Skip to content
OpenAdvisories
Critical RHSA-2026:71213 8 CVEs

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Published Sep 24, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 43

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos bpftool 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bpftool-debuginfo 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-abi-stablelists 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-core 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-core 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-debuginfo 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-devel 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-modules 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debug-modules-extra 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-aarch64 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-ppc64le 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-s390x 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-debuginfo-common-x86_64 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-devel 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-doc 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-modules 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-modules-extra 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-tools 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-tools-debuginfo 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-tools-libs 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-core 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-debuginfo 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-devel 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-modules 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos kernel-zfcpdump-modules-extra 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos perf 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos perf-debuginfo 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-perf 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-perf-debuginfo 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb bpftool-debuginfo 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debug-debuginfo 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo-common-aarch64 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo-common-ppc64le 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-debuginfo-common-x86_64 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-tools-debuginfo 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb kernel-tools-libs-devel 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb perf-debuginfo 0:4.18.0-553.167.1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb python3-perf-debuginfo 0:4.18.0-553.167.1.el8_10

Vulnerabilities 8

  • Critical 9.8
    CVE-2026-64564 Public exploit

    sctp: don't free the ASCONF's own transport in DEL-IP processing

    In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asconf->transport (== chunk->transport, se…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.1
    CVE-2026-89846

    scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read

    In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read In qla2x00_status_entry(), the FWI2 status path advances sense_data and shrinks par_sense_len by rsp_info_len: if (IS_FWI2_CAPAB…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2026-63831

    mac802154: llsec: add skb_cow_data() before in-place crypto

    In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_data() before in-place crypto llsec_do_encrypt_unauth(), llsec_do_encrypt_auth(), llsec_do_decrypt_unauth(), and llsec_do_decrypt_auth() all perform in-place cry…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2026-74469 Public exploit

    sctp: prevent peer transport count overflow

    In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-43370

    drm/amdgpu: Fix use-after-free race in VM acquire

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm->process_info assignment with cmpxchg() to prevent race when parent/child processes sharing a drm_file both try to acqu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-72261

    ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control

    In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control In snd_sof_update_control(), firmware-provided cdata->num_elems is checked against local_cdata->data->size but never against t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-81000 Public exploit

    net: tun: bound receive headroom

    In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear. OVS can propagate an oversized headroom request fro…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-80844 Public exploit

    xfrm: ah6: validate routing header segments_left

    In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2468244
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502243
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510890
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2516527
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2528676
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2532176
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2535391
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71213.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-43370
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-43370
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-43370
  • article
    https://lore.kernel.org/linux-cve-announce/2026050829-CVE-2026-43370-4d49@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-63831
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-63831
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-63831
  • article
    https://lore.kernel.org/linux-cve-announce/2026071908-CVE-2026-63831-36ca@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-64564
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-64564
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-64564
  • article
    https://lore.kernel.org/linux-cve-announce/2026080404-CVE-2026-64564-6762@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-72261
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-72261
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-72261
  • article
    https://lore.kernel.org/linux-cve-announce/2026081555-CVE-2026-72261-b28a@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-74469
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2517043
  • article
    https://access.redhat.com/security/vulnerabilities/RHSB-2026-011
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-74469
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-74469
  • article
    https://lore.kernel.org/linux-cve-announce/2026081534-CVE-2026-74469-d3f3@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-80844
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-80844
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-80844
  • article
    https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80844.mbox
  • report
    https://access.redhat.com/security/cve/CVE-2026-81000
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-81000
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-81000
  • article
    https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-81000.mbox