Security News

Cybersecurity news aggregator

🐧
HIGH Updates Red Hat Errata

RHSA-2026:27353: Important: kernel security, bug fix, and enhancement update

This Red Hat security advisory addresses multiple Important-severity kernel vulnerabilities, including use-after-free flaws in the bonding driver (CVE-2026-31419) and net:mana component (CVE-2026-43056), and OOB write issues in ALSA: usb-audio (CVE-2026-43279), which can lead to denial of service or other impacts. The update provides fixes for Red Hat Enterprise Linux 8 across all supported architectures, requiring a system reboot. Specific CVSS scores for each CVE are available via the referenced links.
Read Full Article →

Red Hat Product Errata RHSA-2026:27353 - Security Advisory Issued: 2026-06-19 Updated: 2026-06-19 RHSA-2026:27353 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) Bug Fix(es) and Enhancement(s): RHEL8 RT kernel panic in replenish_dl_entity() caused by stale DEADLINE PI state during rt_mutex de-boosting (JIRA:RHEL-178520) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2457829 - CVE-2026-31419 kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service BZ - 2460619 - CVE-2026-31488 kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation BZ - 2464449 - CVE-2026-43056 kernel: net: mana: fix use-after-free in add_adev() error path BZ - 2467215 - CVE-2026-43279 kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing BZ - 2479492 - CVE-2026-46331 kernel: net/sched: act_pedit: extend the writable skb range per key BZ - 2481980 - CVE-2026-46090 kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop BZ - 2482581 - CVE-2026-46145 kernel: RDMA/mana: Validate rx_hash_key_len BZ - 2482654 - CVE-2026-46135 kernel: nvmet-tcp: fix race between ICReq handling and queue teardown CVEs CVE-2026-31419 CVE-2026-31488 CVE-2026-43056 CVE-2026-43279 CVE-2026-46090 CVE-2026-46135 CVE-2026-46145 CVE-2026-46331 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kernel-4.18.0-553.136.1.el8_10.src.rpm SHA-256: c8df92d44fdc3c19bc9570065dcd88d2dc21694f8673cb02dcabcce787d2aa8c x86_64 bpftool-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 91681bc91d8405153223328d2b78170c2ea64140e1f3dc80e9353fea12e0e1a6 bpftool-debuginfo-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 529190a486d393c2aea214d42a3fe141cf5802c0f789c7a209db2f1402d962c0 kernel-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: e82b1ecc013320431be3fb4d52d6d39f6963219e9f006d921f7fdd9a542857ce kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch.rpm SHA-256: 14663fa366421adb8d5d47409e4e10017bdc18d63dfda48966ee325bbbdb28e3 kernel-core-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 84d9f923c1d9dddd8dcedd3bfcaea23b86c9d459eb908dd0bf14622bc9c2dead kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 42114da941b71a5b9fab63ba593c51dc95cf4ec4f9a418aa7a2df9e8c8fc9f5b kernel-debug-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: a3f4f9476d2e88c20ba2d0c64e182519a0a3c577fb8a5d82baf4416704f72d61 kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: d474a3444db1e70052b4dbfd0c708581995f544947eb3d5f9ce271e61bd57ded kernel-debug-debuginfo-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: c2ce31645f5a68927732fc6cce281685c5bf7404155c11f9aa163e41ad72b10f kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: d54fe653771fea2c39f32cfcb9381fbd95733cc817110a82f8777d39633c41fa kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 28a11ca8d5c9d67a7bde5c6963f37582a31863f53a5660f8c76be9c50bdc5d49 kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 6ef72e36b7714959aa11e97763834082f4d5fbbc3b63d7368664cb30fc3399a5 kernel-debuginfo-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 4a4a1076653d61bf42440d57466867732a0062ed02f04d57522aed41e4890e12 kernel-debuginfo-common-x86_64-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 20aa4a5a3839556513ddbd6d2baf2a903dae20218de5029e3a88fe85b261d7fe kernel-devel-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: ff5e55db889707e58ce5de4040ccfd90608ff02d30bf4188c74964195905ded4 kernel-doc-4.18.0-553.136.1.el8_10.noarch.rpm SHA-256: 39ab8030fbb4e79b0bb19e44c23a911505489ff2f807267bf66d56d075b695dd kernel-headers-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 7b0e00a8b5365901b2129f98723412e88b0141142d44f4219646ea8347011e9d kernel-modules-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 5f8f2e0c2e3ba541cdf8b912c2707ba5e93f4eb644ef6712a230832aefdd8544 kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 903813a1de73c3d268691d3d0067f1419f945bfb8169632e4164a7604affb8f1 kernel-tools-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 390c3358ef9d05a78bd915451d00d8bbcc82b45d4c9edfcba52b94ffb7f59d1f kernel-tools-debuginfo-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 5d11b1319be389d5d5011baed6a00398439ae2f6df45bf912ef776f3c16bbcae kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 6dfa7a4391902aa55fc59a91881c880545e7283b0e1ec6e8904842cb9b5a6040 perf-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 938276a85c66e1b220817645104b1065f0b74b93a02ceb492bc1844706b2ee30 perf-debuginfo-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 80c9bcf2781799b4ca934a5c0ebbec57f8d0e3670ab7a7a955124c5cc795ee06 python3-perf-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: 66015d9d9ac3d316ebf07e2b5d51e33886007938fea7842f5447e5defeb5382e python3-perf-debuginfo-4.18.0-553.136.1.el8_10.x86_64.rpm SHA-256: f4af2f66bfaabe5bbefd0c254da40750cf2fd5dfa4c881904b3e7ccd280fdaf0 Red Hat Enterprise Linux for IBM z Systems 8 SRPM kernel-4.18.0-553.136.1.el8_10.src.rpm SHA-256: c8df92d44fdc3c19bc9570065dcd88d2dc21694f8673cb02dcabcce787d2aa8c s390x bpftool-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 265a9dfeefea4370ea2a0f6df15946ad93f100ba75c1a6fb6f09c6fcaf2c73b4 bpftool-debuginfo-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 3ce87cb452575c40729e0a17358335f3cdf1f5706fe679a40b00c93e5d18763c kernel-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 5491f6cd07aee75e7c78483666d87c6e65c7eb9686972e1b62998f73aa0d5e6a kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch.rpm SHA-256: 14663fa366421adb8d5d47409e4e10017bdc18d63dfda48966ee325bbbdb28e3 kernel-core-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 1eff835f2fc8c4849582cd205e6c717410c49a83f383268e256844ccda2ff1cd kernel-cross-headers-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 75d337c5b6ecbffdf69f47abcff8b9c23ba7a6585adbe11fee277fa3978b62e5 kernel-debug-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: c92db2fb0721ba510e9adffdb73f819647524a4ce94b641a311cd70876308724 kernel-debug-core-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 716d0731fc52886cea3b613c2c51f8dd27a6631d03101fcaa0a5b4607ad21752 kernel-debug-debuginfo-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: a33f8410318ede2f8a968bc48aaa8da8a6b84b0dba555a6a1ed948f6cbbc48bc kernel-debug-devel-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 7617499fe632d93c0ce78ebe13089a4562f45e3bdaa462096204bc03e3a0085a kernel-debug-modules-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 0cc134f0bd162225ceab806d241c4ba8aefaa0944e7719f696bd649462079634 kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 36971e83a23681b792b63e9591b2f087ab06537d1445e4453bc108650e54cc4d kernel-debuginfo-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 192242b85c6bab9ae29b7da3895031466c877bfd61231b35d9f4d9f12acf59d1 kernel-debuginfo-common-s390x-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 80ba794bf35bddcdda7cc71df4b51a692eeebac88aef0a386d80df9464dc9985 kernel-devel-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 3c528c2dd1103f51ed95bb77671f7ccc0da35c1957d04bfa50b6ec127ce7c244 kernel-doc-4.18.0-553.136.1.el8_10.noarch.rpm SHA-256: 39ab8030fbb4e79b0bb19e44c23a911505489ff2f807267bf66d56d075b695dd kernel-headers-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: a994e424009114ed3dcb1b0166355870b30a40bead22c3e24104ffab346da053 kernel-modules-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 7794099b811bca092b556481335179e0217de3d78d7a6d5f086a5646d77f838f kernel-modules-extra-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: 05e2874d01f3125440a4b466fd4ebc575a81c6db0a82fc50a2ba3cbc3faaa061 kernel-tools-4.18.0-553.136.1.el8_10.s390x.rpm SHA-256: e196cf1553d859fe7d3fecdbf4bd2fb343b33a1148506ff0e03ba345f8282df7 ke

Share this article