Threats Tagged 'cve-2026-43329'

A vulnerability in the Linux kernel netfilter flowtable subsystem was identified where the maximum number of hardware offload actions for IPv6 was incorrectly checked, allowing more actions than the defined maximum. This issue has been resolved by strictly enforcing the maximum number of supported actions and increasing the limit from 16 to 24 to accommodate IPv6 setups. The vulnerability affects multiple Linux kernel versions prior to specific 5.15.x updates and related distributions. The issue has a high severity with a CVSS score of 7.8, impacting confidentiality, integrity, and availability. A patch is available and should be applied via standard system updates followed by a reboot. The vendor advisory confirms the fix and provides detailed update instructions.

A high severity use-after-free vulnerability (CVE-2026-31669) in the Linux kernel's Multipath TCP (MPTCP) implementation was resolved. The flaw involves incorrect socket memory allocation for MPTCP IPv6 subflow child sockets due to improper slab cache initialization, leading to potential memory corruption. This vulnerability could allow an attacker to cause system compromise with high impact on confidentiality, integrity, and availability. Multiple Linux kernel subsystems were updated to fix this and related issues. Official patches are available and included in updated Linux kernel versions. Users should apply these updates and reboot to mitigate the risk.

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ Security Fix(es): * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. All OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.

This Red Hat security advisory addresses multiple vulnerabilities and bugs in the Linux kernel packages for Red Hat Enterprise Linux 9.6 Extended Update Support and related products. The update includes fixes for 18 CVEs affecting various kernel subsystems such as netfilter, ALSA, RDMA, TCP, SCTP, and others. The advisory rates the security impact as Important and covers issues like use-after-free, double free, race conditions, permission checking flaws, and validation errors. The update also includes bug fixes and enhancements unrelated to security. Systems must be rebooted after applying the update for changes to take effect.