Red Hat Security Advisory: kernel security update
Red Hat has issued a security advisory for multiple vulnerabilities in the Linux kernel packages included in Red Hat Enterprise Linux 8.6. The update addresses six security issues including use-after-free bugs, out-of-bounds writes, and race conditions affecting components such as Bluetooth SCO, multipath TCP, USB audio, TCP IPv6, GFS2 filesystem, and RDMA mlx4 driver. These vulnerabilities are rated as having an important security impact. A patch is available and applying the update requires a system reboot.
AI Analysis
Technical Summary
This Red Hat security advisory (RHSA-2026:35894) addresses six vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 8.6. The fixed issues include: a use-after-free in Bluetooth SCO due to missing sock_hold (CVE-2026-31408), a slab-use-after-free in multipath TCP (__inet_lookup_established) (CVE-2026-31669), an out-of-bounds write in ALSA USB audio silencing (CVE-2026-43279), a potential race condition in tcp_v6_syn_recv_sock() (CVE-2026-43198), a use-after-free in the GFS2 iomap inline data write path (CVE-2026-45984), and a misuse of RCU in mlx4_srq_event() for RDMA (CVE-2026-46181). These vulnerabilities affect the core Linux kernel components and could impact system stability or security. The advisory provides patches and requires rebooting the system after update.
Potential Impact
The vulnerabilities affect critical kernel components and could lead to use-after-free conditions, out-of-bounds memory writes, and race conditions, potentially causing system crashes or enabling privilege escalation or denial of service. The advisory rates the overall security impact as Important (high). There are no known exploits in the wild at the time of the advisory.
Mitigation Recommendations
A security update patch is available for Red Hat Enterprise Linux 8.6 addressing these vulnerabilities. Users should apply the update promptly by following Red Hat's instructions at https://access.redhat.com/articles/11258. A system reboot is required for the update to take effect. No additional mitigation steps are indicated beyond applying the official patch.
Red Hat Security Advisory: kernel security update
Description
Red Hat has issued a security advisory for multiple vulnerabilities in the Linux kernel packages included in Red Hat Enterprise Linux 8.6. The update addresses six security issues including use-after-free bugs, out-of-bounds writes, and race conditions affecting components such as Bluetooth SCO, multipath TCP, USB audio, TCP IPv6, GFS2 filesystem, and RDMA mlx4 driver. These vulnerabilities are rated as having an important security impact. A patch is available and applying the update requires a system reboot.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat security advisory (RHSA-2026:35894) addresses six vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 8.6. The fixed issues include: a use-after-free in Bluetooth SCO due to missing sock_hold (CVE-2026-31408), a slab-use-after-free in multipath TCP (__inet_lookup_established) (CVE-2026-31669), an out-of-bounds write in ALSA USB audio silencing (CVE-2026-43279), a potential race condition in tcp_v6_syn_recv_sock() (CVE-2026-43198), a use-after-free in the GFS2 iomap inline data write path (CVE-2026-45984), and a misuse of RCU in mlx4_srq_event() for RDMA (CVE-2026-46181). These vulnerabilities affect the core Linux kernel components and could impact system stability or security. The advisory provides patches and requires rebooting the system after update.
Potential Impact
The vulnerabilities affect critical kernel components and could lead to use-after-free conditions, out-of-bounds memory writes, and race conditions, potentially causing system crashes or enabling privilege escalation or denial of service. The advisory rates the overall security impact as Important (high). There are no known exploits in the wild at the time of the advisory.
Mitigation Recommendations
A security update patch is available for Red Hat Enterprise Linux 8.6 addressing these vulnerabilities. Users should apply the update promptly by following Red Hat's instructions at https://access.redhat.com/articles/11258. A system reboot is required for the update to take effect. No additional mitigation steps are indicated beyond applying the official patch.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:35894
- Cve Count
- 6
- Additional Cves
- ["CVE-2026-31669","CVE-2026-43198","CVE-2026-43279","CVE-2026-45984","CVE-2026-46181"]
- Cvss Version
- null
Threat ID: 6a4c341d27e9c797195f87e3
Added to database: 07/06/2026, 23:02:53 UTC
Last enriched: 08/17/2026, 21:46:29 UTC
Last updated: 08/21/2026, 05:55:10 UTC
Views: 179
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.