Red Hat Security Advisory: kernel security update
Multiple security vulnerabilities have been identified in the Linux kernel packages used by Red Hat Enterprise Linux versions 8.8 and 10.0. These include denial of service due to deadlocks, use-after-free, heap overflow, memory corruption, and privilege escalation issues affecting various kernel subsystems such as hugetlb folio migration, netfilter, RDMA umad, KVM, NFSv4.0, and CAN raw sockets. Red Hat has released security updates addressing these issues, and applying these updates requires a system reboot.
AI Analysis
Technical Summary
This Red Hat security advisory covers several vulnerabilities in the Linux kernel affecting Red Hat Enterprise Linux 8.8 and 10.0 variants. The issues include a denial of service caused by a deadlock in hugetlb folio migration (CVE-2026-23097), a use-after-free in the iSCSI target session usage count (CVE-2026-23193), heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402), denial of service and memory corruption in RDMA umad (CVE-2026-23243), privilege escalation or denial of service in KVM due to improper shadow page table entry handling (CVE-2026-23401), and a use-after-free in CAN raw socket handling (CVE-2026-31532). Red Hat has issued updated kernel packages that fix these vulnerabilities. The advisory emphasizes that a system reboot is required for the updates to take effect.
Potential Impact
The vulnerabilities collectively can lead to denial of service conditions, memory corruption, privilege escalation, and use-after-free issues in affected systems running vulnerable kernel versions. These impacts can affect system stability, security, and potentially allow attackers to escalate privileges or disrupt services. No known exploits in the wild have been reported at the time of this advisory.
Mitigation Recommendations
Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the provided security updates for their respective Red Hat Enterprise Linux versions (8.8 and 10.0) as soon as possible. A system reboot is required to activate the updated kernel and fully mitigate the vulnerabilities. Refer to Red Hat's official update guide at https://access.redhat.com/articles/11258 for detailed instructions.
Red Hat Security Advisory: kernel security update
Description
Multiple security vulnerabilities have been identified in the Linux kernel packages used by Red Hat Enterprise Linux versions 8.8 and 10.0. These include denial of service due to deadlocks, use-after-free, heap overflow, memory corruption, and privilege escalation issues affecting various kernel subsystems such as hugetlb folio migration, netfilter, RDMA umad, KVM, NFSv4.0, and CAN raw sockets. Red Hat has released security updates addressing these issues, and applying these updates requires a system reboot.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat security advisory covers several vulnerabilities in the Linux kernel affecting Red Hat Enterprise Linux 8.8 and 10.0 variants. The issues include a denial of service caused by a deadlock in hugetlb folio migration (CVE-2026-23097), a use-after-free in the iSCSI target session usage count (CVE-2026-23193), heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402), denial of service and memory corruption in RDMA umad (CVE-2026-23243), privilege escalation or denial of service in KVM due to improper shadow page table entry handling (CVE-2026-23401), and a use-after-free in CAN raw socket handling (CVE-2026-31532). Red Hat has issued updated kernel packages that fix these vulnerabilities. The advisory emphasizes that a system reboot is required for the updates to take effect.
Potential Impact
The vulnerabilities collectively can lead to denial of service conditions, memory corruption, privilege escalation, and use-after-free issues in affected systems running vulnerable kernel versions. These impacts can affect system stability, security, and potentially allow attackers to escalate privileges or disrupt services. No known exploits in the wild have been reported at the time of this advisory.
Mitigation Recommendations
Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the provided security updates for their respective Red Hat Enterprise Linux versions (8.8 and 10.0) as soon as possible. A system reboot is required to activate the updated kernel and fully mitigate the vulnerabilities. Refer to Red Hat's official update guide at https://access.redhat.com/articles/11258 for detailed instructions.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:15883
- Cve Count
- 6
- Additional Cves
- ["CVE-2026-23139","CVE-2026-23243","CVE-2026-23401","CVE-2026-31402","CVE-2026-31532"]
Threat ID: 6a160981e29bf47b5064eb57
Added to database: 05/26/2026, 20:58:41 UTC
Last enriched: 08/07/2026, 02:38:23 UTC
Last updated: 09/14/2026, 22:01:32 UTC
Views: 237
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.