Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Red Hat issued a security advisory (RHSA-2026:57253) for the Linux kernel in Red Hat Enterprise Linux 8, addressing multiple vulnerabilities including CVE-2024-56602 (dangling sk pointer in ieee802154_create), CVE-2026-46120 (use of cached t->net in ip6erspan_changelink), CVE-2026-52991 (race condition in sched/psi), CVE-2026-53189 (file PMD counter update before folio_put), CVE-2026-63888 (CRC overread and double-free in iscsit_handle_text_cmd), CVE-2026-63887 (bounded appends in iscsi_encode_text_output), CVE-2026-64048 (rejecting CHID-0 ACCEPT matching empty ism_dev slot), CVE-2026-64379 (masking server-provided mode in smb client), and CVE-2026-68388 (handling overlapping ranges in smb fallocate). The advisory also fixes TX queue stalls and NIC resets caused by allocation failures. The update is available for multiple architectures including x86_64, s390x, ppc64le, and aarch64. Red Hat recommends applying the update promptly and rebooting the system.

The vulnerabilities fixed in this advisory affect the Linux kernel's networking, memory management, SCSI target, and SMB client components, potentially leading to system instability, memory corruption, race conditions, and security issues such as use-after-free and double-free errors. These flaws could impact the security posture of affected systems by causing crashes or enabling unintended behavior in kernel subsystems. However, no known exploits in the wild have been reported at this time.

A security update for the Linux kernel is available from Red Hat for Red Hat Enterprise Linux 8. The update addresses all listed vulnerabilities and bugs. Red Hat recommends applying this update promptly and rebooting the system to ensure the fixes take effect. This update should be treated as security-relevant due to the kernel's critical role. No additional mitigation steps are indicated beyond applying the official patch and rebooting.