Skip to content
OpenAdvisories
Critical RHSA-2026:70290 4 CVEs

Red Hat Security Advisory: kernel security update

Published Sep 23, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · RHEL 7 ELS rhel_els:7 bpftool 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 bpftool-debuginfo 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-abi-whitelists 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-bootwrapper 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debug 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debug-debuginfo 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debug-devel 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo-common-ppc64 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo-common-ppc64le 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo-common-s390x 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-debuginfo-common-x86_64 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-devel 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-doc 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-kdump 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-kdump-debuginfo 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-kdump-devel 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-tools 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-tools-debuginfo 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-tools-libs 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 kernel-tools-libs-devel 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 perf 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 perf-debuginfo 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 python-perf 0:3.10.0-1160.162.1.el7
Red Hat · RHEL 7 ELS rhel_els:7 python-perf-debuginfo 0:3.10.0-1160.162.1.el7

Vulnerabilities 4

  • Critical 9.8
    CVE-2026-64564 Public exploit

    sctp: don't free the ASCONF's own transport in DEL-IP processing

    In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asconf->transport (== chunk->transport, se…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-64191

    i2c: stub: Reject I2C block transfers with invalid length

    In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2C_SMBUS_I2C_BLOCK_DATA case in stub_xfer() uses data->block[0] as the transfer length. The existing check only clamps it to avo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2026-46150

    fanotify: fix false positive on permission events

    In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may return false for a mark on an unrelated group, which results in bypassing the permission check. Fix by skipping …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 6.8
    CVE-2026-53196

    USB: serial: io_ti: fix heap overflow in get_manuf_info()

    In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads le16_to_cpu(rom_desc->Size) bytes from the device I2C EEPROM into a buffer allocated with kmalloc_obj(), which…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2482612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2492750
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502872
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510890
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70290.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-46150
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-46150
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-46150
  • article
    https://lore.kernel.org/linux-cve-announce/2026052822-CVE-2026-46150-c96d@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-53196
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-53196
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-53196
  • article
    https://lore.kernel.org/linux-cve-announce/2026062559-CVE-2026-53196-bcc6@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-64191
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-64191
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-64191
  • article
    https://lore.kernel.org/linux-cve-announce/2026072052-CVE-2026-64191-42fe@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-64564
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-64564
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-64564
  • article
    https://lore.kernel.org/linux-cve-announce/2026080404-CVE-2026-64564-6762@gregkh/T