Which CVE IDs does RHSA-2026:56225 cover?

RHSA-2026:56225 covers the following CVE IDs: CVE-2026-43125, CVE-2026-43329, CVE-2026-46244, CVE-2026-64530, CVE-2026-43038. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:56225?

RHSA-2026:56225 has a CVSS v3 base score of 7.8, published by Red Hat Product Security.

Which products are affected by RHSA-2026:56225?

RHSA-2026:56225 affects 36 products, including: Red Hat Enterprise Linux BaseOS EUS (v.9.6); kpatch-patch-5_14_0-570_116_1-0:1-7.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6); kpatch-patch-5_14_0-570_116_1-0:1-7.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6); kpatch-patch-5_14_0-570_116_1-0:1-7.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6); kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-7.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6); and others — see the full list on the advisory page.

RHSA-2026:56225HighCVSS 7.8

Red Hat Security Advisory: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update

Vendor

Red Hat Product Security

Published

August 18, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (5)

CVE-2026-43125 →CVE-2026-43329 →CVE-2026-46244 →CVE-2026-64530 →CVE-2026-43038 →

📋 Description

CVE-2026-43038 — kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() CVE-2026-43125 — kernel: dlm: validate length in dlm_search_rsb_tree CVE-2026-43329 — kernel: netfilter: flowtable: strictly check for maximum number of actions CVE-2026-46244 — kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync CVE-2026-64530 — kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

🎯 Affected products36

Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-0:1-7.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-0:1-7.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-0:1-7.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-7.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-7.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-debugsource-0:1-7.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-debugsource-0:1-7.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-0:1-22.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-0:1-22.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-0:1-22.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-22.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-22.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-debugsource-0:1-22.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-debugsource-0:1-22.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-0:1-13.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-0:1-13.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-0:1-13.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-13.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-13.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-debugsource-0:1-13.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-debugsource-0:1-13.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-0:1-12.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-0:1-12.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-0:1-12.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-12.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-12.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-debugsource-0:1-12.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-debugsource-0:1-12.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_94_1-0:1-10.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
+6 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: To mitigate this issue, avoid configuring the Linux kernel's traffic control (tc) subsystem with the RED queue discipline (`red`) that includes `qevent early_drop` and an `action ct` filter on interfaces processing fragmented UDP streams. This specific configuration is required to trigger the use-after-free vulnerability.

🔗 CVE IDs covered (5)

📋 Description

🎯 Affected products36

✅ Remediation

🔗 References (8)