The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)

* kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090)

* kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)

* kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176)

Bug Fix(es) and Enhancement(s):

* CLONE - [RHEL 10.2 Bug] qla2xxx flash image validation failure [rhel-10.2.z] (JIRA:RHEL-181887)

* tegra-se fixes and updates [rhel-10.2.z] (JIRA:RHEL-182759)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

CVE-2026-43279 is a high-severity vulnerability in the Linux kernel's ALSA usb-audio driver. It involves an out-of-bounds (OOB) write during silencing of playback URB packets when the capture stream setup differs from the playback stream, potentially causing a kernel crash. The issue arises because the driver assumes received packets fit the buffer size without verification. A patch adds a sanity check to prevent buffer overflow and properly reports transfer errors, mitigating the crash risk but not fixing the underlying playback error.

CVE-2026-43279: ALSA: usb-audio: Add sanity check for OOB writes at silencing in Linux kernel

linux

linux-aws

linux-azure

linux-lts-xenial

linux-aws-hwe

linux-gcp

linux-hwe

linux-hwe-edge

linux-kvm

linux-oracle

linux-fips

linux-aws-5.0

linux-aws-5.3

linux-aws-5.4

linux-azure-4.15

linux-azure-5.3

linux-azure-5.4

linux-azure-edge

linux-gcp-4.15

linux-gcp-5.3

linux-gcp-5.4

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-hwe-5.4

linux-ibm-5.4

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-oracle-5.4

linux-raspi-5.4

linux-aws-fips

linux-azure-fips

linux-gcp-fips

linux-aws-5.11

linux-aws-5.13

linux-aws-5.15

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.15

linux-azure-5.8

linux-azure-fde

linux-azure-fde-5.15

linux-bluefield

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.15

linux-gcp-5.8

linux-gke

linux-gke-5.15

linux-gkeop

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.15

linux-hwe-5.8

linux-ibm

linux-ibm-5.15

linux-intel-5.13

linux-intel-iotg-5.15

linux-iot

linux-lowlatency-hwe-5.15

linux-nvidia-tegra-5.15

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.15

linux-oracle-5.8

linux-raspi

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.15

linux-riscv-5.8

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes at silencing At silencing the playback URB packets in the implicit fb mode before the actual playback, we blindly assume that the received packets fit with the buffer size.  But when the setup in the capture stream differs from the playback stream (e.g. due to the USB core limitation of max packet size), such an inconsistency may lead to OOB writes to the buffer, resulting in a crash. For addressing it, add a sanity check of the transfer buffer size at prepare_silent_urb(), and stop the data copy if the received data overflows.  Also, report back the transfer error properly from there, too. Note that this doesn't fix the root cause of the playback error itself, but this merely covers the kernel Oops.

CVE-2026-43279 is a high-severity vulnerability in the Linux kernel's ALSA usb-audio component. It involves an out-of-bounds (OOB) write during silencing of playback URB packets when there is a mismatch between capture and playback stream setups. This can cause a kernel crash. The issue is addressed by adding a sanity check on the transfer buffer size to prevent OOB writes and properly report transfer errors. The fix does not resolve the underlying playback error but prevents kernel crashes.

Search: CVE-2026-43279