Threats Tagged 'cve-2026-23415'

Red Hat has issued a security advisory for multiple vulnerabilities in the Linux kernel packages included in Red Hat Enterprise Linux 10. The update addresses several security flaws including use-after-free, improper resource handling, and validation issues across various kernel subsystems such as fsnotify, shmem, futex, drm/amd/display, ipc, mm/slab, and openvswitch. These vulnerabilities have been rated with an important security impact and affect Red Hat Enterprise Linux 10 and related CodeReady Linux Builder variants. A reboot is required after applying the update to ensure the fixes take effect.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415) * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [rhel-9.8.z] (JIRA:RHEL-186331) * [RHEL 9.4] Kernel memory reclaim bug [rhel-9.8.z] (JIRA:RHEL-211058) * Bond network interface is not coming up with MTU 9000 while vPMEM is enabled [rhel-9.8.z] (JIRA:RHEL-215575) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.