Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 158

Vulnerabilities 8

• Critical 9.8
  CVE-2026-43038

  ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

  In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: In ip6_err_gen_icmpv6_unreach(), the skb is an outer IPv4 ICMP error packet where its cb contains an I…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 1, 2026
• Critical 9.8
  CVE-2026-45898

  RDMA/iwcm: Fix workqueue list corruption by removing work_list

  In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing work_list The commit e1168f0 ("RDMA/iwcm: Simplify cm_event_handler()") changed the work submission logic to unconditionally call queue_wo…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 27, 2026
• High 7.8
  CVE-2026-31488

  drm/amd/display: Do not skip unrelated mode changes in DSC validation

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 ("drm/amd/display: Add dsc pre-validation in atomic check"), amdgpu resets the CRTC sta…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 22, 2026
• High 7.8
  CVE-2026-43329

  netfilter: flowtable: strictly check for maximum number of actions

  In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtable hardware offload actions in IPv6 is: * ethernet mangling (4 payload actions, 2 for each ethe…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 8, 2026
• High 7.8
  CVE-2026-46090

  ALSA: aloop: Fix peer runtime UAF during format-change stop

  In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopback_check_format() may stop the capture side when playback starts with parameters that no longer match a running capture strea…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 27, 2026
• High 7.8
  CVE-2026-46176

  RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()

  In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() mlx5_ib_dev_res_srq_init() allocates two SRQs, s0 and s1. When ib_create_srq() fails for s1, the error branch destroys s0 …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 28, 2026
• High 7.1
  CVE-2026-46054

  selinux: fix overlayfs mmap() and mprotect() access checks

  In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is able to access the top level file (the "…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 27, 2026
• High 7.0
  CVE-2026-46189

  RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

  In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path Sashiko points out that pvrdma_uar_free() is already called within pvrdma_dealloc_ucontext(), so calling it before trigg…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 28, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2460619
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2464397
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2468124
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2481980
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2482025
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2482031
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2482588
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2482594
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30848.json
• report
  https://access.redhat.com/security/cve/CVE-2026-31488
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-31488
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-31488
• article
  https://lore.kernel.org/linux-cve-announce/2026042200-CVE-2026-31488-fe04@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-43038
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-43038
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-43038
• article
  https://lore.kernel.org/linux-cve-announce/2026050103-CVE-2026-43038-b591@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-43329
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-43329
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-43329
• article
  https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43329.mbox
• report
  https://access.redhat.com/security/cve/CVE-2026-45898
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-45898
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-45898
• article
  https://lore.kernel.org/linux-cve-announce/2026052719-CVE-2026-45898-3b64@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-46054
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-46054
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-46054
• article
  https://lore.kernel.org/linux-cve-announce/2026052754-CVE-2026-46054-b185@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-46090
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-46090
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-46090
• article
  https://kernelcve.org/list/?q=CVE-2026-46090
• article
  https://lore.kernel.org/linux-cve-announce/2026052702-CVE-2026-46090-1211@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-46176
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-46176
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-46176
• article
  https://lore.kernel.org/linux-cve-announce/2026052828-CVE-2026-46176-a4db@gregkh/T