Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 158

Vulnerabilities 5

• High 7.8
  CVE-2026-23415 Public exploit

  futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()

  In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() During futex_key_to_node_opt() execution, vma->vm_policy is read under speculative mmap lock and RCU. Concurrently, mbi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 2, 2026
• High 7.8
  CVE-2026-31554

  futex: Require sys_futex_requeue() to have identical flags

  In the Linux kernel, the following vulnerability has been resolved: futex: Require sys_futex_requeue() to have identical flags Nicholas reported that his LLM found it was possible to create a UaF when sys_futex_requeue() is used with different flags. The init…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 24, 2026
• Unscored —
  CVE-2026-31555

  futex: Clear stale exiting pointer in futex_lock_pi() retry path

  In the Linux kernel, the following vulnerability has been resolved: futex: Clear stale exiting pointer in futex_lock_pi() retry path Fuzzying/stressing futexes triggered: WARNING: kernel/futex/core.c:825 at wait_for_owner_exiting+0x7a/0x80, CPU#11: futex_lock…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 24, 2026
• Unscored —
  CVE-2026-43450

  netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() nfnl_cthelper_dump_table() has a 'goto restart' that jumps to a label inside the for loop body. When the "last" helpe…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 8, 2026
• Unscored —
  CVE-2026-52977

  futex: Prevent lockup in requeue-PI during signal/ timeout wakeup

  In the Linux kernel, the following vulnerability has been resolved: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup During wait-requeue-pi (task A) and requeue-PI (task B) the following race can happen: Task A Task B futex_wait_requeue_pi() …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 24, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2454320
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2468228
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51035.json
• report
  https://access.redhat.com/security/cve/CVE-2026-23415
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23415
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23415
• article
  https://lore.kernel.org/linux-cve-announce/2026040204-CVE-2026-23415-3435@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-31554
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2461526
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-31554
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-31554
• article
  https://lore.kernel.org/linux-cve-announce/2026042456-CVE-2026-31554-377c@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-31555
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2461473
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-31555
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-31555
• article
  https://lore.kernel.org/linux-cve-announce/2026042456-CVE-2026-31555-ba94@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-43450
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-43450
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-43450
• article
  https://lore.kernel.org/linux-cve-announce/2026050857-CVE-2026-43450-8919@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-52977
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2492351
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-52977
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-52977
• article
  https://kernelcve.org/list/?q=CVE-2026-52977
• article
  https://lore.kernel.org/linux-cve-announce/2026062440-CVE-2026-52977-deda@gregkh/T