Red Hat Security Advisory: kernel security update

Fixed packages 48

Vulnerabilities 6

• Critical 9.8
  CVE-2026-68476

  ipvs: reload ip header after head reallocation

  In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation __ip_vs_get_out_rt() calls skb_ensure_writable() which may reallocate skb->head.

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 15, 2026
• Critical 9.8
  CVE-2026-74669

  ipvs: clear IPv4 options after rebasing tunnel ICMP errors

  In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ip_vs_in_icmp() rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmp_send(). However, …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 22, 2026
• Critical 9.8
  CVE-2026-80714

  ipvs: do not propagate one-packet flag to synced conns

  In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ip_vs_bind_dest() copies connect…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 28, 2026
• High 8.1
  CVE-2026-43051

  HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

  In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq The wacom_intuos_bt_irq() function processes Bluetooth HID reports without sufficient bounds checking. A maliciously crafted short re…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  May 1, 2026
• High 7.8
  CVE-2026-74641

  ALSA: usx2y: bound the hwdep mmap fault offset

  In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd_us428ctls_vm_fault() turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf->pgoff << PAGE_SHIFT; vadd…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 22, 2026
• Unscored —
  CVE-2026-99284

  net: skbuff: propagate shared-frag marker in skb_zerocopy()

  In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker in skb_zerocopy() skb_zerocopy() moves frag descriptors from @from into @to and takes a reference on each frag, but it does not copy skb_shinfo(from)…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 7, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2464462
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2516251
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2521375
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2521436
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2525436
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2559835
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_94596.json
• report
  https://access.redhat.com/security/cve/CVE-2026-43051
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-43051
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-43051
• article
  https://lore.kernel.org/linux-cve-announce/2026050107-CVE-2026-43051-0d15@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-68476
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-68476
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-68476
• article
  https://lore.kernel.org/linux-cve-announce/2026081505-CVE-2026-68476-47ba@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-74641
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-74641
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-74641
• article
  https://lore.kernel.org/linux-cve-announce/2026082223-CVE-2026-74641-92d7@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-74669
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-74669
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-74669
• article
  https://lore.kernel.org/linux-cve-announce/2026082229-CVE-2026-74669-f574@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-80714
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-80714
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-80714
• article
  https://lore.kernel.org/linux-cve-announce/2026082809-CVE-2026-80714-799a@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-99284
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2568683
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-99284
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-99284
• article
  https://git.kernel.org/stable/c/1a9c180cd8435917b7516edfb1c9148032c28773
• article
  https://git.kernel.org/stable/c/1c623e3cbf43f12dd4a72712079bfa247a9b8ba3
• article
  https://git.kernel.org/stable/c/79dc34beb1fdb3da79753e51e15c68591a2561fe
• article
  https://git.kernel.org/stable/c/d7d6ff98d5d1b400f02211f962ac32cc0020aeab