VulnerabilityPublished 2 Jul 2026Updated 5 Nov 2026

Red Hat Security Advisory: kernel security update

Affects Linux kernelSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 5 Nov 2026, 22:34 UTC

What to do

Affected software

Product	Affected	Fixed in
Red Hat Product Security Red Hat	Affected Red Hat Red Hat Enterprise Linux for NVIDIA NVIDIA for RHEL 10 src kernel-0:6.12.0-231.14.el10nv.src	Fixed in–

AI-suggested

The advisory is a security update from Red Hat, implying an official fix is available. However, no explicit patch links or affected versions are provided in the input data. Users should consult the official Red Hat advisory RHSA-2026:34927 and related release notes for patch availability and apply updates accordingly.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: kernel: ipv6 frag escape () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the NVIDIA for RHEL 10 Release Notes linked from the References section.

Impact

The vulnerability affects the Linux kernel and is considered high severity by the vendor. Without detailed CVE or CVSS data, the precise impact is unclear, but kernel vulnerabilities can potentially allow privilege escalation or denial of service. No confirmed exploitation is reported.

Summary

The Red Hat security advisory reports a kernel security update addressing an issue described as 'ipv6 frag escape' in the Linux kernel. The kernel is a critical component of the Linux operating system. The advisory does not provide CVE identifiers, CVSS scores, or detailed technical data. It references additional release notes for NVIDIA for RHEL 10 but does not specify affected versions or patch availability. The advisory is informational with no known exploits in the wild at the time of publication.

CWE-130Improper Handling of Length Parameter Inconsistency (opens in a new tab)
Base weakness
The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.
Implementation
When processing structured incoming data containing a size field followed by raw data, ensure that you identify and resolve any inconsistencies between the size field and the actual size of the data.
Implementation
Do not let the user control the size of the buffer.
Implementation
Validate that the length of the user-supplied data is consistent with the buffer size.
OWASP Cheat Sheets
XML Security (opens in a new tab)
Mass Assignment (opens in a new tab)
OWASP ASVS 4.0.3
V13.3.1 (opens in a new tab)
V5.1.4 (opens in a new tab)
V5.1.3 (opens in a new tab)
Attack patterns
Buffer Overflow via Parameter Expansion (opens in a new tab)
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 2 Jul 2026, 23:12 UTC

WeaknessesCWE-130

Technical details

References

Community reviews

Related threats