Skip to content
OpenAdvisories
Critical RHSA-2026:27719 2 CVEs

Red Hat Security Advisory: kernel security update

Published Jun 22, 2026 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 19

ReleasePackageFixed in
Red Hat · RHEL 6 ELS rhel_els:6 kernel 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-abi-whitelists 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debug 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debug-debuginfo 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debug-devel 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debuginfo 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debuginfo-common-i686 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debuginfo-common-s390x 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debuginfo-common-x86_64 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-devel 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-doc 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-firmware 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-kdump 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-kdump-debuginfo 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-kdump-devel 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 perf 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 perf-debuginfo 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 python-perf 0:2.6.32-754.61.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 python-perf-debuginfo 0:2.6.32-754.61.1.el6

Vulnerabilities 2

  • Critical 9.8
    CVE-2026-43037

    ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

    In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem. ip4ip6_err() calls icmp_send() on a cloned skb whose cb[] was written by the IPv6 receive path as struc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2026-46243 Public exploit

    smb: client: reject userspace cifs.spnego descriptions

    In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as ke…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2464351
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2481486
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27719.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-43037
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-43037
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-43037
  • article
    https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-46243
  • article
    https://access.redhat.com/security/vulnerabilities/RHSB-2026-005
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-46243
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-46243
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2
  • article
    https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/