RHSA-2026:41236CriticalCVSS 8.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Published
July 17, 2026
Last Modified
July 23, 2026

🔗 CVE IDs covered (16)

CVE-2026-43163 →CVE-2026-45852 →CVE-2026-46181 →CVE-2026-23243 →CVE-2026-43037 →CVE-2026-43110 →CVE-2026-43125 →CVE-2026-43158 →CVE-2026-43198 →CVE-2026-46243 →CVE-2026-43190 →CVE-2026-46090 →CVE-2026-23455 →CVE-2026-31532 →CVE-2026-31607 →CVE-2026-31685 →

📋 Description

CVE-2026-23243 — kernel: Linux kernel: Denial of service and memory corruption in RDMA umad CVE-2026-23455 — kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() CVE-2026-31532 — kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() CVE-2026-31607 — kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() CVE-2026-31685 — kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets CVE-2026-43037 — kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() CVE-2026-43110 — kernel: wifi: brcmfmac: validate bsscfg indices in IF events CVE-2026-43125 — kernel: dlm: validate length in dlm_search_rsb_tree CVE-2026-43158 — kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks CVE-2026-43163 — kernel: md/bitmap: fix GPF in write_page caused by resize race CVE-2026-43190 — kernel: netfilter: xt_tcpmss: check remaining length before reading optlen CVE-2026-43198 — kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() CVE-2026-45852 — kernel: RDMA/rxe: Fix double free in rxe_srq_from_init CVE-2026-46090 — kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop CVE-2026-46181 — kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() CVE-2026-46243 — kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions

🔗 References (19)