RHSA-2026:23237

Vulnerability from csaf_redhat - Published: 2026-06-04 10:49 - Updated: 2026-11-09 22:52
Summary
Red Hat Security Advisory: kernel security update
Severity
Important
Notes
Topic: An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170) * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135) * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089) * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2025-40135

A use-after-free flaw was found in ip6_autoflowlabel in the Linux kernel's net/ipv6/ip6_output.c code. In this flaw an attacker can cause a denial of service (DoS) attack.

7.0 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-825 - Expired Pointer Dereference
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-9.4.0.Z.E4S:bpftool-debuginfo-0:7.3.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:bpftool-debuginfo-0:7.3.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:bpftool-debuginfo-0:7.3.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:bpftool-debuginfo-0:7.3.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-64k-debug-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-64k-debug-devel-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-64k-debug-devel-matched-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-64k-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-64k-devel-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-64k-devel-matched-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debug-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debug-debuginfo-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debug-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debug-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debug-devel-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debug-devel-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debug-devel-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debug-devel-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debug-devel-matched-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debug-devel-matched-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debug-devel-matched-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debug-devel-matched-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debuginfo-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debuginfo-common-aarch64-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debuginfo-common-ppc64le-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debuginfo-common-s390x-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-debuginfo-common-x86_64-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-devel-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-devel-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-devel-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-devel-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-devel-matched-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-devel-matched-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-devel-matched-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-devel-matched-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-doc-0:5.14.0-427.129.1.el9_4.noarch —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-rt-debug-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-rt-debug-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-rt-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-rt-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-tools-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-tools-debuginfo-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-tools-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-tools-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-zfcpdump-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-zfcpdump-devel-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:kernel-zfcpdump-devel-matched-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libperf-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libperf-debuginfo-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libperf-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:libperf-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:perf-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:perf-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:perf-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:perf-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:perf-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:perf-debuginfo-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:perf-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:perf-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:python3-perf-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:python3-perf-debuginfo-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:python3-perf-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:python3-perf-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:rtla-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:rtla-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:rtla-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:rtla-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:rv-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:rv-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:rv-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.4.0.Z.E4S:rv-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:bpftool-0:7.3.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:bpftool-0:7.3.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:bpftool-0:7.3.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:bpftool-0:7.3.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:bpftool-debuginfo-0:7.3.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:bpftool-debuginfo-0:7.3.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:bpftool-debuginfo-0:7.3.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:bpftool-debuginfo-0:7.3.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-0:5.14.0-427.129.1.el9_4.src —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-64k-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-64k-core-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-64k-debug-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-64k-debug-core-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-64k-debug-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-64k-debug-modules-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-64k-debug-modules-core-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-64k-debug-modules-extra-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-64k-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-64k-modules-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-64k-modules-core-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-64k-modules-extra-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-abi-stablelists-0:5.14.0-427.129.1.el9_4.noarch —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-core-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-core-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-core-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-core-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-core-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-core-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-core-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-core-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-debuginfo-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-modules-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-modules-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-modules-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-modules-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-modules-core-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-modules-core-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-modules-core-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-modules-core-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-modules-extra-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-modules-extra-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-modules-extra-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-modules-extra-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debug-uki-virt-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debuginfo-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debuginfo-common-aarch64-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debuginfo-common-ppc64le-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debuginfo-common-s390x-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-debuginfo-common-x86_64-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-modules-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-modules-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-modules-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-modules-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-modules-core-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-modules-core-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-modules-core-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-modules-core-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-modules-extra-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-modules-extra-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-modules-extra-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-modules-extra-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-rt-debug-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-rt-debug-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-rt-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-rt-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-tools-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-tools-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-tools-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-tools-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-tools-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-tools-debuginfo-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-tools-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-tools-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-tools-libs-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-tools-libs-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-tools-libs-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-uki-virt-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-zfcpdump-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-zfcpdump-core-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-zfcpdump-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-zfcpdump-modules-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-zfcpdump-modules-core-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:kernel-zfcpdump-modules-extra-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:libperf-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:libperf-debuginfo-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:libperf-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:libperf-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:perf-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:perf-debuginfo-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:perf-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:perf-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-perf-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-perf-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-perf-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-perf-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-perf-debuginfo-0:5.14.0-427.129.1.el9_4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-perf-debuginfo-0:5.14.0-427.129.1.el9_4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-perf-debuginfo-0:5.14.0-427.129.1.el9_4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-perf-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:bpftool-debuginfo-0:7.3.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-debug-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-debuginfo-common-x86_64-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-core-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-debug-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-debug-core-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-debug-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-debug-devel-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-debug-kvm-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-debug-modules-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-debug-modules-core-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-debug-modules-extra-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-devel-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-kvm-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-modules-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-modules-core-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-rt-modules-extra-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:kernel-tools-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:libperf-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:perf-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: NFV-9.4.0.Z.E4S:python3-perf-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:bpftool-debuginfo-0:7.3.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-debug-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-debuginfo-common-x86_64-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-core-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-debug-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-debug-core-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-debug-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-debug-devel-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-debug-modules-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-debug-modules-core-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-debug-modules-extra-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-devel-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-modules-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-modules-core-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-rt-modules-extra-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:kernel-tools-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:libperf-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:perf-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: RT-9.4.0.Z.E4S:python3-perf-debuginfo-0:5.14.0-427.129.1.el9_4.x86_64 —
Vendor Fix fix
Workaround
Threats
Impact Moderate
CVE-2025-40158

A use-after-free flaw was found in ip6_finish_output2 in net/ipv6/ip6_output.c in ipv6 access. This flaw could allow an attacker to crash the system at device disconnect. This vulnerability could even lead to a kernel information leak problem.

7.0 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-825 - Expired Pointer Dereference
Affected products
Fixed 233 products, the same list as for CVE-2025-40135
Threats
Impact Moderate
CVE-2025-40170

A flaw was found in the Linux kernel's networking subsystem. A local attacker could exploit this vulnerability to escalate privileges or cause a Denial of Service (DoS) through a kernel crash. By rapidly altering network routes while establishing socket connections, an attacker triggers a race condition where the kernel accesses device memory that has already been freed due to a lack of proper synchronization.

7.4 (High)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-416 - Use After Free
Affected products
Fixed 233 products, the same list as for CVE-2025-40135
Threats
Impact Moderate
CVE-2025-68724

A flaw was found in the Linux kernel's asymmetric keys subsystem. An integer overflow in the asymmetric_key_generate_id function can lead to memory corruption when calculating buffer sizes for asymmetric key identifiers. A local attacker with privileges to load cryptographic certificates into the kernel keyring could exploit this flaw by providing a crafted X.509 certificate with oversized fields. This could result in a Denial of Service (DoS) through a system crash or unauthorized memory disclosure.

7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 233 products, the same list as for CVE-2025-40135
Threats
Impact Moderate
CVE-2025-71089

A security vulnerability was found in the Linux kernel's IOMMU Shared Virtual Addressing (SVA) implementation on x86 architecture. When SVA is enabled, the IOMMU caches kernel page table entries. Since the kernel lacks a mechanism to notify the IOMMU when kernel page table pages are freed and reallocated, the IOMMU can retain stale entries pointing to reused memory. This can lead to use-after-free or write-after-free conditions, potentially enabling arbitrary physical memory DMA access or privilege escalation.

6.6 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CWE-820 - Missing Synchronization
Affected products
Fixed 233 products, the same list as for CVE-2025-40135
Threats
Impact Moderate
CVE-2026-23216

A use-after-free flaw was found in the Linux kernel's iSCSI target subsystem. In the iscsit_dec_conn_usage_count() function, complete() is called while still holding the conn->conn_usage_lock spinlock. The waiting thread (such as iscsit_close_connection()) may wake up immediately and free the iscsit_conn structure before the current thread executes spin_unlock_bh(), resulting in a use-after-free when attempting to release the lock on already-freed memory.

7.0 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-413 - Improper Resource Locking
Affected products
Fixed 233 products, the same list as for CVE-2025-40135
Threats
Impact Moderate
CVE-2026-23392

A flaw was found in the Linux kernel's netfilter component, specifically within the nf_tables subsystem. An error in releasing a flowtable after an RCU (Read-Copy-Update) grace period could lead to a use-after-free vulnerability. This issue could expose the flowtable to the packet path and nfnetlink_hook control plane, potentially allowing a local attacker to cause a system crash (Denial of Service) or achieve arbitrary code execution.

7.0 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-825 - Expired Pointer Dereference
Affected products
Fixed 233 products, the same list as for CVE-2025-40135
Threats
Impact Moderate
CVE-2026-31685

A flaw was found in the Linux kernel's netfilter component. This vulnerability occurs because the `eui64_mt6()` function, which processes IPv6 packets, does not properly validate the MAC header for all packets. Specifically, packets with a zero fragment offset could bypass an existing guard, allowing the system to attempt to access an invalid MAC header. A remote attacker could exploit this by sending specially crafted IPv6 packets, potentially causing a system crash and leading to a Denial of Service (DoS).

7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-1287 - Improper Validation of Specified Type of Input
Affected products
Fixed 233 products, the same list as for CVE-2025-40135
Threats
Impact Moderate
CVE-2026-31709

A flaw was found in the Linux kernel's Server Message Block (SMB) client, specifically within the cifsacl functionality. A malicious SMB server could provide a malformed Discretionary Access Control List (DACL) that claims to contain more Access Control Entries (ACEs) than are actually present. This insufficient validation allows the kernel to read or copy data beyond the intended memory boundaries, leading to memory corruption. This could potentially result in information disclosure or a denial of service.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-1288 - Improper Validation of Consistency within Input
Affected products
Fixed 233 products, the same list as for CVE-2025-40135
Threats
Impact Important
CVE-2026-43037

A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-843 - Access of Resource Using Incompatible Type
Affected products
Fixed 233 products, the same list as for CVE-2025-40135
Threats
Impact Critical
CVE-2026-43038

A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option (CIPSO) IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 ICMP error, potentially causing an out-of-bounds memory access. This memory corruption could result in information disclosure or a denial of service.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
CWE-843 - Access of Resource Using Incompatible Type
Affected products
Fixed 233 products, the same list as for CVE-2025-40135
Threats
Impact Important
CVE-2026-43110

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. This vulnerability occurs because the driver fails to properly validate bsscfg indices in interface (IF) events. An attacker could exploit this by sending a specially crafted IF event with an invalid bsscfg index, which could lead to an out-of-bounds write or read, potentially causing a system crash and resulting in a denial of service (DoS).

8.8 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input
Affected products
Fixed 233 products, the same list as for CVE-2025-40135
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2026:23237 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2414506 external
https://bugzilla.redhat.com/show_bug.cgi?id=2414521 external
https://bugzilla.redhat.com/show_bug.cgi?id=2414523 external
https://bugzilla.redhat.com/show_bug.cgi?id=2424886 external
https://bugzilla.redhat.com/show_bug.cgi?id=2429104 external
https://bugzilla.redhat.com/show_bug.cgi?id=2440630 external
https://bugzilla.redhat.com/show_bug.cgi?id=2451218 external
https://bugzilla.redhat.com/show_bug.cgi?id=2461759 external
https://bugzilla.redhat.com/show_bug.cgi?id=2464351 external
https://bugzilla.redhat.com/show_bug.cgi?id=2464397 external
https://bugzilla.redhat.com/show_bug.cgi?id=2464476 external
https://bugzilla.redhat.com/show_bug.cgi?id=2467014 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2025-40135 self
https://bugzilla.redhat.com/show_bug.cgi?id=2414521 external
https://www.cve.org/CVERecord?id=CVE-2025-40135 external
https://nvd.nist.gov/vuln/detail/CVE-2025-40135 external
https://lore.kernel.org/linux-cve-announce/202511… external
https://access.redhat.com/security/cve/CVE-2025-40158 self
https://bugzilla.redhat.com/show_bug.cgi?id=2414523 external
https://www.cve.org/CVERecord?id=CVE-2025-40158 external
https://nvd.nist.gov/vuln/detail/CVE-2025-40158 external
https://lore.kernel.org/linux-cve-announce/202511… external
https://access.redhat.com/security/cve/CVE-2025-40170 self
https://bugzilla.redhat.com/show_bug.cgi?id=2414506 external
https://www.cve.org/CVERecord?id=CVE-2025-40170 external
https://nvd.nist.gov/vuln/detail/CVE-2025-40170 external
https://lore.kernel.org/linux-cve-announce/202511… external
https://access.redhat.com/security/cve/CVE-2025-68724 self
https://bugzilla.redhat.com/show_bug.cgi?id=2424886 external
https://www.cve.org/CVERecord?id=CVE-2025-68724 external
https://nvd.nist.gov/vuln/detail/CVE-2025-68724 external
https://lore.kernel.org/linux-cve-announce/202512… external
https://access.redhat.com/security/cve/CVE-2025-71089 self
https://bugzilla.redhat.com/show_bug.cgi?id=2429104 external
https://www.cve.org/CVERecord?id=CVE-2025-71089 external
https://nvd.nist.gov/vuln/detail/CVE-2025-71089 external
https://lore.kernel.org/linux-cve-announce/202601… external
https://access.redhat.com/security/cve/CVE-2026-23216 self
https://bugzilla.redhat.com/show_bug.cgi?id=2440630 external
https://www.cve.org/CVERecord?id=CVE-2026-23216 external
https://nvd.nist.gov/vuln/detail/CVE-2026-23216 external
https://lore.kernel.org/linux-cve-announce/202602… external
https://access.redhat.com/security/cve/CVE-2026-23392 self
https://bugzilla.redhat.com/show_bug.cgi?id=2451218 external
https://www.cve.org/CVERecord?id=CVE-2026-23392 external
https://nvd.nist.gov/vuln/detail/CVE-2026-23392 external
https://lore.kernel.org/linux-cve-announce/202603… external
https://access.redhat.com/security/cve/CVE-2026-31685 self
https://bugzilla.redhat.com/show_bug.cgi?id=2461759 external
https://www.cve.org/CVERecord?id=CVE-2026-31685 external
https://nvd.nist.gov/vuln/detail/CVE-2026-31685 external
https://lore.kernel.org/linux-cve-announce/202604… external
https://access.redhat.com/security/cve/CVE-2026-31709 self
https://bugzilla.redhat.com/show_bug.cgi?id=2464476 external
https://www.cve.org/CVERecord?id=CVE-2026-31709 external
https://nvd.nist.gov/vuln/detail/CVE-2026-31709 external
https://lore.kernel.org/linux-cve-announce/202605… external
https://access.redhat.com/security/cve/CVE-2026-43037 self
https://bugzilla.redhat.com/show_bug.cgi?id=2464351 external
https://www.cve.org/CVERecord?id=CVE-2026-43037 external
https://nvd.nist.gov/vuln/detail/CVE-2026-43037 external
https://lore.kernel.org/linux-cve-announce/202605… external
https://access.redhat.com/security/cve/CVE-2026-43038 self
https://bugzilla.redhat.com/show_bug.cgi?id=2464397 external
https://www.cve.org/CVERecord?id=CVE-2026-43038 external
https://nvd.nist.gov/vuln/detail/CVE-2026-43038 external
https://lore.kernel.org/linux-cve-announce/202605… external
https://access.redhat.com/security/cve/CVE-2026-43110 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467014 external
https://www.cve.org/CVERecord?id=CVE-2026-43110 external
https://nvd.nist.gov/vuln/detail/CVE-2026-43110 external
https://lore.kernel.org/linux-cve-announce/202605… external
To clipboard 

Loading 1.1 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.