RHSA-2026:9112MediumCVSS 7.8

Red Hat Security Advisory: kernel security update

Published
April 20, 2026
Last Modified
October 30, 2026

🔗 CVE IDs covered (6)

CVE-2026-23204 →CVE-2026-23066 →CVE-2026-23111 →CVE-2026-23144 →CVE-2026-23171 →CVE-2026-23193 →

📋 Description

CVE-2026-23066 — kernel: Linux kernel: Denial of Service via unsafe requeue in rxrpc_recvmsg CVE-2026-23111 — kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check CVE-2026-23144 — kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure CVE-2026-23171 — kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution CVE-2026-23193 — kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() CVE-2026-23204 — kernel: net/sched: cls_u32: use skb_header_pointer_careful()

🎯 Affected products200

  • Red Hat CodeReady Linux Builder EUS (v.9.6)
  • Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • Red Hat Enterprise Linux Real Time EUS (v.9.6)
  • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)
  • kernel-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-0:5.14.0-570.108.1.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-0:5.14.0-570.108.1.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-0:5.14.0-570.108.1.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-0:5.14.0-570.108.1.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-64k-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-64k-core-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-64k-debug-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-64k-debug-core-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-64k-debug-debuginfo-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • kernel-64k-debug-debuginfo-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • kernel-64k-debug-debuginfo-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-64k-debug-debuginfo-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.6)
  • kernel-64k-debug-devel-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • kernel-64k-debug-devel-matched-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • kernel-64k-debug-modules-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-64k-debug-modules-core-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-64k-debug-modules-extra-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-64k-debuginfo-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)
  • kernel-64k-debuginfo-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • kernel-64k-debuginfo-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • kernel-64k-debuginfo-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux Real Time EUS (v.9.6)
  • kernel-64k-devel-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • kernel-64k-devel-matched-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • kernel-64k-modules-0:5.14.0-570.108.1.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this issue, prevent module rxrpc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: To mitigate this issue, prevent module nf_tables from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: To mitigate this issue, prevent the `bonding` kernel module from loading if bonding interfaces are not required. This can be achieved by creating a modprobe configuration file. Create a file named `/etc/modprobe.d/disable-bonding.conf` with the following content: `install bonding /bin/true` After creating the file, a system reboot is required for the change to take effect if the module is currently loaded. This action will prevent the creation and use of bonding network interfaces. Workaround: To mitigate this issue, prevent module iscsi_target_mod from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.

🔗 References (9)