Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 158

Vulnerabilities 9

• Critical 9.8
  CVE-2026-46325

  RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE The current implementation incorrectly handles memory regions (MRs) with page sizes different from the system PAGE_SIZE. The…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jun 9, 2026
• Critical 9.8
  CVE-2026-64102

  RDMA/siw: Reject MPA FPDU length underflow before signed receive math

  In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw peer can send an iWARP FPDU whose MPA length field (c_hdr->mpa_len, 16 bit big-endian, peer-con…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 19, 2026
• High 7.8
  CVE-2026-45942

  ext4: fix e4b bitmap inconsistency reports

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix e4b bitmap inconsistency reports A bitmap inconsistency issue was observed during stress tests under mixed huge-page workloads. Ext4 reported multiple e4b bitmap check failures like…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 27, 2026
• High 7.8
  CVE-2026-53341

  fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()

  In the Linux kernel, the following vulnerability has been resolved: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() may_decode_fh() accesses mount::mnt_ns without holding any locks; that means the mount can concurrently be unmounted, and the…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 1, 2026
• High 7.8
  CVE-2026-63875

  arm64: tlb: Flush walk cache when unsharing PMD tables

  In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When huge_pmd_unshare() is called to unshare a PMD table, the tlb_unshare_pmd_ptdesc() function sets tlb->unshared_tables=true but the a…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 19, 2026
• High 7.8
  CVE-2026-64556

  perf/core: Detach event groups during remove_on_exec

  In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_exec perf_event_remove_on_exec() removes events by calling perf_event_exit_event(). For top-level events, this removes the event from the conte…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Jul 29, 2026
• High 7.8
  CVE-2026-74753

  perf: Reject exited events as group leaders

  In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perf_event_remove_on_exec() sets remove-on-exec events to the EXIT state and detaches their group relationships. The event's file descriptor can re…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 26, 2026
• High 7.8
  CVE-2026-80522

  crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

  In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() Perform rctx->cryptlen calculation in tegra_gcm_do_one_req() the same way it is done in tegra_ccm_crypt_init(). The cu…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 26, 2026
• High 7.0
  CVE-2026-52972

  crypto: af_alg - Cap AEAD AD length to 0x80000000

  In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when checking the TX buffer size, cap the associated data length to 0x80000000.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 24, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2482104
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2487002
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2492364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2495938
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2502318
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2502494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2508319
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2524423
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2524434
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72623.json
• report
  https://access.redhat.com/security/cve/CVE-2026-45942
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-45942
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-45942
• article
  https://kernelcve.org/list/?q=CVE-2026-45942
• article
  https://lore.kernel.org/linux-cve-announce/2026052729-CVE-2026-45942-fe56@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-46325
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-46325
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-46325
• article
  https://lore.kernel.org/linux-cve-announce/2026060907-CVE-2026-46325-d8bb@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-52972
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-52972
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-52972
• article
  https://lore.kernel.org/linux-cve-announce/2026062439-CVE-2026-52972-7d96@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-53341
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-53341
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-53341
• article
  https://kernelcve.org/list/?q=CVE-2026-53341
• article
  https://lore.kernel.org/linux-cve-announce/2026070144-CVE-2026-53341-64ff@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-63875
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-63875
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-63875
• article
  https://lore.kernel.org/linux-cve-announce/2026071935-CVE-2026-63875-97f2@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-64102
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-64102
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-64102
• article
  https://lore.kernel.org/linux-cve-announce/2026071920-CVE-2026-64102-dcb6@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-64556
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-64556