Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 160

Vulnerabilities 3

• High 7.8
  CVE-2026-52976

  drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()

  In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() Two error handling issues exist in xe_exec_queue_create_ioctl(): 1. When xe_hw_engine_group_add_exec_queue() fails, the error path ju…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 24, 2026
• High 7.5
  CVE-2025-71131

  crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

  In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt As soon as crypto_aead_encrypt is called, the underlying request may be freed by an asynchronous completion. Thus dereferencing re…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jan 14, 2026
• High 7.1
  CVE-2026-46054

  selinux: fix overlayfs mmap() and mprotect() access checks

  In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is able to access the top level file (the "…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 27, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2429583
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2482025
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2492284
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52667.json
• report
  https://access.redhat.com/security/cve/CVE-2025-71131
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-71131
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-71131
• article
  https://lore.kernel.org/linux-cve-announce/2026011452-CVE-2025-71131-c844@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-46054
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-46054
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-46054
• article
  https://lore.kernel.org/linux-cve-announce/2026052754-CVE-2026-46054-b185@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-52976
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-52976
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-52976
• article
  https://lore.kernel.org/linux-cve-announce/2026062440-CVE-2026-52976-d615@gregkh/T