Red Hat Security Advisory: kernel security update

This Red Hat security advisory (RHSA-2026:35894) addresses six vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 8.6. The fixed issues include: a use-after-free in Bluetooth SCO due to missing sock_hold (CVE-2026-31408), a slab-use-after-free in multipath TCP (__inet_lookup_established) (CVE-2026-31669), an out-of-bounds write in ALSA USB audio silencing (CVE-2026-43279), a potential race condition in tcp_v6_syn_recv_sock() (CVE-2026-43198), a use-after-free in the GFS2 iomap inline data write path (CVE-2026-45984), and a misuse of RCU in mlx4_srq_event() for RDMA (CVE-2026-46181). These vulnerabilities affect the core Linux kernel components and could impact system stability or security. The advisory provides patches and requires rebooting the system after update.

The vulnerabilities affect critical kernel components and could lead to use-after-free conditions, out-of-bounds memory writes, and race conditions, potentially causing system crashes or enabling privilege escalation or denial of service. The advisory rates the overall security impact as Important (high). There are no known exploits in the wild at the time of the advisory.

A security update patch is available for Red Hat Enterprise Linux 8.6 addressing these vulnerabilities. Users should apply the update promptly by following Red Hat's instructions at https://access.redhat.com/articles/11258. A system reboot is required for the update to take effect. No additional mitigation steps are indicated beyond applying the official patch.