Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 160

Vulnerabilities 4

• High 7.8
  CVE-2026-53016

  crypto: ccp - copy IV using skcipher ivsize

  In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer w…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 24, 2026
• Medium 6.3
  CVE-2026-53059

  dm log: fix out-of-bounds write due to region_count overflow

  In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns secto…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 24, 2026
• Unscored —
  CVE-2026-23110

  scsi: core: Wake up the error handler when final completions race against each other

  In the Linux kernel, the following vulnerability has been resolved: scsi: core: Wake up the error handler when final completions race against each other The fragile ordering between marking commands completed or failed so that the error handler only wakes whe…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Feb 4, 2026
• Unscored —
  CVE-2026-31411

  net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

  In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1]. The ATM send path (sendmsg -> vcc_sendmsg -> sigd_send) reads the vcc pointer from msg->vcc and …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 8, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2436755
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2456521
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2492269
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2492277
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56574.json
• report
  https://access.redhat.com/security/cve/CVE-2026-23110
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23110
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-23110
• article
  https://lore.kernel.org/linux-cve-announce/2026020431-CVE-2026-23110-56b1@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-31411
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-31411
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-31411
• article
  https://lore.kernel.org/linux-cve-announce/2026040820-CVE-2026-31411-7ef9@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-53016
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-53016
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-53016
• article
  https://lore.kernel.org/linux-cve-announce/2026062451-CVE-2026-53016-90ac@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-53059
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-53059
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-53059
• article
  https://lore.kernel.org/linux-cve-announce/2026062401-CVE-2026-53059-f32e@gregkh/T