Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 90

Vulnerabilities 7

• High 8.2
  CVE-2025-71072

  shmem: fix recovery on rename failures

  In the Linux kernel, the following vulnerability has been resolved: shmem: fix recovery on rename failures maple_tree insertions can fail if we are seriously short on memory; simple_offset_rename() does not recover well if it runs into that. The same goes for…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jan 13, 2026
• High 8.1
  CVE-2026-64368

  mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

  In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled When init (zeroing) on allocation is requested, for kmalloc() we generally have to zero the full object size even if…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 25, 2026
• High 7.8
  CVE-2024-53143

  fsnotify: Fix ordering of iput() and watched_objects decrement

  In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput() and watched_objects decrement Ensure the superblock is kept alive until we're done with iput(). Holding a reference to an inode is not allowed unless we ensur…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Dec 7, 2024
• High 7.8
  CVE-2026-23415 Public exploit

  futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()

  In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() During futex_key_to_node_opt() execution, vma->vm_policy is read under speculative mmap lock and RCU. Concurrently, mbi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 2, 2026
• High 7.8
  CVE-2026-31488

  drm/amd/display: Do not skip unrelated mode changes in DSC validation

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 ("drm/amd/display: Add dsc pre-validation in atomic check"), amdgpu resets the CRTC sta…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Apr 22, 2026
• High 7.8
  CVE-2026-52923 Public exploit

  ipc: limit next_id allocation to the valid ID range

  In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request the next SysV IPC id through ids->next_id. ipc_idr_alloc() currently forwards that request t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 24, 2026
• High 7.8
  CVE-2026-64531 Public exploit

  net: openvswitch: reject oversized nested action attrs

  In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbeh…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 27, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2330957
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2429083
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2454320
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2460619
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2492094
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2507213
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2507402
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53330.json
• report
  https://access.redhat.com/security/cve/CVE-2024-53143
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-53143
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-53143
• article
  https://lore.kernel.org/linux-cve-announce/2024120746-CVE-2024-53143-05ed@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-71072
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-71072
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-71072
• article
  https://lore.kernel.org/linux-cve-announce/2026011325-CVE-2025-71072-b52b@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-23415
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23415
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23415
• article
  https://lore.kernel.org/linux-cve-announce/2026040204-CVE-2026-23415-3435@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-31488
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-31488
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-31488
• article
  https://lore.kernel.org/linux-cve-announce/2026042200-CVE-2026-31488-fe04@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-52923
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-52923
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-52923
• article
  https://lore.kernel.org/linux-cve-announce/2026062431-CVE-2026-52923-35fb@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-64368
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-64368
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-64368
• article
  https://kernelcve.org/list/?q=CVE-2026-64368
• article
  https://lore.kernel.org/linux-cve-announce/2026072522-CVE-2026-64368-014f@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-64531
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-64531
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-64531
• article
  https://lore.kernel.org/linux-cve-announce/2026072732-CVE-2026-64531-e4ce@gregkh/T