Threats Tagged 'cve-2026-43037'

Red Hat has issued a security advisory for multiple vulnerabilities in the Linux kernel packages used in Red Hat Enterprise Linux 9. 4 and related variants. The update addresses a range of issues including use-after-free, overflow, and improper validation bugs across networking, IPv6, crypto, SCSI, netfilter, SMB, and WiFi components. These vulnerabilities have been rated with a security impact of Important by Red Hat Product Security. The advisory includes fixes for 12 CVEs, including CVE-2025-40135 and others, and requires a system reboot after applying the update. No known exploits in the wild have been reported. Users should apply the update promptly to mitigate these issues.

Red Hat has issued a security advisory for multiple vulnerabilities in the Linux kernel packages included with Red Hat Enterprise Linux 9. 6 Extended Update Support and related products. The update addresses a range of issues including use-after-free, denial of service, out-of-bounds reads, and improper validation in various kernel subsystems such as proc, netfilter, SMB client, Bluetooth, and others. These vulnerabilities have been assigned multiple CVEs and are rated with an overall high severity by Red Hat Product Security. The advisory recommends applying the kernel update and rebooting the system to mitigate these issues.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.