Red Hat Security Advisory: kernel security update

Fixed packages 71

Vulnerabilities 7

• High 7.8
  CVE-2026-31431 Exploited Public exploit EPSS 98%

  crypto: algif_aead - Revert to operating out-of-place

  In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux Alpine
  Apr 22, 2026

  KEV May 1, 2026
• Critical 9.8
  CVE-2024-41073

  nvme: avoid double free special payload

  In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQF_SPECI…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 29, 2024
• Critical 9.8
  CVE-2026-31402 Public exploit

  nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

  In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses. This size…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 3, 2026
• High 8.8
  CVE-2026-23193

  scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

  In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() In iscsit_dec_session_usage_count(), the function calls complete() while holding the sess->session_usage_lock. Simi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 14, 2026
• High 7.8
  CVE-2026-23191

  ALSA: aloop: Fix racy access at PCM trigger

  In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since b…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Feb 14, 2026
• Unscored —
  CVE-2026-23097

  migrate: correct lock ordering for hugetlb file folios

  In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock (analyzed by Lance Yang): 1) Task (5749): Holds folio_lock, then tries to acquire i_mmap_rwsem(read lock). 2…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 4, 2026
• Unscored —
  CVE-2026-43077

  crypto: algif_aead - Fix minimum RX size check for decryption

  In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account during decryption. Fix this by adding the re…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 6, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2301637
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2436802
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2439887
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2439947
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2454844
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2460538
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13734.json
• report
  https://access.redhat.com/security/cve/CVE-2024-41073
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-41073
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-41073
• article
  https://lore.kernel.org/linux-cve-announce/2024072909-CVE-2024-41073-1fb9@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23097
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23097
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23097
• article
  https://kernelcve.org/list/?q=CVE-2026-23097
• article
  https://lore.kernel.org/linux-cve-announce/2026020427-CVE-2026-23097-a591@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23191
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23191
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23191
• article
  https://lore.kernel.org/linux-cve-announce/2026021433-CVE-2026-23191-f990@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23193
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23193
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23193
• article
  https://lore.kernel.org/linux-cve-announce/2026021434-CVE-2026-23193-2c6c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-31402
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-31402
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-31402
• article
  https://lore.kernel.org/linux-cve-announce/2026040327-CVE-2026-31402-3e6a@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-31431
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2026-002
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-31431
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-31431
• article
  https://access.redhat.com/articles/7141989
• article
  https://access.redhat.com/solutions/7141931
• article
  https://access.redhat.com/solutions/7141979
• article
  https://access.redhat.com/solutions/7141990
• article
  https://access.redhat.com/solutions/7141996
• article
  https://access.redhat.com/solutions/7142032