Threats Tagged 'cve-2026-23401'

This Red Hat security advisory addresses multiple vulnerabilities in the Linux kernel live patch module for kernel version 5.14.0-570.17.1.el9_6. The update fixes a privilege escalation or denial of service issue in the KVM component due to improper shadow page table entry handling (CVE-2026-23401), a heap overflow in the NFSv4.0 LOCK replay cache (CVE-2026-31402), and a use-after-free vulnerability in the bonding driver that can lead to denial of service (CVE-2026-31419). The advisory targets Red Hat Enterprise Linux 9.6 Extended Update Support and related variants. A security update is available to address these issues.

This security advisory from Red Hat addresses multiple vulnerabilities in the Linux kernel live patch module for kernel version 4.18.0-553.53.1.el8_10. The issues include a privilege escalation or denial of service vulnerability in the KVM due to improper shadow page table entry handling (CVE-2026-23401), a heap overflow in the NFSv4.0 LOCK replay cache (CVE-2026-31402), and a use-after-free vulnerability in the bonding driver causing denial of service (CVE-2026-31419). These vulnerabilities have been rated with an overall security impact of Important by Red Hat. Updates are available as kpatch live patch modules to address these issues. The advisory provides detailed package updates and references for remediation.

This Red Hat security advisory addresses multiple vulnerabilities in the Linux kernel 5.14.0-427.68.2.el9_4 via kpatch live patch modules. The fixed issues include a privilege escalation or denial of service in KVM due to improper shadow page table entry handling (CVE-2026-23401), a heap overflow in the NFSv4.0 LOCK replay cache (CVE-2026-31402), and a use-after-free vulnerability in the bonding driver causing denial of service (CVE-2026-31419). These vulnerabilities affect Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions and related variants. Red Hat has released updated kpatch modules to remediate these issues. Users should apply these official patches to mitigate the risks. No known exploits in the wild have been reported at this time.

This advisory addresses multiple security vulnerabilities in the Linux kernel targeted by the kpatch live patch module for kernel-4.18.0-477.97.1.el8_8 on Red Hat Enterprise Linux 8.8. The vulnerabilities include privilege escalation or denial of service in the KVM due to improper shadow page table entry handling (CVE-2026-23401), a heap overflow in the NFSv4.0 LOCK replay cache (CVE-2026-31402), and a use-after-free in the bonding driver causing denial of service (CVE-2026-31419). These issues are rated as important by Red Hat and have corresponding patches available via kpatch modules. The advisory provides instructions for applying these updates to affected systems.

This Red Hat security advisory addresses multiple vulnerabilities in the Linux kernel 5.14.0-284.117.1.el9_2 via live patch modules for kpatch. The issues include a privilege escalation or denial of service vulnerability in the KVM due to improper shadow page table entry handling (CVE-2026-23401), a heap overflow in the NFSv4.0 LOCK replay cache (CVE-2026-31402), and a use-after-free in the bonding driver causing denial of service (CVE-2026-31419). These vulnerabilities affect Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and Extended Life Cycle versions. The advisory provides updated kpatch modules to remediate these issues. No CVSS scores are provided, but the severity is rated as important/high by Red Hat.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999) * kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation. (CVE-2025-71238) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999) * kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation. (CVE-2025-71238) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024) * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.