RHSA-2026:93413HighCVSS 9.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Published
November 1, 2026
Last Modified
November 2, 2026

🔗 CVE IDs covered (16)

CVE-2026-64191 →CVE-2026-68398 →CVE-2026-80586 →CVE-2026-93827 →CVE-2026-98432 →CVE-2026-98725 →CVE-2026-22977 →CVE-2026-89603 →CVE-2026-90011 →CVE-2026-89932 →CVE-2026-98222 →CVE-2026-46174 →CVE-2026-68169 →CVE-2026-74283 →CVE-2026-93787 →CVE-2026-98364 →

📋 Description

CVE-2026-22977 — kernel: Kernel: Denial of Service in network socket error handling CVE-2026-46174 — kernel: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache CVE-2026-64191 — kernel: i2c: stub: Reject I2C block transfers with invalid length CVE-2026-68169 — kernel: mptcp: pm: userspace: fix use-after-free in get_local_id CVE-2026-68398 — kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability CVE-2026-74283 — kernel: tipc: require net admin for TIPCv2 netlink mutators CVE-2026-80586 — kernel: mptcp: options: reset DSS fields in case of unexpected size CVE-2026-89603 — kernel: entry: Fix seccomp bypass after ptrace with TSYNC CVE-2026-89932 — kernel: KVM: nVMX: Always flush vpid02 on first use CVE-2026-90011 — kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload CVE-2026-93787 — kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir CVE-2026-93827 — kernel: virtio-fs: avoid double-free on failed queue setup CVE-2026-98222 — kernel: KEYS: encrypted: fix integer overflow of datablob_len CVE-2026-98364 — kernel: xfrm: hold net_device reference under RCU in bundle creation CVE-2026-98432 — kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period CVE-2026-98725 — kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()

🎯 Affected products200

  • 10Base-SMTV
  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Enterprise Linux BaseOS (v. 10)
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • Red Hat Enterprise Linux Hidden (v. 10)
  • Red Hat Enterprise Linux Real Time (v. 10)
  • Red Hat Enterprise Linux Real Time for NFV (v. 10)
  • kernel-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-0:6.12.0-211.72.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-0:6.12.0-211.72.1.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-0:6.12.0-211.72.1.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-0:6.12.0-211.72.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-64k-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-64k-core-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-64k-debug-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-64k-debug-core-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-64k-debug-debuginfo-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • kernel-64k-debug-debuginfo-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-64k-debug-debuginfo-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • kernel-64k-debug-debuginfo-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux Real Time (v. 10)
  • kernel-64k-debug-devel-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • kernel-64k-debug-devel-matched-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • kernel-64k-debug-modules-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-64k-debug-modules-core-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-64k-debug-modules-extra-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-64k-debuginfo-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • kernel-64k-debuginfo-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • kernel-64k-debuginfo-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • kernel-64k-debuginfo-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux Real Time (v. 10)
  • kernel-64k-devel-0:6.12.0-211.72.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: If PPP over L2TP functionality is not required, prevent the 'pppol2tp' kernel module from loading to mitigate this vulnerability. Create a file named `/etc/modprobe.d/disable-pppol2tp.conf` with the following content: ``` install pppol2tp /bin/true ``` After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. This action may impact services relying on PPP over L2TP. Workaround: Prevent the TIPC kernel module from loading if Transparent Inter-Process Communication is not explicitly required: 1. Create a configuration file to disable the module: # echo "install tipc /bin/true" > /etc/modprobe.d/disable-tipc.conf # echo "blacklist tipc" >> /etc/modprobe.d/disable-tipc.conf 2. Unload the module if it is currently loaded: # modprobe -r tipc Caveats: Disabling the tipc module will break applications and services that rely on TIPC for clustering or inter-process communication. Warning: If the tipc module is actively in use, running `modprobe -r` will fail and a system reboot is required for the configuration changes to take full effect. Workaround: The vulnerability affects the Multipath TCP (MPTCP) feature in the Linux kernel. To mitigate this issue, MPTCP can be disabled by preventing the `mptcp` kernel module from loading. To disable the `mptcp` module: 1. Create a new file `/etc/modprobe.d/disable-mptcp.conf` with the following content: `install mptcp /bin/true blacklist mptcp` 2. Regenerate the initramfs to ensure the change takes effect on boot: `sudo dracut -f -v` 3. Reboot the system for the changes to take effect. Disabling MPTCP may impact network performance or functionality for applications that rely on Multipath TCP. Workaround: Disable nested virtualization on Intel KVM hosts if nested virtual machines are not required. 1. Create or modify the module configuration file to disable the nested feature: # echo "options kvm_intel nested=0" > /etc/modprobe.d/kvm_intel.conf 2. Apply the configuration by removing and reloading the kvm_intel module: # modprobe -r kvm_intel # modprobe kvm_intel Warning: Reloading the kvm_intel kernel module requires stopping all active virtual machines on the host. If virtual machines cannot be stopped immediately, reboot the host system to apply the configuration. Caveat: Disabling nested virtualization prevents virtual machines from running their own nested hypervisors (L2 guests). Workaround: To mitigate this vulnerability, prevent the virtiofs kernel module from loading on the system if virtio-fs shared filesystems are not required. 1. Add a configuration rule to disable autoloading of the module: # echo "install virtiofs /bin/true" > /etc/modprobe.d/disable-virtiofs.conf 2. If the module is currently loaded, unload it: # modprobe -r virtiofs Warning: If virtiofs is in active use by mounted filesystems, unloading the module will fail. A system reboot may be required to completely unload the driver and ensure configuration changes take effect. Caveats: Disabling the virtiofs module prevents the guest system from mounting filesystems shared via virtio-fs from the hypervisor. Workaround: See the security bulletin for a detailed mitigation procedure.

🔗 References (19)