Skip to content
OpenAdvisories
Critical RHSA-2026:83796 3 CVEs

Red Hat Security Advisory: kernel security update

Published Oct 17, 2026 · Updated Nov 13, 2026

Fixed packages 19

ReleasePackageFixed in
Red Hat · RHEL 6 ELS rhel_els:6 kernel 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-abi-whitelists 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debug 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debug-debuginfo 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debug-devel 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debuginfo 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debuginfo-common-i686 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debuginfo-common-s390x 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-debuginfo-common-x86_64 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-devel 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-doc 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-firmware 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-kdump 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-kdump-debuginfo 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 kernel-kdump-devel 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 perf 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 perf-debuginfo 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 python-perf 0:2.6.32-754.65.1.el6
Red Hat · RHEL 6 ELS rhel_els:6 python-perf-debuginfo 0:2.6.32-754.65.1.el6

Vulnerabilities 3

  • Critical 9.8

    ipv6: exthdrs: refresh nh after handling HAO option

    In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs. ipv6_dest_hao() may call pskb_expand_head() for a cloned skb,…

  • Critical 9.8

    ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers. Let's recompute nh pointer to make sure any change won't mess…

  • Unscored —

    net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

    In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1]. The ATM send path (sendmsg -> vcc_sendmsg -> sigd_send) reads the vcc pointer from msg->vcc and …

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2456521
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502326
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502327
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83796.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-31411
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-31411
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-31411
  • article
    https://lore.kernel.org/linux-cve-announce/2026040820-CVE-2026-31411-7ef9@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-63922
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-63922
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-63922
  • article
    https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63922-5716@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-63924
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-63924
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-63924
  • article
    https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63924-ec60@gregkh/T