Critical: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2026-22009-Linux-eBPF-Map-Locking-Race-Use-After-Free

CVE-2026-22009 – Linux eBPF Map Locking Race → Use‑After‑Free Program Code C simulation // ebpfmapuaf.c - Simulated concurrent map update/free include include include include void mapdata = NULL; int mapfreed = 0; void updatemapvoid arg // Simulate eBPF program updating map if !mapfreed char...

Critical: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

Critical: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 For more details about the security issues, including the...

ALSA-2026:93415 Critical: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 For more details about the security issues, including the...

cve-2026-52910-poc

CVE-2026-52910 — reuseport cBPF use-after-free reproducer A race reproducer and stress toolkit for CVE-2026-52910 , a use-after-free UAF in the Linux kernel's handling of classic BPF cBPF reuseport selector programs , fixed upstream by commit "bpf: Free reuseport cBPF prog after RCU grace period"...

Amazon Linux 2 : kernel (ALAS-2026-4065)

The version of kernel installed on the remote host is prior to 4.14.355-287.758. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4065 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace perio...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-137)

The version of kernel installed on the remote host is prior to 5.10.271-272.1121. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.10-2026-137 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-120)

The version of kernel installed on the remote host is prior to 5.15.222-158.256. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.15-2026-120 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2026-135)

The version of kernel installed on the remote host is prior to 5.4.302-229.503. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2026-135 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU gra...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.15 Extra. Visit this page to learn more about Amazon...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.4 Extra. Visit this page to learn more about Amazon...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.10 Extra. Visit this page to learn more about Amazon...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 Affected Packages: kernel Issue Correction: Run dnf update kernel --releasever 2023.12.20261102 or dnf update --advisory ALAS2023-2026-3365...

CVE-2026-99173

In the Linux kernel, the following vulnerability has been resolved: eventfs: Free the eventfsinode after an rcu grace period too tracefsdrevalidate reads -isfreed of the eventfsinode that dentry-dfsdata points to, and -drevalidate is called in rcu pathwalk mode with nothing but rcureadlock held...

CVE-2026-99174

In the Linux kernel, the following vulnerability has been resolved: ext4: free the sbi after a grace period ext4getlink follows a symlink that keeps its target in a data block in rcu pathwalk mode with ext4getblkEXT4GETBLOCKSCACHEDNOWAIT. That reads smountstate in the ASSERT of ext4getblk and aga...

DEBIAN-CVE-2026-99171

In the Linux kernel, the following vulnerability has been resolved: ntfs3: free the sbi after a grace period If the "nocase" mount option ntfs3 uses custom hash and dentry compare functions. Both access ntfs3 superblock private information in rcu pathwalk. ntfsputsuper and ntfs3killsb drop the in...

CVE-2026-99180 unicode: free the map after a grace period

In the Linux kernel, the following vulnerability has been resolved: unicode: free the map after a grace period genericcidhash and genericcidcompare read sb-sencoding and dereference the unicode map while a pathwalk in rcu mode holds nothing but rcureadlock. The filesystems that use them, ext4, f2...

EUVD-2026-111923

In the Linux kernel, the following vulnerability has been resolved: ntfs3: free the sbi after a grace period If the "nocase" mount option ntfs3 uses custom hash and dentry compare functions. Both access ntfs3 superblock private information in rcu pathwalk. ntfsputsuper and ntfs3killsb drop the in...