RHSA-2026:35896HighCVSS 7.8

Red Hat Security Advisory: kernel security update

Published
July 6, 2026
Last Modified
July 15, 2026

🔗 CVE IDs covered (11)

CVE-2026-23455 →CVE-2026-43329 →CVE-2026-46090 →CVE-2026-46181 →CVE-2025-71116 →CVE-2026-22984 →CVE-2026-31408 →CVE-2026-31669 →CVE-2026-43198 →CVE-2026-45852 →CVE-2026-22990 →

📋 Description

CVE-2025-71116 — kernel: libceph: make decode_pool() more resilient against corrupted osdmaps CVE-2026-22984 — kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() CVE-2026-22990 — kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() CVE-2026-23455 — kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() CVE-2026-31408 — kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold CVE-2026-31669 — kernel: mptcp: fix slab-use-after-free in __inet_lookup_established CVE-2026-43198 — kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() CVE-2026-43329 — kernel: netfilter: flowtable: strictly check for maximum number of actions CVE-2026-45852 — kernel: RDMA/rxe: Fix double free in rxe_srq_from_init CVE-2026-46090 — kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop CVE-2026-46181 — kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

🔗 References (14)