Skip to content
OpenAdvisories
Critical RHSA-2026:85000 7 CVEs

Red Hat Security Advisory: kernel security update

Published Oct 20, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 48

ReleasePackageFixed in
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos bpftool 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos bpftool-debuginfo 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-abi-stablelists 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-core 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-core 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-debuginfo 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-devel 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-modules 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-modules-extra 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debuginfo 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debuginfo-common-x86_64 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-devel 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-doc 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-modules 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-modules-extra 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools-debuginfo 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools-libs 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos perf 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos perf-debuginfo 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-perf 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-perf-debuginfo 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos bpftool 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos bpftool-debuginfo 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-abi-stablelists 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-core 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-core 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-debuginfo 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-devel 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-modules 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-modules-extra 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debuginfo 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debuginfo-common-x86_64 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-devel 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-doc 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-modules 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-modules-extra 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-tools 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-tools-debuginfo 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-tools-libs 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos perf 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos perf-debuginfo 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos python3-perf 0:4.18.0-372.223.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos python3-perf-debuginfo 0:4.18.0-372.223.1.el8_6

Vulnerabilities 7

  • Critical 9.8
    CVE-2025-68745

    scsi: qla2xxx: Clear cmds after chip reset

    In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling and host reset handling") caused two problems: 1. Commands sent to FW, after …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2026-43493

    crypto: pcrypt - Fix handling of MAY_BACKLOG requests

    In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAY_BACKLOG requests MAY_BACKLOG requests can return EBUSY. Handle them by checking for that value and filtering out EINPROGRESS notifications.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2026-63922

    ipv6: exthdrs: refresh nh after handling HAO option

    In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs. ipv6_dest_hao() may call pskb_expand_head() for a cloned skb,…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2026-63924

    ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers. Let's recompute nh pointer to make sure any change won't mess…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2026-63920

    ipv6: validate extension header length before copying to cmsg

    In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR} cmsgs (and their IPV6_2292* legacy counterparts) by trusting…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-31581

    ALSA: 6fire: fix use-after-free on disconnect

    In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In usb6fire_chip_abort(), the chip struct is allocated as the card's private data (via snd_card_new with sizeof(struct sfire_chip)). When snd_car…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-43450

    netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() nfnl_cthelper_dump_table() has a 'goto restart' that jumps to a label inside the for loop body. When the "last" helpe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2425039
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2461471
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2468228
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2479812
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502326
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502327
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502330
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2540872
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85000.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-68745
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-68745
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-68745
  • article
    https://lore.kernel.org/linux-cve-announce/2025122416-CVE-2025-68745-69b5@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-31581
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-31581
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-31581
  • article
    https://lore.kernel.org/linux-cve-announce/2026042411-CVE-2026-31581-9bc2@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-43450
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-43450
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-43450
  • article
    https://lore.kernel.org/linux-cve-announce/2026050857-CVE-2026-43450-8919@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-43493
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-43493
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-43493
  • article
    https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43493.mbox
  • report
    https://access.redhat.com/security/cve/CVE-2026-63920
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-63920
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-63920
  • article
    https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63920-54a7@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-63922
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-63922
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-63922
  • article
    https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63922-5716@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-63924
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-63924
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-63924
  • article
    https://lore.kernel.org/linux-cve-announce/2026071948-CVE-2026-63924-ec60@gregkh/T