RHSA-2026:35844HighCVSS 7.1

Red Hat Security Advisory: kernel security update

Published
July 6, 2026
Last Modified
September 28, 2026

🔗 CVE IDs covered (4)

CVE-2026-45852 →CVE-2026-46090 →CVE-2026-23455 →CVE-2026-43125 →

📋 Description

CVE-2026-23455 — kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() CVE-2026-43125 — kernel: dlm: validate length in dlm_search_rsb_tree CVE-2026-45852 — kernel: RDMA/rxe: Fix double free in rxe_srq_from_init CVE-2026-46090 — kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop

🎯 Affected products95

  • Red Hat Enterprise Linux Server (v. 7 ELS)
  • Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • bpftool-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-0:3.10.0-1160.154.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-0:3.10.0-1160.154.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.154.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • kernel-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-0:3.10.0-1160.154.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-0:3.10.0-1160.154.1.el7.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-0:3.10.0-1160.154.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-abi-whitelists-0:3.10.0-1160.154.1.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-bootwrapper-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-bootwrapper-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-0:3.10.0-1160.154.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-0:3.10.0-1160.154.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.154.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.154.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.154.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • +65 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this vulnerability, prevent the `rdma_rxe` kernel module from loading. Create a file `/etc/modprobe.d/blacklist-rdma_rxe.conf` with `blacklist rdma_rxe`. Regenerate the initramfs using `sudo dracut -f -v` (or `sudo mkinitrd -f -v /boot/initramfs-$(uname -r).img $(uname -r)` for older systems) and reboot. This action may impact functionality dependent on the RDMA/rxe driver.

🔗 References (7)