This Red Hat security advisory (RHSA-2026:19074) addresses four Linux kernel vulnerabilities affecting Red Hat Enterprise Linux 10 and associated CodeReady Linux Builder and AppStream/BaseOS components. The vulnerabilities include a denial of service in the authencesn module caused by too-short Additional Authenticated Data (AAD) (CVE-2026-23060), cryptographic fixes involving the algif_aead and af_alg components (CVE-2026-31431 and CVE-2026-31677), and a new universal local privilege escalation vulnerability in the kernel's ESP XFRM implementation known as the "Dirty Frag" variant (CVE-2026-43284). Red Hat has released updated kernel packages that fix these issues and requires a system reboot to apply the updates. The advisory rates the security impact as important (high severity). No CVSS scores are provided in the advisory, but the vulnerabilities affect critical kernel components.

The vulnerabilities impact the Linux kernel, the core of the operating system, potentially allowing denial of service conditions and local privilege escalation. Specifically, CVE-2026-23060 can cause denial of service due to improper handling of too-short AAD in authencesn. CVE-2026-31431 and CVE-2026-31677 address cryptographic subsystem issues that could affect kernel cryptographic operations. CVE-2026-43284 is a local privilege escalation vulnerability that could allow an attacker with local access to gain elevated privileges. These issues affect system stability and security, making patching critical to maintain system integrity.

Red Hat has released updated kernel packages for Red Hat Enterprise Linux 10 and related products that address these vulnerabilities. Users should apply the kernel update as described in Red Hat advisory RHSA-2026:19074 and reboot affected systems to ensure the fixes take effect. The advisory provides detailed instructions and package links. There are no indications that these issues are mitigated by default or require additional workarounds beyond applying the official update and rebooting.