Red Hat Security Advisory: kernel security update
This Red Hat security advisory addresses multiple vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9. The issues include a flaw in the network scheduler's ets_qdisc_change function (CVE-2025-71066) and two use-after-free vulnerabilities in the KVM x86 shadow paging implementation (CVE-2026-46113 and CVE-2026-53359). These vulnerabilities have been rated with an important security impact by Red Hat. A kernel update is available that fixes these issues, and a system reboot is required to apply the update.
AI Analysis
Technical Summary
The advisory covers three kernel vulnerabilities: CVE-2025-71066 fixes an issue in the net/sched subsystem where a class was not always removed from the active list before deletion in ets_qdisc_change. CVE-2026-46113 and CVE-2026-53359 address use-after-free bugs in the KVM x86 shadow paging code caused by unexpected guest frame numbers and roles, respectively. These bugs could lead to memory corruption. Red Hat has released an updated kernel package for Red Hat Enterprise Linux 9 that resolves these vulnerabilities. The update requires a system reboot to take effect.
Potential Impact
The vulnerabilities affect the Linux kernel core in Red Hat Enterprise Linux 9, potentially allowing memory corruption through use-after-free conditions and improper handling in network scheduling. This could impact system stability and security, possibly leading to privilege escalation or denial of service. Red Hat rates the security impact as Important (high severity). There are no known exploits in the wild at this time.
Mitigation Recommendations
A security update for the kernel packages is available from Red Hat for Red Hat Enterprise Linux 9. Users should apply the update as described in the Red Hat advisory (RHSA-2026:36957) and reboot the system to activate the fixes. This update addresses all three vulnerabilities. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: kernel security update
Description
This Red Hat security advisory addresses multiple vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9. The issues include a flaw in the network scheduler's ets_qdisc_change function (CVE-2025-71066) and two use-after-free vulnerabilities in the KVM x86 shadow paging implementation (CVE-2026-46113 and CVE-2026-53359). These vulnerabilities have been rated with an important security impact by Red Hat. A kernel update is available that fixes these issues, and a system reboot is required to apply the update.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The advisory covers three kernel vulnerabilities: CVE-2025-71066 fixes an issue in the net/sched subsystem where a class was not always removed from the active list before deletion in ets_qdisc_change. CVE-2026-46113 and CVE-2026-53359 address use-after-free bugs in the KVM x86 shadow paging code caused by unexpected guest frame numbers and roles, respectively. These bugs could lead to memory corruption. Red Hat has released an updated kernel package for Red Hat Enterprise Linux 9 that resolves these vulnerabilities. The update requires a system reboot to take effect.
Potential Impact
The vulnerabilities affect the Linux kernel core in Red Hat Enterprise Linux 9, potentially allowing memory corruption through use-after-free conditions and improper handling in network scheduling. This could impact system stability and security, possibly leading to privilege escalation or denial of service. Red Hat rates the security impact as Important (high severity). There are no known exploits in the wild at this time.
Mitigation Recommendations
A security update for the kernel packages is available from Red Hat for Red Hat Enterprise Linux 9. Users should apply the update as described in the Red Hat advisory (RHSA-2026:36957) and reboot the system to activate the fixes. This update addresses all three vulnerabilities. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:36957
- Cve Count
- 3
- Additional Cves
- ["CVE-2026-46113","CVE-2026-53359"]
- Cvss Version
- null
Threat ID: 6a4f6c1568715ace43154f8a
Added to database: 07/09/2026, 09:38:29 UTC
Last enriched: 07/09/2026, 09:43:13 UTC
Last updated: 07/10/2026, 02:47:18 UTC
Views: 17
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.