RHSA-2026:35844HighCVSS 7.1

Red Hat Security Advisory: kernel security update

Published
July 6, 2026
Last Modified
August 18, 2026

🔗 CVE IDs covered (4)

CVE-2026-45852 →CVE-2026-46090 →CVE-2026-23455 →CVE-2026-43125 →

📋 Description

CVE-2026-23455 — kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() CVE-2026-43125 — kernel: dlm: validate length in dlm_search_rsb_tree CVE-2026-45852 — kernel: RDMA/rxe: Fix double free in rxe_srq_from_init CVE-2026-46090 — kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop

🎯 Affected products95

  • Red Hat Enterprise Linux Server (v. 7 ELS)
  • Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • bpftool-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-0:3.10.0-1160.154.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-0:3.10.0-1160.154.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • kernel-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-0:3.10.0-1160.154.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-0:3.10.0-1160.154.1.el7.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-0:3.10.0-1160.154.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-abi-whitelists-0:3.10.0-1160.154.1.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-bootwrapper-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-bootwrapper-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-0:3.10.0-1160.154.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-0:3.10.0-1160.154.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.154.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • +65 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

🔗 References (7)