Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 158

Vulnerabilities 7

• Critical 9.8
  CVE-2026-74556

  scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer

  In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer iscsi_tcp_hdr_dissect() receives the data segment of several PDU types into the fixed-size conn->data buffer, whi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 15, 2026
• High 8.8
  CVE-2026-63923

  octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify

  In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify rvu_mbox_handler_rep_event_notify() in drivers/net/ethernet/marvell/ octeontx2/af/rvu_rep.c queues a sender-controlled…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 19, 2026
• High 8.8
  CVE-2026-68294

  net: qrtr: restrict socket creation to the initial network namespace

  In the Linux kernel, the following vulnerability has been resolved: net: qrtr: restrict socket creation to the initial network namespace QRTR keeps its entire port and node state in module-global variables that are not partitioned per network namespace: qrtr_…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 10, 2026
• High 8.8
  CVE-2026-72045

  octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF

  In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvu_mbox_handler_lmtst_tbl_setup() uses req->base_pcifunc as a direct index into the LMT map table to read another function's LM…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 15, 2026
• High 7.8
  CVE-2026-43248

  vhost: move vdpa group bound check to vhost_vdpa

  In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound check to vhost_vdpa Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them. While we're at it, fix a bug in v…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 6, 2026
• High 7.8
  CVE-2026-64015

  security/keys: fix missed RCU read section on lookup

  In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on lookup Nicholas Carlini reports that the keyring code calls assoc_array_find() in find_key_to_update() without holding the RCU read lock, while t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 19, 2026
• High 7.8
  CVE-2026-68143

  net: slip: serialize receive against buffer reallocation

  In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive against buffer reallocation sl_realloc_bufs() replaces rbuff and updates buffsize while holding sl->lock. slip_receive_buf() reads those fields and writes through…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 10, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2467084
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2502380
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2502418
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2513218
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2513353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2516639
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2517010
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67470.json
• report
  https://access.redhat.com/security/cve/CVE-2026-43248
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-43248
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-43248
• article
  https://lore.kernel.org/linux-cve-announce/2026050602-CVE-2026-43248-7506@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-63923
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-63923
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-63923
• article
  https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63923-8d3f@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-64015
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-64015
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-64015
• article
  https://lore.kernel.org/linux-cve-announce/2026071957-CVE-2026-64015-19c9@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-68143
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-68143
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-68143
• article
  https://lore.kernel.org/linux-cve-announce/2026081000-CVE-2026-68143-d624@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-68294
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-68294
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-68294
• article
  https://lore.kernel.org/linux-cve-announce/2026081028-CVE-2026-68294-d225@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-72045
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-72045
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-72045
• article
  https://kernelcve.org/list/?q=CVE-2026-72045
• article
  https://lore.kernel.org/linux-cve-announce/2026081514-CVE-2026-72045-21ac@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-74556
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-74556
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-74556
• article
  https://lore.kernel.org/linux-cve-announce/2026081551-CVE-2026-74556-3eb4@gregkh/T