RHSA-2026:27789HighCVSS 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Published
June 22, 2026
Last Modified
July 7, 2026

🔗 CVE IDs covered (17)

CVE-2026-46152 →CVE-2026-46166 →CVE-2026-46331 →CVE-2026-46145 →CVE-2026-31787 →CVE-2026-46056 →CVE-2026-46117 →CVE-2026-46135 →CVE-2026-46173 →CVE-2026-31474 →CVE-2026-31669 →CVE-2026-43279 →CVE-2026-31772 →CVE-2026-43260 →CVE-2026-43414 →CVE-2026-45984 →CVE-2026-46125 →

📋 Description

CVE-2026-31474 — kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() CVE-2026-31669 — kernel: mptcp: fix slab-use-after-free in __inet_lookup_established CVE-2026-31772 — kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync CVE-2026-31787 — kernel: xen/privcmd: fix double free via VMA splitting CVE-2026-43260 — kernel: bnxt_en: Fix RSS context delete logic CVE-2026-43279 — kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing CVE-2026-43414 — kernel: scsi: qla2xxx: Completely fix fcport double free CVE-2026-45984 — kernel: gfs2: Fix use-after-free in iomap inline data write path CVE-2026-46056 — kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers CVE-2026-46117 — kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() CVE-2026-46125 — kernel: wifi: mac80211: remove station if connection prep fails CVE-2026-46135 — kernel: nvmet-tcp: fix race between ICReq handling and queue teardown CVE-2026-46145 — kernel: RDMA/mana: Validate rx_hash_key_len CVE-2026-46152 — kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result CVE-2026-46166 — kernel: wifi: mac80211: use safe list iteration in radar detect work CVE-2026-46173 — kernel: exit: prevent preemption of oopsing TASK_DEAD task CVE-2026-46331 — kernel: net/sched: act_pedit: extend the writable skb range per key

🔗 References (20)