Red Hat Security Advisory: kernel security update

Fixed packages 160

Vulnerabilities 7

• High 7.8
  CVE-2026-31431 Exploited Public exploit EPSS 98%

  crypto: algif_aead - Revert to operating out-of-place

  In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux Alpine
  Apr 22, 2026

  KEV May 1, 2026
• Critical 9.8
  CVE-2025-68741

  scsi: qla2xxx: Fix improper freeing of purex item

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex item In qla2xxx_process_purls_iocb(), an item is allocated via qla27xx_copy_multiple_pkt(), which internally calls qla24xx_alloc_purex_item(). The…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 24, 2025
• High 8.1
  CVE-2026-23401

  KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emulated MMIO SPTE, do so *after* dropping/zapping the existing SPTE (if it's shadow-present). …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 1, 2026
• High 7.8
  CVE-2024-53216

  nfsd: release svc_expkey/svc_export with rcu_work

  In the Linux kernel, the following vulnerability has been resolved: nfsd: release svc_expkey/svc_export with rcu_work The last reference for `cache_head` can be reduced to zero in `c_show` and `e_show`(using `rcu_read_lock` and `rcu_read_unlock`). Consequentl…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Dec 27, 2024
• High 7.8
  CVE-2026-23243

  RDMA/umad: Reject negative data_len in ib_umad_write

  In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP heade…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Mar 18, 2026
• High 7.8
  CVE-2026-31532

  can: raw: fix ro->uniq use-after-free in raw_rcv()

  In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is deferred with call_rcu(). This leaves a …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 23, 2026
• Unscored —
  CVE-2026-43077

  crypto: algif_aead - Fix minimum RX size check for decryption

  In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account during decryption. Fix this by adding the re…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 6, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2334415
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2425046
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448594
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2453803
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2460538
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2461107
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14339.json
• report
  https://access.redhat.com/security/cve/CVE-2024-53216
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-53216
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-53216
• article
  https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-53216.mbox
• article
  https://kernelcve.org/list/?q=CVE-2024-53216
• report
  https://access.redhat.com/security/cve/CVE-2025-68741
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-68741
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-68741
• article
  https://lore.kernel.org/linux-cve-announce/2025122415-CVE-2025-68741-894a@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23243
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23243
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23243
• article
  https://lore.kernel.org/linux-cve-announce/2026031816-CVE-2026-23243-b88e@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23401
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23401
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23401
• article
  https://lore.kernel.org/linux-cve-announce/2026040108-CVE-2026-23401-956d@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-31431
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2026-002
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-31431
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-31431
• article
  https://access.redhat.com/articles/7141989
• article
  https://access.redhat.com/solutions/7141931
• article
  https://access.redhat.com/solutions/7141979
• article
  https://access.redhat.com/solutions/7141990
• article
  https://access.redhat.com/solutions/7141996
• article
  https://access.redhat.com/solutions/7142032
• article
  https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/managing_monitoring_and_updating_the_kernel/configuring-kernel-command-line-parameters_managing-monitoring-and-updating-the-kernel
• article
  https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/T
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2026-31532