CVE-2026-63869

A flaw was found in the Linux kernel's mac80211 WiFi subsystem. This vulnerability allows an attacker to cause undefined behavior by injecting a specially crafted frame with an invalid radiotap header. This can lead to system instability or a denial of service DoS, potentially causing the system ...

CVE-2026-63870

A flaw was found in the Linux kernel's 6LoWPAN IPv6 over Low-Power Wireless Personal Area Networks module. When a non-IPv6 packet is transmitted over a 6LoWPAN interface, the system attempts to process uninitialized data. This can lead to system instability or a denial of service, making the syst...

CVE-2026-63868

A flaw was found in the Linux kernel's Generic Attribute Registration Protocol GARP network component. A remote attacker could send specially crafted GARP attributes, leading to an unsigned integer underflow during attribute parsing. This underflow causes the system to incorrectly process attribu...

CVE-2026-63867

A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. A race condition exists when computing the receive window, where the acknowledgment sequence number is accessed without proper locking. This can lead to inconsistencies in how the receive window is calculated and...

CVE-2026-63866

A flaw was found in the Linux kernel's mt76 Wi-Fi driver for mt7996 devices. This vulnerability occurs when the mt7996macstadeinitlink routine fails to properly clear a Wireless Client ID WCID pointer when removing a station link. This improper handling of the WCID pointer may lead to a resource...

CVE-2026-63865

A flaw was found in the Linux kernel. The Berkeley Packet Filter BPF Linux Security Modules LSM feature incorrectly registered certain hooks, tasktoinode and inetconnestablished, as available for sleepable programs. These hooks are invoked in critical system contexts where program sleeping is not...

CVE-2026-63862

A flaw was found in the Linux kernel's MediaTek PCIe Peripheral Component Interconnect Express generation 3 driver. This vulnerability occurs because interrupt request IRQ domains are allocated before verifying the controller's IRQ. If the IRQ fetch fails, the allocated domains are not properly...

CVE-2026-63861

A flaw was found in the Linux kernel's mtk-snfi MediaTek SPI NAND Flash Interface driver. The mtksnandprobe function, responsible for registering the on-host NAND Error Correcting Code ECC engine, did not properly unregister the engine during probe failures or device removal. This oversight could...

CVE-2026-63856

A flaw was found in the Linux kernel's AMDGPU Video Core Next VCN 2.0 component. This vulnerability arises because the VCN encoder and decoder rings do not properly support 64-bit user fence writes. An attacker could exploit this by submitting command sequences with 64-bit user fences, leading to...

CVE-2026-63864

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. The visittailcallinsn function, which is part of the BPF program validation process, failed to check and propagate error return values. This oversight could lead to an unhandled error condition within the kernel,...

CVE-2026-63863

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Processing Unit Shared Virtual Memory gpusvm component. This vulnerability is caused by an unbalanced lock and unlock operation, which can lead to system instability. An attacker could potentially exploit this to trigger...

CVE-2026-63860

A flaw was found in the Linux kernel's RDMA/core component. This vulnerability arises from the improper handling of Netlink Attribute NLA strings, where attributes evaluated as C-strings do not properly check for a null terminator. A local attacker could potentially provide specially crafted inpu...

CVE-2026-63858

A flaw was found in the Linux kernel's netfilter nftables subsystem. This vulnerability could lead to a denial of service for network filtering operations. The issue occurs because the process of deleting network hooks improperly modifies a protected list, which can disrupt how network...

kernel: ice: fix double-free of tx_buf skb

A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...

kernel: fanotify: fix false positive on permission events

A flaw was found in the Linux kernel's fanotify subsystem. This vulnerability allows for a bypass of permission checks because the fsnotifygetmarksafe function may incorrectly return false for marks on unrelated groups. This could enable an attacker to perform unauthorized actions by circumventin...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

kernel: flex_proportions: make fprop_new_period() hardirq safe

A deadlock vulnerability was found in the Linux kernel's flexible proportions fprop code used for I/O writeback accounting. When a hardirq interrupts the seqcount write section in fpropnewperiod during softirq context, a reader in the hardirq handler can spin indefinitely waiting for the odd...

kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd

A flaw was found in the Linux kernel's trusted keys subsystem. A local user could exploit a memory leak in the tpm2loadcmd function, which fails to free a temporary memory allocation in certain error scenarios. This memory leak could lead to a system-wide Denial of Service DoS by exhausting...

kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc

A flaw was found in the Linux kernel's crypto AFALG subsystem. Memory allocated via sockkmalloc for crypto user API contexts is not zero-initialized, leaving fields with garbage values. Specifically, the 'inflight' variable can contain random data, causing afalgallocareq to spuriously return -EBU...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...