Skip to content
OpenAdvisories
High RHSA-2026:3083 5 CVEs

Red Hat Security Advisory: kernel security update

Published Feb 24, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 43

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos bpftool 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bpftool-debuginfo 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-abi-stablelists 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-core 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-core 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-debuginfo 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-devel 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-modules 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-modules-extra 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-aarch64 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-ppc64le 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-s390x 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-x86_64 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-devel 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-doc 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-modules 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-modules-extra 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-tools 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-tools-debuginfo 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-tools-libs 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-core 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-debuginfo 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-devel 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-modules 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-modules-extra 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos perf 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos perf-debuginfo 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-perf 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-perf-debuginfo 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb bpftool-debuginfo 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debug-debuginfo 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo-common-aarch64 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo-common-ppc64le 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo-common-x86_64 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-tools-debuginfo 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-tools-libs-devel 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb perf-debuginfo 0:4.18.0-553.107.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python3-perf-debuginfo 0:4.18.0-553.107.1.el8_10

Vulnerabilities 5

  • High 7.8
    CVE-2025-38129

    page_pool: Fix use-after-free in page_pool_recycle_in_ring

    In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a uaf in page_pool_recycle_in_ring: BUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30 kernel/locking/lockd…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-38248 Public exploit

    bridge: mcast: Fix use-after-free during router port configuration

    In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a global list of ports behind which a multicast router resides. The list is consulted during forwarding…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-40064

    smc: Fix use-after-free in __pnet_find_base_ndev().

    In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in __pnet_find_base_ndev(). syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0] smc_pnet_find_ism_resource(…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-68800

    mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats

    In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Cited commit added a dedicated mutex (instead of RTNL) to protect the multicast route list, so that it will not chan…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23074

    net/sched: Enforce that teql can only be used as root qdisc

    In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint. Although not impo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376034
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2378981
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2406747
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2429065
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2436791
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3083.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-38129
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38129
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38129
  • article
    https://lore.kernel.org/linux-cve-announce/2025070330-CVE-2025-38129-3c0e@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38248
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38248
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38248
  • article
    https://lore.kernel.org/linux-cve-announce/2025070934-CVE-2025-38248-003c@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-40064
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-40064
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-40064
  • article
    https://lore.kernel.org/linux-cve-announce/2025102817-CVE-2025-40064-0c16@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-68800
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-68800
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-68800
  • article
    https://lore.kernel.org/linux-cve-announce/2026011307-CVE-2025-68800-39d2@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-23074
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23074
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23074
  • article
    https://kernelcve.org/list/?q=CVE-2026-23074
  • article
    https://lore.kernel.org/linux-cve-announce/2026020419-CVE-2026-23074-6bb8@gregkh/T