Skip to content
OpenAdvisories
Critical RHSA-2026:24343 9 CVEs

Red Hat Security Advisory: kernel security update

Published Jun 8, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 91

ReleasePackageFixed in
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-debug 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-debug-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-debug-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-debug-devel 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-debug-devel-matched 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-debug-modules 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-debug-modules-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-debug-modules-extra 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-devel 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-devel-matched 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-modules 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-modules-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-64k-modules-extra 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-abi-stablelists 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debug 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debug-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debug-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debug-devel 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debug-devel-matched 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debug-modules 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debug-modules-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debug-modules-extra 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debug-uki-virt 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debuginfo-common-aarch64 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debuginfo-common-ppc64le 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debuginfo-common-s390x 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-debuginfo-common-x86_64 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-devel 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-devel-matched 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-doc 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-modules 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-modules-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-modules-extra 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-debug 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-debug-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-debug-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-debug-devel 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-debug-modules 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-debug-modules-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-debug-modules-extra 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-devel 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-modules 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-modules-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-64k-modules-extra 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-debug 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-debug-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-debug-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-debug-devel 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-debug-kvm 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-debug-modules 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-debug-modules-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-debug-modules-extra 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-devel 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-kvm 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-modules 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-modules-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-rt-modules-extra 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-tools 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-tools-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-tools-libs 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-tools-libs-devel 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-uki-virt 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-uki-virt-addons 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-zfcpdump 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-zfcpdump-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-zfcpdump-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-zfcpdump-devel 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-zfcpdump-devel-matched 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-zfcpdump-modules 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-zfcpdump-modules-core 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 kernel-zfcpdump-modules-extra 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 libperf 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 libperf-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 perf 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 perf-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 python3-perf 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 python3-perf-debuginfo 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 rtla 0:6.12.0-55.77.1.el10_0
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 rv 0:6.12.0-55.77.1.el10_0

Vulnerabilities 9

  • Critical 9.8
    CVE-2026-31607

    usbip: validate number_of_packets in usbip_pack_ret_submit()

    In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USB/IP client receives a RET_SUBMIT response, usbip_pack_ret_submit() unconditionally overwrites urb->number_of_packets fro…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2026-43037

    ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

    In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem. ip4ip6_err() calls icmp_send() on a cloned skb whose cb[] was written by the IPv6 receive path as struc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2026-43038

    ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: In ip6_err_gen_icmpv6_unreach(), the skb is an outer IPv4 ICMP error packet where its cb contains an I…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.4
    CVE-2026-31685

    netfilter: ip6t_eui64: reject invalid MAC header for all packets

    In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 sour…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2026-31709

    smb: client: validate the whole DACL before rewriting it in cifsacl

    In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-supplied dacloffset and then use the incomin…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2026-43110

    wifi: brcmfmac: validate bsscfg indices in IF events

    In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF events brcmf_fweh_handle_if_event() validates the firmware-provided interface index before it touches drvr->iflist[], but it still uses the raw b…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-23270

    net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

    In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks As Paolo said earlier [1]: "Since the blamed commit below, classify can return TC_ACT_CONSUMED while the curren…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-23392

    netfilter: nf_tables: release flowtable after rcu grace period on error

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call synchronize_rcu() after unregistering the hooks from error path, since a hook that already refers to this flowtabl…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-68366

    nbd: defer config unlock in nbd_genl_connect

    In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one use-after-free warning when running NBD_CMD_CONNECT and NBD_CLEAR_SOCK: nbd_genl_connect nbd_alloc_and_init_config // config_refs=1 n…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2424881
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2448745
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2451218
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2461521
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2461759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2464351
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2464397
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2464476
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2467014
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24343.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-68366
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-68366
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-68366
  • article
    https://lore.kernel.org/linux-cve-announce/2025122459-CVE-2025-68366-b367@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-23270
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23270
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23270
  • article
    https://lore.kernel.org/linux-cve-announce/2026031847-CVE-2026-23270-cb9a@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-23392
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23392
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23392
  • article
    https://lore.kernel.org/linux-cve-announce/2026032548-CVE-2026-23392-fd9d@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-31607
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-31607
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-31607
  • article
    https://lore.kernel.org/linux-cve-announce/2026042420-CVE-2026-31607-7bac@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-31685
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-31685
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-31685
  • article
    https://lore.kernel.org/linux-cve-announce/2026042545-CVE-2026-31685-3fcc@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-31709
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-31709
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-31709
  • article
    https://lore.kernel.org/linux-cve-announce/2026050122-CVE-2026-31709-335b@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-43037
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-43037
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-43037
  • article
    https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T