Skip to content
OpenAdvisories
High RHSA-2026:26570 7 CVEs

Red Hat Security Advisory: kernel security update

Published Jun 18, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 48

ReleasePackageFixed in
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos bpftool 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos bpftool-debuginfo 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-abi-stablelists 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-core 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-core 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-debuginfo 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-devel 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-modules 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-modules-extra 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debuginfo 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debuginfo-common-x86_64 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-devel 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-doc 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-modules 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-modules-extra 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools-debuginfo 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools-libs 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos perf 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos perf-debuginfo 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-perf 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-perf-debuginfo 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos bpftool 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos bpftool-debuginfo 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-abi-stablelists 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-core 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-core 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-debuginfo 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-devel 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-modules 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-modules-extra 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debuginfo 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debuginfo-common-x86_64 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-devel 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-doc 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-modules 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-modules-extra 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-tools 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-tools-debuginfo 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-tools-libs 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos perf 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos perf-debuginfo 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos python3-perf 0:4.18.0-372.196.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos python3-perf-debuginfo 0:4.18.0-372.196.1.el8_6

Vulnerabilities 7

  • High 8.8
    CVE-2026-43158

    xfs: fix freemap adjustments when adding xattrs to leaf blocks

    In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after ~20 minutes of running on my test V…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-21858

    geneve: Fix use-after-free in geneve_find_dev().

    In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). syzkaller reported a use-after-free in geneve_find_dev() [0] without repro. geneve_configure() links struct geneve_dev.next to net_generic(net…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-68800

    mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats

    In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Cited commit added a dedicated mutex (instead of RTNL) to protect the multicast route list, so that it will not chan…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23243

    RDMA/umad: Reject negative data_len in ib_umad_write

    In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP heade…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23392

    netfilter: nf_tables: release flowtable after rcu grace period on error

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call synchronize_rcu() after unregistering the hooks from error path, since a hook that already refers to this flowtabl…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-43116

    netfilter: ctnetlink: ensure safe access to master conntrack

    In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ensure safe access to master conntrack Holding reference on the expectation is not sufficient, the master conntrack object can just go away, making exp->master invalid. …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2026-46243 Public exploit

    smb: client: reject userspace cifs.spnego descriptions

    In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as ke…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2351619
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2429065
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2448594
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2451218
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2467005
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2467210
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2481486
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26570.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-21858
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-21858
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-21858
  • article
    https://lore.kernel.org/linux-cve-announce/2025031215-CVE-2025-21858-3986@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-68800
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-68800
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-68800
  • article
    https://lore.kernel.org/linux-cve-announce/2026011307-CVE-2025-68800-39d2@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-23243
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23243
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23243
  • article
    https://lore.kernel.org/linux-cve-announce/2026031816-CVE-2026-23243-b88e@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-23392
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23392
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23392
  • article
    https://lore.kernel.org/linux-cve-announce/2026032548-CVE-2026-23392-fd9d@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-43116
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-43116
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-43116
  • article
    https://kernelcve.org/list/?q=CVE-2026-43116
  • article
    https://lore.kernel.org/linux-cve-announce/2026050626-CVE-2026-43116-08a5@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-43158
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-43158
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-43158
  • article
    https://kernelcve.org/list/?q=CVE-2026-43158
  • article
    https://lore.kernel.org/linux-cve-announce/2026050631-CVE-2026-43158-cc20@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-46243
  • article
    https://access.redhat.com/security/vulnerabilities/RHSB-2026-005
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-46243
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-46243