Red Hat Security Advisory: kernel security, bug fix, and enhancement update
🔗 CVE IDs covered (11)
📋 Description
CVE-2025-71113 — kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc CVE-2025-71147 — kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd CVE-2026-23168 — kernel: flex_proportions: make fprop_new_period() hardirq safe CVE-2026-31530 — kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() CVE-2026-46116 — kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete CVE-2026-46150 — kernel: fanotify: fix false positive on permission events CVE-2026-46215 — kernel: drm: Set old handle to NULL before prime swap in change_handle CVE-2026-52950 — kernel: drm/xe/dma-buf: fix UAF with retry loop CVE-2026-52976 — kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() CVE-2026-53009 — kernel: ice: fix double-free of tx_buf skb CVE-2026-53071 — kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
🔗 References (14)
- selfhttps://access.redhat.com/errata/RHSA-2026:42919
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2429611
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2432366
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2439941
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2460644
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2482523
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2482612
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2482615
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2492284
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2492318
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2492390
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2492458
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42919.json