Red Hat Security Advisory: kernel security update
Affects Linux kernelSource GCVE Database
Mentioned vulnerabilities
Public exploit available (Metasploit).
Data as of 30 Oct 2026, 02:47 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
Exploitation evidence
Disclosed: evidence found.
CVE published 20 May 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.
What to do
AI-suggested
Red Hat has released official kernel updates that address these vulnerabilities. Users should apply the provided kernel updates for Red Hat Enterprise Linux 8 and related products as detailed in the Red Hat advisory RHSA-2026:19666. A system reboot is required for the updates to take effect. No additional mitigation steps are indicated by the vendor.
Description
Red Hat has issued a security advisory for a kernel update addressing multiple vulnerabilities in the Linux kernel. The update fixes a local privilege escalation vulnerability (CVE-2026-46300) related to a variant of the Dirty Frag vulnerability in the ESP/XFRM subsystem, and a vulnerability allowing unprivileged users to read root-owned files (CVE-2026-46333). The update is rated as Important by Red Hat and requires a system reboot to take effect.
References
- access.redhat.com/errata/RHSA-2026:19666 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2477015 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2477802 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19666.json (opens in a new tab)