RHSA-2026:25533
Vulnerability from csaf_redhat - Published: 2026-06-12 19:56 - Updated: 2026-11-09 22:52A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. An attacker can trigger a Denial of Service (DoS) or potentially expose sensitive kernel memory by sending malformed SCTP packets. Because the kernel fails to properly validate buffer boundaries when processing incoming data chunks, an out-of-bounds memory read occurs. This vulnerability can lead to a system crash, disrupting services on the affected host.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 | — |
Vendor Fix
fix
|
A flaw was found in the Linux kernel's NVMe component. This vulnerability is due to a double free error that occurs when a discard request needs to be retried and fails before a new special payload is added. A local attacker could exploit this memory corruption issue to cause a denial of service (DoS).
A use-after-free flaw was found in ip6_autoflowlabel in the Linux kernel's net/ipv6/ip6_output.c code. In this flaw an attacker can cause a denial of service (DoS) attack.
A use-after-free flaw was found in ip6_finish_output2 in net/ipv6/ip6_output.c in ipv6 access. This flaw could allow an attacker to crash the system at device disconnect. This vulnerability could even lead to a kernel information leak problem.
A flaw was found in the Linux kernel's networking subsystem. A local attacker could exploit this vulnerability to escalate privileges or cause a Denial of Service (DoS) through a kernel crash. By rapidly altering network routes while establishing socket connections, an attacker triggers a race condition where the kernel accesses device memory that has already been freed due to a lack of proper synchronization.
In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one use-after-free warning when running NBD_CMD_CONNECT and NBD_CLEAR_SOCK: nbd_genl_connect nbd_alloc_and_init_config // config_refs=1 nbd_start_device // config_refs=2 set NBD_RT_HAS_CONFIG_REF open nbd // config_refs=3 recv_work done // config_refs=2 NBD_CLEAR_SOCK // config_refs=1 close nbd // config_refs=0 refcount_inc -> uaf ------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 24 PID: 1014 at lib/refcount.c:25 refcount_warn_saturate+0x12e/0x290 nbd_genl_connect+0x16d0/0x1ab0 genl_family_rcv_msg_doit+0x1f3/0x310 genl_rcv_msg+0x44a/0x790 The issue can be easily reproduced by adding a small delay before refcount_inc(&nbd->config_refs) in nbd_genl_connect(): mutex_unlock(&nbd->config_lock); if (!ret) { set_bit(NBD_RT_HAS_CONFIG_REF, &config->runtime_flags); + printk("before sleep\n"); + mdelay(5 * 1000); + printk("after sleep\n"); refcount_inc(&nbd->config_refs); nbd_connect_reply(info, nbd->index); }
A flaw was found in the Linux kernel's asymmetric keys subsystem. An integer overflow in the asymmetric_key_generate_id function can lead to memory corruption when calculating buffer sizes for asymmetric key identifiers. A local attacker with privileges to load cryptographic certificates into the kernel keyring could exploit this flaw by providing a crafted X.509 certificate with oversized fields. This could result in a Denial of Service (DoS) through a system crash or unauthorized memory disclosure.
A security vulnerability was found in the Linux kernel's IOMMU Shared Virtual Addressing (SVA) implementation on x86 architecture. When SVA is enabled, the IOMMU caches kernel page table entries. Since the kernel lacks a mechanism to notify the IOMMU when kernel page table pages are freed and reallocated, the IOMMU can retain stale entries pointing to reused memory. This can lead to use-after-free or write-after-free conditions, potentially enabling arbitrary physical memory DMA access or privilege escalation.
A flaw was found in the Linux kernel's macvlan driver. This vulnerability occurs when a network source entry is deleted while network traffic is actively being forwarded without proper synchronization, resulting in a use-after-free condition. A local attacker with network administration privileges can exploit this race condition to crash the system, causing a Denial of Service (DoS), or potentially achieve privilege escalation.
A use-after-free flaw was found in the Linux kernel's iSCSI target subsystem. In the iscsit_dec_conn_usage_count() function, complete() is called while still holding the conn->conn_usage_lock spinlock. The waiting thread (such as iscsit_close_connection()) may wake up immediately and free the iscsit_conn structure before the current thread executes spin_unlock_bh(), resulting in a use-after-free when attempting to release the lock on already-freed memory.
A flaw was found in the Linux kernel's Controller Area Network (CAN) raw socket implementation. A use-after-free vulnerability can occur due to a timing window during the unregistration of CAN receive filters, allowing a freed memory region to be accessed. This could lead to system instability or a denial of service (DoS).
A flaw was found in the Linux kernel's netfilter component. This vulnerability occurs because the `eui64_mt6()` function, which processes IPv6 packets, does not properly validate the MAC header for all packets. Specifically, packets with a zero fragment offset could bypass an existing guard, allowing the system to attempt to access an invalid MAC header. A remote attacker could exploit this by sending specially crafted IPv6 packets, potentially causing a system crash and leading to a Denial of Service (DoS).
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option (CIPSO) IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 ICMP error, potentially causing an out-of-bounds memory access. This memory corruption could result in information disclosure or a denial of service.
A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. This vulnerability occurs because the driver fails to properly validate bsscfg indices in interface (IF) events. An attacker could exploit this by sending a specially crafted IF event with an invalid bsscfg index, which could lead to an out-of-bounds write or read, potentially causing a system crash and resulting in a denial of service (DoS).
A flaw was found in the Linux kernel, specifically within the netfilter: xt_tcpmss module. A remote attacker could exploit this vulnerability by sending a specially crafted TCP packet. The TCP option parser does not properly validate the remaining option length, which results in an out-of-bounds read. This allows an attacker to access memory beyond the intended buffer, potentially leading to information disclosure.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On and Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: nvme: avoid double free special payload (CVE-2024-41073)\n\n* kernel: sctp: fix a potential overflow in sctp_ifwdtsn_skip (CVE-2023-53372)\n\n* kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)\n\n* kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)\n\n* kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)\n\n* kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)\n\n* kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)\n\n* kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)\n\n* kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001)\n\n* kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216)\n\n* kernel: can: raw: fix ro-\u003euniq use-after-free in raw_rcv() (CVE-2026-31532)\n\n* kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)\n\n* kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() (CVE-2026-43037)\n\n* kernel: ipv6: icmp: clear skb2-\u003ecb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)\n\n* kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)\n\n* kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:25533",
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2301637",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301637"
},
{
"category": "external",
"summary": "2396405",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2396405"
},
{
"category": "external",
"summary": "2414506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2414506"
},
{
"category": "external",
"summary": "2414521",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2414521"
},
{
"category": "external",
"summary": "2414523",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2414523"
},
{
"category": "external",
"summary": "2424881",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2424881"
},
{
"category": "external",
"summary": "2424886",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2424886"
},
{
"category": "external",
"summary": "2429104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429104"
},
{
"category": "external",
"summary": "2432664",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2432664"
},
{
"category": "external",
"summary": "2440630",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440630"
},
{
"category": "external",
"summary": "2461107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461107"
},
{
"category": "external",
"summary": "2461759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461759"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "2464397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464397"
},
{
"category": "external",
"summary": "2467014",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467014"
},
{
"category": "external",
"summary": "2467064",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467064"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25533.json"
}
],
"title": "Red Hat Security Advisory: kernel security update",
"tracking": {
"current_release_date": "2026-11-09T22:52:04+00:00",
"generator": {
"date": "2026-11-09T22:52:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.5"
}
},
"id": "RHSA-2026:25533",
"initial_release_date": "2026-06-12T19:56:20+00:00",
"revision_history": [
{
"date": "2026-06-12T19:56:20+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-12T19:56:20+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-09T22:52:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.6::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-core@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-core@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-modules@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-modules-extra@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-modules@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-modules-extra@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-libs@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "perf-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "perf-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-perf@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool-debuginfo@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-x86_64@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-debuginfo@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product": {
"name": "python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product_id": "python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-perf-debuginfo@4.18.0-372.195.1.el8_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:4.18.0-372.195.1.el8_6.src",
"product": {
"name": "kernel-0:4.18.0-372.195.1.el8_6.src",
"product_id": "kernel-0:4.18.0-372.195.1.el8_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@4.18.0-372.195.1.el8_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"product": {
"name": "kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"product_id": "kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-abi-stablelists@4.18.0-372.195.1.el8_6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"product_id": "kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-doc@4.18.0-372.195.1.el8_6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-372.195.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src"
},
"product_reference": "kernel-0:4.18.0-372.195.1.el8_6.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-372.195.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "perf-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-372.195.1.el8_6.src as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src"
},
"product_reference": "kernel-0:4.18.0-372.195.1.el8_6.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-372.195.1.el8_6.noarch as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "perf-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
},
"product_reference": "python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-53372",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-09-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2396405"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s Stream Control Transmission Protocol (SCTP) implementation. An attacker can trigger a Denial of Service (DoS) or potentially expose sensitive kernel memory by sending malformed SCTP packets. Because the kernel fails to properly validate buffer boundaries when processing incoming data chunks, an out-of-bounds memory read occurs. This vulnerability can lead to a system crash, disrupting services on the affected host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: sctp: fix a potential overflow in sctp_ifwdtsn_skip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Moderate because an attacker capable of supplying malformed SCTP chunks can trigger an out-of-bounds read, causing a denial of service through a kernel panic or potentially exposing uninitialized kernel memory without granting arbitrary code execution. On default installations of Red Hat Enterprise Linux, the SCTP kernel module is not loaded automatically unless explicitly requested by applications or administrator configuration. As a result, the blast radius is confined to environments where SCTP networking is actively deployed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-53372"
},
{
"category": "external",
"summary": "RHBZ#2396405",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2396405"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-53372",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-53372"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-53372",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-53372"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2025091855-CVE-2023-53372-4d9e@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2025091855-CVE-2023-53372-4d9e@gregkh/T"
}
],
"release_date": "2025-09-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: sctp: fix a potential overflow in sctp_ifwdtsn_skip"
},
{
"cve": "CVE-2024-41073",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2024-07-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2301637"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s NVMe component. This vulnerability is due to a double free error that occurs when a discard request needs to be retried and fails before a new special payload is added. A local attacker could exploit this memory corruption issue to cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: nvme: avoid double free special payload",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-41073"
},
{
"category": "external",
"summary": "RHBZ#2301637",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301637"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-41073",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41073"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-41073",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41073"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2024072909-CVE-2024-41073-1fb9@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2024072909-CVE-2024-41073-1fb9@gregkh/T"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: nvme: avoid double free special payload"
},
{
"cve": "CVE-2025-40135",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2025-11-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2414521"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in ip6_autoflowlabel in the Linux kernel\u0027s net/ipv6/ip6_output.c code. In this flaw an attacker can cause a denial of service (DoS) attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ipv6: use RCU in ip6_xmit()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-40135"
},
{
"category": "external",
"summary": "RHBZ#2414521",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2414521"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-40135",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40135"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-40135",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40135"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40135-67ca@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40135-67ca@gregkh/T"
}
],
"release_date": "2025-11-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: ipv6: use RCU in ip6_xmit()"
},
{
"cve": "CVE-2025-40158",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2025-11-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2414523"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in ip6_finish_output2 in net/ipv6/ip6_output.c in ipv6 access. This flaw could allow an attacker to crash the system at device disconnect. This vulnerability could even lead to a kernel information leak problem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ipv6: use RCU in ip6_output()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-40158"
},
{
"category": "external",
"summary": "RHBZ#2414523",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2414523"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-40158",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40158"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-40158",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40158"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40158-4c9d@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40158-4c9d@gregkh/T"
}
],
"release_date": "2025-11-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: ipv6: use RCU in ip6_output()"
},
{
"cve": "CVE-2025-40170",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2414506"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s networking subsystem. A local attacker could exploit this vulnerability to escalate privileges or cause a Denial of Service (DoS) through a kernel crash. By rapidly altering network routes while establishing socket connections, an attacker triggers a race condition where the kernel accesses device memory that has already been freed due to a lack of proper synchronization.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net: use dst_dev_rcu() in sk_setup_caps()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Several paths read dst-\u003edev without RCU. A concurrent dst/device teardown could cause a use-after-free\u2014fixed by switching to dst_dev_rcu() and wrapping sections in rcu_read_lock(), mitigating a local DoS/LPE risk.\nA local user floods route changes (device up/down, MTU/GSO tweaks, dst churn) while rapidly creating sockets, racing sk_setup_caps() to read dev after free that leads to kernel crash.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-40170"
},
{
"category": "external",
"summary": "RHBZ#2414506",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2414506"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-40170",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40170"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-40170",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40170"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2025111259-CVE-2025-40170-d39d@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2025111259-CVE-2025-40170-d39d@gregkh/T"
}
],
"release_date": "2025-11-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: net: use dst_dev_rcu() in sk_setup_caps()"
},
{
"cve": "CVE-2025-68366",
"cwe": {
"id": "CWE-911",
"name": "Improper Update of Reference Count"
},
"discovery_date": "2025-12-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2424881"
}
],
"notes": [
{
"category": "description",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: defer config unlock in nbd_genl_connect\n\nThere is one use-after-free warning when running NBD_CMD_CONNECT and\nNBD_CLEAR_SOCK:\n\nnbd_genl_connect\n nbd_alloc_and_init_config // config_refs=1\n nbd_start_device // config_refs=2\n set NBD_RT_HAS_CONFIG_REF\t\t\topen nbd // config_refs=3\n recv_work done // config_refs=2\n\t\t\t\t\t\tNBD_CLEAR_SOCK // config_refs=1\n\t\t\t\t\t\tclose nbd // config_refs=0\n refcount_inc -\u003e uaf\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 24 PID: 1014 at lib/refcount.c:25 refcount_warn_saturate+0x12e/0x290\n nbd_genl_connect+0x16d0/0x1ab0\n genl_family_rcv_msg_doit+0x1f3/0x310\n genl_rcv_msg+0x44a/0x790\n\nThe issue can be easily reproduced by adding a small delay before\nrefcount_inc(\u0026nbd-\u003econfig_refs) in nbd_genl_connect():\n\n mutex_unlock(\u0026nbd-\u003econfig_lock);\n if (!ret) {\n set_bit(NBD_RT_HAS_CONFIG_REF, \u0026config-\u003eruntime_flags);\n+ printk(\"before sleep\\n\");\n+ mdelay(5 * 1000);\n+ printk(\"after sleep\\n\");\n refcount_inc(\u0026nbd-\u003econfig_refs);\n nbd_connect_reply(info, nbd-\u003eindex);\n }",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: nbd: defer config unlock in nbd_genl_connect",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68366"
},
{
"category": "external",
"summary": "RHBZ#2424881",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2424881"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68366",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68366"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68366",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68366"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2025122459-CVE-2025-68366-b367@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2025122459-CVE-2025-68366-b367@gregkh/T"
}
],
"release_date": "2025-12-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: nbd: defer config unlock in nbd_genl_connect"
},
{
"cve": "CVE-2025-68724",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2025-12-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2424886"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s asymmetric keys subsystem. An integer overflow in the asymmetric_key_generate_id function can lead to memory corruption when calculating buffer sizes for asymmetric key identifiers. A local attacker with privileges to load cryptographic certificates into the kernel keyring could exploit this flaw by providing a crafted X.509 certificate with oversized fields. This could result in a Denial of Service (DoS) through a system crash or unauthorized memory disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated this vulnerability as Moderate severity because exploitation requires local access and the ability to load a malformed X.509 certificate through kernel keyring interfaces. On typical Red Hat Enterprise Linux deployments, asymmetric key parsing is primarily utilized during system boot, module loading, or administrative cryptographic operations. A local attacker with appropriate privileges could supply a crafted certificate to cause memory corruption, potentially triggering a kernel crash or unauthorized memory disclosure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68724"
},
{
"category": "external",
"summary": "RHBZ#2424886",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2424886"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68724",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68724"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68724",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68724"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2025122404-CVE-2025-68724-4d3c@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2025122404-CVE-2025-68724-4d3c@gregkh/T"
}
],
"release_date": "2025-12-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id"
},
{
"cve": "CVE-2025-71089",
"cwe": {
"id": "CWE-820",
"name": "Missing Synchronization"
},
"discovery_date": "2026-01-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2429104"
}
],
"notes": [
{
"category": "description",
"text": "A security vulnerability was found in the Linux kernel\u0027s IOMMU Shared Virtual Addressing (SVA) implementation on x86 architecture. When SVA is enabled, the IOMMU caches kernel page table entries. Since the kernel lacks a mechanism to notify the IOMMU when kernel page table pages are freed and reallocated, the IOMMU can retain stale entries pointing to reused memory. This can lead to use-after-free or write-after-free conditions, potentially enabling arbitrary physical memory DMA access or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: iommu: disable SVA when CONFIG_X86 is set",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a significant security vulnerability affecting x86 systems with IOMMU SVA support enabled. While SVA contexts are unprivileged and cannot directly access kernel mappings, the IOMMU still walks and caches intermediate kernel page table entries. An attacker could potentially exploit the stale cache entries to gain arbitrary DMA access or escalate privileges. The fix disables SVA on x86 until proper cache invalidation mechanisms are implemented.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-71089"
},
{
"category": "external",
"summary": "RHBZ#2429104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-71089",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-71089"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-71089",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-71089"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026011341-CVE-2025-71089-a642@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026011341-CVE-2025-71089-a642@gregkh/T"
}
],
"release_date": "2026-01-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: iommu: disable SVA when CONFIG_X86 is set"
},
{
"cve": "CVE-2026-23001",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-01-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2432664"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s macvlan driver. This vulnerability occurs when a network source entry is deleted while network traffic is actively being forwarded without proper synchronization, resulting in a use-after-free condition. A local attacker with network administration privileges can exploit this race condition to crash the system, causing a Denial of Service (DoS), or potentially achieve privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: macvlan: fix possible UAF in macvlan_forward_source()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A use-after-free can occur in macvlan source-mode forwarding when a source hash entry is deleted while the transmit/forwarding path still dereferences entry.vlan without proper RCU protection. A local attacker who can configure macvlan networking can race deletion with packet processing to crash the kernel and potentially achieve memory corruption.\nExploitation typically requires the CAP_NET_ADMIN capability (often within a user namespace).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23001"
},
{
"category": "external",
"summary": "RHBZ#2432664",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2432664"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23001"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23001",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23001"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026012534-CVE-2026-23001-7ab0@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026012534-CVE-2026-23001-7ab0@gregkh/T"
}
],
"release_date": "2026-01-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent module macvlan from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: macvlan: fix possible UAF in macvlan_forward_source()"
},
{
"cve": "CVE-2026-23216",
"cwe": {
"id": "CWE-413",
"name": "Improper Resource Locking"
},
"discovery_date": "2026-02-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2440630"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in the Linux kernel\u0027s iSCSI target subsystem. In the iscsit_dec_conn_usage_count() function, complete() is called while still holding the conn-\u003econn_usage_lock spinlock. The waiting thread (such as iscsit_close_connection()) may wake up immediately and free the iscsit_conn structure before the current thread executes spin_unlock_bh(), resulting in a use-after-free when attempting to release the lock on already-freed memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability requires the iSCSI target subsystem to be configured and in use, which limits the attack surface to systems actively serving as iSCSI targets. The race condition is timing-dependent and requires specific connection teardown sequences to trigger. Successful exploitation could lead to kernel crash or potentially memory corruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23216"
},
{
"category": "external",
"summary": "RHBZ#2440630",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440630"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23216",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23216"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23216",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23216"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026021800-CVE-2026-23216-6c63@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026021800-CVE-2026-23216-6c63@gregkh/T"
}
],
"release_date": "2026-02-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent the iscsi_target_mod module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist kernel modules.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()"
},
{
"cve": "CVE-2026-31532",
"cwe": {
"id": "CWE-366",
"name": "Race Condition within a Thread"
},
"discovery_date": "2026-04-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461107"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s Controller Area Network (CAN) raw socket implementation. A use-after-free vulnerability can occur due to a timing window during the unregistration of CAN receive filters, allowing a freed memory region to be accessed. This could lead to system instability or a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: can: raw: fix ro-\u003euniq use-after-free in raw_rcv()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A use-after-free flaw in the Linux kernel CAN raw socket implementation can occur when raw_release() frees the per-CPU ro-\u003euniq storage before RCU-deferred receive callbacks have fully drained. A local attacker able to create raw CAN sockets and trigger CAN receive activity could race socket teardown with raw_rcv() and cause a kernel crash. The likely impact is denial of service, while privilege escalation would require additional, unproven control over per-CPU memory reuse.\nThe issue appears more consistent with an RCU lifetime/race-condition bug leading primarily to denial of service, as exploitation depends on a narrow teardown race involving a percpu object rather than a generic reclaimable slab object, with no demonstrated privilege-escalation path or obvious controlled overwrite primitive in the relatively niche CAN raw socket subsystem.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-31532"
},
{
"category": "external",
"summary": "RHBZ#2461107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461107"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-31532",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31532"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-31532",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31532"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026042349-CVE-2026-31532-a820@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026042349-CVE-2026-31532-a820@gregkh/T"
}
],
"release_date": "2026-04-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent the `can` kernel module from loading if CAN functionality is not required. This can be achieved by blacklisting the module.\n\nCreate a file named `/etc/modprobe.d/blacklist-can.conf` with the following content:\n```\nblacklist can\ninstall can /bin/true\n```\nAfter creating the file, regenerate the initramfs and reboot the system for the changes to take effect.\n```bash\ndracut -f -v\nreboot\n```\nThis mitigation may impact systems that rely on CAN interfaces for their operation.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: can: raw: fix ro-\u003euniq use-after-free in raw_rcv()"
},
{
"cve": "CVE-2026-31685",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-04-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461759"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s netfilter component. This vulnerability occurs because the `eui64_mt6()` function, which processes IPv6 packets, does not properly validate the MAC header for all packets. Specifically, packets with a zero fragment offset could bypass an existing guard, allowing the system to attempt to access an invalid MAC header. A remote attacker could exploit this by sending specially crafted IPv6 packets, potentially causing a system crash and leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because triggering it requires a non-standard network filtering configuration that explicitly enables IPv6 EUI-64 matching. In default installations, the affected netfilter extension is not active or loaded, significantly restricting the attack surface. While an attacker on the local network could theoretically cause a kernel crash or system denial of service by sending malformed IPv6 traffic, the issue only presents a risk on systems actively inspecting source MAC addresses through this specific match target.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-31685"
},
{
"category": "external",
"summary": "RHBZ#2461759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461759"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-31685",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31685"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-31685",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31685"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026042545-CVE-2026-31685-3fcc@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026042545-CVE-2026-31685-3fcc@gregkh/T"
}
],
"release_date": "2026-04-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets"
},
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
},
{
"cve": "CVE-2026-43038",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464397"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option (CIPSO) IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 ICMP error, potentially causing an out-of-bounds memory access. This memory corruption could result in information disclosure or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ipv6: icmp: clear skb2-\u003ecb[] in ip6_err_gen_icmpv6_unreach()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43038"
},
{
"category": "external",
"summary": "RHBZ#2464397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43038"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43038",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43038"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050103-CVE-2026-43038-b591@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050103-CVE-2026-43038-b591@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: ipv6: icmp: clear skb2-\u003ecb[] in ip6_err_gen_icmpv6_unreach()"
},
{
"cve": "CVE-2026-43110",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467014"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s brcmfmac Wi-Fi driver. This vulnerability occurs because the driver fails to properly validate bsscfg indices in interface (IF) events. An attacker could exploit this by sending a specially crafted IF event with an invalid bsscfg index, which could lead to an out-of-bounds write or read, potentially causing a system crash and resulting in a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: wifi: brcmfmac: validate bsscfg indices in IF events",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "brcmfmac IF event handling validates the firmware provided ifidx but still uses the raw bsscfgidx value as an index into the driver iflist array. A malformed firmware IF event with an out of range bsscfgidx can cause an out of bounds pointer read and may lead to an invalid pointer dereference or broader memory corruption depending on how the resulting ifp is used. For the CVSS the PR:N is used in the paranoid score because a practical attacker model may involve adjacent Wi-Fi influence over FullMAC firmware events rather than a local privileged user on the host. The issue is not reachable over a normal routed IP network. It is adjacent network or device firmware mediated. Impact is at least denial of service through a kernel crash or Wi-Fi driver failure. In the paranoid case, the unchecked firmware controlled array index potentially could lead to possible confidentiality and integrity impact (but primarily only Availability impact).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43110"
},
{
"category": "external",
"summary": "RHBZ#2467014",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467014"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43110",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43110"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43110",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43110"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050624-CVE-2026-43110-7309@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050624-CVE-2026-43110-7309@gregkh/T"
}
],
"release_date": "2026-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent module brcmfmac from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: wifi: brcmfmac: validate bsscfg indices in IF events"
},
{
"cve": "CVE-2026-43190",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467064"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel, specifically within the netfilter: xt_tcpmss module. A remote attacker could exploit this vulnerability by sending a specially crafted TCP packet. The TCP option parser does not properly validate the remaining option length, which results in an out-of-bounds read. This allows an attacker to access memory beyond the intended buffer, potentially leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: netfilter: xt_tcpmss: check remaining length before reading optlen",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "xt_tcpmss can read one byte past the TCP option boundary when the last option byte is not EOL or NOP. The parser may evaluate op i plus 1 while i is already the final byte of the option area, so a crafted TCP packet can trigger an out of bounds read in the netfilter match path. If the attacker can send packets through a ruleset that uses the tcpmss match, then it can trigger this bug. The issue is network reachable only on systems with an applicable xt_tcpmss or iptables rule, and it is not a generic TCP stack exposure. Impact is primarily limited confidentiality risk from a one byte out of bounds read and possible low availability impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43190"
},
{
"category": "external",
"summary": "RHBZ#2467064",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467064"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43190",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43190"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050642-CVE-2026-43190-f1c9@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050642-CVE-2026-43190-f1c9@gregkh/T"
}
],
"release_date": "2026-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-12T19:56:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.AUS:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.AUS:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.src",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-372.195.1.el8_6.noarch",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-372.195.1.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-372.195.1.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: netfilter: xt_tcpmss: check remaining length before reading optlen"
}
]
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.