This Red Hat security advisory covers multiple vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 8. The fixes address a double free vulnerability in the NVMe driver (CVE-2024-41073), use-after-free in iSCSI target connection usage count (CVE-2026-23216), out-of-bounds reads in networking drivers, heap overflow in NFSv4.0 LOCK replay cache, privilege escalation or denial of service in KVM due to improper shadow page table handling, and other issues involving IPv6 and cryptographic subsystems. The advisory includes detailed fixes for each CVE and requires a system reboot after patching. The vulnerabilities have been rated with a security impact of Important by Red Hat Product Security.

The vulnerabilities could lead to memory corruption issues such as double free and use-after-free, which may cause system instability, crashes, or potentially privilege escalation or denial of service conditions. The affected kernel components include storage (NVMe, SCSI), networking (IPv6, net drivers), cryptographic keys, and virtualization (KVM). Exploitation could impact the confidentiality, integrity, or availability of affected systems running vulnerable kernel versions. No known exploits in the wild have been reported at this time.

Red Hat has released official kernel updates addressing these vulnerabilities. Users should apply the provided kernel updates for Red Hat Enterprise Linux 8 as detailed in the Red Hat advisories RHSA-2026:13577 and RHSA-2026:22964. After applying the updates, a system reboot is required for the patches to take effect. There are no indications that additional mitigations are necessary beyond applying these official fixes.