Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

kernel: netfs: Fix potential for tearing in ->remote_i_size and ->zero_point

A flaw was found in the Linux kernel's network file system netfs component. This vulnerability, known as 'tearing', occurs when the system attempts to update file size information remoteisize and zeropoint without proper synchronization. This can lead to corrupted file size counters isizeseqcount...

kernel: netfs: Fix early put of sink folio in netfs_read_gaps()

A flaw was found in the Linux kernel's network file system netfs. This use-after-free vulnerability occurs when the netfsreadgaps function prematurely releases a memory page during network read operations. A remote attacker could exploit this by sending specially crafted network traffic, leading ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netfs: Fixed the issue of using collection offloading during writing operations. The issue was addressed by fixing the process of setting NETFSRREQOFFLOADCOLLECTION during writes, so that collections are processed asynchronously,...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writeback error handling Fix the error handling in the writebackiter loop. If an error occurs, writebackiter must be called again with error set to the error so that it can clean up its iteration state. Additionally, t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netfs: Fixed netfscreatewritereq to handle the creation of async cache objects. netfscreatewritereq will skip caching if the fscache cookie is disabled. However, this is a problem because the async cache object creation might not...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folioqueue ENOMEM in writeback by adding a mempool Fix the handling of folioqueue allocation failure in writeback by adding a mempool and passing in gfpt flags to the rolling buffer functions that allocate memory, usin...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: netfs: Clear the post-EOF pagecache when extending a file via write Fix netfs to erase the contents of a hole created after the EOF by an ordinary write if dirty data has been previously left there by writes through an mmapped...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netfs: Fixed a barrier issue when traversing the subrequest list. The barrier issue was addressed during the traversal of the subrequest list in retry operations, as there is a possibility of encountering a subrequest that has ju...

Astra Linux – vulnerability in linux-6.18

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio state after ENOMEM whilst under writeback iteration Fix the state of the current folio when ENOMEM occurs during writeback iteration. The folio must be redirred and unlocked before the terminal writebackiter is...

Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521...

Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521...

SUSE-SU-2026:24639-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24681-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24680-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-6396...

SUSE-SU-2026:24679-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24678-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24636-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24635-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24677-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...