This advisory covers four security vulnerabilities in the Linux kernel as packaged by Red Hat Enterprise Linux 10. CVE-2026-43279 addresses an out-of-bounds write in the ALSA usb-audio driver during silencing operations. CVE-2026-46090 fixes a use-after-free condition in the ALSA aloop driver during format-change stop. CVE-2026-46189 resolves a double free error on the error path of pvrdma_alloc_ucontext in the RDMA vmw_pvrdma driver. CVE-2026-46176 corrects an error path fall-through in mlx5_ib_dev_res_srq_init in the RDMA mlx5 driver. These vulnerabilities are rated with high severity by Red Hat. The advisory includes instructions to apply updated kernel packages and requires a system reboot. No known exploits in the wild have been reported at this time.

Successful exploitation of these vulnerabilities could lead to memory corruption issues such as out-of-bounds writes, use-after-free, and double free conditions within kernel drivers related to audio and RDMA subsystems. This may result in system instability, crashes, or potentially privilege escalation or denial of service. The advisory rates the security impact as Important (high severity). No active exploitation has been reported.

Red Hat has released updated kernel packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 10 should apply the available kernel update as detailed in the Red Hat advisory (RHSA-2026:33685) and reboot their systems to ensure the fixes take effect. No additional mitigation steps are indicated beyond applying the official update and rebooting.