RHSA-2026:9095MediumCVSS 7.5

Red Hat Security Advisory: kernel security update

Published
April 20, 2026
Last Modified
September 11, 2026

🔗 CVE IDs covered (5)

CVE-2026-23231 →CVE-2026-23066 →CVE-2026-23156 →CVE-2026-23193 →CVE-2026-23216 →

📋 Description

CVE-2026-23066 — kernel: Linux kernel: Denial of Service via unsafe requeue in rxrpc_recvmsg CVE-2026-23156 — kernel: Linux kernel: Information disclosure in efivarfs via incorrect error propagation CVE-2026-23193 — kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() CVE-2026-23216 — kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() CVE-2026-23231 — kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain()

🎯 Affected products200

  • Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)
  • Red Hat Enterprise Linux Real Time EUS (v. 10.0)
  • Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)
  • kernel-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-0:6.12.0-55.69.1.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-0:6.12.0-55.69.1.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-0:6.12.0-55.69.1.el10_0.src as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-0:6.12.0-55.69.1.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-core-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debug-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debug-core-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debug-debuginfo-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • kernel-64k-debug-debuginfo-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debug-debuginfo-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)
  • kernel-64k-debug-debuginfo-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux Real Time EUS (v. 10.0)
  • kernel-64k-debug-devel-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • kernel-64k-debug-devel-matched-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • kernel-64k-debug-modules-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debug-modules-core-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debug-modules-extra-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debuginfo-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • kernel-64k-debuginfo-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debuginfo-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)
  • kernel-64k-debuginfo-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux Real Time EUS (v. 10.0)
  • kernel-64k-devel-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • kernel-64k-devel-matched-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • kernel-64k-modules-0:6.12.0-55.69.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this issue, prevent module rxrpc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: To mitigate this issue, prevent module iscsi_target_mod from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: To mitigate this issue, prevent the iscsi_target_mod module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist kernel modules. Workaround: In order to trigger the issue, it requires the ability to create user/net namespaces. On non-containerized deployments of Red Hat Enterprise Linux 7.4 and later, it is recommended to disable user namespaces by setting user.max_user_namespaces to 0: # echo "user.max_user_namespaces=0" > /etc/sysctl.d/userns.conf # sysctl -p /etc/sysctl.d/userns.conf On containerized deployments, such as Red Hat OpenShift Container Platform, do not use this mitigation as the functionality is needed to be enabled.

🔗 References (7)