RHEL 9 : kernel (RHSA-2026:77215)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77215 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: linux/dim: Fix divide by 0 in...

Unbreakable Enterprise kernel security update

6.12.0-207.111.5.1 - selftests/mm/khugepaged: include kselftest.h in khugepaged Sherry Yang Orabug: 40099804 6.12.0-207.111.5 - Rename ONOS kernel flavor to OSP for OL9 and OL10 Vijay Kumar Orabug: 40055216 - tcp: Remove hashinfo test for inet6?lookuprunsklookup. Kuniyuki Iwashima Orabug: 4005230...

K000163557: Linux kernel vulnerability CVE-2026-43313

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix NULL-pointer dereference in acpiprocessorerratapiix4 In acpiprocessorerratapiix4, the pointer dev is first assigned an IDE device and then reassigned an ISA device: dev =...

CVE-2026-98170

A flaw was found in the Linux kernel's SMB client. When processing extended file attributes returned by a server, insufficient buffer validation allows the kernel to read data past the allocated boundaries. A malicious or compromised server could exploit this issue by returning a malformed...

CVE-2026-98167

A flaw was found in the Linux kernel's SMB client. When processing compound encrypted Protocol Data Units PDUs, the client incorrectly validates the length of individual messages within the compound frame. A malicious or compromised SMB server can exploit this flaw by returning truncated sub-PDUs...

CVE-2026-98168

A flaw was found in the Linux kernel's Server Message Block SMB client. In the reparse point query handling logic, the client fails to properly validate response buffer boundaries before accessing data structures. A malicious or compromised SMB server can exploit this by returning a crafted...

CVE-2026-98169

A flaw was found in the Linux kernel's Server Message Block SMB client. This issue leads to information disclosure caused by an out-of-bounds memory read during snapshot enumeration. A malicious SMB server can provide an unexpectedly short response, causing the kernel client to read beyond the...

CVE-2026-98166

A flaw was found in the Linux kernel's DRM TTM Direct Rendering Manager Translation Table Manager subsystem. Due to an improper status check during memory swapout operations, swapped-out buffer resources are not properly untracked, leaving stale pointers referencing freed memory. A local user cou...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.41 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free i...

SUSE-SU-2026:4551-1 Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-fr...

CVE-2026-80810

A flaw was found in the Linux kernel. An integer overflow vulnerability in the iouring/rsrc component, specifically within the iovecfillbvec function, can lead to incorrect memory calculations when handling very large memory pages. This error causes the kernel to access memory outside of its...

CVE-2026-80887

A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...

CVE-2026-80852

A flaw was found in the Linux kernel's TLS device driver. A local attacker could exploit an out-of-bounds write vulnerability in the tlsappendfrag function when handling TLSTXZEROCOPYRO with spliceSPLICEFMORE operations. This flaw allows an attacker to cause memory corruption, leading to a denial...

CVE-2026-80842

A flaw was found in the Linux kernel's bridge multicast mcast component. A race condition in the handling of a master VLAN's multicast context during teardown can allow a network attacker to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service DoS...

CVE-2026-80850

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. An unprivileged local attacker could exploit a race condition when a network device is detached from its Virtual Routing and Forwarding VRF interface. This could lead to a use-after-free vulnerability, causing...

CVE-2026-81003

A flaw was found in the Linux kernel's AFIUCV Advanced Program-to-Program Communication over IUCV network protocol implementation. The afiucvhsrcv function, responsible for receiving frames, does not properly filter incoming frames based on the ingress network device. This oversight allows a loca...

CVE-2026-80878

A flaw was found in the Linux kernel's AFS Andrew File System implementation. This issue occurs when afslookupvolumercu fails to acquire a volume, leading to a resource leak. A local attacker could potentially exploit this flaw to cause a denial of service due to resource exhaustion...

CVE-2026-80837

A flaw was found in the Linux kernel. A race condition exists in the netfilter's nftables subsystem when handling packet path object notifications. This can lead to a use-after-free vulnerability, allowing a local or remote attacker to send specially crafted packets, potentially causing a denial ...

CVE-2026-80841

A flaw was found in the Linux kernel's net/packet component, specifically within the AFPACKET transmission ring. This vulnerability occurs because virtual memory allocated for network packet handling is prematurely released while active network buffers socket kernel buffers, or skbs still hold...