Skip to content
OpenAdvisories
Critical RHSA-2026:35844 4 CVEs

Red Hat Security Advisory: kernel security update

Published Jul 6, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · RHEL 7 ELS rhel_els:7 bpftool 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 bpftool-debuginfo 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-abi-whitelists 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-bootwrapper 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debug 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debug-debuginfo 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debug-devel 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo-common-ppc64 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo-common-ppc64le 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo-common-s390x 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo-common-x86_64 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-devel 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-doc 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-kdump 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-kdump-debuginfo 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-kdump-devel 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-tools 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-tools-debuginfo 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-tools-libs 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-tools-libs-devel 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 perf 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 perf-debuginfo 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 python-perf 0:3.10.0-1160.154.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 python-perf-debuginfo 0:3.10.0-1160.154.1.el7

Vulnerabilities 4

  • Critical 9.8
    CVE-2026-43125

    dlm: validate length in dlm_search_rsb_tree

    In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.1
    CVE-2026-23455

    netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() In DecodeQ931(), the UserUserIE code path reads a 16-bit length from the packet, then decrements it by 1 to skip the protoc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-45852

    RDMA/rxe: Fix double free in rxe_srq_from_init

    In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In rxe_srq_from_init(), the queue pointer 'q' is assigned to 'srq->rq.queue' before copying the SRQ number to user space. If copy_to_user() fail…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-46090

    ALSA: aloop: Fix peer runtime UAF during format-change stop

    In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopback_check_format() may stop the capture side when playback starts with parameters that no longer match a running capture strea…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2454810
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2467234
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2481980
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2482166
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35844.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-23455
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23455
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23455
  • article
    https://lore.kernel.org/linux-cve-announce/2026040317-CVE-2026-23455-f045@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-43125
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-43125
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-43125
  • article
    https://lore.kernel.org/linux-cve-announce/2026050619-CVE-2026-43125-c9f9@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-45852
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-45852
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-45852
  • article
    https://lore.kernel.org/linux-cve-announce/2026052708-CVE-2026-45852-fcf9@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-46090
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-46090
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-46090
  • article
    https://kernelcve.org/list/?q=CVE-2026-46090
  • article
    https://lore.kernel.org/linux-cve-announce/2026052702-CVE-2026-46090-1211@gregkh/T