Red Hat Security Advisory: kernel security update

Fixed packages 81

Vulnerabilities 4

• Critical 9.8
  CVE-2026-31402 Public exploit

  nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

  In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses. This size…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 3, 2026
• High 8.8
  CVE-2026-23193

  scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

  In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() In iscsit_dec_session_usage_count(), the function calls complete() while holding the sess->session_usage_lock. Simi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 14, 2026
• Unscored —
  CVE-2025-71238

  scsi: qla2xxx: Fix bsg_done() causing double free

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix bsg_done() causing double free Kernel panic observed on system, [5353358.825191] BUG: unable to handle page fault for address: ff5f5e897b024000 [5353358.825194] #PF: superv…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Mar 4, 2026
• Unscored —
  CVE-2026-23097

  migrate: correct lock ordering for hugetlb file folios

  In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock (analyzed by Lance Yang): 1) Task (5749): Holds folio_lock, then tries to acquire i_mmap_rwsem(read lock). 2…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 4, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2436802
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2439887
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2444398
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2454844
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13664.json
• report
  https://access.redhat.com/security/cve/CVE-2025-71238
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-71238
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-71238
• article
  https://lore.kernel.org/linux-cve-announce/2026030437-CVE-2025-71238-76bc@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23097
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23097
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23097
• article
  https://lore.kernel.org/linux-cve-announce/2026020427-CVE-2026-23097-a591@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23193
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23193
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23193
• article
  https://lore.kernel.org/linux-cve-announce/2026021434-CVE-2026-23193-2c6c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-31402
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-31402
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-31402
• article
  https://lore.kernel.org/linux-cve-announce/2026040327-CVE-2026-31402-3e6a@gregkh/T