Red Hat Security Advisory: kernel security update

Fixed packages 49

Vulnerabilities 6

• Critical 9.1
  CVE-2025-10263 Public exploit

  Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X…

  Arm Cortex-X925 Cortex-X3 Neoverse V3 Debian Ubuntu Alpine
  Jun 9, 2026
• High 8.8
  CVE-2026-43112

  fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

  In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 6, 2026
• High 7.8
  CVE-2026-52923 Public exploit

  ipc: limit next_id allocation to the valid ID range

  In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request the next SysV IPC id through ids->next_id. ipc_idr_alloc() currently forwards that request t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 24, 2026
• High 7.1
  CVE-2026-46054

  selinux: fix overlayfs mmap() and mprotect() access checks

  In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is able to access the top level file (the "…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 27, 2026
• Medium 6.3
  CVE-2026-53059

  dm log: fix out-of-bounds write due to region_count overflow

  In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns secto…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 24, 2026
• Unscored —
  CVE-2026-31787 Public exploit

  xen/privcmd: fix double free via VMA splitting

  In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmd_vm_ops defines .close (privcmd_close), but neither .may_split nor .open. When userspace does a partial munmap() on a privcmd mapping, th…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 30, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2464092
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2467015
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2482025
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486958
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2492094
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2492277
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52649.json
• report
  https://access.redhat.com/security/cve/CVE-2025-10263
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-10263
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-10263
• article
  https://developer.arm.com/documentation/112137
• report
  https://access.redhat.com/security/cve/CVE-2026-31787
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-31787
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-31787
• article
  https://lore.kernel.org/linux-cve-announce/2026043034-CVE-2026-31787-f6cc@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-43112
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-43112
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-43112
• article
  https://lore.kernel.org/linux-cve-announce/2026050625-CVE-2026-43112-f37f@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-46054
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-46054
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-46054
• article
  https://lore.kernel.org/linux-cve-announce/2026052754-CVE-2026-46054-b185@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-52923
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-52923
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-52923
• article
  https://lore.kernel.org/linux-cve-announce/2026062431-CVE-2026-52923-35fb@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-53059
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-53059
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-53059
• article
  https://lore.kernel.org/linux-cve-announce/2026062401-CVE-2026-53059-f32e@gregkh/T