Red Hat Security Advisory: kernel security update
Red Hat has issued a security advisory for a kernel update addressing two vulnerabilities in the Linux kernel's eventpoll subsystem. These vulnerabilities involve use-after-free (UAF) conditions related to struct eventpoll and struct file, which could lead to memory corruption. The update is rated as important by Red Hat and affects Red Hat Enterprise Linux for ARM 64 version 10. A system reboot is required after applying the update for it to take effect.
AI Analysis
Technical Summary
This advisory addresses two vulnerabilities in the Linux kernel eventpoll subsystem: CVE-2026-43074, which defers the freeing of struct eventpoll to the RCU grace period to prevent premature memory release, and CVE-2026-46242, which fixes a use-after-free issue in ep_remove involving struct eventpoll and struct file. Both vulnerabilities relate to improper memory handling that could lead to use-after-free conditions. The update is provided for Red Hat Enterprise Linux for ARM 64 version 10 with kernel packages updated accordingly. The advisory references Red Hat's errata RHSA-2026:36186 and requires a system reboot after patching.
Potential Impact
The vulnerabilities could allow an attacker to exploit use-after-free conditions in the kernel's eventpoll subsystem, potentially leading to memory corruption. Red Hat rates the security impact as Important (high severity). No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released an official kernel update that addresses these vulnerabilities. Users should apply the update for Red Hat Enterprise Linux for ARM 64 version 10 as described in Red Hat advisory RHSA-2026:36186 and reboot the system to activate the fixes. Patch status is confirmed as an official fix is available.
Red Hat Security Advisory: kernel security update
Description
Red Hat has issued a security advisory for a kernel update addressing two vulnerabilities in the Linux kernel's eventpoll subsystem. These vulnerabilities involve use-after-free (UAF) conditions related to struct eventpoll and struct file, which could lead to memory corruption. The update is rated as important by Red Hat and affects Red Hat Enterprise Linux for ARM 64 version 10. A system reboot is required after applying the update for it to take effect.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory addresses two vulnerabilities in the Linux kernel eventpoll subsystem: CVE-2026-43074, which defers the freeing of struct eventpoll to the RCU grace period to prevent premature memory release, and CVE-2026-46242, which fixes a use-after-free issue in ep_remove involving struct eventpoll and struct file. Both vulnerabilities relate to improper memory handling that could lead to use-after-free conditions. The update is provided for Red Hat Enterprise Linux for ARM 64 version 10 with kernel packages updated accordingly. The advisory references Red Hat's errata RHSA-2026:36186 and requires a system reboot after patching.
Potential Impact
The vulnerabilities could allow an attacker to exploit use-after-free conditions in the kernel's eventpoll subsystem, potentially leading to memory corruption. Red Hat rates the security impact as Important (high severity). No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released an official kernel update that addresses these vulnerabilities. Users should apply the update for Red Hat Enterprise Linux for ARM 64 version 10 as described in Red Hat advisory RHSA-2026:36186 and reboot the system to activate the fixes. Patch status is confirmed as an official fix is available.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:36186
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-46242"]
- Cvss Version
- null
Threat ID: 6a4cf0f7c9d9e3dbe31d343d
Added to database: 07/07/2026, 12:28:39 UTC
Last enriched: 07/07/2026, 12:29:44 UTC
Last updated: 07/08/2026, 03:13:17 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.