{
  "document" : {
    "aggregate_severity" : {
      "namespace" : "https://access.redhat.com/security/updates/classification/",
      "text" : "Critical"
    },
    "category" : "csaf_security_advisory",
    "csaf_version" : "2.0",
    "distribution" : {
      "text" : "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "en",
    "notes" : [ {
      "category" : "summary",
      "text" : "An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
      "title" : "Topic"
    }, {
      "category" : "general",
      "text" : "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858)\n\n* kernel: sctp: fix a potential overflow in sctp_ifwdtsn_skip (CVE-2023-53372)\n\n* kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)\n\n* kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)\n\n* kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)\n\n* kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)\n\n* kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)\n\n* kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)\n\n* kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001)\n\n* kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097)\n\n* kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)\n\n* kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216)\n\n* kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)\n\n* kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)\n\n* kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)\n\n* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)\n\n* kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)\n\n* kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)\n\n* kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)\n\n* kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)\n\n* kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)\n\n* kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)\n\n* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)\n\n* kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)\n\nBug Fix(es) and Enhancement(s):\n\n* NFS client hangs while returning delegations (JIRA:RHEL-112276)\n\n* Rhel backport of upstream commit \"i40e: avoid redundant VF link state update\" (JIRA:RHEL-141908)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
      "title" : "Details"
    }, {
      "category" : "legal_disclaimer",
      "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
      "title" : "Terms of Use"
    } ],
    "publisher" : {
      "category" : "vendor",
      "contact_details" : "https://access.redhat.com/security/team/contact/",
      "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name" : "Red Hat Product Security",
      "namespace" : "https://www.redhat.com"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "https://access.redhat.com/errata/RHSA-2026:26535",
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/security/updates/classification/#critical",
      "url" : "https://access.redhat.com/security/updates/classification/#critical"
    }, {
      "category" : "external",
      "summary" : "2351619",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2351619"
    }, {
      "category" : "external",
      "summary" : "2396405",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2396405"
    }, {
      "category" : "external",
      "summary" : "2414506",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2414506"
    }, {
      "category" : "external",
      "summary" : "2414521",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2414521"
    }, {
      "category" : "external",
      "summary" : "2414523",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2414523"
    }, {
      "category" : "external",
      "summary" : "2424881",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2424881"
    }, {
      "category" : "external",
      "summary" : "2429065",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2429065"
    }, {
      "category" : "external",
      "summary" : "2429104",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2429104"
    }, {
      "category" : "external",
      "summary" : "2432664",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2432664"
    }, {
      "category" : "external",
      "summary" : "2436802",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2436802"
    }, {
      "category" : "external",
      "summary" : "2439947",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2439947"
    }, {
      "category" : "external",
      "summary" : "2440630",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2440630"
    }, {
      "category" : "external",
      "summary" : "2448594",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2448594"
    }, {
      "category" : "external",
      "summary" : "2451218",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2451218"
    }, {
      "category" : "external",
      "summary" : "2461759",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2461759"
    }, {
      "category" : "external",
      "summary" : "2464351",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
    }, {
      "category" : "external",
      "summary" : "2464397",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2464397"
    }, {
      "category" : "external",
      "summary" : "2467005",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467005"
    }, {
      "category" : "external",
      "summary" : "2467014",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467014"
    }, {
      "category" : "external",
      "summary" : "2467059",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467059"
    }, {
      "category" : "external",
      "summary" : "2467064",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467064"
    }, {
      "category" : "external",
      "summary" : "2467210",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467210"
    }, {
      "category" : "external",
      "summary" : "2481486",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
    }, {
      "category" : "external",
      "summary" : "2482564",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482564"
    }, {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26535.json"
    } ],
    "title" : "Red Hat Security Advisory: kernel security, bug fix, and enhancement update",
    "tracking" : {
      "current_release_date" : "2026-07-30T08:33:04+00:00",
      "generator" : {
        "date" : "2026-07-30T08:33:04+00:00",
        "engine" : {
          "name" : "Red Hat SDEngine",
          "version" : "5.3.8"
        }
      },
      "id" : "RHSA-2026:26535",
      "initial_release_date" : "2026-06-17T09:22:48+00:00",
      "revision_history" : [ {
        "date" : "2026-06-17T09:22:48+00:00",
        "number" : "1",
        "summary" : "Initial version"
      }, {
        "date" : "2026-06-17T09:22:48+00:00",
        "number" : "2",
        "summary" : "Last updated version"
      }, {
        "date" : "2026-07-30T08:33:04+00:00",
        "number" : "3",
        "summary" : "Last generated version"
      } ],
      "status" : "final",
      "version" : "3"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_name",
          "name" : "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
          "product" : {
            "name" : "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
            "product_id" : "BaseOS-8.4.0.Z.AUS",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:redhat:rhel_aus:8.4::baseos"
            }
          }
        }, {
          "category" : "product_name",
          "name" : "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
          "product" : {
            "name" : "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
            "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
            }
          }
        } ],
        "category" : "product_family",
        "name" : "Red Hat Enterprise Linux"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "bpftool-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "bpftool-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "bpftool-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/bpftool@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-core-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-core-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-core-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-core@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-debug@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-debug-core@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-debug-devel@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-debug-modules@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-debug-modules-extra@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-devel@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-modules@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-modules-extra@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-tools@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-tools-libs@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "perf-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "perf-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "perf-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/perf@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "python3-perf-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "python3-perf-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "python3-perf-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/python3-perf@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/bpftool-debuginfo@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-debug-debuginfo@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-debuginfo@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-debuginfo-common-x86_64@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-tools-debuginfo@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/perf-debuginfo@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
          "product" : {
            "name" : "python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_id" : "python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/python3-perf-debuginfo@4.18.0-305.194.1.el8_4?arch=x86_64"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "x86_64"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "kernel-0:4.18.0-305.194.1.el8_4.src",
          "product" : {
            "name" : "kernel-0:4.18.0-305.194.1.el8_4.src",
            "product_id" : "kernel-0:4.18.0-305.194.1.el8_4.src",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel@4.18.0-305.194.1.el8_4?arch=src"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "src"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch",
          "product" : {
            "name" : "kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch",
            "product_id" : "kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-abi-stablelists@4.18.0-305.194.1.el8_4?arch=noarch"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-doc-0:4.18.0-305.194.1.el8_4.noarch",
          "product" : {
            "name" : "kernel-doc-0:4.18.0-305.194.1.el8_4.noarch",
            "product_id" : "kernel-doc-0:4.18.0-305.194.1.el8_4.noarch",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-doc@4.18.0-305.194.1.el8_4?arch=noarch"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "noarch"
      } ],
      "category" : "vendor",
      "name" : "Red Hat"
    } ],
    "relationships" : [ {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "bpftool-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "bpftool-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-0:4.18.0-305.194.1.el8_4.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src"
      },
      "product_reference" : "kernel-0:4.18.0-305.194.1.el8_4.src",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch"
      },
      "product_reference" : "kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-core-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-core-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-doc-0:4.18.0-305.194.1.el8_4.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch"
      },
      "product_reference" : "kernel-doc-0:4.18.0-305.194.1.el8_4.noarch",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "perf-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "perf-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "python3-perf-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "python3-perf-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.AUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "bpftool-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "bpftool-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-0:4.18.0-305.194.1.el8_4.src as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src"
      },
      "product_reference" : "kernel-0:4.18.0-305.194.1.el8_4.src",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch"
      },
      "product_reference" : "kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-core-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-core-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-doc-0:4.18.0-305.194.1.el8_4.noarch as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch"
      },
      "product_reference" : "kernel-doc-0:4.18.0-305.194.1.el8_4.noarch",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "perf-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "perf-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "python3-perf-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "python3-perf-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
        "product_id" : "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64"
      },
      "product_reference" : "python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64",
      "relates_to_product_reference" : "BaseOS-8.4.0.Z.EUS.EXTENSION"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2023-53372",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2025-09-18T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2396405"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix a potential overflow in sctp_ifwdtsn_skip\n\nCurrently, when traversing ifwdtsn skips with _sctp_walk_ifwdtsn, it only\nchecks the pos against the end of the chunk. However, the data left for\nthe last pos may be < sizeof(struct sctp_ifwdtsn_skip), and dereference\nit as struct sctp_ifwdtsn_skip may cause coverflow.\n\nThis patch fixes it by checking the pos against \"the end of the chunk -\nsizeof(struct sctp_ifwdtsn_skip)\" in sctp_ifwdtsn_skip, similar to\nsctp_fwdtsn_skip.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: sctp: fix a potential overflow in sctp_ifwdtsn_skip",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2023-53372"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2396405",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2396405"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2023-53372",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2023-53372"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2023-53372",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2023-53372"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2025091855-CVE-2023-53372-4d9e@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2025091855-CVE-2023-53372-4d9e@gregkh/T"
    } ],
    "release_date" : "2025-09-18T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.1,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: sctp: fix a potential overflow in sctp_ifwdtsn_skip"
  }, {
    "cve" : "CVE-2025-21858",
    "cwe" : {
      "id" : "CWE-416",
      "name" : "Use After Free"
    },
    "discovery_date" : "2025-03-12T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2351619"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A use-after-free vulnerability exists in the Linux kernel. When dev_net is dismantled, the geneve_exit_batch_rtnl() function calls unregister_netdevice_queue() for each device in the network namespace. Later, when the device is freed, it is still linked to the backend UDP socket in the network namespace.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: geneve: Fix use-after-free in geneve_find_dev().",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2025-21858"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2351619",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2351619"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-21858",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2025-21858"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-21858",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-21858"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2025031215-CVE-2025-21858-3986@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2025031215-CVE-2025-21858-3986@gregkh/T"
    } ],
    "release_date" : "2025-03-12T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.3,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "LOW",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: geneve: Fix use-after-free in geneve_find_dev()."
  }, {
    "cve" : "CVE-2025-40135",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2025-11-12T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2414521"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A use-after-free flaw was found in ip6_autoflowlabel in the Linux kernel's net/ipv6/ip6_output.c code. In this flaw an attacker can cause a denial of service (DoS) attack.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: ipv6: use RCU in ip6_xmit()",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2025-40135"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2414521",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2414521"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-40135",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2025-40135"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-40135",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-40135"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40135-67ca@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40135-67ca@gregkh/T"
    } ],
    "release_date" : "2025-11-12T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: ipv6: use RCU in ip6_xmit()"
  }, {
    "cve" : "CVE-2025-40158",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2025-11-12T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2414523"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A use-after-free flaw was found in ip6_finish_output2 in  net/ipv6/ip6_output.c in ipv6 access. This flaw could allow an attacker to crash the system at device disconnect. This vulnerability could even lead to a kernel information leak problem.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: ipv6: use RCU in ip6_output()",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2025-40158"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2414523",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2414523"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-40158",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2025-40158"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-40158",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-40158"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40158-4c9d@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40158-4c9d@gregkh/T"
    } ],
    "release_date" : "2025-11-12T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: ipv6: use RCU in ip6_output()"
  }, {
    "cve" : "CVE-2025-40170",
    "cwe" : {
      "id" : "CWE-416",
      "name" : "Use After Free"
    },
    "discovery_date" : "2025-11-12T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2414506"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: use dst_dev_rcu() in sk_setup_caps()\n\nUse RCU to protect accesses to dst->dev from sk_setup_caps()\nand sk_dst_gso_max_size().\n\nAlso use dst_dev_rcu() in ip6_dst_mtu_maybe_forward(),\nand ip_dst_mtu_maybe_forward().\n\nip4_dst_hoplimit() can use dst_dev_net_rcu().",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: net: use dst_dev_rcu() in sk_setup_caps()",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "Several paths read dst->dev without RCU. A concurrent dst/device teardown could cause a use-after-free—fixed by switching to dst_dev_rcu() and wrapping sections in rcu_read_lock(), mitigating a local DoS/LPE risk.\nA local user floods route changes (device up/down, MTU/GSO tweaks, dst churn) while rapidly creating sockets, racing sk_setup_caps() to read dev after free that leads to kernel crash.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2025-40170"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2414506",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2414506"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-40170",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2025-40170"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-40170",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-40170"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2025111259-CVE-2025-40170-d39d@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2025111259-CVE-2025-40170-d39d@gregkh/T"
    } ],
    "release_date" : "2025-11-12T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.4,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: net: use dst_dev_rcu() in sk_setup_caps()"
  }, {
    "cve" : "CVE-2025-68366",
    "cwe" : {
      "id" : "CWE-911",
      "name" : "Improper Update of Reference Count"
    },
    "discovery_date" : "2025-12-24T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2424881"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: defer config unlock in nbd_genl_connect\n\nThere is one use-after-free warning when running NBD_CMD_CONNECT and\nNBD_CLEAR_SOCK:\n\nnbd_genl_connect\n  nbd_alloc_and_init_config // config_refs=1\n  nbd_start_device // config_refs=2\n  set NBD_RT_HAS_CONFIG_REF\t\t\topen nbd // config_refs=3\n  recv_work done // config_refs=2\n\t\t\t\t\t\tNBD_CLEAR_SOCK // config_refs=1\n\t\t\t\t\t\tclose nbd // config_refs=0\n  refcount_inc -> uaf\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 24 PID: 1014 at lib/refcount.c:25 refcount_warn_saturate+0x12e/0x290\n nbd_genl_connect+0x16d0/0x1ab0\n genl_family_rcv_msg_doit+0x1f3/0x310\n genl_rcv_msg+0x44a/0x790\n\nThe issue can be easily reproduced by adding a small delay before\nrefcount_inc(&nbd->config_refs) in nbd_genl_connect():\n\n        mutex_unlock(&nbd->config_lock);\n        if (!ret) {\n                set_bit(NBD_RT_HAS_CONFIG_REF, &config->runtime_flags);\n+               printk(\"before sleep\\n\");\n+               mdelay(5 * 1000);\n+               printk(\"after sleep\\n\");\n                refcount_inc(&nbd->config_refs);\n                nbd_connect_reply(info, nbd->index);\n        }",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: nbd: defer config unlock in nbd_genl_connect",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2025-68366"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2424881",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2424881"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-68366",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2025-68366"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-68366",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-68366"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2025122459-CVE-2025-68366-b367@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2025122459-CVE-2025-68366-b367@gregkh/T"
    } ],
    "release_date" : "2025-12-24T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.1,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: nbd: defer config unlock in nbd_genl_connect"
  }, {
    "cve" : "CVE-2025-68800",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-01-13T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2429065"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats\n\nCited commit added a dedicated mutex (instead of RTNL) to protect the\nmulticast route list, so that it will not change while the driver\nperiodically traverses it in order to update the kernel about multicast\nroute stats that were queried from the device.\n\nOne instance of list entry deletion (during route replace) was missed\nand it can result in a use-after-free [1].\n\nFix by acquiring the mutex before deleting the entry from the list and\nreleasing it afterwards.\n\n[1]\nBUG: KASAN: slab-use-after-free in mlxsw_sp_mr_stats_update+0x4a5/0x540 drivers/net/ethernet/mellanox/mlxsw/spectrum_mr.c:1006 [mlxsw_spectrum]\nRead of size 8 at addr ffff8881523c2fa8 by task kworker/2:5/22043\n\nCPU: 2 UID: 0 PID: 22043 Comm: kworker/2:5 Not tainted 6.18.0-rc1-custom-g1a3d6d7cd014 #1 PREEMPT(full)\nHardware name: Mellanox Technologies Ltd. MSN2010/SA002610, BIOS 5.6.5 08/24/2017\nWorkqueue: mlxsw_core mlxsw_sp_mr_stats_update [mlxsw_spectrum]\nCall Trace:\n <TASK>\n dump_stack_lvl+0xba/0x110\n print_report+0x174/0x4f5\n kasan_report+0xdf/0x110\n mlxsw_sp_mr_stats_update+0x4a5/0x540 drivers/net/ethernet/mellanox/mlxsw/spectrum_mr.c:1006 [mlxsw_spectrum]\n process_one_work+0x9cc/0x18e0\n worker_thread+0x5df/0xe40\n kthread+0x3b8/0x730\n ret_from_fork+0x3e9/0x560\n ret_from_fork_asm+0x1a/0x30\n </TASK>\n\nAllocated by task 29933:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x8f/0xa0\n mlxsw_sp_mr_route_add+0xd8/0x4770 [mlxsw_spectrum]\n mlxsw_sp_router_fibmr_event_work+0x371/0xad0 drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c:7965 [mlxsw_spectrum]\n process_one_work+0x9cc/0x18e0\n worker_thread+0x5df/0xe40\n kthread+0x3b8/0x730\n ret_from_fork+0x3e9/0x560\n ret_from_fork_asm+0x1a/0x30\n\nFreed by task 29933:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n __kasan_save_free_info+0x3b/0x70\n __kasan_slab_free+0x43/0x70\n kfree+0x14e/0x700\n mlxsw_sp_mr_route_add+0x2dea/0x4770 drivers/net/ethernet/mellanox/mlxsw/spectrum_mr.c:444 [mlxsw_spectrum]\n mlxsw_sp_router_fibmr_event_work+0x371/0xad0 drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c:7965 [mlxsw_spectrum]\n process_one_work+0x9cc/0x18e0\n worker_thread+0x5df/0xe40\n kthread+0x3b8/0x730\n ret_from_fork+0x3e9/0x560\n ret_from_fork_asm+0x1a/0x30",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "A use-after-free exists in mlxsw_spectrum multicast routing when a route entry is deleted from the multicast route list without holding route_list_lock, while the periodic stats worker traverses the same list. A privileged attacker who can manipulate multicast routes on a host using mlxsw Spectrum hardware can trigger the race to crash the kernel and potentially corrupt memory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2025-68800"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2429065",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2429065"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-68800",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2025-68800"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-68800",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-68800"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026011307-CVE-2025-68800-39d2@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026011307-CVE-2025-68800-39d2@gregkh/T"
    } ],
    "release_date" : "2026-01-13T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.3,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "LOW",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats"
  }, {
    "cve" : "CVE-2025-71089",
    "cwe" : {
      "id" : "CWE-820",
      "name" : "Missing Synchronization"
    },
    "discovery_date" : "2026-01-13T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2429104"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A security vulnerability was found in the Linux kernel's IOMMU Shared Virtual Addressing (SVA) implementation on x86 architecture. When SVA is enabled, the IOMMU caches kernel page table entries. Since the kernel lacks a mechanism to notify the IOMMU when kernel page table pages are freed and reallocated, the IOMMU can retain stale entries pointing to reused memory. This can lead to use-after-free or write-after-free conditions, potentially enabling arbitrary physical memory DMA access or privilege escalation.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: iommu: disable SVA when CONFIG_X86 is set",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This is a significant security vulnerability affecting x86 systems with IOMMU SVA support enabled. While SVA contexts are unprivileged and cannot directly access kernel mappings, the IOMMU still walks and caches intermediate kernel page table entries. An attacker could potentially exploit the stale cache entries to gain arbitrary DMA access or escalate privileges. The fix disables SVA on x86 until proper cache invalidation mechanisms are implemented.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2025-71089"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2429104",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2429104"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-71089",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2025-71089"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-71089",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-71089"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026011341-CVE-2025-71089-a642@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026011341-CVE-2025-71089-a642@gregkh/T"
    } ],
    "release_date" : "2026-01-13T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: iommu: disable SVA when CONFIG_X86 is set"
  }, {
    "cve" : "CVE-2026-23001",
    "cwe" : {
      "id" : "CWE-416",
      "name" : "Use After Free"
    },
    "discovery_date" : "2026-01-25T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2432664"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "In the Linux kernel, the following vulnerability has been resolved:\n\nmacvlan: fix possible UAF in macvlan_forward_source()\n\nAdd RCU protection on (struct macvlan_source_entry)->vlan.\n\nWhenever macvlan_hash_del_source() is called, we must clear\nentry->vlan pointer before RCU grace period starts.\n\nThis allows macvlan_forward_source() to skip over\nentries queued for freeing.\n\nNote that macvlan_dev are already RCU protected, as they\nare embedded in a standard netdev (netdev_priv(ndev)).\n\nhttps: //lore.kernel.org/netdev/695fb1e8.050a0220.1c677c.039f.GAE@google.com/T/#u",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: macvlan: fix possible UAF in macvlan_forward_source()",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "A use-after-free can occur in macvlan source-mode forwarding when a source hash entry is deleted while the transmit/forwarding path still dereferences entry.vlan without proper RCU protection. A local attacker who can configure macvlan networking can race deletion with packet processing to crash the kernel and potentially achieve memory corruption.\nExploitation typically requires the CAP_NET_ADMIN capability (often within a user namespace).",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-23001"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2432664",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2432664"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-23001",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-23001"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-23001",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-23001"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026012534-CVE-2026-23001-7ab0@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026012534-CVE-2026-23001-7ab0@gregkh/T"
    } ],
    "release_date" : "2026-01-25T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "To mitigate this issue, prevent module macvlan from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: macvlan: fix possible UAF in macvlan_forward_source()"
  }, {
    "cve" : "CVE-2026-23097",
    "cwe" : {
      "id" : "CWE-833",
      "name" : "Deadlock"
    },
    "discovery_date" : "2026-02-04T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2436802"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel. A local attacker could exploit a deadlock vulnerability due to incorrect lock ordering between folio_lock and i_mmap_rwsem when migrating hugetlb file-backed folios. This could lead to hung tasks and potential system-wide stalls, resulting in a Denial of Service (DoS).",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "A deadlock can occur when migrating hugetlb file backed folios due to incorrect lock ordering between folio_lock and the mapping i_mmap_rwsem. One task in the migration path can hold folio_lock and then block on i_mmap_lock_read. Another task such as hugetlbfs fallocate or punch hole can hold i_mmap_lock_write and then block on folio_lock. This ABBA pattern can hang tasks indefinitely and lead to a denial of service. For the CVSS the PR is N because the involved operations can be triggered by normal users who can access hugetlbfs and run memory pressure and file operations. The issue is not network reachable. Impact is denial of service due to hung tasks and potential system wide stalls.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-23097"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2436802",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2436802"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-23097",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-23097"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-23097",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-23097"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026020427-CVE-2026-23097-a591@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026020427-CVE-2026-23097-a591@gregkh/T"
    } ],
    "release_date" : "2026-02-04T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.3,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "LOW",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration"
  }, {
    "cve" : "CVE-2026-23191",
    "cwe" : {
      "id" : "CWE-367",
      "name" : "Time-of-check Time-of-use (TOCTOU) Race Condition"
    },
    "discovery_date" : "2026-02-14T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2439947"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: aloop: Fix racy access at PCM trigger\n\nThe PCM trigger callback of aloop driver tries to check the PCM state\nand stop the stream of the tied substream in the corresponding cable.\nSince both check and stop operations are performed outside the cable\nlock, this may result in UAF when a program attempts to trigger\nfrequently while opening/closing the tied stream, as spotted by\nfuzzers.\n\nFor addressing the UAF, this patch changes two things:\n- It covers the most of code in loopback_check_format() with\n  cable->lock spinlock, and add the proper NULL checks.  This avoids\n  already some racy accesses.\n- In addition, now we try to check the state of the capture PCM stream\n  that may be stopped in this function, which was the major pain point\n  leading to UAF.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: ALSA: aloop: Fix racy access at PCM trigger",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-23191"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2439947",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2439947"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-23191",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-23191"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-23191",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-23191"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026021433-CVE-2026-23191-f990@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026021433-CVE-2026-23191-f990@gregkh/T"
    } ],
    "release_date" : "2026-02-14T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.1,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: ALSA: aloop: Fix racy access at PCM trigger"
  }, {
    "cve" : "CVE-2026-23216",
    "cwe" : {
      "id" : "CWE-413",
      "name" : "Improper Resource Locking"
    },
    "discovery_date" : "2026-02-18T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2440630"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A use-after-free flaw was found in the Linux kernel's iSCSI target subsystem. In the iscsit_dec_conn_usage_count() function, complete() is called while still holding the conn->conn_usage_lock spinlock. The waiting thread (such as iscsit_close_connection()) may wake up immediately and free the iscsit_conn structure before the current thread executes spin_unlock_bh(), resulting in a use-after-free when attempting to release the lock on already-freed memory.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability requires the iSCSI target subsystem to be configured and in use, which limits the attack surface to systems actively serving as iSCSI targets. The race condition is timing-dependent and requires specific connection teardown sequences to trigger. Successful exploitation could lead to kernel crash or potentially memory corruption.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-23216"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2440630",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2440630"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-23216",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-23216"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-23216",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-23216"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026021800-CVE-2026-23216-6c63@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026021800-CVE-2026-23216-6c63@gregkh/T"
    } ],
    "release_date" : "2026-02-18T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "To mitigate this issue, prevent the iscsi_target_mod module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist kernel modules.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()"
  }, {
    "cve" : "CVE-2026-23243",
    "cwe" : {
      "id" : "CWE-131",
      "name" : "Incorrect Calculation of Buffer Size"
    },
    "discovery_date" : "2026-03-18T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2448594"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) `umad` (User Mode Access Device) component. A local user can exploit this vulnerability by manipulating input, causing an integer underflow that leads to an out-of-bounds memory write. This memory corruption can result in a denial of service (DoS) by crashing the system, and may also lead to limited information disclosure or data integrity issues.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: Linux kernel: Denial of service and memory corruption in RDMA umad",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This bug is a kernel out-of-bounds write in the RDMA umad write path caused by a user-controlled length calculation that could underflow and pass an invalid data_len into MAD send buffer creation.\nA local user with access to the umad interface can trigger the issue by supplying mismatched MAD and RMPP header sizes, which leads to an out-of-bounds memset in the send MAD allocation path and can corrupt kernel memory.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-23243"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2448594",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2448594"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-23243",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-23243"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-23243",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-23243"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026031816-CVE-2026-23243-b88e@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026031816-CVE-2026-23243-b88e@gregkh/T"
    } ],
    "release_date" : "2026-03-18T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "To mitigate this issue, prevent module ib_umad from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.3,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: Linux kernel: Denial of service and memory corruption in RDMA umad"
  }, {
    "cve" : "CVE-2026-23392",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-03-25T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2451218"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's netfilter component, specifically within the nf_tables subsystem. An error in releasing a flowtable after an RCU (Read-Copy-Update) grace period could lead to a use-after-free vulnerability. This issue could expose the flowtable to the packet path and nfnetlink_hook control plane, potentially allowing a local attacker to cause a system crash (Denial of Service) or achieve arbitrary code execution.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: netfilter: nf_tables: release flowtable after rcu grace period on error",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This flaw affects nftables flowtable configurations. When flowtable setup fails (max hooks reached, hardware offload failure, or duplicate device), the error path frees the flowtable without synchronize_rcu(), allowing concurrent access from packet path or nfnetlink_hook. KASAN detected this as UAF during hook dumping.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-23392"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2451218",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2451218"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-23392",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-23392"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-23392",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-23392"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026032548-CVE-2026-23392-fd9d@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026032548-CVE-2026-23392-fd9d@gregkh/T"
    } ],
    "release_date" : "2026-03-25T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: netfilter: nf_tables: release flowtable after rcu grace period on error"
  }, {
    "cve" : "CVE-2026-31685",
    "cwe" : {
      "id" : "CWE-1287",
      "name" : "Improper Validation of Specified Type of Input"
    },
    "discovery_date" : "2026-04-25T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2461759"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's netfilter component. This vulnerability occurs because the `eui64_mt6()` function, which processes IPv6 packets, does not properly validate the MAC header for all packets. Specifically, packets with a zero fragment offset could bypass an existing guard, allowing the system to attempt to access an invalid MAC header. A remote attacker could exploit this by sending specially crafted IPv6 packets, potentially causing a system crash and leading to a Denial of Service (DoS).",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-31685"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2461759",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2461759"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-31685",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-31685"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-31685",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-31685"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026042545-CVE-2026-31685-3fcc@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026042545-CVE-2026-31685-3fcc@gregkh/T"
    } ],
    "release_date" : "2026-04-25T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.1,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets"
  }, {
    "cve" : "CVE-2026-43037",
    "cwe" : {
      "id" : "CWE-843",
      "name" : "Access of Resource Using Incompatible Type ('Type Confusion')"
    },
    "discovery_date" : "2026-05-01T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2464351"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err()",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This Critical flaw in the Linux kernel's IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-43037"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2464351",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-43037",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-43037"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
    } ],
    "release_date" : "2026-05-01T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278  \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 8.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Critical"
    } ],
    "title" : "kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err()"
  }, {
    "cve" : "CVE-2026-43038",
    "cwe" : {
      "id" : "CWE-843",
      "name" : "Access of Resource Using Incompatible Type ('Type Confusion')"
    },
    "discovery_date" : "2026-05-01T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2464397"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option (CIPSO) IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 ICMP error, potentially causing an out-of-bounds memory access. This memory corruption could result in information disclosure or a denial of service.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-43038"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2464397",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2464397"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-43038",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-43038"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43038",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43038"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026050103-CVE-2026-43038-b591@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026050103-CVE-2026-43038-b591@gregkh/T"
    } ],
    "release_date" : "2026-05-01T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.3,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "LOW",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()"
  }, {
    "cve" : "CVE-2026-43110",
    "cwe" : {
      "id" : "CWE-1285",
      "name" : "Improper Validation of Specified Index, Position, or Offset in Input"
    },
    "discovery_date" : "2026-05-06T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467014"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. This vulnerability occurs because the driver fails to properly validate bsscfg indices in interface (IF) events. An attacker could exploit this by sending a specially crafted IF event with an invalid bsscfg index, which could lead to an out-of-bounds write or read, potentially causing a system crash and resulting in a denial of service (DoS).",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: wifi: brcmfmac: validate bsscfg indices in IF events",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "brcmfmac IF event handling validates the firmware provided ifidx but still uses the raw bsscfgidx value as an index into the driver iflist array. A malformed firmware IF event with an out of range bsscfgidx can cause an out of bounds pointer read and may lead to an invalid pointer dereference or broader memory corruption depending on how the resulting ifp is used. For the CVSS the PR:N is used in the paranoid score because a practical attacker model may involve adjacent Wi-Fi influence over FullMAC firmware events rather than a local privileged user on the host. The issue is not reachable over a normal routed IP network. It is adjacent network or device firmware mediated. Impact is at least denial of service through a kernel crash or Wi-Fi driver failure. In the paranoid case, the unchecked firmware controlled array index potentially could lead to possible confidentiality and integrity impact (but primarily only Availability impact).",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-43110"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467014",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467014"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-43110",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-43110"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43110",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43110"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026050624-CVE-2026-43110-7309@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026050624-CVE-2026-43110-7309@gregkh/T"
    } ],
    "release_date" : "2026-05-06T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "To mitigate this issue, prevent module brcmfmac from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "ADJACENT_NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.5,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: wifi: brcmfmac: validate bsscfg indices in IF events"
  }, {
    "cve" : "CVE-2026-43116",
    "cwe" : {
      "id" : "CWE-416",
      "name" : "Use After Free"
    },
    "discovery_date" : "2026-05-06T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467005"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the `netfilter: ctnetlink` component of the Linux kernel. This vulnerability occurs due to insufficient locking when accessing the master conntrack object, allowing it to become invalid while still being referenced. A local attacker could potentially exploit this race condition, leading to a system crash and a denial of service.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: netfilter: ctnetlink: ensure safe access to master conntrack",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "ctnetlink expectation handling could keep a reference to the expectation object while the associated master conntrack object was freed concurrently. This leaves exp master as a stale pointer and can let get, delete, or event reporting paths access master conntrack state after it has gone away. For the CVSS the PR:L is used in the paranoid score because some deployments delegate CAP_NET_ADMIN or conntrack management inside network namespaces or containers to less privileged local users. The issue is not directly network reachable as a remote packet only attack, although traffic and conntrack activity can help create the concurrent state needed for the race. In the paranoid case, the stale master conntrack pointer is treated as a use after free candidate with possible confidentiality and integrity impact.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-43116"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467005",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467005"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-43116",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-43116"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43116",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43116"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026050626-CVE-2026-43116-08a5@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026050626-CVE-2026-43116-08a5@gregkh/T"
    } ],
    "release_date" : "2026-05-06T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is to skip loading the affected module \"netfilter\" onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically?\nhttps://access.redhat.com/solutions/41278 \n~~~",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: netfilter: ctnetlink: ensure safe access to master conntrack"
  }, {
    "cve" : "CVE-2026-43158",
    "cwe" : {
      "id" : "CWE-617",
      "name" : "Reachable Assertion"
    },
    "discovery_date" : "2026-05-06T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467210"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's XFS filesystem. When adding extended attributes (xattrs), which are metadata associated with files, to leaf blocks, incorrect adjustments to the freemap can occur. This inconsistency allows the entries array and free space to overlap, leading to an assertion failure. A local user can exploit this to cause the filesystem to shut down, resulting in a Denial of Service (DoS).",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "A local user with the ability to set extended attributes on an XFS filesystem can trigger inconsistent xattr leaf freemap accounting through crafted xattr insertion patterns. This can cause xattr metadata regions to overlap, leading to filesystem corruption detection and XFS shutdown via a reachable assertion. The issue requires the creation of a specific filesystem metadata layout through repeated setxattr operations.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-43158"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467210",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467210"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-43158",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-43158"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43158",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43158"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026050631-CVE-2026-43158-cc20@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026050631-CVE-2026-43158-cc20@gregkh/T"
    } ],
    "release_date" : "2026-05-06T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks"
  }, {
    "cve" : "CVE-2026-43163",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-06T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467059"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's md/bitmap component. This vulnerability involves a use-after-free race condition that occurs during array resize operations. When the `bitmap_daemon_work()` and `__bitmap_resize()` functions execute concurrently, they can access memory pages that have already been freed. This can lead to a General Protection Fault (GPF), which causes the system to crash, resulting in a denial of service.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: md/bitmap: fix GPF in write_page caused by resize race",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-43163"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467059",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467059"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-43163",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-43163"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43163",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43163"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026050632-CVE-2026-43163-86e1@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026050632-CVE-2026-43163-86e1@gregkh/T"
    } ],
    "release_date" : "2026-05-06T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 4.7,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: md/bitmap: fix GPF in write_page caused by resize race"
  }, {
    "cve" : "CVE-2026-43190",
    "cwe" : {
      "id" : "CWE-125",
      "name" : "Out-of-bounds Read"
    },
    "discovery_date" : "2026-05-06T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2467064"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel, specifically within the netfilter: xt_tcpmss module. A remote attacker could exploit this vulnerability by sending a specially crafted TCP packet. The TCP option parser does not properly validate the remaining option length, which results in an out-of-bounds read. This allows an attacker to access memory beyond the intended buffer, potentially leading to information disclosure.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: netfilter: xt_tcpmss: check remaining length before reading optlen",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "xt_tcpmss can read one byte past the TCP option boundary when the last option byte is not EOL or NOP. The parser may evaluate op i plus 1 while i is already the final byte of the option area, so a crafted TCP packet can trigger an out of bounds read in the netfilter match path. If the attacker can send packets through a ruleset that uses the tcpmss match, then it can trigger this bug. The issue is network reachable only on systems with an applicable xt_tcpmss or iptables rule, and it is not a generic TCP stack exposure. Impact is primarily limited confidentiality risk from a one byte out of bounds read and possible low availability impact.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-43190"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2467064",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2467064"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-43190",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-43190"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43190",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-43190"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026050642-CVE-2026-43190-f1c9@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026050642-CVE-2026-43190-f1c9@gregkh/T"
    } ],
    "release_date" : "2026-05-06T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "NONE",
        "baseScore" : 7.5,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: netfilter: xt_tcpmss: check remaining length before reading optlen"
  }, {
    "cve" : "CVE-2026-46227",
    "cwe" : {
      "id" : "CWE-367",
      "name" : "Time-of-check Time-of-use (TOCTOU) Race Condition"
    },
    "discovery_date" : "2026-05-28T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2482564"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. A race condition exists in the `SCTP_SENDALL` path where a cached list entry is not properly revalidated after the socket lock is temporarily released. This allows a local attacker or a remote attacker (via a network abort) to trigger a use-after-free or type confusion vulnerability. Successful exploitation can lead to a controlled indirect call, potentially resulting in arbitrary code execution.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "A stale list cursor in the SCTP_SENDALL path can be used after sctp_sendmsg_to_asoc() temporarily drops the socket lock while waiting for send buffer space. During this window another local thread can peel off or close the cached next association, or the association can be removed by a network ABORT, leaving the iterator to advance to a freed or migrated object. This creates a use after free or type confusion in the SCTP association list walk and may allow kernel memory corruption. For the CVSS the PR:L is used because triggering requires a local unprivileged process with access to SCTP socket operations, not administrator rights. The issue is not a pure remote network bug because local code execution is needed to drive SCTP_SENDALL and related socket operations, although network ABORT traffic can participate in one removal path.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-46227"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2482564",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2482564"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-46227",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-46227"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-46227",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-46227"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026052838-CVE-2026-46227-4bf1@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026052838-CVE-2026-46227-4bf1@gregkh/T"
    } ],
    "release_date" : "2026-05-28T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "To mitigate this issue, prevent module sctp from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL"
  }, {
    "cve" : "CVE-2026-46243",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-05-26T15:07:49.955000+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2481486"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.\n\nIn OpenShift Container Platform 4, this flaw is rated Low. The default `restricted-v2` Security Context Constraint (SCC) sets `allowPrivilegeEscalation: false` on all pods, which causes the kernel to ignore setuid file bits, preventing privilege escalation. Under non-default SCCs such as `anyuid` that permit privilege escalation, the vulnerability is constrained by PID and mount namespace isolation to the container's own filesystem. An attacker would only be able to escalate privileges within the container, not on the host or across pods.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-46243"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2481486",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
    }, {
      "category" : "external",
      "summary" : "RHSB-2026-005",
      "url" : "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-46243",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-46243"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
    }, {
      "category" : "external",
      "summary" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
      "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
    } ],
    "release_date" : "2026-05-26T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-06-17T09:22:48+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ],
      "restart_required" : {
        "category" : "machine"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:26535"
    }, {
      "category" : "workaround",
      "details" : "See the security bulletin for a detailed mitigation procedure.",
      "product_ids" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "BaseOS-8.4.0.Z.AUS:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.AUS:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.AUS:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.AUS:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:bpftool-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.src", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-abi-stablelists-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-core-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debug-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-debuginfo-common-x86_64-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-devel-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-doc-0:4.18.0-305.194.1.el8_4.noarch", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-modules-extra-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:kernel-tools-libs-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-0:4.18.0-305.194.1.el8_4.x86_64", "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-perf-debuginfo-0:4.18.0-305.194.1.el8_4.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
  } ]
}