RHSA-2026:22334HighCVSS 7.3

Red Hat Security Advisory: kernel security update

Published
June 1, 2026
Last Modified
October 16, 2026

🔗 CVE IDs covered (5)

CVE-2024-56547 →CVE-2025-39766 →CVE-2026-23210 →CVE-2026-31419 →CVE-2026-43163 →

📋 Description

CVE-2024-56547 — kernel: rcu/nocb: Fix missed RCU barrier on deoffloading CVE-2025-39766 — kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit CVE-2026-23210 — kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild CVE-2026-31419 — kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service CVE-2026-43163 — kernel: md/bitmap: fix GPF in write_page caused by resize race

🎯 Affected products200

  • Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)
  • Red Hat Enterprise Linux Real Time EUS (v. 10.0)
  • Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)
  • kernel-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-0:6.12.0-55.76.1.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-0:6.12.0-55.76.1.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-0:6.12.0-55.76.1.el10_0.src as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-0:6.12.0-55.76.1.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-core-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debug-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debug-core-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debug-debuginfo-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • kernel-64k-debug-debuginfo-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debug-debuginfo-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)
  • kernel-64k-debug-debuginfo-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux Real Time EUS (v. 10.0)
  • kernel-64k-debug-devel-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • kernel-64k-debug-devel-matched-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • kernel-64k-debug-modules-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debug-modules-core-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debug-modules-extra-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debuginfo-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • kernel-64k-debuginfo-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • kernel-64k-debuginfo-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)
  • kernel-64k-debuginfo-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux Real Time EUS (v. 10.0)
  • kernel-64k-devel-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • kernel-64k-devel-matched-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • kernel-64k-modules-0:6.12.0-55.76.1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this vulnerability, prevent the `ice` kernel module from loading. This can be achieved by creating a blacklist file for the module. 1. Create a file named `/etc/modprobe.d/blacklist-ice.conf` with the following content: `blacklist ice` 2. Regenerate the initramfs to ensure the blacklist is applied during boot: `dracut -f -v` 3. Reboot the system for the changes to take effect. Warning: Blacklisting the `ice` module may impact network functionality if your system relies on network devices using this driver. Ensure this action is compatible with your system's requirements before proceeding. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (8)