery_date": "2026-05-15T08:27:21.590000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477802"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the Linux kernel that allows an unprivileged local user to read sensitive files normally restricted to the root user. The flaw occurs during process exit, where a brief window allows an attacker to intercept file access from a privileged process before it fully terminates. Successful exploitation may lead to the disclosure of sensitive data such as SSH host private keys or /etc/shadow contents.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Read root-owned files as an unprivileged user",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Linux kernel that allows a local unprivileged attacker to read root-owned files. The vulnerability arises from a race condition during process termination, enabling a brief window where sensitive data, such as SSH host private keys or /etc/shadow contents, can be disclosed. This could lead to unauthorized access to sensitive information on affected Red Hat Enterprise Linux systems.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits and prevents target binaries from opening privileged files, breaking the exploit chain entirely. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to access root-owned files already within the container, not host or cross-pod resources. In practice, containers rarely contain sensitive root-owned files that are not already accessible to the pod user through normal means.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46333"
},
{
"category": "external",
"summary": "RHBZ#2477802",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477802"
},
{
"category": "external",
"summary": "RHSB-2026-004",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-004"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46333",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46333"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46333",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46333"
},
{
"category": "external",
"summary": "https://blog.qualys.com/vulnerabilities-threat-research/2026/05/20/cve-2026-46333-local-root-privilege-escalation-and-credential-disclosure-in-the-linux-kernel-ptrace-path",
"url": "https://blog.qualys.com/vulnerabilities-threat-research/2026/05/20/cve-2026-46333-local-root-privilege-escalation-and-credential-disclosure-in-the-linux-kernel-ptrace-path"
},
{
"category": "external",
"summary": "https://github.com/torvalds/linux/commit/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a",
"url": "https://github.com/torvalds/linux/commit/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a"
}
],
"release_date": "2026-05-15T05:55:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T11:30:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33486"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-0:6.12.0-231.12.el10nv.src",
"10Base-RHEL-Nvidia:kernel-64k-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-doc-0:6.12.0-231.12.el10nv.noarch",
"10Base-RHEL-Nvidia:kernel-modules-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-core-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-modules-extra-matched-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-tools-libs-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:kernel-uki-virt-addons-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:libperf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:python3-perf-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rtla-debuginfo-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-0:6.12.0-231.12.el10nv.aarch64",
"10Base-RHEL-Nvidia:rv-debuginfo-0:6.12.0-231.12.el10nv.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: Read root-owned files as an unprivileged user"
}
]
}
RHSA-2026:34048
Vulnerability from csaf_redhat - Published: 2026-07-09 20:00 - Updated: 2026-08-06 18:51Summary
Red Hat Security Advisory: OpenShift Container Platform 4.12.93 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.12.93 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container
Platform 4.12.
Red Hat Product Security has rated this update as having a security impact
of Low. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.12.93. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHBA-2026:34046
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes
Security Fix(es):
None
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.12 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in BIND. A remote attacker could exploit this vulnerability by sending a maliciously crafted DNSSEC-validated zone to a BIND resolver. This could cause the resolver to consume excessive CPU resources, leading to a denial of service (DoS) for legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in the Linux kernel's traffic control packet editing (pedit) subsystem. In tcf_pedit_act(), the copy-on-write (COW) range for skb_ensure_writable() is computed once before iterating over edit keys, but the calculation does not account for runtime header offsets added by typed keys. This can leave part of the target write region without a proper copy-on-write, leading to an out-of-bounds write that corrupts page cache memory. A local attacker with the ability to configure traffic control rules could exploit this to escalate privileges or crash the system.
6.7 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
References
27 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.12.93 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container\nPlatform 4.12.\n\nRed Hat Product Security has rated this update as having a security impact\nof Low. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container\nPlatform 4.12.93. See the following advisory for the RPM packages for this\nrelease:\n\nhttps://access.redhat.com/errata/RHBA-2026:34046\n\nSpace precludes documenting all of the container images in this advisory.\nSee the following Release Notes documentation, which will be updated\nshortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nSecurity Fix(es):\n\nNone\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:34048",
"url": "https://access.redhat.com/errata/RHSA-2026:34048"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2451305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451305"
},
{
"category": "external",
"summary": "2479492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479492"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34048.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.12.93 bug fix and security update",
"tracking": {
"current_release_date": "2026-08-06T18:51:14+00:00",
"generator": {
"date": "2026-08-06T18:51:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:34048",
"initial_release_date": "2026-07-09T20:00:54+00:00",
"revision_history": [
{
"date": "2026-07-09T20:00:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-09T20:00:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-06T18:51:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.12",
"product": {
"name": "Red Hat OpenShift Container Platform 4.12",
"product_id": "8Base-RHOSE-4.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.12::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-x86_64-412.86.202606251120-0",
"product": {
"name": "rhcos-x86_64-412.86.202606251120-0",
"product_id": "rhcos-x86_64-412.86.202606251120-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@412.86.202606251120?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-x86_64-412.86.202606251120-0 as a component of Red Hat OpenShift Container Platform 4.12",
"product_id": "8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
},
"product_reference": "rhcos-x86_64-412.86.202606251120-0",
"relates_to_product_reference": "8Base-RHOSE-4.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-1519",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-25T14:01:56.586125+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451305"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BIND. A remote attacker could exploit this vulnerability by sending a maliciously crafted DNSSEC-validated zone to a BIND resolver. This could cause the resolver to consume excessive CPU resources, leading to a denial of service (DoS) for legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. A flaw in BIND allows a remote attacker to cause a Denial of Service by sending a maliciously crafted DNSSEC-validated zone to a BIND resolver. Red Hat systems running BIND configured for DNSSEC validation are affected. Authoritative-only BIND servers are generally not impacted unless configured to perform recursive queries.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1519"
},
{
"category": "external",
"summary": "RHBZ#2451305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451305"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1519"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1519",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1519"
},
{
"category": "external",
"summary": "https://downloads.isc.org/isc/bind9/9.18.47",
"url": "https://downloads.isc.org/isc/bind9/9.18.47"
},
{
"category": "external",
"summary": "https://downloads.isc.org/isc/bind9/9.20.21",
"url": "https://downloads.isc.org/isc/bind9/9.20.21"
},
{
"category": "external",
"summary": "https://downloads.isc.org/isc/bind9/9.21.20",
"url": "https://downloads.isc.org/isc/bind9/9.21.20"
},
{
"category": "external",
"summary": "https://kb.isc.org/docs/cve-2026-1519",
"url": "https://kb.isc.org/docs/cve-2026-1519"
}
],
"release_date": "2026-03-25T13:25:19.802000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T20:00:54+00:00",
"details": "For OpenShift Container Platform 4.12 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n The sha value for the release is as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:746f1a33a0b89a5489916b10366777b2672b65cfcd0cdfaffe5a710e3aa15f35\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
"product_ids": [
"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34048"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable DNSSEC validation on affected BIND resolvers. Alternatively, configure the BIND server as authoritative-only if recursive queries are not required. Disabling DNSSEC validation may reduce the security posture of the DNS resolver. A restart of the BIND service (`named`) is required for these changes to take effect and may temporarily interrupt DNS resolution.",
"product_ids": [
"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone"
},
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits, preventing privilege escalation. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to escalate privileges within the container, not on the host or across pods.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T20:00:54+00:00",
"details": "For OpenShift Container Platform 4.12 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n The sha value for the release is as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:746f1a33a0b89a5489916b10366777b2672b65cfcd0cdfaffe5a710e3aa15f35\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
"product_ids": [
"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34048"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
},
{
"cve": "CVE-2026-46331",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-05-18T06:17:23.219000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2479492"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s traffic control packet editing (pedit) subsystem. In tcf_pedit_act(), the copy-on-write (COW) range for skb_ensure_writable() is computed once before iterating over edit keys, but the calculation does not account for runtime header offsets added by typed keys. This can leave part of the target write region without a proper copy-on-write, leading to an out-of-bounds write that corrupts page cache memory. A local attacker with the ability to configure traffic control rules could exploit this to escalate privileges or crash the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net/sched: act_pedit: extend the writable skb range per key",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this flaw as Important severity.\n\nThis vulnerability is in the kernel\u0027s traffic control (tc) pedit action, which requires CAP_NET_ADMIN capability to configure. By default in Red Hat Enterprise Linux, this limits exploitation to the root user or processes explicitly granted network administration capabilities. However, in some circumstances unprivileged users may obtain CAP_NET_ADMIN within user namespaces. Successful exploitation could lead to arbitrary code execution in kernel context or a system crash.\n\nRed Hat Enterprise Linux 7 and earlier are not affected. Within OpenShift Container Platform, the vulnerable module is not loaded by default, reducing the severity to Low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46331"
},
{
"category": "external",
"summary": "RHBZ#2479492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479492"
},
{
"category": "external",
"summary": "RHSB-2026-008",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46331",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46331"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46331",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46331"
},
{
"category": "external",
"summary": "https://lore.kernel.org/netdev/20260516162825.1480113-1-rollkingzzc@gmail.com/",
"url": "https://lore.kernel.org/netdev/20260516162825.1480113-1-rollkingzzc@gmail.com/"
}
],
"release_date": "2026-05-18T04:04:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T20:00:54+00:00",
"details": "For OpenShift Container Platform 4.12 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n The sha value for the release is as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:746f1a33a0b89a5489916b10366777b2672b65cfcd0cdfaffe5a710e3aa15f35\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.",
"product_ids": [
"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34048"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202606251120-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: net/sched: act_pedit: extend the writable skb range per key"
}
]
}
RHSA-2026:34757
Vulnerability from csaf_redhat - Published: 2026-07-09 13:52 - Updated: 2026-08-06 18:51Summary
Red Hat Security Advisory: OpenShift Container Platform 4.19.37 bug fix and security update
Severity
Moderate
Notes
Topic: Red Hat OpenShift Container Platform release 4.19.37 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container
Platform 4.19.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.19.37. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHSA-2026:34755
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/
Security Fix(es):
* kernel: Linux kernel: smb: client: reject userspace cifs.spnego
descriptions (CVE-2026-46243)
* crun: crun: Privilege escalation due to incorrect parsing of the `--user`
option (CVE-2026-30892)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.19 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in crun, an open-source OCI Container Runtime. A local user can exploit this vulnerability due to incorrect parsing of the `--user` option when using `crun exec`. The value `1` is misinterpreted as root privileges (User ID 0 and Group ID 0) instead of the intended User ID 1 and Group ID 0. This allows a process to run with higher privileges than expected, leading to privilege escalation.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606302000-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606302000-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606302000-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606302000-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606302000-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606302000-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606302000-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606302000-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.19.37 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\n This release includes a security update for Red Hat OpenShift Container\nPlatform 4.19.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container\nPlatform 4.19.37. See the following advisory for the RPM packages for this\nrelease:\n\nhttps://access.redhat.com/errata/RHSA-2026:34755\n\nSpace precludes documenting all of the container images in this advisory.\nSee the following Release Notes documentation, which will be updated\nshortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nSecurity Fix(es):\n\n* kernel: Linux kernel: smb: client: reject userspace cifs.spnego\ndescriptions (CVE-2026-46243)\n* crun: crun: Privilege escalation due to incorrect parsing of the `--user`\noption (CVE-2026-30892)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:34757",
"url": "https://access.redhat.com/errata/RHSA-2026:34757"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2451576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451576"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "OCPBUGS-75011",
"url": "https://issues.redhat.com/browse/OCPBUGS-75011"
},
{
"category": "external",
"summary": "OCPBUGS-77051",
"url": "https://issues.redhat.com/browse/OCPBUGS-77051"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34757.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.19.37 bug fix and security update",
"tracking": {
"current_release_date": "2026-08-06T18:51:15+00:00",
"generator": {
"date": "2026-08-06T18:51:15+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:34757",
"initial_release_date": "2026-07-09T13:52:43+00:00",
"revision_history": [
{
"date": "2026-07-09T13:52:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-09T13:52:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-06T18:51:15+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.19",
"product": {
"name": "Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.19::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-aarch64-4.19.9.6.202606302000-0",
"product": {
"name": "rhcos-aarch64-4.19.9.6.202606302000-0",
"product_id": "rhcos-aarch64-4.19.9.6.202606302000-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.19.9.6.202606302000?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-ppc64le-4.19.9.6.202606302000-0",
"product": {
"name": "rhcos-ppc64le-4.19.9.6.202606302000-0",
"product_id": "rhcos-ppc64le-4.19.9.6.202606302000-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.19.9.6.202606302000?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-s390x-4.19.9.6.202606302000-0",
"product": {
"name": "rhcos-s390x-4.19.9.6.202606302000-0",
"product_id": "rhcos-s390x-4.19.9.6.202606302000-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.19.9.6.202606302000?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-x86_64-4.19.9.6.202606302000-0",
"product": {
"name": "rhcos-x86_64-4.19.9.6.202606302000-0",
"product_id": "rhcos-x86_64-4.19.9.6.202606302000-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.19.9.6.202606302000?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-aarch64-4.19.9.6.202606302000-0 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606302000-0"
},
"product_reference": "rhcos-aarch64-4.19.9.6.202606302000-0",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-ppc64le-4.19.9.6.202606302000-0 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606302000-0"
},
"product_reference": "rhcos-ppc64le-4.19.9.6.202606302000-0",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-s390x-4.19.9.6.202606302000-0 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606302000-0"
},
"product_reference": "rhcos-s390x-4.19.9.6.202606302000-0",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-x86_64-4.19.9.6.202606302000-0 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606302000-0"
},
"product_reference": "rhcos-x86_64-4.19.9.6.202606302000-0",
"relates_to_product_reference": "9Base-RHOSE-4.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-30892",
"cwe": {
"id": "CWE-115",
"name": "Misinterpretation of Input"
},
"discovery_date": "2026-03-26T01:01:25.312958+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451576"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in crun, an open-source OCI Container Runtime. A local user can exploit this vulnerability due to incorrect parsing of the `--user` option when using `crun exec`. The value `1` is misinterpreted as root privileges (User ID 0 and Group ID 0) instead of the intended User ID 1 and Group ID 0. This allows a process to run with higher privileges than expected, leading to privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crun: crun: Privilege escalation due to incorrect parsing of the `--user` option",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated this vulnerability as Moderate because the flaw exists in the OCI container runtime crun. When crun exec -u 1 is used, crun incorrectly interprets UID 1 as UID 0 (root), causing the executed process to run with root privileges inside the container instead of as the intended unprivileged user.\n\nSuccessful exploitation requires local access to container management operations. An attacker must already have the ability to invoke crun exec against an existing container. The vulnerability is not remotely exploitable and cannot be triggered by an unauthenticated attacker.\n\nAdditionally, the privilege escalation is limited to the container context. While the flaw allows an attacker to obtain root privileges within the affected container, there is no demonstrated container escape or direct compromise of the host system resulting from this issue alone.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606302000-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30892"
},
{
"category": "external",
"summary": "RHBZ#2451576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451576"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30892",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30892"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30892",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30892"
},
{
"category": "external",
"summary": "https://github.com/containers/crun/commit/1bd7f42446999b0e76bc3d575392e05c943b0b01",
"url": "https://github.com/containers/crun/commit/1bd7f42446999b0e76bc3d575392e05c943b0b01"
},
{
"category": "external",
"summary": "https://github.com/containers/crun/releases/tag/1.27",
"url": "https://github.com/containers/crun/releases/tag/1.27"
},
{
"category": "external",
"summary": "https://github.com/containers/crun/security/advisories/GHSA-4vg2-xjqj-7chj",
"url": "https://github.com/containers/crun/security/advisories/GHSA-4vg2-xjqj-7chj"
}
],
"release_date": "2026-03-25T23:57:01.741000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T13:52:43+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:79dbf4584baf7b1dc523add340b02a22edd635c6c275a4f9124574a334b7310f\n\n (For s390x architecture)\n The image digest is sha256:187d99cc0aa359369ed2ab906f1bd80074a23789813adb0b077a13ae3d6e4ef3\n\n (For ppc64le architecture)\n The image digest is sha256:0ff726e23ec140f6af03a2aaaeaa7ec10c98b115cc0cd7355f7442551bc038f2\n\n (For aarch64 architecture)\n The image digest is sha256:a7b6e859ba988dc3e3c1679bd4710a1f2b0c3c62ccafdd6a66867fe264ad5bd5\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606302000-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606302000-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606302000-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crun: crun: Privilege escalation due to incorrect parsing of the `--user` option"
},
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits, preventing privilege escalation. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to escalate privileges within the container, not on the host or across pods.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606302000-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-09T13:52:43+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:79dbf4584baf7b1dc523add340b02a22edd635c6c275a4f9124574a334b7310f\n\n (For s390x architecture)\n The image digest is sha256:187d99cc0aa359369ed2ab906f1bd80074a23789813adb0b077a13ae3d6e4ef3\n\n (For ppc64le architecture)\n The image digest is sha256:0ff726e23ec140f6af03a2aaaeaa7ec10c98b115cc0cd7355f7442551bc038f2\n\n (For aarch64 architecture)\n The image digest is sha256:a7b6e859ba988dc3e3c1679bd4710a1f2b0c3c62ccafdd6a66867fe264ad5bd5\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606302000-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34757"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606302000-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202606302000-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202606302000-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
}
]
}
RHSA-2026:34764
Vulnerability from csaf_redhat - Published: 2026-07-07 14:25 - Updated: 2026-08-06 18:51Summary
Red Hat Security Advisory: OpenShift Container Platform 4.21.23 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.21.23 is now available with updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.21.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.21.23. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:34759
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/
Security Fix(es):
* gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability (CVE-2026-42009)
* gnutls: gnutls: Authentication Bypass via NUL Character in Username (CVE-2026-42010)
* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
References
24 references
Acknowledgments
AISLE Research Team
Joshua Rogers
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.21.23 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.21.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.21.23. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2026:34759\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nSecurity Fix(es):\n\n* gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability (CVE-2026-42009)\n* gnutls: gnutls: Authentication Bypass via NUL Character in Username (CVE-2026-42010)\n* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:34764",
"url": "https://access.redhat.com/errata/RHSA-2026:34764"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2467279",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467279"
},
{
"category": "external",
"summary": "2467289",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467289"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "OCPBUGS-88740",
"url": "https://issues.redhat.com/browse/OCPBUGS-88740"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34764.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.21.23 bug fix and security update",
"tracking": {
"current_release_date": "2026-08-06T18:51:16+00:00",
"generator": {
"date": "2026-08-06T18:51:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:34764",
"initial_release_date": "2026-07-07T14:25:30+00:00",
"revision_history": [
{
"date": "2026-07-07T14:25:30+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-07T14:25:30+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-06T18:51:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.21",
"product": {
"name": "Red Hat OpenShift Container Platform 4.21",
"product_id": "9Base-RHOSE-4.21",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.21::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-aarch64-4.21.9.6.202607011303-0",
"product": {
"name": "rhcos-aarch64-4.21.9.6.202607011303-0",
"product_id": "rhcos-aarch64-4.21.9.6.202607011303-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.21.9.6.202607011303?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-ppc64le-4.21.9.6.202607011303-0",
"product": {
"name": "rhcos-ppc64le-4.21.9.6.202607011303-0",
"product_id": "rhcos-ppc64le-4.21.9.6.202607011303-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.21.9.6.202607011303?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-s390x-4.21.9.6.202607011303-0",
"product": {
"name": "rhcos-s390x-4.21.9.6.202607011303-0",
"product_id": "rhcos-s390x-4.21.9.6.202607011303-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.21.9.6.202607011303?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-x86_64-4.21.9.6.202607011303-0",
"product": {
"name": "rhcos-x86_64-4.21.9.6.202607011303-0",
"product_id": "rhcos-x86_64-4.21.9.6.202607011303-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.21.9.6.202607011303?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-aarch64-4.21.9.6.202607011303-0 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0"
},
"product_reference": "rhcos-aarch64-4.21.9.6.202607011303-0",
"relates_to_product_reference": "9Base-RHOSE-4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-ppc64le-4.21.9.6.202607011303-0 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0"
},
"product_reference": "rhcos-ppc64le-4.21.9.6.202607011303-0",
"relates_to_product_reference": "9Base-RHOSE-4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-s390x-4.21.9.6.202607011303-0 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0"
},
"product_reference": "rhcos-s390x-4.21.9.6.202607011303-0",
"relates_to_product_reference": "9Base-RHOSE-4.21"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-x86_64-4.21.9.6.202607011303-0 as a component of Red Hat OpenShift Container Platform 4.21",
"product_id": "9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0"
},
"product_reference": "rhcos-x86_64-4.21.9.6.202607011303-0",
"relates_to_product_reference": "9Base-RHOSE-4.21"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-42009",
"cwe": {
"id": "CWE-475",
"name": "Undefined Behavior for Input to API"
},
"discovery_date": "2026-05-06T16:32:32.382000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467279"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The impact for this flaw has been downgraded on Red Hat Enterprise Linux due to the following reason:\n\n- The number of elements passed to the vulnerable function at runtime is known and is at most 6 and the element size is sufficiently small. glibc\u2019s qsort implementation will not exercise the quick sort code path, which would otherwise cause an infloop or out-of-bound write.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42009"
},
{
"category": "external",
"summary": "RHBZ#2467279",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467279"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42009"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T14:25:30+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:c58d65eeaf399b6850e5cc637a199ed44066819ccbc25877a6afd44ff861d841\n\n (For s390x architecture)\n The image digest is sha256:5c89334e4cf13c60df32762ea475b863c7eeb5bc2cc5dafbbf65fc5351f520c6\n\n (For ppc64le architecture)\n The image digest is sha256:d723c3c1ca165d75bbef247f412664c36bee48ac9ce26cbddf37553c9bb736f1\n\n (For aarch64 architecture)\n The image digest is sha256:588cfd15da44d83f3f6375545de8c3e08c4a10f02a6f591a4b5d2e8ffe427497\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34764"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability"
},
{
"acknowledgments": [
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-42010",
"cwe": {
"id": "CWE-170",
"name": "Improper Null Termination"
},
"discovery_date": "2026-05-06T16:57:37.044000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467289"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest\u2013Shamir\u2013Adleman \u2013 Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Authentication Bypass via NUL Character in Username",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42010"
},
{
"category": "external",
"summary": "RHBZ#2467289",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467289"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42010"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T14:25:30+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:c58d65eeaf399b6850e5cc637a199ed44066819ccbc25877a6afd44ff861d841\n\n (For s390x architecture)\n The image digest is sha256:5c89334e4cf13c60df32762ea475b863c7eeb5bc2cc5dafbbf65fc5351f520c6\n\n (For ppc64le architecture)\n The image digest is sha256:d723c3c1ca165d75bbef247f412664c36bee48ac9ce26cbddf37553c9bb736f1\n\n (For aarch64 architecture)\n The image digest is sha256:588cfd15da44d83f3f6375545de8c3e08c4a10f02a6f591a4b5d2e8ffe427497\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34764"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gnutls: gnutls: Authentication Bypass via NUL Character in Username"
},
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits, preventing privilege escalation. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to escalate privileges within the container, not on the host or across pods.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T14:25:30+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:c58d65eeaf399b6850e5cc637a199ed44066819ccbc25877a6afd44ff861d841\n\n (For s390x architecture)\n The image digest is sha256:5c89334e4cf13c60df32762ea475b863c7eeb5bc2cc5dafbbf65fc5351f520c6\n\n (For ppc64le architecture)\n The image digest is sha256:d723c3c1ca165d75bbef247f412664c36bee48ac9ce26cbddf37553c9bb736f1\n\n (For aarch64 architecture)\n The image digest is sha256:588cfd15da44d83f3f6375545de8c3e08c4a10f02a6f591a4b5d2e8ffe427497\n\nAll OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34764"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.21:rhcos-aarch64-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-ppc64le-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-s390x-4.21.9.6.202607011303-0",
"9Base-RHOSE-4.21:rhcos-x86_64-4.21.9.6.202607011303-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
}
]
}
RHSA-2026:34788
Vulnerability from csaf_redhat - Published: 2026-07-07 12:40 - Updated: 2026-08-06 18:51Summary
Red Hat Security Advisory: OpenShift Container Platform 4.20.28 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.20.28 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container
Platform 4.20.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/
Security Fix(es):
* gnutls: gnutls: Denial of Service via DTLS packet reordering
vulnerability (CVE-2026-42009)
* gnutls: gnutls: Authentication Bypass via NUL Character in Username
(CVE-2026-42010)
* kernel: Linux kernel: smb: client: reject userspace cifs.spnego
descriptions (CVE-2026-46243)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.20 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
References
24 references
Acknowledgments
AISLE Research Team
Joshua Rogers
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.20.28 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\n This release includes a security update for Red Hat OpenShift Container\nPlatform 4.20.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nSpace precludes documenting all of the container images in this advisory.\nSee the following Release Notes documentation, which will be updated\nshortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nSecurity Fix(es):\n\n* gnutls: gnutls: Denial of Service via DTLS packet reordering\nvulnerability (CVE-2026-42009)\n* gnutls: gnutls: Authentication Bypass via NUL Character in Username\n(CVE-2026-42010)\n* kernel: Linux kernel: smb: client: reject userspace cifs.spnego\ndescriptions (CVE-2026-46243)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:34788",
"url": "https://access.redhat.com/errata/RHSA-2026:34788"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2467279",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467279"
},
{
"category": "external",
"summary": "2467289",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467289"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "OCPBUGS-89242",
"url": "https://issues.redhat.com/browse/OCPBUGS-89242"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34788.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.20.28 bug fix and security update",
"tracking": {
"current_release_date": "2026-08-06T18:51:16+00:00",
"generator": {
"date": "2026-08-06T18:51:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:34788",
"initial_release_date": "2026-07-07T12:40:05+00:00",
"revision_history": [
{
"date": "2026-07-07T12:40:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-07T12:40:05+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-06T18:51:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.20",
"product": {
"name": "Red Hat OpenShift Container Platform 4.20",
"product_id": "9Base-RHOSE-4.20",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.20::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-aarch64-4.20.9.6.202607010620-0",
"product": {
"name": "rhcos-aarch64-4.20.9.6.202607010620-0",
"product_id": "rhcos-aarch64-4.20.9.6.202607010620-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.20.9.6.202607010620?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-ppc64le-4.20.9.6.202607010620-0",
"product": {
"name": "rhcos-ppc64le-4.20.9.6.202607010620-0",
"product_id": "rhcos-ppc64le-4.20.9.6.202607010620-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.20.9.6.202607010620?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-s390x-4.20.9.6.202607010620-0",
"product": {
"name": "rhcos-s390x-4.20.9.6.202607010620-0",
"product_id": "rhcos-s390x-4.20.9.6.202607010620-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.20.9.6.202607010620?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-x86_64-4.20.9.6.202607010620-0",
"product": {
"name": "rhcos-x86_64-4.20.9.6.202607010620-0",
"product_id": "rhcos-x86_64-4.20.9.6.202607010620-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.20.9.6.202607010620?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-aarch64-4.20.9.6.202607010620-0 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0"
},
"product_reference": "rhcos-aarch64-4.20.9.6.202607010620-0",
"relates_to_product_reference": "9Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-ppc64le-4.20.9.6.202607010620-0 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0"
},
"product_reference": "rhcos-ppc64le-4.20.9.6.202607010620-0",
"relates_to_product_reference": "9Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-s390x-4.20.9.6.202607010620-0 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0"
},
"product_reference": "rhcos-s390x-4.20.9.6.202607010620-0",
"relates_to_product_reference": "9Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-x86_64-4.20.9.6.202607010620-0 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0"
},
"product_reference": "rhcos-x86_64-4.20.9.6.202607010620-0",
"relates_to_product_reference": "9Base-RHOSE-4.20"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-42009",
"cwe": {
"id": "CWE-475",
"name": "Undefined Behavior for Input to API"
},
"discovery_date": "2026-05-06T16:32:32.382000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467279"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The impact for this flaw has been downgraded on Red Hat Enterprise Linux due to the following reason:\n\n- The number of elements passed to the vulnerable function at runtime is known and is at most 6 and the element size is sufficiently small. glibc\u2019s qsort implementation will not exercise the quick sort code path, which would otherwise cause an infloop or out-of-bound write.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42009"
},
{
"category": "external",
"summary": "RHBZ#2467279",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467279"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42009"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T12:40:05+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0f9e0109b320c8c93c58cc06f54defa90d9462b150ef9a9fb407db6630850a14\n\n (For s390x architecture)\n The image digest is sha256:35a85e19eb7c68ecd9b3bcce8aeb27c9a4b7878a99ffb211611f31eda7bb8e54\n\n (For ppc64le architecture)\n The image digest is sha256:55770cf362a7ff3313b0edcb6a58d76dd524980a54a563709336baea78d72933\n\n (For aarch64 architecture)\n The image digest is sha256:b093e33964d723a21591d37093002532ba32057377d415a93093931b1fb1b63c\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34788"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability"
},
{
"acknowledgments": [
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-42010",
"cwe": {
"id": "CWE-170",
"name": "Improper Null Termination"
},
"discovery_date": "2026-05-06T16:57:37.044000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467289"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest\u2013Shamir\u2013Adleman \u2013 Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Authentication Bypass via NUL Character in Username",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42010"
},
{
"category": "external",
"summary": "RHBZ#2467289",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467289"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42010"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T12:40:05+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0f9e0109b320c8c93c58cc06f54defa90d9462b150ef9a9fb407db6630850a14\n\n (For s390x architecture)\n The image digest is sha256:35a85e19eb7c68ecd9b3bcce8aeb27c9a4b7878a99ffb211611f31eda7bb8e54\n\n (For ppc64le architecture)\n The image digest is sha256:55770cf362a7ff3313b0edcb6a58d76dd524980a54a563709336baea78d72933\n\n (For aarch64 architecture)\n The image digest is sha256:b093e33964d723a21591d37093002532ba32057377d415a93093931b1fb1b63c\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34788"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gnutls: gnutls: Authentication Bypass via NUL Character in Username"
},
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits, preventing privilege escalation. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to escalate privileges within the container, not on the host or across pods.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T12:40:05+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0f9e0109b320c8c93c58cc06f54defa90d9462b150ef9a9fb407db6630850a14\n\n (For s390x architecture)\n The image digest is sha256:35a85e19eb7c68ecd9b3bcce8aeb27c9a4b7878a99ffb211611f31eda7bb8e54\n\n (For ppc64le architecture)\n The image digest is sha256:55770cf362a7ff3313b0edcb6a58d76dd524980a54a563709336baea78d72933\n\n (For aarch64 architecture)\n The image digest is sha256:b093e33964d723a21591d37093002532ba32057377d415a93093931b1fb1b63c\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34788"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.20:rhcos-aarch64-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-ppc64le-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-s390x-4.20.9.6.202607010620-0",
"9Base-RHOSE-4.20:rhcos-x86_64-4.20.9.6.202607010620-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
}
]
}
RHSA-2026:34815
Vulnerability from csaf_redhat - Published: 2026-07-08 09:34 - Updated: 2026-08-06 18:51Summary
Red Hat Security Advisory: OpenShift Container Platform 4.18.47 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.18.47 is now available with updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.18.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.18.47. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:34814
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/
Security Fix(es):
* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.18:rhcos-aarch64-418.94.202606250458-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202606250458-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.18:rhcos-s390x-418.94.202606250458-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.18:rhcos-x86_64-418.94.202606250458-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
References
11 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.18.47 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.18.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.18.47. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2026:34814\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nSecurity Fix(es):\n\n* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:34815",
"url": "https://access.redhat.com/errata/RHSA-2026:34815"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34815.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.18.47 bug fix and security update",
"tracking": {
"current_release_date": "2026-08-06T18:51:16+00:00",
"generator": {
"date": "2026-08-06T18:51:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:34815",
"initial_release_date": "2026-07-08T09:34:48+00:00",
"revision_history": [
{
"date": "2026-07-08T09:34:48+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-08T09:34:48+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-06T18:51:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.18",
"product": {
"name": "Red Hat OpenShift Container Platform 4.18",
"product_id": "9Base-RHOSE-4.18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.18::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-aarch64-418.94.202606250458-0",
"product": {
"name": "rhcos-aarch64-418.94.202606250458-0",
"product_id": "rhcos-aarch64-418.94.202606250458-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@418.94.202606250458?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-ppc64le-418.94.202606250458-0",
"product": {
"name": "rhcos-ppc64le-418.94.202606250458-0",
"product_id": "rhcos-ppc64le-418.94.202606250458-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@418.94.202606250458?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-s390x-418.94.202606250458-0",
"product": {
"name": "rhcos-s390x-418.94.202606250458-0",
"product_id": "rhcos-s390x-418.94.202606250458-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@418.94.202606250458?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-x86_64-418.94.202606250458-0",
"product": {
"name": "rhcos-x86_64-418.94.202606250458-0",
"product_id": "rhcos-x86_64-418.94.202606250458-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@418.94.202606250458?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-aarch64-418.94.202606250458-0 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "9Base-RHOSE-4.18:rhcos-aarch64-418.94.202606250458-0"
},
"product_reference": "rhcos-aarch64-418.94.202606250458-0",
"relates_to_product_reference": "9Base-RHOSE-4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-ppc64le-418.94.202606250458-0 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202606250458-0"
},
"product_reference": "rhcos-ppc64le-418.94.202606250458-0",
"relates_to_product_reference": "9Base-RHOSE-4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-s390x-418.94.202606250458-0 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "9Base-RHOSE-4.18:rhcos-s390x-418.94.202606250458-0"
},
"product_reference": "rhcos-s390x-418.94.202606250458-0",
"relates_to_product_reference": "9Base-RHOSE-4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-x86_64-418.94.202606250458-0 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "9Base-RHOSE-4.18:rhcos-x86_64-418.94.202606250458-0"
},
"product_reference": "rhcos-x86_64-418.94.202606250458-0",
"relates_to_product_reference": "9Base-RHOSE-4.18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits, preventing privilege escalation. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to escalate privileges within the container, not on the host or across pods.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202606250458-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202606250458-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202606250458-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202606250458-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T09:34:48+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:5b9b79cdb8ceaa12fc3fd4a50eb760e0267810c47f56e4356db7f91859be2e45\n\n (For s390x architecture)\n The image digest is sha256:209fc7776c8e05dece3af561aa6fe7175437c1c7dd795bdd19a418c3a78225b5\n\n (For ppc64le architecture)\n The image digest is sha256:46048cd05d5a354536e2df87314b8c709c4ff1488192d357b84a4483aa8a25ed\n\n (For aarch64 architecture)\n The image digest is sha256:b1ab693d4cb32d159bcba318569d4b53a33e472f514d4f5e6c83cf77d5d8fb4b\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202606250458-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202606250458-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202606250458-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202606250458-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34815"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202606250458-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202606250458-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202606250458-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202606250458-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.18:rhcos-aarch64-418.94.202606250458-0",
"9Base-RHOSE-4.18:rhcos-ppc64le-418.94.202606250458-0",
"9Base-RHOSE-4.18:rhcos-s390x-418.94.202606250458-0",
"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202606250458-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
}
]
}
RHSA-2026:36620
Vulnerability from csaf_redhat - Published: 2026-07-16 10:51 - Updated: 2026-08-06 18:51Summary
Red Hat Security Advisory: OpenShift Container Platform 4.16.66 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.16.66 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container
Platform 4.16.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.16.66. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHBA-2026:36619
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/
Security Fix(es):
* kernel: Linux kernel: smb: client: reject userspace cifs.spnego
descriptions (CVE-2026-46243)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.16 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-aarch64-416.94.202607021016-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202607021016-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-s390x-416.94.202607021016-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-x86_64-416.94.202607021016-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
References
11 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.16.66 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\n This release includes a security update for Red Hat OpenShift Container\nPlatform 4.16.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container\nPlatform 4.16.66. See the following advisory for the RPM packages for this\nrelease:\n\nhttps://access.redhat.com/errata/RHBA-2026:36619\n\nSpace precludes documenting all of the container images in this advisory.\nSee the following Release Notes documentation, which will be updated\nshortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/\n\nSecurity Fix(es):\n\n* kernel: Linux kernel: smb: client: reject userspace cifs.spnego\ndescriptions (CVE-2026-46243)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.16 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36620",
"url": "https://access.redhat.com/errata/RHSA-2026:36620"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36620.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.16.66 bug fix and security update",
"tracking": {
"current_release_date": "2026-08-06T18:51:31+00:00",
"generator": {
"date": "2026-08-06T18:51:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:36620",
"initial_release_date": "2026-07-16T10:51:03+00:00",
"revision_history": [
{
"date": "2026-07-16T10:51:03+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-16T10:51:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-06T18:51:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.16",
"product": {
"name": "Red Hat OpenShift Container Platform 4.16",
"product_id": "9Base-RHOSE-4.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-aarch64-416.94.202607021016-0",
"product": {
"name": "rhcos-aarch64-416.94.202607021016-0",
"product_id": "rhcos-aarch64-416.94.202607021016-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@416.94.202607021016?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-ppc64le-416.94.202607021016-0",
"product": {
"name": "rhcos-ppc64le-416.94.202607021016-0",
"product_id": "rhcos-ppc64le-416.94.202607021016-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@416.94.202607021016?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-s390x-416.94.202607021016-0",
"product": {
"name": "rhcos-s390x-416.94.202607021016-0",
"product_id": "rhcos-s390x-416.94.202607021016-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@416.94.202607021016?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-x86_64-416.94.202607021016-0",
"product": {
"name": "rhcos-x86_64-416.94.202607021016-0",
"product_id": "rhcos-x86_64-416.94.202607021016-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@416.94.202607021016?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-aarch64-416.94.202607021016-0 as a component of Red Hat OpenShift Container Platform 4.16",
"product_id": "9Base-RHOSE-4.16:rhcos-aarch64-416.94.202607021016-0"
},
"product_reference": "rhcos-aarch64-416.94.202607021016-0",
"relates_to_product_reference": "9Base-RHOSE-4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-ppc64le-416.94.202607021016-0 as a component of Red Hat OpenShift Container Platform 4.16",
"product_id": "9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202607021016-0"
},
"product_reference": "rhcos-ppc64le-416.94.202607021016-0",
"relates_to_product_reference": "9Base-RHOSE-4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-s390x-416.94.202607021016-0 as a component of Red Hat OpenShift Container Platform 4.16",
"product_id": "9Base-RHOSE-4.16:rhcos-s390x-416.94.202607021016-0"
},
"product_reference": "rhcos-s390x-416.94.202607021016-0",
"relates_to_product_reference": "9Base-RHOSE-4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-x86_64-416.94.202607021016-0 as a component of Red Hat OpenShift Container Platform 4.16",
"product_id": "9Base-RHOSE-4.16:rhcos-x86_64-416.94.202607021016-0"
},
"product_reference": "rhcos-x86_64-416.94.202607021016-0",
"relates_to_product_reference": "9Base-RHOSE-4.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits, preventing privilege escalation. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to escalate privileges within the container, not on the host or across pods.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202607021016-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202607021016-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202607021016-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202607021016-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T10:51:03+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:29a257b84ed0c15e4b45fb75fe5c374a3e2a1cc22baa7d092a81568eed83fd95\n\n (For s390x architecture)\n The image digest is sha256:3ab1b27245374015e035036cf5d0c0f1d84100605f01bdd9f02308ed5c1be5cf\n\n (For ppc64le architecture)\n The image digest is sha256:a9f5be035e9ded0cb40d52516df1e77f8a324e5853b8028c1036c73d23f74184\n\n (For aarch64 architecture)\n The image digest is sha256:71c1ebf0fa8f125365d8a4e0be801b7c03d6821479be5861574cc77e7996e561\n\nAll OpenShift Container Platform 4.16 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202607021016-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202607021016-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202607021016-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202607021016-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36620"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202607021016-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202607021016-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202607021016-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202607021016-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202607021016-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202607021016-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202607021016-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202607021016-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
}
]
}
RHSA-2026:40021
Vulnerability from csaf_redhat - Published: 2026-07-23 07:30 - Updated: 2026-08-09 18:33Summary
Red Hat Security Advisory: OpenShift Container Platform 4.13.69 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.13.69 is now available with updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.13.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.13.69. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:40020
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes
Security Fix(es):
* bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)
* glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width CVE-2026-5450)
* kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)
* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in BIND. A remote attacker could exploit this vulnerability by sending a maliciously crafted DNSSEC-validated zone to a BIND resolver. This could cause the resolver to consume excessive CPU resources, leading to a denial of service (DoS) for legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.
5.0 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in the Linux kernel's traffic control packet editing (pedit) subsystem. In tcf_pedit_act(), the copy-on-write (COW) range for skb_ensure_writable() is computed once before iterating over edit keys, but the calculation does not account for runtime header offsets added by typed keys. This can leave part of the target write region without a proper copy-on-write, leading to an out-of-bounds write that corrupts page cache memory. A local attacker with the ability to configure traffic control rules could exploit this to escalate privileges or crash the system.
6.7 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
References
35 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.13.69 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.13.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.13.69. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2026:40020\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nSecurity Fix(es):\n\n* bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)\n* glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width CVE-2026-5450) \n* kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)\n* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40021",
"url": "https://access.redhat.com/errata/RHSA-2026:40021"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2451305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451305"
},
{
"category": "external",
"summary": "2459853",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459853"
},
{
"category": "external",
"summary": "2479492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479492"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40021.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.13.69 bug fix and security update",
"tracking": {
"current_release_date": "2026-08-09T18:33:35+00:00",
"generator": {
"date": "2026-08-09T18:33:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:40021",
"initial_release_date": "2026-07-23T07:30:26+00:00",
"revision_history": [
{
"date": "2026-07-23T07:30:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-23T07:30:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-09T18:33:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.13",
"product": {
"name": "Red Hat OpenShift Container Platform 4.13",
"product_id": "9Base-RHOSE-4.13",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.13::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-x86_64-413.92.202607141229-0",
"product": {
"name": "rhcos-x86_64-413.92.202607141229-0",
"product_id": "rhcos-x86_64-413.92.202607141229-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@413.92.202607141229?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-x86_64-413.92.202607141229-0 as a component of Red Hat OpenShift Container Platform 4.13",
"product_id": "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
},
"product_reference": "rhcos-x86_64-413.92.202607141229-0",
"relates_to_product_reference": "9Base-RHOSE-4.13"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-1519",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-25T14:01:56.586125+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451305"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BIND. A remote attacker could exploit this vulnerability by sending a maliciously crafted DNSSEC-validated zone to a BIND resolver. This could cause the resolver to consume excessive CPU resources, leading to a denial of service (DoS) for legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. A flaw in BIND allows a remote attacker to cause a Denial of Service by sending a maliciously crafted DNSSEC-validated zone to a BIND resolver. Red Hat systems running BIND configured for DNSSEC validation are affected. Authoritative-only BIND servers are generally not impacted unless configured to perform recursive queries.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1519"
},
{
"category": "external",
"summary": "RHBZ#2451305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451305"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1519"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1519",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1519"
},
{
"category": "external",
"summary": "https://downloads.isc.org/isc/bind9/9.18.47",
"url": "https://downloads.isc.org/isc/bind9/9.18.47"
},
{
"category": "external",
"summary": "https://downloads.isc.org/isc/bind9/9.20.21",
"url": "https://downloads.isc.org/isc/bind9/9.20.21"
},
{
"category": "external",
"summary": "https://downloads.isc.org/isc/bind9/9.21.20",
"url": "https://downloads.isc.org/isc/bind9/9.21.20"
},
{
"category": "external",
"summary": "https://kb.isc.org/docs/cve-2026-1519",
"url": "https://kb.isc.org/docs/cve-2026-1519"
}
],
"release_date": "2026-03-25T13:25:19.802000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T07:30:26+00:00",
"details": "For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n The sha value for the release is as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:6ff433fc5d4e0a3e7a0496e41af47da5c9349afeaad949e6d3bb49764618e1b9\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
"product_ids": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40021"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable DNSSEC validation on affected BIND resolvers. Alternatively, configure the BIND server as authoritative-only if recursive queries are not required. Disabling DNSSEC validation may reduce the security posture of the DNS resolver. A restart of the BIND service (`named`) is required for these changes to take effect and may temporarily interrupt DNS resolution.",
"product_ids": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone"
},
{
"cve": "CVE-2026-5450",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-20T21:01:35.403778+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459853"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Because this flaw requires that an affected application call the affected functions with an attacker-supplied value, Red Hat assesses the Attack Complexity of this flaw as High. Additionally, the flaw overflows a single byte onto the heap, so meaningful exploitation requires that the heap is structured such that a single byte can lead to an attacker-controlled outcome, or that the affected functions can be invoked with an attacker-controlled buffer base address. Regarding Attack Vector and Privileges Required, Red Hat assesses these elements as Local and Low respectively, as remote unauthenticated exploitation would require all the conditions above in a library client that listened on a network port and processed attacker-controllable data with the affected library functions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5450"
},
{
"category": "external",
"summary": "RHBZ#2459853",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459853"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5450",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5450"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450"
},
{
"category": "external",
"summary": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u",
"url": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450"
}
],
"release_date": "2026-04-20T20:55:41.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T07:30:26+00:00",
"details": "For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n The sha value for the release is as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:6ff433fc5d4e0a3e7a0496e41af47da5c9349afeaad949e6d3bb49764618e1b9\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
"product_ids": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40021"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width"
},
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits, preventing privilege escalation. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to escalate privileges within the container, not on the host or across pods.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T07:30:26+00:00",
"details": "For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n The sha value for the release is as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:6ff433fc5d4e0a3e7a0496e41af47da5c9349afeaad949e6d3bb49764618e1b9\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
"product_ids": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40021"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
},
{
"cve": "CVE-2026-46331",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-05-18T06:17:23.219000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2479492"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s traffic control packet editing (pedit) subsystem. In tcf_pedit_act(), the copy-on-write (COW) range for skb_ensure_writable() is computed once before iterating over edit keys, but the calculation does not account for runtime header offsets added by typed keys. This can leave part of the target write region without a proper copy-on-write, leading to an out-of-bounds write that corrupts page cache memory. A local attacker with the ability to configure traffic control rules could exploit this to escalate privileges or crash the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net/sched: act_pedit: extend the writable skb range per key",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this flaw as Important severity.\n\nThis vulnerability is in the kernel\u0027s traffic control (tc) pedit action, which requires CAP_NET_ADMIN capability to configure. By default in Red Hat Enterprise Linux, this limits exploitation to the root user or processes explicitly granted network administration capabilities. However, in some circumstances unprivileged users may obtain CAP_NET_ADMIN within user namespaces. Successful exploitation could lead to arbitrary code execution in kernel context or a system crash.\n\nRed Hat Enterprise Linux 7 and earlier are not affected. Within OpenShift Container Platform, the vulnerable module is not loaded by default, reducing the severity to Low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46331"
},
{
"category": "external",
"summary": "RHBZ#2479492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479492"
},
{
"category": "external",
"summary": "RHSB-2026-008",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46331",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46331"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46331",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46331"
},
{
"category": "external",
"summary": "https://lore.kernel.org/netdev/20260516162825.1480113-1-rollkingzzc@gmail.com/",
"url": "https://lore.kernel.org/netdev/20260516162825.1480113-1-rollkingzzc@gmail.com/"
}
],
"release_date": "2026-05-18T04:04:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T07:30:26+00:00",
"details": "For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n The sha value for the release is as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:6ff433fc5d4e0a3e7a0496e41af47da5c9349afeaad949e6d3bb49764618e1b9\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
"product_ids": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40021"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.13:rhcos-x86_64-413.92.202607141229-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: net/sched: act_pedit: extend the writable skb range per key"
}
]
}
RHSA-2026:41236
Vulnerability from csaf_redhat - Published: 2026-07-17 12:55 - Updated: 2026-08-11 15:20Summary
Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
Severity
Critical
Notes
Topic: An update for kernel-rt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
* kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
* kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
* kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)
* kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
* kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
* kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
* kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
* kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
* kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198)
* kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)
* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)
* kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090)
* kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)
* kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)
Bug Fix(es) and Enhancement(s):
* RHEL-124698 missed the last line of the backport (JIRA:RHEL-168608)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) `umad` (User Mode Access Device) component. A local user can exploit this vulnerability by manipulating input, causing an integer underflow that leads to an out-of-bounds memory write. This memory corruption can result in a denial of service (DoS) by crashing the system, and may also lead to limited information disclosure or data integrity issues.
7.3 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel's netfilter subsystem, specifically within the `nf_conntrack_h323` module. This vulnerability occurs in the `DecodeQ931()` function when processing a zero-length value from a packet. An integer underflow during a length calculation results in a large, incorrect value being passed to a subsequent function, leading to an out-of-bounds read. This could allow an attacker to cause a denial of service or potentially disclose sensitive information.
7.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel's Controller Area Network (CAN) raw socket implementation. A use-after-free vulnerability can occur due to a timing window during the unregistration of CAN receive filters, allowing a freed memory region to be accessed. This could lead to system instability or a denial of service (DoS).
7.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel's USB/IP subsystem. A malicious USB/IP server could exploit a vulnerability in the `usbip_pack_ret_submit()` function by sending a specially crafted `RET_SUBMIT` response. This response, containing an oversized `number_of_packets` value, could cause a heap out-of-bounds write. This issue may lead to a denial of service or potentially arbitrary code execution on the client system.
7.3 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the Linux kernel's netfilter component. This vulnerability occurs because the `eui64_mt6()` function, which processes IPv6 packets, does not properly validate the MAC header for all packets. Specifically, packets with a zero fragment offset could bypass an existing guard, allowing the system to attempt to access an invalid MAC header. A remote attacker could exploit this by sending specially crafted IPv6 packets, potentially causing a system crash and leading to a Denial of Service (DoS).
7.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
8.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. This vulnerability occurs because the driver fails to properly validate bsscfg indices in interface (IF) events. An attacker could exploit this by sending a specially crafted IF event with an invalid bsscfg index, which could lead to an out-of-bounds write or read, potentially causing a system crash and resulting in a denial of service (DoS).
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel's Distributed Lock Manager (dlm) module. An attacker could send specially crafted network messages with an oversized length parameter to the dlm_dump_rsb_name() function. This lack of validation can lead to an out-of-bounds write in the dlm_search_rsb_tree() function, potentially causing a buffer overflow. This vulnerability could allow for denial of service or, in some cases, arbitrary code execution.
7.0 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the Linux kernel's XFS filesystem. When adding extended attributes (xattrs), which are metadata associated with files, to leaf blocks, incorrect adjustments to the freemap can occur. This inconsistency allows the entries array and free space to overlap, leading to an assertion failure. A local user can exploit this to cause the filesystem to shut down, resulting in a Denial of Service (DoS).
7.0 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel's md/bitmap component. This vulnerability involves a use-after-free race condition that occurs during array resize operations. When the `bitmap_daemon_work()` and `__bitmap_resize()` functions execute concurrently, they can access memory pages that have already been freed. This can lead to a General Protection Fault (GPF), which causes the system to crash, resulting in a denial of service.
4.7 (Medium)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel, specifically within the netfilter: xt_tcpmss module. A remote attacker could exploit this vulnerability by sending a specially crafted TCP packet. The TCP option parser does not properly validate the remaining option length, which results in an out-of-bounds read. This allows an attacker to access memory beyond the intended buffer, potentially leading to information disclosure.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel. A race condition exists in the TCP (Transmission Control Protocol) IPv6 (Internet Protocol version 6) socket handling, specifically within the tcp_v6_syn_recv_sock() function. This occurs because a child socket becomes visible in the TCP hash table before its IPv6-specific information is fully initialized. A remote attacker could potentially exploit this timing window, leading to an unstable system state or unexpected behavior, which may result in a denial of service (DoS).
7.0 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) subsystem, specifically within the `rxe` driver. An error in the `rxe_srq_from_init` function's memory management can lead to a double free vulnerability. This occurs when an attempt to copy data to user space fails, causing the same memory region to be freed twice. A local attacker could potentially exploit this flaw to cause a denial of service (DoS) by crashing the system.
7.0 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the Linux kernel's ALSA (Advanced Linux Sound Architecture) aloop driver. This Use-After-Free (UAF) vulnerability occurs when loopback_check_format() stops the capture side during a format change, while a concurrent close operation detaches or frees the runtime. An attacker could potentially exploit this to cause a system crash or achieve arbitrary code execution.
7.0 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel's RDMA/mlx4 component. This vulnerability arises from the incorrect use of Read-Copy Update (RCU) in the `mlx4_srq_event()` function. An attacker could potentially trigger an event before the `srq` object is fully initialized, leading to a system crash. This could result in a Denial of Service (DoS) for the affected system.
7.0 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
101 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for kernel-rt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)\n\n* kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)\n\n* kernel: can: raw: fix ro-\u003euniq use-after-free in raw_rcv() (CVE-2026-31532)\n\n* kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)\n\n* kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)\n\n* kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() (CVE-2026-43037)\n\n* kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)\n\n* kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)\n\n* kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)\n\n* kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)\n\n* kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198)\n\n* kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)\n\n* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)\n\n* kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090)\n\n* kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)\n\n* kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)\n\nBug Fix(es) and Enhancement(s):\n\n* RHEL-124698 missed the last line of the backport (JIRA:RHEL-168608)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41236",
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2448594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448594"
},
{
"category": "external",
"summary": "2454810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454810"
},
{
"category": "external",
"summary": "2461107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461107"
},
{
"category": "external",
"summary": "2461521",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461521"
},
{
"category": "external",
"summary": "2461759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461759"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "2467014",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467014"
},
{
"category": "external",
"summary": "2467059",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467059"
},
{
"category": "external",
"summary": "2467064",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467064"
},
{
"category": "external",
"summary": "2467210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467210"
},
{
"category": "external",
"summary": "2467228",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467228"
},
{
"category": "external",
"summary": "2467234",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467234"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "2481980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481980"
},
{
"category": "external",
"summary": "2482166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482166"
},
{
"category": "external",
"summary": "2482532",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482532"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41236.json"
}
],
"title": "Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2026-08-11T15:20:50+00:00",
"generator": {
"date": "2026-08-11T15:20:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:41236",
"initial_release_date": "2026-07-17T12:55:09+00:00",
"revision_history": [
{
"date": "2026-07-17T12:55:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-17T12:55:09+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T15:20:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras_rt_els:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"product": {
"name": "kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"product_id": "kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt@3.10.0-1160.155.1.rt56.1307.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product": {
"name": "kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_id": "kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt@3.10.0-1160.155.1.rt56.1307.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product": {
"name": "kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_id": "kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug@3.10.0-1160.155.1.rt56.1307.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product": {
"name": "kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_id": "kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug-devel@3.10.0-1160.155.1.rt56.1307.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product": {
"name": "kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_id": "kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-devel@3.10.0-1160.155.1.rt56.1307.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product": {
"name": "kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_id": "kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace@3.10.0-1160.155.1.rt56.1307.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product": {
"name": "kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_id": "kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace-devel@3.10.0-1160.155.1.rt56.1307.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product": {
"name": "kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_id": "kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@3.10.0-1160.155.1.rt56.1307.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product": {
"name": "kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_id": "kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debuginfo@3.10.0-1160.155.1.rt56.1307.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product": {
"name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_id": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@3.10.0-1160.155.1.rt56.1307.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product": {
"name": "kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_id": "kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace-debuginfo@3.10.0-1160.155.1.rt56.1307.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"product": {
"name": "kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"product_id": "kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-doc@3.10.0-1160.155.1.rt56.1307.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src"
},
"product_reference": "kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"relates_to_product_reference": "7Server-RT-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
},
"product_reference": "kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"relates_to_product_reference": "7Server-RT-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
},
"product_reference": "kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"relates_to_product_reference": "7Server-RT-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
},
"product_reference": "kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"relates_to_product_reference": "7Server-RT-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
},
"product_reference": "kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"relates_to_product_reference": "7Server-RT-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
},
"product_reference": "kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"relates_to_product_reference": "7Server-RT-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
},
"product_reference": "kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"relates_to_product_reference": "7Server-RT-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
},
"product_reference": "kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"relates_to_product_reference": "7Server-RT-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch"
},
"product_reference": "kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"relates_to_product_reference": "7Server-RT-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
},
"product_reference": "kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"relates_to_product_reference": "7Server-RT-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
},
"product_reference": "kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"relates_to_product_reference": "7Server-RT-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)",
"product_id": "7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
},
"product_reference": "kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"relates_to_product_reference": "7Server-RT-ELS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-23243",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-03-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448594"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s Remote Direct Memory Access (RDMA) `umad` (User Mode Access Device) component. A local user can exploit this vulnerability by manipulating input, causing an integer underflow that leads to an out-of-bounds memory write. This memory corruption can result in a denial of service (DoS) by crashing the system, and may also lead to limited information disclosure or data integrity issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: Denial of service and memory corruption in RDMA umad",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This bug is a kernel out-of-bounds write in the RDMA umad write path caused by a user-controlled length calculation that could underflow and pass an invalid data_len into MAD send buffer creation.\nA local user with access to the umad interface can trigger the issue by supplying mismatched MAD and RMPP header sizes, which leads to an out-of-bounds memset in the send MAD allocation path and can corrupt kernel memory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23243"
},
{
"category": "external",
"summary": "RHBZ#2448594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23243"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026031816-CVE-2026-23243-b88e@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026031816-CVE-2026-23243-b88e@gregkh/T"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent module ib_umad from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Linux kernel: Denial of service and memory corruption in RDMA umad"
},
{
"cve": "CVE-2026-23455",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-04-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s netfilter subsystem, specifically within the `nf_conntrack_h323` module. This vulnerability occurs in the `DecodeQ931()` function when processing a zero-length value from a packet. An integer underflow during a length calculation results in a large, incorrect value being passed to a subsequent function, leading to an out-of-bounds read. This could allow an attacker to cause a denial of service or potentially disclose sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23455"
},
{
"category": "external",
"summary": "RHBZ#2454810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23455",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23455"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23455",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23455"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026040317-CVE-2026-23455-f045@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026040317-CVE-2026-23455-f045@gregkh/T"
}
],
"release_date": "2026-04-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()"
},
{
"cve": "CVE-2026-31532",
"cwe": {
"id": "CWE-366",
"name": "Race Condition within a Thread"
},
"discovery_date": "2026-04-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461107"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s Controller Area Network (CAN) raw socket implementation. A use-after-free vulnerability can occur due to a timing window during the unregistration of CAN receive filters, allowing a freed memory region to be accessed. This could lead to system instability or a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: can: raw: fix ro-\u003euniq use-after-free in raw_rcv()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A use-after-free flaw in the Linux kernel CAN raw socket implementation can occur when raw_release() frees the per-CPU ro-\u003euniq storage before RCU-deferred receive callbacks have fully drained. A local attacker able to create raw CAN sockets and trigger CAN receive activity could race socket teardown with raw_rcv() and cause a kernel crash. The likely impact is denial of service, while privilege escalation would require additional, unproven control over per-CPU memory reuse.\nThe issue appears more consistent with an RCU lifetime/race-condition bug leading primarily to denial of service, as exploitation depends on a narrow teardown race involving a percpu object rather than a generic reclaimable slab object, with no demonstrated privilege-escalation path or obvious controlled overwrite primitive in the relatively niche CAN raw socket subsystem.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-31532"
},
{
"category": "external",
"summary": "RHBZ#2461107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461107"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-31532",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31532"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-31532",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31532"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026042349-CVE-2026-31532-a820@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026042349-CVE-2026-31532-a820@gregkh/T"
}
],
"release_date": "2026-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent the `can` kernel module from loading if CAN functionality is not required. This can be achieved by blacklisting the module.\n\nCreate a file named `/etc/modprobe.d/blacklist-can.conf` with the following content:\n```\nblacklist can\ninstall can /bin/true\n```\nAfter creating the file, regenerate the initramfs and reboot the system for the changes to take effect.\n```bash\ndracut -f -v\nreboot\n```\nThis mitigation may impact systems that rely on CAN interfaces for their operation.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: can: raw: fix ro-\u003euniq use-after-free in raw_rcv()"
},
{
"cve": "CVE-2026-31607",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-04-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461521"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s USB/IP subsystem. A malicious USB/IP server could exploit a vulnerability in the `usbip_pack_ret_submit()` function by sending a specially crafted `RET_SUBMIT` response. This response, containing an oversized `number_of_packets` value, could cause a heap out-of-bounds write. This issue may lead to a denial of service or potentially arbitrary code execution on the client system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: usbip: validate number_of_packets in usbip_pack_ret_submit()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-31607"
},
{
"category": "external",
"summary": "RHBZ#2461521",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461521"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-31607",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31607"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-31607",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31607"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026042420-CVE-2026-31607-7bac@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026042420-CVE-2026-31607-7bac@gregkh/T"
}
],
"release_date": "2026-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: usbip: validate number_of_packets in usbip_pack_ret_submit()"
},
{
"cve": "CVE-2026-31685",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461759"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s netfilter component. This vulnerability occurs because the `eui64_mt6()` function, which processes IPv6 packets, does not properly validate the MAC header for all packets. Specifically, packets with a zero fragment offset could bypass an existing guard, allowing the system to attempt to access an invalid MAC header. A remote attacker could exploit this by sending specially crafted IPv6 packets, potentially causing a system crash and leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-31685"
},
{
"category": "external",
"summary": "RHBZ#2461759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461759"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-31685",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31685"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-31685",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31685"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026042545-CVE-2026-31685-3fcc@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026042545-CVE-2026-31685-3fcc@gregkh/T"
}
],
"release_date": "2026-04-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets"
},
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
},
{
"cve": "CVE-2026-43110",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467014"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s brcmfmac Wi-Fi driver. This vulnerability occurs because the driver fails to properly validate bsscfg indices in interface (IF) events. An attacker could exploit this by sending a specially crafted IF event with an invalid bsscfg index, which could lead to an out-of-bounds write or read, potentially causing a system crash and resulting in a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: wifi: brcmfmac: validate bsscfg indices in IF events",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "brcmfmac IF event handling validates the firmware provided ifidx but still uses the raw bsscfgidx value as an index into the driver iflist array. A malformed firmware IF event with an out of range bsscfgidx can cause an out of bounds pointer read and may lead to an invalid pointer dereference or broader memory corruption depending on how the resulting ifp is used. For the CVSS the PR:N is used in the paranoid score because a practical attacker model may involve adjacent Wi-Fi influence over FullMAC firmware events rather than a local privileged user on the host. The issue is not reachable over a normal routed IP network. It is adjacent network or device firmware mediated. Impact is at least denial of service through a kernel crash or Wi-Fi driver failure. In the paranoid case, the unchecked firmware controlled array index potentially could lead to possible confidentiality and integrity impact (but primarily only Availability impact).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43110"
},
{
"category": "external",
"summary": "RHBZ#2467014",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467014"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43110",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43110"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43110",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43110"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050624-CVE-2026-43110-7309@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050624-CVE-2026-43110-7309@gregkh/T"
}
],
"release_date": "2026-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent module brcmfmac from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: wifi: brcmfmac: validate bsscfg indices in IF events"
},
{
"cve": "CVE-2026-43125",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"discovery_date": "2026-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467234"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s Distributed Lock Manager (dlm) module. An attacker could send specially crafted network messages with an oversized length parameter to the dlm_dump_rsb_name() function. This lack of validation can lead to an out-of-bounds write in the dlm_search_rsb_tree() function, potentially causing a buffer overflow. This vulnerability could allow for denial of service or, in some cases, arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: dlm: validate length in dlm_search_rsb_tree",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43125"
},
{
"category": "external",
"summary": "RHBZ#2467234",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467234"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43125",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43125"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43125",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43125"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050619-CVE-2026-43125-c9f9@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050619-CVE-2026-43125-c9f9@gregkh/T"
}
],
"release_date": "2026-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: dlm: validate length in dlm_search_rsb_tree"
},
{
"cve": "CVE-2026-43158",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467210"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s XFS filesystem. When adding extended attributes (xattrs), which are metadata associated with files, to leaf blocks, incorrect adjustments to the freemap can occur. This inconsistency allows the entries array and free space to overlap, leading to an assertion failure. A local user can exploit this to cause the filesystem to shut down, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A local user with the ability to set extended attributes on an XFS filesystem can trigger inconsistent xattr leaf freemap accounting through crafted xattr insertion patterns. This can cause xattr metadata regions to overlap, leading to filesystem corruption detection and XFS shutdown via a reachable assertion. The issue requires the creation of a specific filesystem metadata layout through repeated setxattr operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43158"
},
{
"category": "external",
"summary": "RHBZ#2467210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467210"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43158",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43158"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43158",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43158"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050631-CVE-2026-43158-cc20@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050631-CVE-2026-43158-cc20@gregkh/T"
}
],
"release_date": "2026-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks"
},
{
"cve": "CVE-2026-43163",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467059"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s md/bitmap component. This vulnerability involves a use-after-free race condition that occurs during array resize operations. When the `bitmap_daemon_work()` and `__bitmap_resize()` functions execute concurrently, they can access memory pages that have already been freed. This can lead to a General Protection Fault (GPF), which causes the system to crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: md/bitmap: fix GPF in write_page caused by resize race",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43163"
},
{
"category": "external",
"summary": "RHBZ#2467059",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467059"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43163",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43163"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43163",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43163"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050632-CVE-2026-43163-86e1@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050632-CVE-2026-43163-86e1@gregkh/T"
}
],
"release_date": "2026-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: md/bitmap: fix GPF in write_page caused by resize race"
},
{
"cve": "CVE-2026-43190",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467064"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel, specifically within the netfilter: xt_tcpmss module. A remote attacker could exploit this vulnerability by sending a specially crafted TCP packet. The TCP option parser does not properly validate the remaining option length, which results in an out-of-bounds read. This allows an attacker to access memory beyond the intended buffer, potentially leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: netfilter: xt_tcpmss: check remaining length before reading optlen",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "xt_tcpmss can read one byte past the TCP option boundary when the last option byte is not EOL or NOP. The parser may evaluate op i plus 1 while i is already the final byte of the option area, so a crafted TCP packet can trigger an out of bounds read in the netfilter match path. If the attacker can send packets through a ruleset that uses the tcpmss match, then it can trigger this bug. The issue is network reachable only on systems with an applicable xt_tcpmss or iptables rule, and it is not a generic TCP stack exposure. Impact is primarily limited confidentiality risk from a one byte out of bounds read and possible low availability impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43190"
},
{
"category": "external",
"summary": "RHBZ#2467064",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467064"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43190",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43190"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050642-CVE-2026-43190-f1c9@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050642-CVE-2026-43190-f1c9@gregkh/T"
}
],
"release_date": "2026-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: netfilter: xt_tcpmss: check remaining length before reading optlen"
},
{
"cve": "CVE-2026-43198",
"cwe": {
"id": "CWE-821",
"name": "Incorrect Synchronization"
},
"discovery_date": "2026-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467228"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel. A race condition exists in the TCP (Transmission Control Protocol) IPv6 (Internet Protocol version 6) socket handling, specifically within the tcp_v6_syn_recv_sock() function. This occurs because a child socket becomes visible in the TCP hash table before its IPv6-specific information is fully initialized. A remote attacker could potentially exploit this timing window, leading to an unstable system state or unexpected behavior, which may result in a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: tcp: fix potential race in tcp_v6_syn_recv_sock()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43198"
},
{
"category": "external",
"summary": "RHBZ#2467228",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467228"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43198",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43198"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43198",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43198"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050645-CVE-2026-43198-0870@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050645-CVE-2026-43198-0870@gregkh/T"
}
],
"release_date": "2026-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: tcp: fix potential race in tcp_v6_syn_recv_sock()"
},
{
"cve": "CVE-2026-45852",
"discovery_date": "2026-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482166"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s Remote Direct Memory Access (RDMA) subsystem, specifically within the `rxe` driver. An error in the `rxe_srq_from_init` function\u0027s memory management can lead to a double free vulnerability. This occurs when an attempt to copy data to user space fails, causing the same memory region to be freed twice. A local attacker could potentially exploit this flaw to cause a denial of service (DoS) by crashing the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: RDMA/rxe: Fix double free in rxe_srq_from_init",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45852"
},
{
"category": "external",
"summary": "RHBZ#2482166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482166"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45852"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026052708-CVE-2026-45852-fcf9@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026052708-CVE-2026-45852-fcf9@gregkh/T"
}
],
"release_date": "2026-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: RDMA/rxe: Fix double free in rxe_srq_from_init"
},
{
"cve": "CVE-2026-46090",
"cwe": {
"id": "CWE-364",
"name": "Signal Handler Race Condition"
},
"discovery_date": "2026-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s ALSA (Advanced Linux Sound Architecture) aloop driver. This Use-After-Free (UAF) vulnerability occurs when loopback_check_format() stops the capture side during a format change, while a concurrent close operation detaches or frees the runtime. An attacker could potentially exploit this to cause a system crash or achieve arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46090"
},
{
"category": "external",
"summary": "RHBZ#2481980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46090",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46090"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46090",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46090"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026052702-CVE-2026-46090-1211@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026052702-CVE-2026-46090-1211@gregkh/T"
}
],
"release_date": "2026-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop"
},
{
"cve": "CVE-2026-46181",
"cwe": {
"id": "CWE-366",
"name": "Race Condition within a Thread"
},
"discovery_date": "2026-05-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482532"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s RDMA/mlx4 component. This vulnerability arises from the incorrect use of Read-Copy Update (RCU) in the `mlx4_srq_event()` function. An attacker could potentially trigger an event before the `srq` object is fully initialized, leading to a system crash. This could result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46181"
},
{
"category": "external",
"summary": "RHBZ#2482532",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482532"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46181"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026052829-CVE-2026-46181-ecff@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026052829-CVE-2026-46181-ecff@gregkh/T"
}
],
"release_date": "2026-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()"
},
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits, preventing privilege escalation. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to escalate privileges within the container, not on the host or across pods.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-17T12:55:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41236"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.src",
"7Server-RT-ELS:kernel-rt-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debug-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-doc-0:3.10.0-1160.155.1.rt56.1307.el7.noarch",
"7Server-RT-ELS:kernel-rt-trace-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-debuginfo-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64",
"7Server-RT-ELS:kernel-rt-trace-devel-0:3.10.0-1160.155.1.rt56.1307.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
}
]
}
RHSA-2026:47727
Vulnerability from csaf_redhat - Published: 2026-08-06 14:57 - Updated: 2026-08-12 09:34Summary
Red Hat Security Advisory: OpenShift Container Platform 4.17.56 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.17.56 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container
Platform 4.17.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.17.56. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHBA-2026:47726
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/
Security Fix(es):
* kernel: netfilter: flowtable: strictly check for maximum number of
actions (CVE-2026-43329)
* kernel: Linux kernel: smb: client: reject userspace cifs.spnego
descriptions (CVE-2026-46243)
* kernel: Linux kernel: Use-After-Free in net/gro due to improper handling
of zerocopy skbs (CVE-2026-46323)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.17 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Netfilter flowtable component of the Linux kernel. This vulnerability occurs because the system does not strictly check the maximum number of hardware offload actions for IPv6, allowing it to process more actions than supported. This could potentially lead to system instability or a denial of service (DoS) condition, where the affected system becomes unresponsive.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in the Linux kernel's Generic Receive Offload (GRO) networking subsystem. This vulnerability occurs when `skb_gro_receive()` attempts to merge zerocopy socket buffers (skbs) without properly managing page reference counts, specifically when the `SKBFL_MANAGED_FRAG_REFS` flag is set. An attacker could potentially exploit this to trigger a Use-After-Free (UAF) condition, which is a memory corruption vulnerability that can lead to system instability or potentially arbitrary code execution.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
29 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.17.56 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\n This release includes a security update for Red Hat OpenShift Container\nPlatform 4.17.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container\nPlatform 4.17.56. See the following advisory for the RPM packages for this\nrelease:\n\nhttps://access.redhat.com/errata/RHBA-2026:47726\n\nSpace precludes documenting all of the container images in this advisory.\nSee the following Release Notes documentation, which will be updated\nshortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/\n\nSecurity Fix(es):\n\n* kernel: netfilter: flowtable: strictly check for maximum number of\nactions (CVE-2026-43329)\n* kernel: Linux kernel: smb: client: reject userspace cifs.spnego\ndescriptions (CVE-2026-46243)\n* kernel: Linux kernel: Use-After-Free in net/gro due to improper handling\nof zerocopy skbs (CVE-2026-46323)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.17 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:47727",
"url": "https://access.redhat.com/errata/RHSA-2026:47727"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2468124",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468124"
},
{
"category": "external",
"summary": "2479832",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479832"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47727.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.17.56 bug fix and security update",
"tracking": {
"current_release_date": "2026-08-12T09:34:31+00:00",
"generator": {
"date": "2026-08-12T09:34:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:47727",
"initial_release_date": "2026-08-06T14:57:32+00:00",
"revision_history": [
{
"date": "2026-08-06T14:57:32+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-06T14:57:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-12T09:34:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.17",
"product": {
"name": "Red Hat OpenShift Container Platform 4.17",
"product_id": "9Base-RHOSE-4.17",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.17::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-aarch64-417.94.202607240132-0",
"product": {
"name": "rhcos-aarch64-417.94.202607240132-0",
"product_id": "rhcos-aarch64-417.94.202607240132-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@417.94.202607240132?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-ppc64le-417.94.202607240132-0",
"product": {
"name": "rhcos-ppc64le-417.94.202607240132-0",
"product_id": "rhcos-ppc64le-417.94.202607240132-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@417.94.202607240132?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-s390x-417.94.202607240132-0",
"product": {
"name": "rhcos-s390x-417.94.202607240132-0",
"product_id": "rhcos-s390x-417.94.202607240132-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@417.94.202607240132?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-x86_64-417.94.202607240132-0",
"product": {
"name": "rhcos-x86_64-417.94.202607240132-0",
"product_id": "rhcos-x86_64-417.94.202607240132-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@417.94.202607240132?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-aarch64-417.94.202607240132-0 as a component of Red Hat OpenShift Container Platform 4.17",
"product_id": "9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0"
},
"product_reference": "rhcos-aarch64-417.94.202607240132-0",
"relates_to_product_reference": "9Base-RHOSE-4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-ppc64le-417.94.202607240132-0 as a component of Red Hat OpenShift Container Platform 4.17",
"product_id": "9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0"
},
"product_reference": "rhcos-ppc64le-417.94.202607240132-0",
"relates_to_product_reference": "9Base-RHOSE-4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-s390x-417.94.202607240132-0 as a component of Red Hat OpenShift Container Platform 4.17",
"product_id": "9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0"
},
"product_reference": "rhcos-s390x-417.94.202607240132-0",
"relates_to_product_reference": "9Base-RHOSE-4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-x86_64-417.94.202607240132-0 as a component of Red Hat OpenShift Container Platform 4.17",
"product_id": "9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0"
},
"product_reference": "rhcos-x86_64-417.94.202607240132-0",
"relates_to_product_reference": "9Base-RHOSE-4.17"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-43329",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2468124"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Netfilter flowtable component of the Linux kernel. This vulnerability occurs because the system does not strictly check the maximum number of hardware offload actions for IPv6, allowing it to process more actions than supported. This could potentially lead to system instability or a denial of service (DoS) condition, where the affected system becomes unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: netfilter: flowtable: strictly check for maximum number of actions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43329"
},
{
"category": "external",
"summary": "RHBZ#2468124",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468124"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43329",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43329"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43329",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43329"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43329.mbox",
"url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43329.mbox"
}
],
"release_date": "2026-05-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T14:57:32+00:00",
"details": "For OpenShift Container Platform 4.17 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:424acee89e2db0e1be3213da3db28967da2c61fcf2830ee8f83f51a48d973394\n\n (For s390x architecture)\n The image digest is sha256:20b10e83cd8ee11260ba13f3350e5434e34d312bdc36f6a623e1993be929885d\n\n (For ppc64le architecture)\n The image digest is sha256:55b9233eebf35c2e83ace7eb9498a39506374e1383a4894cb5f2d975a4f2ca65\n\n (For aarch64 architecture)\n The image digest is sha256:b448c5f0dbce94c2a8cafacbb73c3839970666a4140ea38fdab1b0db7fa2e005\n\nAll OpenShift Container Platform 4.17 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47727"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: netfilter: flowtable: strictly check for maximum number of actions"
},
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits, preventing privilege escalation. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container\u0027s own filesystem. An attacker would only be able to escalate privileges within the container, not on the host or across pods.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T14:57:32+00:00",
"details": "For OpenShift Container Platform 4.17 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:424acee89e2db0e1be3213da3db28967da2c61fcf2830ee8f83f51a48d973394\n\n (For s390x architecture)\n The image digest is sha256:20b10e83cd8ee11260ba13f3350e5434e34d312bdc36f6a623e1993be929885d\n\n (For ppc64le architecture)\n The image digest is sha256:55b9233eebf35c2e83ace7eb9498a39506374e1383a4894cb5f2d975a4f2ca65\n\n (For aarch64 architecture)\n The image digest is sha256:b448c5f0dbce94c2a8cafacbb73c3839970666a4140ea38fdab1b0db7fa2e005\n\nAll OpenShift Container Platform 4.17 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47727"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
},
{
"cve": "CVE-2026-46323",
"cwe": {
"id": "CWE-123",
"name": "Write-what-where Condition"
},
"discovery_date": "2026-05-19T11:49:44.372000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2479832"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s Generic Receive Offload (GRO) networking subsystem. This vulnerability occurs when `skb_gro_receive()` attempts to merge zerocopy socket buffers (skbs) without properly managing page reference counts, specifically when the `SKBFL_MANAGED_FRAG_REFS` flag is set. An attacker could potentially exploit this to trigger a Use-After-Free (UAF) condition, which is a memory corruption vulnerability that can lead to system instability or potentially arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Linux kernel\u0027s Generic Receive Offload (GRO) networking subsystem. The vulnerability, a variant of Fragnesia, stems from improper management of page reference counts when merging zerocopy socket buffers. An attacker could exploit this Use-After-Free condition to achieve arbitrary code execution or cause system instability on affected Red Hat Enterprise Linux and OpenShift Container Platform systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46323"
},
{
"category": "external",
"summary": "RHBZ#2479832",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479832"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46323",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46323"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46323",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46323"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1f9c828556416fbe3f49386708ce999fc4d4da06",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1f9c828556416fbe3f49386708ce999fc4d4da06"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=44bea2032af0425e4ce6d26a8af0ede79db49ec1",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=44bea2032af0425e4ce6d26a8af0ede79db49ec1"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=479084ae0e1d9cb7929cb4298d35623de189f80a",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=479084ae0e1d9cb7929cb4298d35623de189f80a"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=4db79a322db8c97f7b73b8a347395ef4d685eb40",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=4db79a322db8c97f7b73b8a347395ef4d685eb40"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e334cbf3388fd9334503a778a82d9e9f14dd2f71",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e334cbf3388fd9334503a778a82d9e9f14dd2f71"
},
{
"category": "external",
"summary": "https://lore.kernel.org/netdev/4d583fc5401298453d0a2f1b4719a15be30c8e49.1779194090.git.sd@queasysnail.net/",
"url": "https://lore.kernel.org/netdev/4d583fc5401298453d0a2f1b4719a15be30c8e49.1779194090.git.sd@queasysnail.net/"
},
{
"category": "external",
"summary": "https://lore.kernel.org/netdev/agVpIsaSherjHTYg@sultan-box/",
"url": "https://lore.kernel.org/netdev/agVpIsaSherjHTYg@sultan-box/"
}
],
"release_date": "2026-05-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T14:57:32+00:00",
"details": "For OpenShift Container Platform 4.17 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:424acee89e2db0e1be3213da3db28967da2c61fcf2830ee8f83f51a48d973394\n\n (For s390x architecture)\n The image digest is sha256:20b10e83cd8ee11260ba13f3350e5434e34d312bdc36f6a623e1993be929885d\n\n (For ppc64le architecture)\n The image digest is sha256:55b9233eebf35c2e83ace7eb9498a39506374e1383a4894cb5f2d975a4f2ca65\n\n (For aarch64 architecture)\n The image digest is sha256:b448c5f0dbce94c2a8cafacbb73c3839970666a4140ea38fdab1b0db7fa2e005\n\nAll OpenShift Container Platform 4.17 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47727"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.17:rhcos-aarch64-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-ppc64le-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-s390x-417.94.202607240132-0",
"9Base-RHOSE-4.17:rhcos-x86_64-417.94.202607240132-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…