Red Hat Security Advisory: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
This Red Hat security advisory addresses several vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 10 and related products. Key fixes include: preventing dangling socket pointers in the CAN network protocol (CVE-2024-56603), correcting skb reference counting in J1939 CAN sessions (CVE-2024-56645), rejecting userspace SMB client SPNEGO descriptions (CVE-2026-46243), and multiple other kernel flaws such as use-after-free, heap overflow, and privilege escalation vulnerabilities across various kernel subsystems. The advisory covers a broad set of CVEs ranging from 2024 to 2026, with Red Hat rating the overall impact as Important. Updated kernel packages are available and must be installed with a system reboot to mitigate these vulnerabilities.
Potential Impact
The vulnerabilities fixed in this advisory could lead to denial of service or privilege escalation on affected systems. Issues like use-after-free and dangling pointers can cause kernel crashes or allow attackers to execute arbitrary code with elevated privileges. Improper handling of SMB client descriptions could expose systems to unauthorized access attempts. The overall impact is rated as Important by Red Hat, indicating a high security risk if unpatched.
Mitigation Recommendations
Red Hat has released updated kernel packages for Red Hat Enterprise Linux 10 and its Extended Update Support versions that address these vulnerabilities. Users should apply these updates promptly following the instructions in the Red Hat advisory (https://access.redhat.com/articles/11258). A system reboot is required for the updates to take effect. No additional mitigation steps are indicated beyond applying the official patches.
Red Hat Security Advisory: kernel security update
Description
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat security advisory addresses several vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 10 and related products. Key fixes include: preventing dangling socket pointers in the CAN network protocol (CVE-2024-56603), correcting skb reference counting in J1939 CAN sessions (CVE-2024-56645), rejecting userspace SMB client SPNEGO descriptions (CVE-2026-46243), and multiple other kernel flaws such as use-after-free, heap overflow, and privilege escalation vulnerabilities across various kernel subsystems. The advisory covers a broad set of CVEs ranging from 2024 to 2026, with Red Hat rating the overall impact as Important. Updated kernel packages are available and must be installed with a system reboot to mitigate these vulnerabilities.
Potential Impact
The vulnerabilities fixed in this advisory could lead to denial of service or privilege escalation on affected systems. Issues like use-after-free and dangling pointers can cause kernel crashes or allow attackers to execute arbitrary code with elevated privileges. Improper handling of SMB client descriptions could expose systems to unauthorized access attempts. The overall impact is rated as Important by Red Hat, indicating a high security risk if unpatched.
Mitigation Recommendations
Red Hat has released updated kernel packages for Red Hat Enterprise Linux 10 and its Extended Update Support versions that address these vulnerabilities. Users should apply these updates promptly following the instructions in the Red Hat advisory (https://access.redhat.com/articles/11258). A system reboot is required for the updates to take effect. No additional mitigation steps are indicated beyond applying the official patches.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:19569
- Cve Count
- 13
- Additional Cves
- ["CVE-2025-39766","CVE-2025-68724","CVE-2025-68741","CVE-2026-23270","CVE-2026-23401","CVE-2026-31402","CVE-2026-31408","CVE-2026-31607","CVE-2026-43128","CVE-2026-43284","CVE-2026-46300","CVE-2026-46333"]
Threat ID: 6a175eede29bf47b50edbb97
Added to database: 05/27/2026, 21:15:25 UTC
Last enriched: 08/07/2026, 00:06:33 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 264
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.