Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path

A flaw was found in the Linux kernel's NVMe over TCP target nvmet-tcp implementation. When a data digest mismatch is detected, nvmetrequninit is called unconditionally, but if the command was already in the INITFAILED state, the matching percpureftrygetlive was never performed. The resulting...

kernel: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock

A flaw was found in the nvmet-tcp component of the Linux kernel. This vulnerability arises from ignoring the return value of a function during the TLS handshake, specifically when the network socket is not in an established state. This oversight prevents proper cleanup, leading to the leakage of...

kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()

A flaw was found in the Linux kernel's NVMe over Fabrics NVMe-oF target authentication component. A remote attacker connecting to the NVMe target service can exploit this vulnerability by sending a crafted authentication request, causing a Denial of Service DoS through a system crash or potential...

kernel: nvmet-auth: Synchronize timeout work during SQ teardown

A flaw was found in the nvmet-auth component of the Linux kernel. A timing issue during the cleanup of a Submission Queue SQ can lead to a use-after-free vulnerability. This occurs when a delayed authentication task attempts to access memory that has already been released or repurposed. An attack...

kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()

A flaw was found in the Linux kernel's NVMe over Fabrics NVMe-oF target authentication component. A remote attacker connecting to the NVMe target service can exploit this vulnerability by sending a crafted authentication request, causing a Denial of Service DoS through a system crash or potential...

kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

A flaw was found in the Linux kernel's nvmet subsystem. An unauthenticated remote attacker could exploit an out-of-bounds heap read vulnerability in the Discovery Get Log Page function. By sending a specially crafted request with a manipulated offset, an attacker could read sensitive kernel memor...

kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path

A flaw was found in the Linux kernel's NVMe over TCP target nvmet-tcp implementation. When a data digest mismatch is detected, nvmetrequninit is called unconditionally, but if the command was already in the INITFAILED state, the matching percpureftrygetlive was never performed. The resulting...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 9 : kernel (RHSA-2026:98047)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98047 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nfqueue: hold brid...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151135)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151135 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: reject unsolicited H2CData PDUs nvmettcphandleh2cdatapdu accepts an H2CData PDU after...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-151324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151324 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU nvmettcptryrecvpdu reads a PDU...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-151315)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151315 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: reject unsolicited H2CData PDUs nvmettcphandleh2cdatapdu accepts an H2CData PDU after...

Astra Linux – vulnerability in linux-6.18

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmetexecutegetlogpagermi leaves ‘status’ holding NVMESCSUCCESS set by the successful nvmetreqfindns call when the kzalloc for the log buffer fails. It then jumps to...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: nvmet: use the local P2P device on metadata allocation failure nvmetreqallocp2pmemsgls assigns req-p2pdev only after both the data and metadata SGL allocations succeed. If the data allocation succeeds but the metadata allocation...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: The return value of nvmettcpsetqueuesock is currently ignored in nvmettcptlshandshakedone. If this function fails e.g., because the socket is not in the TCPESTABLISHED state, the socket callbacks will not be properly...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: When data digest is enabled on an NVMe/TCP connection and a digest mismatch occurs on a non-final H2CDATA PDU during an R2T-based data...

Astra Linux – vulnerability in linux-6.18

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: reject too-short SGL segments The host controls the length of an SGL segment. A non-zero length smaller than one SGL descriptor causes nrdescs to be set to zero; as a result, nvmetpciepfgetsglsegment reads the typ...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INITFAILED before nvmetrequninit in digest error path In nvmettcptryrecvddgst, when a data digest mismatch is detected, nvmetrequninit is called unconditionally. However, if the command arrived via the...

MiracleLinux 9 : kernel-5.14.0-687.64.1.el9_8 (AXSA:2026-2261:117)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2261:117 advisory. kernel: sctp: stream: fully roll back denied add-stream state CVE-2026-52929 kernel: ipv6: sit: reload inner IPv6 header after GSO offloads...