Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2026:13566 5 CVEs

Red Hat Security Advisory: kernel security update

Published May 5, 2026 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 90

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.1 kernel 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-devel 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-devel-matched 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-modules 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-modules-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debug-modules-extra 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-devel 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-devel-matched 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-modules 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-modules-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-64k-modules-extra 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-abi-stablelists 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-devel 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-devel-matched 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-modules 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-modules-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-modules-extra 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debug-uki-virt 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debuginfo-common-aarch64 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debuginfo-common-ppc64le 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debuginfo-common-s390x 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-debuginfo-common-x86_64 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-devel 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-devel-matched 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-doc 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-modules 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-modules-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-modules-extra 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-modules-extra-matched 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug-devel 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug-modules 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug-modules-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debug-modules-extra 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-devel 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-modules 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-modules-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-64k-modules-extra 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug-devel 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug-modules 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug-modules-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debug-modules-extra 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-devel 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-modules 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-modules-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-rt-modules-extra 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-tools 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-tools-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-tools-libs 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-tools-libs-devel 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-uki-virt 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-uki-virt-addons 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-devel 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-devel-matched 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-modules 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-modules-core 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kernel-zfcpdump-modules-extra 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 libperf 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 libperf-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 perf 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 perf-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 python3-perf 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 python3-perf-debuginfo 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 rtla 0:6.12.0-124.55.1.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 rv 0:6.12.0-124.55.1.el10_1

Vulnerabilities 5

  • High 7.8
    CVE-2026-31431 Exploited Public exploit EPSS 98%

    crypto: algif_aead - Revert to operating out-of-place

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux Alpine
    KEV May 1, 2026
  • Critical 9.8
    CVE-2026-31402 Public exploit

    nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

    In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses. This size…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-23270

    net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

    In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks As Paolo said earlier [1]: "Since the blamed commit below, classify can return TC_ACT_CONSUMED while the curren…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-31419

    net: bonding: fix use-after-free in bond_xmit_broadcast()

    In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original skb for the last slave (determined by bond_is_last_slave()) and clones it for others. Concu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-43077

    crypto: algif_aead - Fix minimum RX size check for decryption

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account during decryption. Fix this by adding the re…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2448745
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2454844
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2457829
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2460538
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13566.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-23270
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23270
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23270
  • article
    https://lore.kernel.org/linux-cve-announce/2026031847-CVE-2026-23270-cb9a@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-31402
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-31402
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-31402
  • article
    https://lore.kernel.org/linux-cve-announce/2026040327-CVE-2026-31402-3e6a@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-31419
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-31419
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-31419
  • article
    https://lore.kernel.org/linux-cve-announce/2026041353-CVE-2026-31419-e176@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-31431
  • article
    https://access.redhat.com/security/vulnerabilities/RHSB-2026-002
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-31431
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-31431
  • article
    https://access.redhat.com/articles/7141989
  • article
    https://access.redhat.com/solutions/7141931
  • article
    https://access.redhat.com/solutions/7141979
  • article
    https://access.redhat.com/solutions/7141990
  • article
    https://access.redhat.com/solutions/7141996
  • article
    https://access.redhat.com/solutions/7142032
  • article
    https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/managing_monitoring_and_updating_the_kernel/configuring-kernel-command-line-parameters_managing-monitoring-and-updating-the-kernel
  • article
    https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/T
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2026-43077
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2467022
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-43077
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-43077
  • article
    https://lore.kernel.org/linux-cve-announce/2026050612-CVE-2026-43077-d7b1@gregkh/T