Red Hat Security Advisory: kernel security update
Affects Linux kernelSource GCVE Database
Mentioned vulnerabilities
Public exploit available (Metasploit).
Data as of 30 Oct 2026, 02:47 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
Exploitation evidence
Disclosed: evidence found.
CVE published 21 May 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.
What to do
AI-suggested
Red Hat has released updated kernel packages that fix these vulnerabilities. Users should apply the kernel update for Red Hat Enterprise Linux 9.6 Extended Update Support as detailed in the Red Hat advisory (https://access.redhat.com/articles/11258) and reboot affected systems to complete the remediation. No additional mitigation steps are indicated beyond applying the official patch and rebooting.
Description
Red Hat has issued a security advisory for a kernel update addressing multiple vulnerabilities in the Linux kernel. These include CVE-2026-46300, a local privilege escalation vulnerability related to a variant of the Dirty Frag vulnerability in the ESP/XFRM subsystem, and CVE-2026-46333, which allows unprivileged users to read root-owned files. The update is rated as important by Red Hat and requires a system reboot to take effect. Public exploit code is available via Metasploit for these vulnerabilities.
References
- access.redhat.com/errata/RHSA-2026:20129 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2477015 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2477802 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20129.json (opens in a new tab)