Threats Tagged 'cve-2026-64113'

Multiple security vulnerabilities affecting the Real Time Linux Kernel (kernel-rt) packages in Red Hat Enterprise Linux 8 have been addressed. These include denial of service, use-after-free, race conditions, and validation issues in various kernel subsystems such as SCSI drivers, SCTP, netfilter, and TIPC. The update also includes bug fixes and enhancements to improve stability and security. Red Hat has released patches for these issues and recommends applying the update and rebooting the system to ensure protection.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339) * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) * kernel: tcp: call sk_data_ready() after listener migration (CVE-2026-46015) * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149) * kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266) * kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306) * kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330) * kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002) * kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223) * kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275) * kernel: ipv4: account for fraggap on the paged allocation path (CVE-2026-53366) * kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034) * kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563) * kernel: smb: client: fix double-free in SMB2_close() replay (CVE-2026-64597) * kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129) * kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) Bug Fix(es) and Enhancement(s): * KSM to deduplicate only zero pages [rhel-9.8.z] (JIRA:RHEL-249161) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A use-after-free vulnerability in the Linux kernel's ixgbevf driver for VEPA multicast source pruning was identified and resolved. The issue occurs because a pointer to a freed socket buffer (skb) is not reset before continuing a loop, leading to a use-after-free condition in NAPI softirq context. This flaw was found via static analysis and affects specific Linux kernel versions. The vulnerability has a high CVSS score of 9.8, indicating severe potential impact. A patch is available and included in updated Linux kernel versions. Users should update their systems and reboot to apply the fix. The vulnerability is part of a broader set of Linux kernel security fixes released by Ubuntu.