Red Hat Security Advisory: kernel security, bug fix, and enhancement update
This Red Hat security advisory addresses two vulnerabilities in the Linux kernel packages included with Red Hat Enterprise Linux 9. The first vulnerability (CVE-2026-31411) involves a crash caused by an unvalidated vcc pointer in the atm network code. The second vulnerability (CVE-2026-43198) fixes a potential race condition in the tcp_v6_syn_recv_sock function. The advisory also includes various bug fixes and enhancements. A kernel update is available that resolves these issues, and a system reboot is required to apply the update.
AI Analysis
Technical Summary
The advisory covers two kernel vulnerabilities in Red Hat Enterprise Linux 9. CVE-2026-31411 is a crash vulnerability due to an unvalidated vcc pointer in the atm networking code's sigd_send() function. CVE-2026-43198 addresses a potential race condition in the tcp_v6_syn_recv_sock() function related to TCP over IPv6. Both issues are fixed in the updated kernel packages provided by Red Hat. The update also includes additional bug fixes and enhancements. The advisory does not provide CVSS scores but rates the security impact as Important (high severity).
Potential Impact
Successful exploitation of CVE-2026-31411 could cause a kernel crash due to improper pointer validation in ATM networking code. CVE-2026-43198 could lead to race conditions affecting TCP over IPv6 connections. Both vulnerabilities impact the stability and reliability of the kernel, potentially causing denial of service or other unintended behavior. No known exploits in the wild have been reported.
Mitigation Recommendations
Red Hat has released updated kernel packages that fix these vulnerabilities. Users should apply the kernel update for Red Hat Enterprise Linux 9 as detailed in the advisory (RHSA-2026:33285) and reboot the system to ensure the fixes take effect. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Description
This Red Hat security advisory addresses two vulnerabilities in the Linux kernel packages included with Red Hat Enterprise Linux 9. The first vulnerability (CVE-2026-31411) involves a crash caused by an unvalidated vcc pointer in the atm network code. The second vulnerability (CVE-2026-43198) fixes a potential race condition in the tcp_v6_syn_recv_sock function. The advisory also includes various bug fixes and enhancements. A kernel update is available that resolves these issues, and a system reboot is required to apply the update.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The advisory covers two kernel vulnerabilities in Red Hat Enterprise Linux 9. CVE-2026-31411 is a crash vulnerability due to an unvalidated vcc pointer in the atm networking code's sigd_send() function. CVE-2026-43198 addresses a potential race condition in the tcp_v6_syn_recv_sock() function related to TCP over IPv6. Both issues are fixed in the updated kernel packages provided by Red Hat. The update also includes additional bug fixes and enhancements. The advisory does not provide CVSS scores but rates the security impact as Important (high severity).
Potential Impact
Successful exploitation of CVE-2026-31411 could cause a kernel crash due to improper pointer validation in ATM networking code. CVE-2026-43198 could lead to race conditions affecting TCP over IPv6 connections. Both vulnerabilities impact the stability and reliability of the kernel, potentially causing denial of service or other unintended behavior. No known exploits in the wild have been reported.
Mitigation Recommendations
Red Hat has released updated kernel packages that fix these vulnerabilities. Users should apply the kernel update for Red Hat Enterprise Linux 9 as detailed in the advisory (RHSA-2026:33285) and reboot the system to ensure the fixes take effect. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:33285
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-43198"]
- Cvss Version
- null
Threat ID: 6a46ed1527e9c79719447089
Added to database: 07/02/2026, 22:58:29 UTC
Last enriched: 07/14/2026, 10:19:42 UTC
Last updated: 08/14/2026, 06:24:48 UTC
Views: 84
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.