RHSA-2026:35863HighCVSS 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Published
July 6, 2026
Last Modified
August 26, 2026

🔗 CVE IDs covered (10)

CVE-2026-43279 →CVE-2026-43329 →CVE-2026-46090 →CVE-2026-46181 →CVE-2026-23270 →CVE-2026-31669 →CVE-2026-43125 →CVE-2026-45852 →CVE-2026-23455 →CVE-2026-43198 →

📋 Description

CVE-2026-23270 — kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation CVE-2026-23455 — kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() CVE-2026-31669 — kernel: mptcp: fix slab-use-after-free in __inet_lookup_established CVE-2026-43125 — kernel: dlm: validate length in dlm_search_rsb_tree CVE-2026-43198 — kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() CVE-2026-43279 — kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing CVE-2026-43329 — kernel: netfilter: flowtable: strictly check for maximum number of actions CVE-2026-45852 — kernel: RDMA/rxe: Fix double free in rxe_srq_from_init CVE-2026-46090 — kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop CVE-2026-46181 — kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

🎯 Affected products74

  • Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • bpftool-0:4.18.0-477.150.1.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • bpftool-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • bpftool-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • bpftool-debuginfo-0:4.18.0-477.150.1.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • bpftool-debuginfo-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • bpftool-debuginfo-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • kernel-0:4.18.0-477.150.1.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-0:4.18.0-477.150.1.el8_8.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-0:4.18.0-477.150.1.el8_8.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • kernel-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • kernel-abi-stablelists-0:4.18.0-477.150.1.el8_8.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-abi-stablelists-0:4.18.0-477.150.1.el8_8.noarch as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • kernel-core-0:4.18.0-477.150.1.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-core-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-core-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • kernel-debug-0:4.18.0-477.150.1.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-debug-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-debug-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • kernel-debug-core-0:4.18.0-477.150.1.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-debug-core-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-debug-core-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • kernel-debug-debuginfo-0:4.18.0-477.150.1.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-debug-debuginfo-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-debug-debuginfo-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • kernel-debug-devel-0:4.18.0-477.150.1.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-debug-devel-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • kernel-debug-devel-0:4.18.0-477.150.1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • +44 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this vulnerability, prevent the `rdma_rxe` kernel module from loading. Create a file `/etc/modprobe.d/blacklist-rdma_rxe.conf` with `blacklist rdma_rxe`. Regenerate the initramfs using `sudo dracut -f -v` (or `sudo mkinitrd -f -v /boot/initramfs-$(uname -r).img $(uname -r)` for older systems) and reboot. This action may impact functionality dependent on the RDMA/rxe driver.

🔗 References (13)