Red Hat Security Advisory: kernel security update
Red Hat has issued a moderate severity security advisory addressing two vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 8.6. The first vulnerability (CVE-2024-26923) involves a race condition in the af_unix garbage collector during connect() operations. The second (CVE-2024-36270) concerns the netfilter tproxy component improperly handling cases where IP has been disabled on a device. These issues affect the core Linux kernel and require a system reboot after applying the update.
AI Analysis
Technical Summary
This advisory covers two kernel vulnerabilities in Red Hat Enterprise Linux 8.6. CVE-2024-26923 is a race condition in the af_unix socket garbage collector that can lead to unsafe behavior when racing against connect() calls. CVE-2024-36270 addresses a flaw in the netfilter tproxy code path where the system does not properly bail out if IP is disabled on the device, potentially causing unexpected behavior. Red Hat has released updated kernel packages to fix these issues, and a reboot is necessary to apply the fixes.
Potential Impact
The vulnerabilities affect the Linux kernel, which is the core component of the operating system. The race condition in af_unix could lead to unstable or unsafe socket operations. The netfilter tproxy issue could cause incorrect handling of network traffic when IP is disabled on a device. Both issues have been rated with moderate security impact by Red Hat. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated kernel packages for Red Hat Enterprise Linux 8.6 that address these vulnerabilities. Users should apply the security update as described in the Red Hat advisory (RHSA-2024:7486) and reboot their systems to ensure the fixes take effect. Patch status is official-fix and remediation is available. No additional mitigation steps are indicated beyond applying the update and rebooting.
Red Hat Security Advisory: kernel security update
Description
Red Hat has issued a moderate severity security advisory addressing two vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 8.6. The first vulnerability (CVE-2024-26923) involves a race condition in the af_unix garbage collector during connect() operations. The second (CVE-2024-36270) concerns the netfilter tproxy component improperly handling cases where IP has been disabled on a device. These issues affect the core Linux kernel and require a system reboot after applying the update.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers two kernel vulnerabilities in Red Hat Enterprise Linux 8.6. CVE-2024-26923 is a race condition in the af_unix socket garbage collector that can lead to unsafe behavior when racing against connect() calls. CVE-2024-36270 addresses a flaw in the netfilter tproxy code path where the system does not properly bail out if IP is disabled on the device, potentially causing unexpected behavior. Red Hat has released updated kernel packages to fix these issues, and a reboot is necessary to apply the fixes.
Potential Impact
The vulnerabilities affect the Linux kernel, which is the core component of the operating system. The race condition in af_unix could lead to unstable or unsafe socket operations. The netfilter tproxy issue could cause incorrect handling of network traffic when IP is disabled on a device. Both issues have been rated with moderate security impact by Red Hat. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated kernel packages for Red Hat Enterprise Linux 8.6 that address these vulnerabilities. Users should apply the security update as described in the Red Hat advisory (RHSA-2024:7486) and reboot their systems to ensure the fixes take effect. Patch status is official-fix and remediation is available. No additional mitigation steps are indicated beyond applying the update and rebooting.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:7486
- Cve Count
- 2
- Additional Cves
- ["CVE-2024-36270"]
- Cvss Version
- null
Threat ID: 6a419cbc27e9c79719abf7a4
Added to database: 06/28/2026, 22:14:20 UTC
Last enriched: 06/28/2026, 22:37:14 UTC
Last updated: 07/06/2026, 20:51:13 UTC
Views: 15
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.