RHSA-2026:38902HighCVSS 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Published
July 13, 2026
Last Modified
July 15, 2026

🔗 CVE IDs covered (11)

CVE-2026-43074 →CVE-2026-43279 →CVE-2026-45984 →CVE-2026-46135 →CVE-2026-46152 →CVE-2025-68183 →CVE-2026-31408 →CVE-2026-46189 →CVE-2026-46242 →CVE-2026-46316 →CVE-2026-53359 →

📋 Description

CVE-2025-68183 — kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr CVE-2026-31408 — kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold CVE-2026-43074 — kernel: eventpoll: defer struct eventpoll free to RCU grace period CVE-2026-43279 — kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing CVE-2026-45984 — kernel: gfs2: Fix use-after-free in iomap inline data write path CVE-2026-46135 — kernel: nvmet-tcp: fix race between ICReq handling and queue teardown CVE-2026-46152 — kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result CVE-2026-46189 — kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path CVE-2026-46242 — kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF CVE-2026-46316 — kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry CVE-2026-53359 — kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role

🔗 References (14)