Skip to content
OpenAdvisories
Critical RHSA-2026:77689 14 CVEs

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Published Oct 10, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 158

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-64k-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-64k-debug-devel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-64k-debug-devel-matched 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-64k-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-64k-devel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-64k-devel-matched 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debug-devel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debug-devel-matched 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo-common-aarch64 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo-common-ppc64le 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo-common-s390x 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-debuginfo-common-x86_64 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-devel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-devel-matched 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-doc 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-rt-64k-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-rt-64k-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-rt-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-rt-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-tools-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-zfcpdump-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-zfcpdump-devel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream kernel-zfcpdump-devel-matched 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream libperf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perf 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream perf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-perf 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-perf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream rtla 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream rv 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debug 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debug-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debug-modules 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debug-modules-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debug-modules-extra 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-modules 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-modules-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-64k-modules-extra 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-abi-stablelists 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-modules 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-modules-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-modules-extra 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debug-uki-virt 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo-common-aarch64 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo-common-ppc64le 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo-common-s390x 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-debuginfo-common-x86_64 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-modules 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-modules-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-modules-extra 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-rt-64k-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-rt-64k-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-rt-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-rt-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-tools 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-tools-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-tools-libs 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-uki-virt 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-uki-virt-addons 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-modules 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-modules-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos kernel-zfcpdump-modules-extra 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos libperf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos perf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos python3-perf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-64k-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-64k-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo-common-aarch64 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo-common-ppc64le 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo-common-s390x 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-debuginfo-common-x86_64 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-rt-64k-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-rt-64k-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-rt-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-rt-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-tools-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-tools-libs-devel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb kernel-zfcpdump-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb libperf 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb libperf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb perf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb python3-perf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-debuginfo-common-x86_64 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug-devel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug-modules 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug-modules-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debug-modules-extra 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-devel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-modules 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-modules-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-rt-modules-extra 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv kernel-tools-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv libperf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv perf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::nfv python3-perf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-64k-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-64k-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-debuginfo-common-aarch64 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-debuginfo-common-x86_64 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug-devel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug-modules 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug-modules-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debug-modules-extra 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-devel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-modules 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-modules-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-64k-modules-extra 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug-devel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug-modules 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug-modules-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debug-modules-extra 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-devel 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-modules 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-modules-core 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-rt-modules-extra 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime kernel-tools-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime libperf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime perf-debuginfo 0:5.14.0-687.56.1.el9_8
Red Hat · RHEL 9 enterprise_linux:9::realtime python3-perf-debuginfo 0:5.14.0-687.56.1.el9_8

Vulnerabilities 14

  • Critical 9.8
    CVE-2026-53398

    NFSD: Fix SECINFO_NO_NAME decode error cleanup

    In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfser…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2026-64035

    igc: set tx buffer type for SMD frames

    In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko pointed out that igc_fpe_init_smd_frame() initializes igc_tx_buffer fields for an SMD skb, but does not set the buffer type: https://sashiko.dev…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2026-64162

    idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()

    In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() In idpf_ptp_init(), read_dev_clk_lock is initialized after ptp_schedule_worker() had already been called (and after idpf_ptp_setti…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2026-72317

    SUNRPC: pin upper rpc_clnt across the TLS connect_worker

    In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connect_worker The TLS connect path has a use-after-free: nothing pins the upper rpc_clnt across the delayed connect_worker. xs_connect() stores task…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2026-74744

    ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

    In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev ipvlan devices inherit hard_header_len from phy_dev during ipvlan_init(), but leave needed_headroom and needed_tailroom set to…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2026-89530

    svcrdma: Reject inline replies that overflow the pull-up buffer

    In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject inline replies that overflow the pull-up buffer An RPC-over-RDMA client can request a reply, such as an NFS READ payload, without providing a Write list or a Reply chunk to ca…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2026-89669

    nfsd: initialize copy-notify stateid before publishing it

    In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4_copy_notify() finished initializing the cpntf state after nfs4_alloc_init_cpntf_state() had already linked it into the s2s_cp_s…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2026-53360 Public exploit

    KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use

    In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use As per the GHCB spec, when using GHCB v2+ require the software scratch area to reside in the GHCB's shared buffer. Note, things li…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2026-64115

    vsock/vmci: fix UAF when peer resets connection during handshake

    In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix UAF when peer resets connection during handshake vmci_transport_recv_connecting_server() returned err = 0 for a peer RST in its default switch arm: err = pkt->type == VMCI_TRA…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2026-89663

    nfsd: revoke copy-notify stateids before dropping their reference

    In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping their reference Copy-notify stateids live in the s2s_cp_stateids IDR and on their parent stid's sc_cp_list, pinned by a single membership ref…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23103

    ipvlan: Make the addrs_lock be per port

    In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the addrs_lock be per port, not per ipvlan dev. Initial code seems to be written in the assumption, that any address change must occur under RTNL.…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-53365 Public exploit

    vsock/virtio: fix zerocopy completion for multi-skb sends

    In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-63970

    vsock/virtio: bind uarg before filling zerocopy skb

    In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtio_transport_send_pkt_info() allocates or reuses the zerocopy uarg before entering the send loop, but virtio_transport_alloc_skb() stil…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-89690

    nfsd: defer vfree of compound ops to fix rpc_status UAF

    In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpc_status UAF The rpc_status netlink dumpit walks every in-flight svc_rqst under rcu_read_lock and, for NFSv4 requests, reads opnums out of args->ops…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2436771
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2497032
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2499742
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502411
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502476
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502521
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502593
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2516705
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2524431
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2532103
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2532111
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2532218
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2532231
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77689.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-23103
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23103
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23103
  • article
    https://lore.kernel.org/linux-cve-announce/2026020429-CVE-2026-23103-63b3@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-53360
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-53360
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-53360
  • article
    https://lore.kernel.org/linux-cve-announce/2026070413-CVE-2026-53360-3284@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-53365
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-53365
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-53365
  • article
    https://lore.kernel.org/linux-cve-announce/2026071353-CVE-2026-53365-c6d2@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-53398
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-53398
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-53398
  • article
    https://lore.kernel.org/linux-cve-announce/2026071957-CVE-2026-53398-56e9@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-63970
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-63970
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-63970
  • article
    https://lore.kernel.org/linux-cve-announce/2026071959-CVE-2026-63970-1142@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-64035
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-64035
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-64035