Red Hat Security Advisory: kernel security update

Fixed packages 48

Vulnerabilities 5

• Critical 9.8
  CVE-2026-43125

  dlm: validate length in dlm_search_rsb_tree

  In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 6, 2026
• High 8.8
  CVE-2026-64562

  KVM: nVMX: Hide shadow VMCS right after VMCLEAR

  In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR free_nested() frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loaded_vmcs_clear(), the vC…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 4, 2026
• High 7.9
  CVE-2025-40026

  KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 28, 2025
• High 7.3
  CVE-2025-54518

  Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker t…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics Debian Ubuntu Alpine
  May 15, 2026
• High 7.1
  CVE-2026-46054

  selinux: fix overlayfs mmap() and mprotect() access checks

  In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is able to access the top level file (the "…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 27, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2406712
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2467234
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2477784
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2482025
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59091.json
• report
  https://access.redhat.com/security/cve/CVE-2025-40026
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40026
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40026
• article
  https://lore.kernel.org/linux-cve-announce/2025102841-CVE-2025-40026-760b@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2025-54518
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-54518
• report
  https://access.redhat.com/security/cve/CVE-2026-43125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-43125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-43125
• article
  https://lore.kernel.org/linux-cve-announce/2026050619-CVE-2026-43125-c9f9@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-46054
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-46054
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-46054
• article
  https://lore.kernel.org/linux-cve-announce/2026052754-CVE-2026-46054-b185@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-64562
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2510894
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-64562
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-64562
• article
  https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-64562.mbox