Vulnerability-Lookup

RHSA-2026:19568

Vulnerability from csaf_opensuse - Published: 2026-05-20 14:00 - Updated: 2026-09-24 21:50

Summary

Red Hat Security Advisory: kernel security update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-39766

In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit The following setup can trigger a WARNING in htb_activate due to the condition: !cl->leaf.q->q.qlen tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo parent 1: classid 1:1 \ htb rate 64bit tc qdisc add dev lo parent 1:1 handle f: \ cake memlimit 1b ping -I lo -f -c1 -s64 -W0.001 127.0.0.1 This is because the low memlimit leads to a low buffer_limit, which causes packet dropping. However, cake_enqueue still returns NET_XMIT_SUCCESS, causing htb_enqueue to call htb_activate with an empty child qdisc. We should return NET_XMIT_CN when packets are dropped from the same tin and flow. I do not believe return value of NET_XMIT_CN is necessary for packet drops in the case of ack filtering, as that is meant to optimize performance, not to signal congestion.

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

CWE-390 - Detection of Error Condition Without Action

Affected products

Fixed 303 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-64k-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-64k-debug-devel-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-64k-debug-devel-matched-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-64k-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-64k-devel-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-64k-devel-matched-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debug-devel-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debug-devel-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debug-devel-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debug-devel-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debug-devel-matched-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debug-devel-matched-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debug-devel-matched-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debug-devel-matched-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-s390x-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-devel-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-devel-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-devel-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-devel-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-devel-matched-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-devel-matched-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-devel-matched-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-devel-matched-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-doc-0:5.14.0-687.10.1.el9_8.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-zfcpdump-devel-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:kernel-zfcpdump-devel-matched-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:perf-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:perf-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:perf-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:perf-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:python3-perf-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:python3-perf-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:python3-perf-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:python3-perf-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rtla-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rtla-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rtla-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rtla-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rv-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rv-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rv-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rv-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-0:5.14.0-687.10.1.el9_8.src	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-64k-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-64k-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-64k-debug-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-64k-debug-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-64k-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-64k-debug-modules-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-64k-debug-modules-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-64k-debug-modules-extra-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-64k-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-64k-modules-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-64k-modules-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-64k-modules-extra-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-abi-stablelists-0:5.14.0-687.10.1.el9_8.noarch	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-core-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-core-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-core-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-core-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-core-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-core-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-modules-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-modules-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-modules-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-modules-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-modules-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-modules-core-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-modules-core-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-modules-core-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-modules-extra-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debug-uki-virt-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-s390x-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-core-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-core-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-core-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-extra-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-extra-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-extra-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-extra-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-tools-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-tools-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-tools-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-tools-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-tools-libs-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-tools-libs-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-tools-libs-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-uki-virt-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-uki-virt-addons-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-zfcpdump-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-zfcpdump-core-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-zfcpdump-modules-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-zfcpdump-modules-core-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kernel-zfcpdump-modules-extra-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-64k-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-64k-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-s390x-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-tools-libs-devel-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-tools-libs-devel-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-tools-libs-devel-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libperf-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libperf-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libperf-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libperf-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-core-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-debug-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-debug-core-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-debug-modules-core-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-devel-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-modules-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-modules-core-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-64k-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-64k-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-debug-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debug-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debug-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debug-devel-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debug-modules-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debug-modules-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debug-modules-extra-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-devel-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-modules-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-modules-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-64k-modules-extra-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-core-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-core-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-modules-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-modules-core-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-devel-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-devel-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-modules-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-modules-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-modules-core-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-modules-core-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:kernel-tools-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:libperf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:perf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64	—	Vendor Fix fix
Unresolved product id: RT-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.10.1.el9_8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2025-68741

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex item In qla2xxx_process_purls_iocb(), an item is allocated via qla27xx_copy_multiple_pkt(), which internally calls qla24xx_alloc_purex_item(). The qla24xx_alloc_purex_item() function may return a pre-allocated item from a per-adapter pool for small allocations, instead of dynamically allocating memory with kzalloc(). An error handling path in qla2xxx_process_purls_iocb() incorrectly uses kfree() to release the item. If the item was from the pre-allocated pool, calling kfree() on it is a bug that can lead to memory corruption. Fix this by using the correct deallocation function, qla24xx_free_purex_item(), which properly handles both dynamically allocated and pre-allocated items.

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

CWE-763 - Release of Invalid Pointer or Reference

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Moderate

CVE-2025-71116

In the Linux kernel, the following vulnerability has been resolved: libceph: make decode_pool() more resilient against corrupted osdmaps If the osdmap is (maliciously) corrupted such that the encoded length of ceph_pg_pool envelope is less than what is expected for a particular encoding version, out-of-bounds reads may ensue because the only bounds check that is there is based on that length value. This patch adds explicit bounds checks for each field that is decoded or skipped.

7.1 (High)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Moderate

CVE-2026-22984

In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in handle_auth_done() Perform an explicit bounds check on payload_len to avoid a possible out-of-bounds access in the callout. [ idryomov: changelog ]

7.1 (High)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Moderate

CVE-2026-22990

In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid.

7.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Moderate

CVE-2026-23136

A flaw was found in the Linux kernel's libceph OSD client. When a connection fault occurs during a sparse read, the sparse-read state is not properly reset. This allows a misbehaving or compromised Ceph OSD server, or a network adversary, to disrupt traffic. As a result, the client can misinterpret new data as a continuation of previous data, leading to a persistent failure mode, repeated errors, and continuous retry loops, effectively causing a Denial of Service (DoS) for Ceph clients performing sparse reads.

7.6 (High)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

CWE-440 - Expected Behavior Violation

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Moderate

CVE-2026-23204

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values. Use skb_header_pointer_careful() instead. GangMin Kim provided a report and a repro fooling u32_classify(): BUG: KASAN: slab-out-of-bounds in u32_classify+0x1180/0x11b0 net/sched/cls_u32.c:221

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Moderate

CVE-2026-23270

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the traffic control `act_ct` path when it is incorrectly configured with non-ingress egress qdiscs (queueing disciplines). This can allow a local user with specific privileges to trigger a kernel crash, leading to a denial of service. In some cases, this vulnerability may also be exploited for privilege escalation.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Moderate

CVE-2026-23401

A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) component. A local attacker with privileges on the host system could exploit a vulnerability in how KVM handles shadow page table entries (SPTEs) during memory-mapped I/O (MMIO) operations. By manipulating guest page table entries (gPTEs) from host userspace, an attacker could cause KVM to install an MMIO SPTE without properly removing an existing shadow-present SPTE. This improper handling could lead to a kernel warning, resulting in a denial of service or potentially allowing for privilege escalation or information disclosure.

8.1 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Important

CVE-2026-31402

A flaw was found in the Linux kernel's NFSv4.0 server (nfsd). A remote, unauthenticated attacker can exploit this heap overflow vulnerability in the NFSv4.0 LOCK replay cache. By using two cooperating NFSv4.0 clients, where one sets a lock with a large owner string and another requests a conflicting lock, the attacker can trigger a slab-out-of-bounds write. This corruption of adjacent heap memory could lead to arbitrary code execution or a denial of service.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Important

CVE-2026-31532

A flaw was found in the Linux kernel's Controller Area Network (CAN) raw socket implementation. A use-after-free vulnerability can occur due to a timing window during the unregistration of CAN receive filters, allowing a freed memory region to be accessed. This could lead to system instability or a denial of service (DoS).

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-366 - Race Condition within a Thread

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Moderate

CVE-2026-31607

A flaw was found in the Linux kernel's USB/IP subsystem. A malicious USB/IP server could exploit a vulnerability in the `usbip_pack_ret_submit()` function by sending a specially crafted `RET_SUBMIT` response. This response, containing an oversized `number_of_packets` value, could cause a heap out-of-bounds write. This issue may lead to a denial of service or potentially arbitrary code execution on the client system.

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

CWE-805 - Buffer Access with Incorrect Length Value

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Important

CVE-2026-43128

A flaw was found in the Linux kernel's RDMA/umem subsystem. A memory management error, specifically a double unpin of a `dma_buf`, can occur in a failure path during `dma_buf` pinning operations. This vulnerability could lead to system instability or a crash, resulting in a Denial of Service (DoS).

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-911 - Improper Update of Reference Count

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Moderate

CVE-2026-43163

A flaw was found in the Linux kernel's md/bitmap component. This vulnerability involves a use-after-free race condition that occurs during array resize operations. When the `bitmap_daemon_work()` and `__bitmap_resize()` functions execute concurrently, they can access memory pages that have already been freed. This can lead to a General Protection Fault (GPF), which causes the system to crash, resulting in a denial of service.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Moderate

CVE-2026-43284

A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The xfrm-ESP variant requires unprivileged user or network namespace creation, while the RxRPC variant depends on the rxrpc module being available on the target system.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-123 - Write-what-where Condition

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Important

CVE-2026-43503

A flaw was found in the Linux kernel's networking (skbuff) component. When skb_try_coalesce() attaches paged fragments, it can lose the SKBFL_SHARED_FRAG marker. This can lead to the Encapsulating Security Payload (ESP) input decrypting data in place over page-cache backed fragments, potentially resulting in data corruption.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-664 - Improper Control of a Resource Through its Lifetime

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Important

CVE-2026-46300

A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-123 - Write-what-where Condition

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Important

CVE-2026-46333

A vulnerability was found in the Linux kernel that allows an unprivileged local user to read sensitive files normally restricted to the root user. The flaw occurs during process exit, where a brief window allows an attacker to intercept file access from a privileged process before it fully terminates. Successful exploitation may lead to the disclosure of sensitive data such as SSH host private keys or /etc/shadow contents.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-269 - Improper Privilege Management

Affected products

Fixed 303 products, the same list as for CVE-2025-39766

Threats

Impact Important

References

112 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:19568	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2394648	external
https://bugzilla.redhat.com/show_bug.cgi?id=2425046	external
https://bugzilla.redhat.com/show_bug.cgi?id=2429602	external
https://bugzilla.redhat.com/show_bug.cgi?id=2432389	external
https://bugzilla.redhat.com/show_bug.cgi?id=2432400	external
https://bugzilla.redhat.com/show_bug.cgi?id=2439852	external
https://bugzilla.redhat.com/show_bug.cgi?id=2439931	external
https://bugzilla.redhat.com/show_bug.cgi?id=2448745	external
https://bugzilla.redhat.com/show_bug.cgi?id=2453803	external
https://bugzilla.redhat.com/show_bug.cgi?id=2454844	external
https://bugzilla.redhat.com/show_bug.cgi?id=2461107	external
https://bugzilla.redhat.com/show_bug.cgi?id=2461521	external
https://bugzilla.redhat.com/show_bug.cgi?id=2467059	external
https://bugzilla.redhat.com/show_bug.cgi?id=2467144	external
https://bugzilla.redhat.com/show_bug.cgi?id=2467771	external
https://bugzilla.redhat.com/show_bug.cgi?id=2477015	external
https://bugzilla.redhat.com/show_bug.cgi?id=2477802	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-39766	self
https://bugzilla.redhat.com/show_bug.cgi?id=2394648	external
https://www.cve.org/CVERecord?id=CVE-2025-39766	external
https://nvd.nist.gov/vuln/detail/CVE-2025-39766	external
https://lore.kernel.org/linux-cve-announce/202509…	external
https://access.redhat.com/security/cve/CVE-2025-68741	self
https://bugzilla.redhat.com/show_bug.cgi?id=2425046	external
https://www.cve.org/CVERecord?id=CVE-2025-68741	external
https://nvd.nist.gov/vuln/detail/CVE-2025-68741	external
https://lore.kernel.org/linux-cve-announce/202512…	external
https://access.redhat.com/security/cve/CVE-2025-71116	self
https://bugzilla.redhat.com/show_bug.cgi?id=2429602	external
https://www.cve.org/CVERecord?id=CVE-2025-71116	external
https://nvd.nist.gov/vuln/detail/CVE-2025-71116	external
https://lore.kernel.org/linux-cve-announce/202601…	external
https://access.redhat.com/security/cve/CVE-2026-22984	self
https://bugzilla.redhat.com/show_bug.cgi?id=2432389	external
https://www.cve.org/CVERecord?id=CVE-2026-22984	external
https://nvd.nist.gov/vuln/detail/CVE-2026-22984	external
https://lore.kernel.org/linux-cve-announce/202601…	external
https://access.redhat.com/security/cve/CVE-2026-22990	self
https://bugzilla.redhat.com/show_bug.cgi?id=2432400	external
https://www.cve.org/CVERecord?id=CVE-2026-22990	external
https://nvd.nist.gov/vuln/detail/CVE-2026-22990	external
https://lore.kernel.org/linux-cve-announce/202601…	external
https://access.redhat.com/security/cve/CVE-2026-23136	self
https://bugzilla.redhat.com/show_bug.cgi?id=2439852	external
https://www.cve.org/CVERecord?id=CVE-2026-23136	external
https://nvd.nist.gov/vuln/detail/CVE-2026-23136	external
https://lore.kernel.org/linux-cve-announce/202602…	external
https://access.redhat.com/security/cve/CVE-2026-23204	self
https://bugzilla.redhat.com/show_bug.cgi?id=2439931	external
https://www.cve.org/CVERecord?id=CVE-2026-23204	external
https://nvd.nist.gov/vuln/detail/CVE-2026-23204	external
https://lore.kernel.org/linux-cve-announce/202602…	external
https://access.redhat.com/security/cve/CVE-2026-23270	self
https://bugzilla.redhat.com/show_bug.cgi?id=2448745	external
https://www.cve.org/CVERecord?id=CVE-2026-23270	external
https://nvd.nist.gov/vuln/detail/CVE-2026-23270	external
https://lore.kernel.org/linux-cve-announce/202603…	external
https://access.redhat.com/security/cve/CVE-2026-23401	self
https://bugzilla.redhat.com/show_bug.cgi?id=2453803	external
https://www.cve.org/CVERecord?id=CVE-2026-23401	external
https://nvd.nist.gov/vuln/detail/CVE-2026-23401	external
https://lore.kernel.org/linux-cve-announce/202604…	external
https://access.redhat.com/security/cve/CVE-2026-31402	self
https://bugzilla.redhat.com/show_bug.cgi?id=2454844	external
https://www.cve.org/CVERecord?id=CVE-2026-31402	external
https://nvd.nist.gov/vuln/detail/CVE-2026-31402	external
https://lore.kernel.org/linux-cve-announce/202604…	external
https://access.redhat.com/security/cve/CVE-2026-31532	self
https://bugzilla.redhat.com/show_bug.cgi?id=2461107	external
https://www.cve.org/CVERecord?id=CVE-2026-31532	external
https://nvd.nist.gov/vuln/detail/CVE-2026-31532	external
https://lore.kernel.org/linux-cve-announce/202604…	external
https://access.redhat.com/security/cve/CVE-2026-31607	self
https://bugzilla.redhat.com/show_bug.cgi?id=2461521	external
https://www.cve.org/CVERecord?id=CVE-2026-31607	external
https://nvd.nist.gov/vuln/detail/CVE-2026-31607	external
https://lore.kernel.org/linux-cve-announce/202604…	external
https://access.redhat.com/security/cve/CVE-2026-43128	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467144	external
https://www.cve.org/CVERecord?id=CVE-2026-43128	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43128	external
https://lore.kernel.org/linux-cve-announce/202605…	external
https://access.redhat.com/security/cve/CVE-2026-43163	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467059	external
https://www.cve.org/CVERecord?id=CVE-2026-43163	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43163	external
https://lore.kernel.org/linux-cve-announce/202605…	external
https://access.redhat.com/security/cve/CVE-2026-43284	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467771	external
https://access.redhat.com/security/vulnerabilitie…	external
https://www.cve.org/CVERecord?id=CVE-2026-43284	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43284	external
https://dirtyfrag.io/	external
https://access.redhat.com/security/cve/CVE-2026-43503	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480902	external
https://www.cve.org/CVERecord?id=CVE-2026-43503	external
https://nvd.nist.gov/vuln/detail/CVE-2026-43503	external
https://git.kernel.org/pub/scm/linux/security/vul…	external
https://access.redhat.com/security/cve/CVE-2026-46300	self
https://bugzilla.redhat.com/show_bug.cgi?id=2477015	external
https://www.cve.org/CVERecord?id=CVE-2026-46300	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46300	external
https://access.redhat.com/security/cve/CVE-2026-46333	self
https://bugzilla.redhat.com/show_bug.cgi?id=2477802	external
https://access.redhat.com/security/vulnerabilitie…	external
https://www.cve.org/CVERecord?id=CVE-2026-46333	external
https://nvd.nist.gov/vuln/detail/CVE-2026-46333	external
https://blog.qualys.com/vulnerabilities-threat-re…	external
https://github.com/torvalds/linux/commit/31e62c2e…	external

JSON

To clipboard

Loading 2.0 MB of JSON…

CVE-2026-46333 (GCVE-0-2026-46333)

Vulnerability from cvelistv5 – Published: 2026-05-15 12:58 – Updated: 2026-09-08 08:49

Title

ptrace: slightly saner 'get_dumpable()' logic

Summary

In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about the memory image of the task - the concept comes from whether it can core dump or not - and makes no sense when you don't have an associated mm. And almost all users do in fact use it only for the case where the task has a mm pointer. But we have one odd special case: ptrace_may_access() uses 'dumpable' to check various other things entirely independently of the MM (typically explicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for threads that no longer have a VM (and maybe never did, like most kernel threads). It's not what this flag was designed for, but it is what it is. The ptrace code does check that the uid/gid matches, so you do have to be uid-0 to see kernel thread details, but this means that the traditional "drop capabilities" model doesn't make any difference for this all. Make it all make a *bit* more sense by saying that if you don't have a MM pointer, we'll use a cached "last dumpability" flag if the thread ever had a MM (it will be zero for kernel threads since it is never set), and require a proper CAP_SYS_PTRACE capability to override.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-21 00:00 UTC

CWE

CWE-269 - Improper Privilege Management

Assigner

Linux mitre root

References

41 references

URL	Tags
https://git.kernel.org/stable/c/93d4ba49d18e3d7fb…
https://git.kernel.org/stable/c/15b828a46f305ae9f…
https://git.kernel.org/stable/c/4709234fd1b95136c…
https://git.kernel.org/stable/c/8f907d345bae8f4b3…
https://git.kernel.org/stable/c/6e5b51e74a40d377b…
https://git.kernel.org/stable/c/2a93a4fac7b6051d3…
https://git.kernel.org/stable/c/01363cb3fbd0238ff…
https://git.kernel.org/stable/c/31e62c2ebbfdc3fe3…
http://www.openwall.com/lists/oss-security/2026/05/15/9
https://lists.debian.org/debian-lts-announce/2026…
https://lists.debian.org/debian-lts-announce/2026…
http://www.openwall.com/lists/oss-security/2026/0…
http://www.openwall.com/lists/oss-security/2026/0…
https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn/	exploit
https://access.redhat.com/security/cve/CVE-2026-46333	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2477802	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:19540	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33486	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21701	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21702	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20299	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19569	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19705	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20593	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20054	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20129	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19568	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19666	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23470	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20130	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20051	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19521	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23471	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23469	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24814	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23468	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19664	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19711	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19875	vendor-advisoryx_refsource_REDHAT
https://cert-portal.siemens.com/productcert/html/…

Impacted products

37 products

Vendor	Product	Version
Linux	Linux	Affected: bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 , < 93d4ba49d18e3d7fb41a9927c2d0cca5e9dfefd6 (git) Affected: bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 , < 15b828a46f305ae9f05a7c16914b3ce273474205 (git) Affected: bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 , < 4709234fd1b95136ceb789f639b1e7ea5de1b181 (git) Affected: bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 , < 8f907d345bae8f4b3f004c5abc56bf2dfb851ea7 (git) Affected: bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 , < 6e5b51e74a40d377bcd3081dd33fbaa0e1aa7e3d (git) Affected: bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 , < 2a93a4fac7b6051d3be7cd1b015fe7320cd0404d (git) Affected: bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 , < 01363cb3fbd0238ffdeb09f53e9039c9edf8a730 (git) Affected: bfedb589252c01fa505ac9f6f2a3d5d68d707ef4 , < 31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a (git) Affected: d5b3e840dbf6dd2c0f30b5982b6f5ecd49e46b12 (git) Affected: 03eed7afbc09e061f66b448daf7863174c3dc3f3 (git) Affected: e45692fa1aea06676449b63ef3c2b6e1e72b7578 (git) Affected: 694a95fa6dae4991f16cda333d897ea063021fed (git) Affected: 3.16.52 , < 3.17 (semver) Affected: 4.4.40 , < 4.5 (semver) Affected: 4.8.16 , < 4.9 (semver) Affected: 4.9.1 , < 4.10 (semver)
Linux	Linux	Affected: 4.10 Unaffected: 0 , < 4.10 (semver) Unaffected: 5.10.256 , ≤ 5.10.* (semver) Unaffected: 5.15.207 , ≤ 5.15.* (semver) Unaffected: 6.1.173 , ≤ 6.1.* (semver) Unaffected: 6.6.139 , ≤ 6.6.* (semver) Unaffected: 6.12.89 , ≤ 6.12.* (semver) Unaffected: 6.18.31 , ≤ 6.18.* (semver) Unaffected: 7.0.8 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix)
Red Hat	NVIDIA for RHEL 10	Unaffected: 0:6.12.0-211.8.el10nv , < * (rpm) Unaffected: 0:6.12.0-231.12.el10nv , < * (rpm) cpe:/a:redhat:enterprise_linux_nvidia:10::el10
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:6.12.0-211.16.1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:6.12.0-55.75.1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.125.1.rt7.466.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::nfv
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:4.18.0-553.125.1.el8_10 , < * (rpm) cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:4.18.0-305.192.1.el8_4 , < * (rpm) cpe:/o:redhat:rhel_aus:8.4
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 0:4.18.0-305.192.1.el8_4 , < * (rpm) cpe:/o:redhat:rhel_eus_long_life:8.4
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:4.18.0-372.193.1.el8_6 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	Unaffected: 0:4.18.0-372.193.1.el8_6 , < * (rpm) cpe:/o:redhat:rhel_tus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	Unaffected: 0:4.18.0-372.193.1.el8_6 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.6
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:4.18.0-477.143.1.el8_8 , < * (rpm) cpe:/o:redhat:rhel_tus:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:4.18.0-477.143.1.el8_8 , < * (rpm) cpe:/o:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	cpe:/o:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.14.0-687.10.1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 0:5.14.0-70.180.1.el9_0 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.0
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 0:5.14.0-70.180.1.rt21.252.el9_0 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.0::nfv
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:5.14.0-284.172.1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:5.14.0-284.172.1.rt14.457.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2::nfv
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	cpe:/o:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:5.14.0-427.126.1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	cpe:/o:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:5.14.0-570.116.1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	cpe:/o:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 0:1.33.12-3.rhaos4.20.git64c6a00.el9 , < * (rpm) cpe:/a:redhat:openshift:4.20::el8
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 0:5.14.0-570.117.1.el9_6 , < * (rpm) cpe:/a:redhat:openshift:4.20::el8
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 0:4.20.0-202605141748.p2.g2a0461f.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.20::el8
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 0:4.20.0-202605211651.p2.g02b0b2d.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.20::el8
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 4.20.9.6.202605270908-0 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-20T18:47:13.604Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/15/9"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00032.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00035.html"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/20/14"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/20/16"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-46333",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-21T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-269",
                "description": "CWE-269 Improper Privilege Management",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T03:55:24.391Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn/"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_nvidia:10::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "NVIDIA for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:6.12.0-211.8.el10nv",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:6.12.0-231.12.el10nv",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:6.12.0-211.16.1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:6.12.0-55.75.1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8::nfv"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-553.125.1.rt7.466.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-553.125.1.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kpatch-patch",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_aus:8.4"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-305.192.1.el8_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_eus_long_life:8.4"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-305.192.1.el8_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_aus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-372.193.1.el8_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_tus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-372.193.1.el8_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_e4s:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-372.193.1.el8_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_tus:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-477.143.1.el8_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.18.0-477.143.1.el8_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kpatch-patch",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9",
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-687.10.1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.0"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-70.180.1.el9_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.0::nfv"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-70.180.1.rt21.252.el9_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-284.172.1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2::nfv"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-284.172.1.rt14.457.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kpatch-patch",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-427.126.1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kpatch-patch",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-570.116.1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kpatch-patch",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.33.12-3.rhaos4.20.git64c6a00.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "kernel",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.14.0-570.117.1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.20.0-202605141748.p2.g2a0461f.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.20.0-202605211651.p2.g02b0b2d.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.20.9.6.202605270908-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift/ose-rhel-coreos-9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-15T05:55:00.000Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability was found in the Linux kernel that allows an unprivileged local user to read sensitive files normally restricted to the root user. The flaw occurs during process exit, where a brief window allows an attacker to intercept file access from a privileged process before it fully terminates. Successful exploitation may lead to the disclosure of sensitive data such as SSH host private keys or /etc/shadow contents."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-269",
                "description": "Improper Privilege Management",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-01T12:05:00.444Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-46333"
          },
          {
            "name": "RHBZ#2477802",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477802"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46333.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19540"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33486"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21701"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21702"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20299"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19569"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19705"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20593"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20054"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20129"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19568"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19666"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23470"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20130"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20051"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19521"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23471"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23469"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24814"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23468"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19664"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19711"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19875"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:19540: NVIDIA for RHEL 10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33486: NVIDIA for RHEL 10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21701: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21702: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20299: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19569: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19705: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20593: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20054: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4), Red Hat Enterprise Linux Real Time EUS (v.9.4), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20129: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat Enterprise Linux Real Time EUS (v.9.6), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19568: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19666: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23470: Red Hat Enterprise Linux BaseOS (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20130: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20051: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19521: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23471: Red Hat Enterprise Linux BaseOS E4S (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23469: Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24814: Red Hat Enterprise Linux BaseOS E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23468: Red Hat Enterprise Linux BaseOS EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19664: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19711: Red Hat Enterprise Linux NFV E4S (v.9.0), Red Hat Enterprise Linux Real Time E4S (v.9.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19875: Red Hat Enterprise Linux Real Time E4S (v.9.2), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-15T08:27:21.590Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-15T05:55:00.000Z",
            "value": "Made public."
          }
        ],
        "title": "kernel: Read root-owned files as an unprivileged user",
        "workarounds": [
          {
            "lang": "en",
            "value": "See the security bulletin for a detailed mitigation procedure."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T08:49:36.663Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "include/linux/sched.h",
            "kernel/exit.c",
            "kernel/ptrace.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "93d4ba49d18e3d7fb41a9927c2d0cca5e9dfefd6",
              "status": "affected",
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "versionType": "git"
            },
            {
              "lessThan": "15b828a46f305ae9f05a7c16914b3ce273474205",
              "status": "affected",
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "versionType": "git"
            },
            {
              "lessThan": "4709234fd1b95136ceb789f639b1e7ea5de1b181",
              "status": "affected",
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "versionType": "git"
            },
            {
              "lessThan": "8f907d345bae8f4b3f004c5abc56bf2dfb851ea7",
              "status": "affected",
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "versionType": "git"
            },
            {
              "lessThan": "6e5b51e74a40d377bcd3081dd33fbaa0e1aa7e3d",
              "status": "affected",
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "versionType": "git"
            },
            {
              "lessThan": "2a93a4fac7b6051d3be7cd1b015fe7320cd0404d",
              "status": "affected",
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "versionType": "git"
            },
            {
              "lessThan": "01363cb3fbd0238ffdeb09f53e9039c9edf8a730",
              "status": "affected",
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "versionType": "git"
            },
            {
              "lessThan": "31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a",
              "status": "affected",
              "version": "bfedb589252c01fa505ac9f6f2a3d5d68d707ef4",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "d5b3e840dbf6dd2c0f30b5982b6f5ecd49e46b12",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "03eed7afbc09e061f66b448daf7863174c3dc3f3",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "e45692fa1aea06676449b63ef3c2b6e1e72b7578",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "694a95fa6dae4991f16cda333d897ea063021fed",
              "versionType": "git"
            },
            {
              "lessThan": "3.17",
              "status": "affected",
              "version": "3.16.52",
              "versionType": "semver"
            },
            {
              "lessThan": "4.5",
              "status": "affected",
              "version": "4.4.40",
              "versionType": "semver"
            },
            {
              "lessThan": "4.9",
              "status": "affected",
              "version": "4.8.16",
              "versionType": "semver"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "include/linux/sched.h",
            "kernel/exit.c",
            "kernel/ptrace.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.10"
            },
            {
              "lessThan": "4.10",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.256",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.207",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.173",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.139",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.89",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.31",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.256",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.207",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.173",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.139",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.89",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.31",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.8",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.16.52",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.4.40",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.8.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner \u0027get_dumpable()\u0027 logic\n\nThe \u0027dumpability\u0027 of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don\u0027t have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses \u0027dumpable\u0027 to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS).  Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt\u0027s not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional \"drop capabilities\" model doesn\u0027t make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don\u0027t have a\nMM pointer, we\u0027ll use a cached \"last dumpability\" flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable authorization check is reached through local interfaces such as ptrace-style checks, procfs, and pidfd_getfd; it is not reachable from network packets or adjacent/physical input.\nAC:L - A local attacker can repeatedly trigger the relevant check and, for exiting tasks, can race pidfd_getfd/procfs access against a target\u0027s exit path after exit_mm() but before exit_files(). The race is attacker-driven and does not require unusual kernel configuration or conditions outside the attacker\u0027s influence.\nPR:L - An unprivileged local user can target same-UID nondumpable tasks because the vulnerable code skips the dumpability requirement once task-\u003emm is NULL. User-namespace root does not help against init-namespace root kernel threads, but low local privileges are enough for the same-UID exiting-task case.\nUI:N - Exploitation does not require a victim user to open a file or perform an interactive action; the attacker can use local syscalls/procfs against an existing or attacker-terminated target task.\nS:U - The bug bypasses Linux kernel task-access authorization within the same OS security authority. It does not cross a VM, IOMMU, or hypervisor boundary.\nC:H - The bypass can allow access to sensitive task details and, most importantly, pidfd_getfd can duplicate file descriptors from a nondumpable task during the exit window. In a plausible helper/sandbox scenario, those descriptors can expose highly sensitive files or privileged resources.\nI:H - If the duplicated descriptor is writable, the attacker can modify the protected resource reachable through the victim\u0027s file descriptor despite the dumpability restriction. This is a high-impact integrity bypass even though the bug is not memory corruption.\nA:N - The issue is an access-control bypass around ptrace/dumpability checks and does not by itself provide a kernel crash, hang, deadlock, or sustained denial of service."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:31:28.199Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/93d4ba49d18e3d7fb41a9927c2d0cca5e9dfefd6"
        },
        {
          "url": "https://git.kernel.org/stable/c/15b828a46f305ae9f05a7c16914b3ce273474205"
        },
        {
          "url": "https://git.kernel.org/stable/c/4709234fd1b95136ceb789f639b1e7ea5de1b181"
        },
        {
          "url": "https://git.kernel.org/stable/c/8f907d345bae8f4b3f004c5abc56bf2dfb851ea7"
        },
        {
          "url": "https://git.kernel.org/stable/c/6e5b51e74a40d377bcd3081dd33fbaa0e1aa7e3d"
        },
        {
          "url": "https://git.kernel.org/stable/c/2a93a4fac7b6051d3be7cd1b015fe7320cd0404d"
        },
        {
          "url": "https://git.kernel.org/stable/c/01363cb3fbd0238ffdeb09f53e9039c9edf8a730"
        },
        {
          "url": "https://git.kernel.org/stable/c/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a"
        }
      ],
      "title": "ptrace: slightly saner \u0027get_dumpable()\u0027 logic",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46333",
    "datePublished": "2026-05-15T12:58:44.599Z",
    "dateReserved": "2026-05-13T15:03:33.113Z",
    "dateUpdated": "2026-09-08T08:49:36.663Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:19568

CVE-2026-46333 (GCVE-0-2026-46333)

Tags

Sightings

Nomenclature

Related by attack behaviour