CVE-2026-53236: Important · kernel security, bug fix, and enhancement update
Affects bpftoolSource GCVE Database
Not known to be exploited : upgrade to 4.18.0-553.178.1.el8_10 soon.
Data as of 26 Oct 2026, 23:00 UTC
Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD
- Patch
- Available – fixed in 4.18.0-553.178.1.el8_10
Exploitation evidence
Disclosed: evidence found.
CVE published 24 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade the AlmaLinux to 4.18.0-553.178.1.el8_10.
Patches and advisories
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| AlmaLinux 8bpftool | Affected
| Fixed in
|
| AlmaLinux 8kernel | Affected
| Fixed in
|
| AlmaLinux 8kernel-abi-stablelists | Affected
| Fixed in
|
| AlmaLinux 8kernel-core | Affected
| Fixed in
|
| AlmaLinux 8kernel-cross-headers | Affected
| Fixed in
|
| AlmaLinux 8kernel-debug | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A security update is available and should be applied promptly. The fixed kernel version is 4.18.0-553.178.1.el8_10. Systems must be rebooted after applying the update for the fixes to take effect. Red Hat recommends treating all kernel errata as security-relevant and prioritizing the installation of this update.
Description
Multiple security vulnerabilities affecting the Linux kernel have been addressed in an important update for Red Hat Enterprise Linux 8. The update includes fixes for several kernel components such as TCP, FUSE, writeback, networking, USB, SMB client, and IPv4 checksum validation. The update restricts certain operations to privileged users and resolves use-after-free and race condition issues. A reboot is required to apply the update.
References
- access.redhat.com/errata/RHSA-2026:89083 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-53236 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-53388 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-64378 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-68136 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-68138 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-68140 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-68338 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-68476 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-80586 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-80824 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-81003 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-89638 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-99999 (opens in a new tab)
- bugzilla.redhat.com/2492709 (opens in a new tab)
- bugzilla.redhat.com/2502255 (opens in a new tab)
- bugzilla.redhat.com/2507296 (opens in a new tab)
- bugzilla.redhat.com/2513163 (opens in a new tab)
- bugzilla.redhat.com/2513264 (opens in a new tab)
- bugzilla.redhat.com/2513293 (opens in a new tab)