Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-43037 (GCVE-0-2026-43037)
Vulnerability from cvelistv5 – Published: 2026-05-01 14:15 – Updated: 2026-07-10 12:05
VLAI
EPSS
VEX
Title
ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
Summary
In the Linux kernel, the following vulnerability has been resolved:
ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
Oskar Kjos reported the following problem.
ip4ip6_err() calls icmp_send() on a cloned skb whose cb[] was written
by the IPv6 receive path as struct inet6_skb_parm. icmp_send() passes
IPCB(skb2) to __ip_options_echo(), which interprets that cb[] region
as struct inet_skb_parm (IPv4). The layouts differ: inet6_skb_parm.nhoff
at offset 14 overlaps inet_skb_parm.opt.rr, producing a non-zero rr
value. __ip_options_echo() then reads optlen from attacker-controlled
packet data at sptr[rr+1] and copies that many bytes into dopt->__data,
a fixed 40-byte stack buffer (IP_OPTIONS_DATA_FIXED_SIZE).
To fix this we clear skb2->cb[], as suggested by Oskar Kjos.
Also add minimal IPv4 header validation (version == 4, ihl >= 5).
Severity
9.8 (Critical)
8.8 (High)
CWE
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
Assigner
References
43 references
Impacted products
57 products
| Vendor | Product | Version | |
|---|---|---|---|
| Linux | Linux |
Affected:
c4d3efafcc933fd2ffd169d7dc4f980393a13796 , < ea9f65b27c8404e164848ebff1443310fd187629
(git)
Affected: c4d3efafcc933fd2ffd169d7dc4f980393a13796 , < d6621f60192fe10c047a4487be42a6f4c150707f (git) Affected: c4d3efafcc933fd2ffd169d7dc4f980393a13796 , < 2cc6e3b0fe0f0242d1f530a93a4924f48ab85ba5 (git) Affected: c4d3efafcc933fd2ffd169d7dc4f980393a13796 , < a0c4ce9900a108eaf55d0f3b399cb55999647d39 (git) Affected: c4d3efafcc933fd2ffd169d7dc4f980393a13796 , < 1063515ce15ff31065c4e7f8265f4c2fd3c54876 (git) Affected: c4d3efafcc933fd2ffd169d7dc4f980393a13796 , < 590f622669b97eaf7b57a1de7b0a6e68c5d8b2c3 (git) Affected: c4d3efafcc933fd2ffd169d7dc4f980393a13796 , < 4a622658f384b03560834cbe8ffcfe69a278f7c8 (git) Affected: c4d3efafcc933fd2ffd169d7dc4f980393a13796 , < 2edfa31769a4add828a7e604b21cb82aaaa05925 (git) |
|
| Linux | Linux |
Affected:
2.6.22
Unaffected: 0 , < 2.6.22 (semver) Unaffected: 5.10.253 , ≤ 5.10.* (semver) Unaffected: 5.15.203 , ≤ 5.15.* (semver) Unaffected: 6.1.168 , ≤ 6.1.* (semver) Unaffected: 6.6.134 , ≤ 6.6.* (semver) Unaffected: 6.12.81 , ≤ 6.12.* (semver) Unaffected: 6.18.22 , ≤ 6.18.* (semver) Unaffected: 6.19.12 , ≤ 6.19.* (semver) Unaffected: 7.0 , ≤ * (original_commit_for_fix) |
|
| Red Hat | NVIDIA for RHEL 10 |
cpe:/a:redhat:enterprise_linux_nvidia:10::el10 |
|
| Red Hat | Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) |
cpe:/o:redhat:rhel_els:6 |
|
| Red Hat | Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) |
cpe:/o:redhat:rhel_els:6 |
|
| Red Hat | Red Hat Enterprise Linux Server (v. 7 ELS) |
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Enterprise Linux Server Optional (v. 7 ELS) |
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.12 |
cpe:/a:redhat:openshift:4.12::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.13 |
cpe:/a:redhat:openshift:4.13::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.14 |
cpe:/a:redhat:openshift:4.14::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.15 |
cpe:/a:redhat:openshift:4.15::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
cpe:/a:redhat:openshift:4.17::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
cpe:/a:redhat:openshift:4.18::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat Enterprise Linux AppStream EUS (v. 10.0) |
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux AppStream (v. 10) |
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux AppStream E4S (v.9.2) |
cpe:/a:redhat:rhel_e4s:9.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream E4S (v.9.4) |
cpe:/a:redhat:rhel_e4s:9.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream EUS (v.9.6) |
cpe:/a:redhat:rhel_eus:9.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream (v. 9) |
cpe:/a:redhat:enterprise_linux:9::appstream |
|
| Red Hat | Red Hat Enterprise Linux BaseOS EUS (v. 10.0) |
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux BaseOS (v. 10) |
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux BaseOS (v. 8) |
cpe:/o:redhat:enterprise_linux:8::baseos |
|
| Red Hat | Red Hat Enterprise Linux BaseOS AUS (v.8.4) |
cpe:/o:redhat:rhel_aus:8.4::baseos |
|
| Red Hat | Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) |
cpe:/o:redhat:rhel_eus_long_life:8.4::baseos |
|
| Red Hat | Red Hat Enterprise Linux BaseOS AUS (v.8.6) |
cpe:/o:redhat:rhel_aus:8.6::baseos |
|
| Red Hat | Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) |
cpe:/o:redhat:rhel_eus_long_life:8.6::baseos |
|
| Red Hat | Red Hat Enterprise Linux BaseOS E4S (v.8.8) |
cpe:/o:redhat:rhel_e4s:8.8::baseos |
|
| Red Hat | Red Hat Enterprise Linux BaseOS TUS (v.8.8) |
cpe:/o:redhat:rhel_tus:8.8::baseos |
|
| Red Hat | Red Hat Enterprise Linux BaseOS E4S (v.9.2) |
cpe:/o:redhat:rhel_e4s:9.2::baseos |
|
| Red Hat | Red Hat Enterprise Linux BaseOS E4S (v.9.4) |
cpe:/o:redhat:rhel_e4s:9.4::baseos |
|
| Red Hat | Red Hat Enterprise Linux BaseOS EUS (v.9.6) |
cpe:/o:redhat:rhel_eus:9.6::baseos |
|
| Red Hat | Red Hat Enterprise Linux BaseOS (v. 9) |
cpe:/o:redhat:enterprise_linux:9::baseos |
|
| Red Hat | Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) |
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) |
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux CRB (v. 8) |
cpe:/a:redhat:enterprise_linux:8::crb |
|
| Red Hat | Red Hat CodeReady Linux Builder EUS (v.9.6) |
cpe:/a:redhat:rhel_eus:9.6::crb |
|
| Red Hat | Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) |
cpe:/a:redhat:enterprise_linux:9::crb |
|
| Red Hat | Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) |
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux Real Time for NFV (v. 10) |
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux NFV (v. 8) |
cpe:/a:redhat:enterprise_linux:8::nfv |
|
| Red Hat | Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) |
cpe:/a:redhat:rhel_e4s:9.2::nfv |
|
| Red Hat | Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) |
cpe:/a:redhat:rhel_e4s:9.4::nfv |
|
| Red Hat | Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) |
cpe:/a:redhat:rhel_eus:9.6::nfv |
|
| Red Hat | Red Hat Enterprise Linux Real Time for NFV (v. 9) |
cpe:/a:redhat:enterprise_linux:9::nfv |
|
| Red Hat | Red Hat Enterprise Linux Real Time EUS (v. 10.0) |
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux Real Time (v. 10) |
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux RT (v. 8) |
cpe:/a:redhat:enterprise_linux:8::realtime |
|
| Red Hat | Red Hat Enterprise Linux Real Time E4S (v.9.2) |
cpe:/a:redhat:rhel_e4s:9.2::realtime |
|
| Red Hat | Red Hat Enterprise Linux Real Time E4S (v.9.4) |
cpe:/a:redhat:rhel_e4s:9.4::realtime |
|
| Red Hat | Red Hat Enterprise Linux Real Time EUS (v.9.6) |
cpe:/a:redhat:rhel_eus:9.6::realtime |
|
| Red Hat | Red Hat Enterprise Linux Real Time (v. 9) |
cpe:/a:redhat:enterprise_linux:9::realtime |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:/a:redhat:enterprise_linux_nvidia:10::el10"
],
"defaultStatus": "affected",
"product": "NVIDIA for RHEL 10",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:6"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:6"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.12::el8"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.12",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.13::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.13",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_tus:8.8::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.2::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.4::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_eus:9.6::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::crb"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CRB (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::crb"
],
"defaultStatus": "affected",
"product": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::crb"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Real Time for NFV (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::nfv"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux NFV (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::nfv"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4::nfv"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::nfv"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::nfv"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Real Time for NFV (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Real Time EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Real Time (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::realtime"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux RT (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::realtime"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Real Time E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4::realtime"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Real Time E4S (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::realtime"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Real Time EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::realtime"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Real Time (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
}
],
"datePublic": "2026-05-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Critical"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-843",
"description": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-10T12:05:53.977Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"name": "RHBZ#2464351",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43037.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25534"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33486"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27719"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27729"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26528"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26542"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28962"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34098"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25181"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25200"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25193"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25186"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24343"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25191"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22940"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23237"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23224"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25217"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28742"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25121"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28749"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26535"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25533"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22964"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28748"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28750"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28738"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28740"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28741"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25120"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22900"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:25534: NVIDIA for RHEL 10"
},
{
"lang": "en",
"value": "RHSA-2026:33486: NVIDIA for RHEL 10"
},
{
"lang": "en",
"value": "RHSA-2026:27719: Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION), Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)"
},
{
"lang": "en",
"value": "RHSA-2026:27729: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:26528: Red Hat OpenShift Container Platform 4.12"
},
{
"lang": "en",
"value": "RHSA-2026:26542: Red Hat OpenShift Container Platform 4.13"
},
{
"lang": "en",
"value": "RHSA-2026:28887: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:28962: Red Hat OpenShift Container Platform 4.15"
},
{
"lang": "en",
"value": "RHSA-2026:34098: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:25181: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:25200: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:25193: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:25186: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:24343: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:25191: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:22940: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:23237: Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux BaseOS E4S (v.9.4), Red Hat Enterprise Linux Real Time E4S (v.9.4), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:23224: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat Enterprise Linux Real Time EUS (v.9.6), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:25217: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:28742: Red Hat Enterprise Linux BaseOS (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:25121: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:28749: Red Hat Enterprise Linux BaseOS (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:26535: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:25533: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:22964: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:28748: Red Hat Enterprise Linux BaseOS E4S (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:28750: Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:28738: Red Hat Enterprise Linux BaseOS E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:28740: Red Hat Enterprise Linux BaseOS EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:28741: Red Hat Enterprise Linux BaseOS (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:25120: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:22900: Red Hat Enterprise Linux Real Time E4S (v.9.2), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-01T00:00:00.000Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-01T00:00:00.000Z",
"value": "Made public."
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~"
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"net/ipv6/ip6_tunnel.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "ea9f65b27c8404e164848ebff1443310fd187629",
"status": "affected",
"version": "c4d3efafcc933fd2ffd169d7dc4f980393a13796",
"versionType": "git"
},
{
"lessThan": "d6621f60192fe10c047a4487be42a6f4c150707f",
"status": "affected",
"version": "c4d3efafcc933fd2ffd169d7dc4f980393a13796",
"versionType": "git"
},
{
"lessThan": "2cc6e3b0fe0f0242d1f530a93a4924f48ab85ba5",
"status": "affected",
"version": "c4d3efafcc933fd2ffd169d7dc4f980393a13796",
"versionType": "git"
},
{
"lessThan": "a0c4ce9900a108eaf55d0f3b399cb55999647d39",
"status": "affected",
"version": "c4d3efafcc933fd2ffd169d7dc4f980393a13796",
"versionType": "git"
},
{
"lessThan": "1063515ce15ff31065c4e7f8265f4c2fd3c54876",
"status": "affected",
"version": "c4d3efafcc933fd2ffd169d7dc4f980393a13796",
"versionType": "git"
},
{
"lessThan": "590f622669b97eaf7b57a1de7b0a6e68c5d8b2c3",
"status": "affected",
"version": "c4d3efafcc933fd2ffd169d7dc4f980393a13796",
"versionType": "git"
},
{
"lessThan": "4a622658f384b03560834cbe8ffcfe69a278f7c8",
"status": "affected",
"version": "c4d3efafcc933fd2ffd169d7dc4f980393a13796",
"versionType": "git"
},
{
"lessThan": "2edfa31769a4add828a7e604b21cb82aaaa05925",
"status": "affected",
"version": "c4d3efafcc933fd2ffd169d7dc4f980393a13796",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"net/ipv6/ip6_tunnel.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "2.6.22"
},
{
"lessThan": "2.6.22",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"version": "5.10.253",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.203",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.168",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.134",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.81",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.22",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.19.*",
"status": "unaffected",
"version": "6.19.12",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.0",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.253",
"versionStartIncluding": "2.6.22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.203",
"versionStartIncluding": "2.6.22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.168",
"versionStartIncluding": "2.6.22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.134",
"versionStartIncluding": "2.6.22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.12.81",
"versionStartIncluding": "2.6.22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.18.22",
"versionStartIncluding": "2.6.22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.19.12",
"versionStartIncluding": "2.6.22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.0",
"versionStartIncluding": "2.6.22",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()\n\nOskar Kjos reported the following problem.\n\nip4ip6_err() calls icmp_send() on a cloned skb whose cb[] was written\nby the IPv6 receive path as struct inet6_skb_parm. icmp_send() passes\nIPCB(skb2) to __ip_options_echo(), which interprets that cb[] region\nas struct inet_skb_parm (IPv4). The layouts differ: inet6_skb_parm.nhoff\nat offset 14 overlaps inet_skb_parm.opt.rr, producing a non-zero rr\nvalue. __ip_options_echo() then reads optlen from attacker-controlled\npacket data at sptr[rr+1] and copies that many bytes into dopt-\u003e__data,\na fixed 40-byte stack buffer (IP_OPTIONS_DATA_FIXED_SIZE).\n\nTo fix this we clear skb2-\u003ecb[], as suggested by Oskar Kjos.\n\nAlso add minimal IPv4 header validation (version == 4, ihl \u003e= 5)."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-11T22:16:29.957Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/ea9f65b27c8404e164848ebff1443310fd187629"
},
{
"url": "https://git.kernel.org/stable/c/d6621f60192fe10c047a4487be42a6f4c150707f"
},
{
"url": "https://git.kernel.org/stable/c/2cc6e3b0fe0f0242d1f530a93a4924f48ab85ba5"
},
{
"url": "https://git.kernel.org/stable/c/a0c4ce9900a108eaf55d0f3b399cb55999647d39"
},
{
"url": "https://git.kernel.org/stable/c/1063515ce15ff31065c4e7f8265f4c2fd3c54876"
},
{
"url": "https://git.kernel.org/stable/c/590f622669b97eaf7b57a1de7b0a6e68c5d8b2c3"
},
{
"url": "https://git.kernel.org/stable/c/4a622658f384b03560834cbe8ffcfe69a278f7c8"
},
{
"url": "https://git.kernel.org/stable/c/2edfa31769a4add828a7e604b21cb82aaaa05925"
}
],
"title": "ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2026-43037",
"datePublished": "2026-05-01T14:15:35.314Z",
"dateReserved": "2026-05-01T14:12:55.978Z",
"dateUpdated": "2026-07-10T12:05:53.977Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-43037",
"date": "2026-07-09",
"epss": "0.00563",
"percentile": "0.42807"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-43037\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-01T15:16:48.383\",\"lastModified\":\"2026-07-10T12:16:54.957\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()\\n\\nOskar Kjos reported the following problem.\\n\\nip4ip6_err() calls icmp_send() on a cloned skb whose cb[] was written\\nby the IPv6 receive path as struct inet6_skb_parm. icmp_send() passes\\nIPCB(skb2) to __ip_options_echo(), which interprets that cb[] region\\nas struct inet_skb_parm (IPv4). The layouts differ: inet6_skb_parm.nhoff\\nat offset 14 overlaps inet_skb_parm.opt.rr, producing a non-zero rr\\nvalue. __ip_options_echo() then reads optlen from attacker-controlled\\npacket data at sptr[rr+1] and copies that many bytes into dopt-\u003e__data,\\na fixed 40-byte stack buffer (IP_OPTIONS_DATA_FIXED_SIZE).\\n\\nTo fix this we clear skb2-\u003ecb[], as suggested by Oskar Kjos.\\n\\nAlso add minimal IPv4 header validation (version == 4, ihl \u003e= 5).\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/ipv6/ip6_tunnel.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"c4d3efafcc933fd2ffd169d7dc4f980393a13796\",\"lessThan\":\"ea9f65b27c8404e164848ebff1443310fd187629\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c4d3efafcc933fd2ffd169d7dc4f980393a13796\",\"lessThan\":\"d6621f60192fe10c047a4487be42a6f4c150707f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c4d3efafcc933fd2ffd169d7dc4f980393a13796\",\"lessThan\":\"2cc6e3b0fe0f0242d1f530a93a4924f48ab85ba5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c4d3efafcc933fd2ffd169d7dc4f980393a13796\",\"lessThan\":\"a0c4ce9900a108eaf55d0f3b399cb55999647d39\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c4d3efafcc933fd2ffd169d7dc4f980393a13796\",\"lessThan\":\"1063515ce15ff31065c4e7f8265f4c2fd3c54876\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c4d3efafcc933fd2ffd169d7dc4f980393a13796\",\"lessThan\":\"590f622669b97eaf7b57a1de7b0a6e68c5d8b2c3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c4d3efafcc933fd2ffd169d7dc4f980393a13796\",\"lessThan\":\"4a622658f384b03560834cbe8ffcfe69a278f7c8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c4d3efafcc933fd2ffd169d7dc4f980393a13796\",\"lessThan\":\"2edfa31769a4add828a7e604b21cb82aaaa05925\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/ipv6/ip6_tunnel.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.22\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.22\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.253\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.203\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.168\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.134\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.81\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.22\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.12\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"NVIDIA for RHEL 10\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_nvidia:10::el10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server Optional (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.12\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.12::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.13\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.13::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.15\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.15::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS AUS (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.4::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS AUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.6::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_eus_long_life:8.6::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS E4S (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.8::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS TUS (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_tus:8.8::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:9.2::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS E4S (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:9.4::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_eus:9.6::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CRB (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::crb\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat CodeReady Linux Builder EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::crb\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::crb\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Real Time for NFV (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux NFV (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::nfv\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::nfv\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4::nfv\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::nfv\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Real Time for NFV (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::nfv\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Real Time EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Real Time (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux RT (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::realtime\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Real Time E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::realtime\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Real Time E4S (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4::realtime\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Real Time EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::realtime\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Real Time (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::realtime\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-843\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.22\",\"versionEndExcluding\":\"5.10.253\",\"matchCriteriaId\":\"2FAF7ECB-85CC-455A-BD37-B1C507BDF01A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.203\",\"matchCriteriaId\":\"20DDB3E9-AABF-4107-ADB0-5362AA067045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.168\",\"matchCriteriaId\":\"E2DDDCA1-6DAB-4018-B920-8F045DDD8D3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.134\",\"matchCriteriaId\":\"F56F925B-BAF8-4F4B-B62F-1496AF19A307\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.81\",\"matchCriteriaId\":\"6EF80433-B33B-43C5-8E64-0FA7B8DCE1BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.22\",\"matchCriteriaId\":\"C9DF8BCE-36D3-475D-9D21-19E4F02F9029\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"6.19.12\",\"matchCriteriaId\":\"0A2B9540-02D5-41B4-B16A-82AF66FD4F36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F253B622-8837-4245-BCE5-A7BF8FC76A16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F666C8D8-6538-46D4-B318-87610DE64C34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"02259FDA-961B-47BC-AE7F-93D7EC6E90C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"58A9FEFF-C040-420D-8F0A-BFDAAA1DF258\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D2315C0-D46F-4F85-9754-F9E5E11374A6\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1063515ce15ff31065c4e7f8265f4c2fd3c54876\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2cc6e3b0fe0f0242d1f530a93a4924f48ab85ba5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2edfa31769a4add828a7e604b21cb82aaaa05925\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4a622658f384b03560834cbe8ffcfe69a278f7c8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/590f622669b97eaf7b57a1de7b0a6e68c5d8b2c3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a0c4ce9900a108eaf55d0f3b399cb55999647d39\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d6621f60192fe10c047a4487be42a6f4c150707f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ea9f65b27c8404e164848ebff1443310fd187629\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22900\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22940\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22964\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23224\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23237\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24343\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25120\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25121\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25181\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25186\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25191\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25193\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25200\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25217\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25533\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25534\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26528\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26535\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26542\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27719\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27729\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28738\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28740\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28741\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28742\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28748\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28749\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28750\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28887\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28962\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33486\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34098\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-43037\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2464351\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43037.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Critical",
"current_release_date": "2026-07-09T17:38:47+00:00",
"cve": "CVE-2026-43037",
"id": "CVE-2026-43037",
"initial_release_date": "2026-05-01T00:00:00+00:00",
"product_status:fixed": "2439",
"product_status:known_affected": "33",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43037.json",
"version": "3"
}
}
}
RHSA-2026:27719
Vulnerability from csaf_redhat - Published: 2026-06-22 02:46 - Updated: 2026-07-09 22:59Summary
Red Hat Security Advisory: kernel security update
Severity
Critical
Notes
Topic: An update for kernel is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
8.8 (High)
Affected products
Fixed
56 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-doc-0:2.6.32-754.61.1.el6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-firmware-0:2.6.32-754.61.1.el6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-kdump-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
56 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-doc-0:2.6.32-754.61.1.el6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-firmware-0:2.6.32-754.61.1.el6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-kdump-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
17 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for kernel is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() (CVE-2026-43037)\n\n* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:27719",
"url": "https://access.redhat.com/errata/RHSA-2026:27719"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27719.json"
}
],
"title": "Red Hat Security Advisory: kernel security update",
"tracking": {
"current_release_date": "2026-07-09T22:59:35+00:00",
"generator": {
"date": "2026-07-09T22:59:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:27719",
"initial_release_date": "2026-06-22T02:46:21+00:00",
"revision_history": [
{
"date": "2026-06-22T02:46:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-22T02:46:21+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T22:59:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product": {
"name": "Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:2.6.32-754.61.1.el6.src",
"product": {
"name": "kernel-0:2.6.32-754.61.1.el6.src",
"product_id": "kernel-0:2.6.32-754.61.1.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-754.61.1.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:2.6.32-754.61.1.el6.x86_64",
"product": {
"name": "kernel-0:2.6.32-754.61.1.el6.x86_64",
"product_id": "kernel-0:2.6.32-754.61.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-754.61.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-754.61.1.el6.x86_64",
"product": {
"name": "kernel-debug-0:2.6.32-754.61.1.el6.x86_64",
"product_id": "kernel-debug-0:2.6.32-754.61.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-754.61.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64",
"product": {
"name": "kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64",
"product_id": "kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-754.61.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-754.61.1.el6.x86_64",
"product": {
"name": "kernel-devel-0:2.6.32-754.61.1.el6.x86_64",
"product_id": "kernel-devel-0:2.6.32-754.61.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-754.61.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-754.61.1.el6.x86_64",
"product": {
"name": "perf-0:2.6.32-754.61.1.el6.x86_64",
"product_id": "perf-0:2.6.32-754.61.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-754.61.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"product_id": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-754.61.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"product": {
"name": "kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"product_id": "kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-754.61.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"product": {
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"product_id": "kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-x86_64@2.6.32-754.61.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"product": {
"name": "perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"product_id": "perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-754.61.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"product": {
"name": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"product_id": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf-debuginfo@2.6.32-754.61.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:2.6.32-754.61.1.el6.x86_64",
"product": {
"name": "python-perf-0:2.6.32-754.61.1.el6.x86_64",
"product_id": "python-perf-0:2.6.32-754.61.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf@2.6.32-754.61.1.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-754.61.1.el6.i686",
"product": {
"name": "kernel-debug-devel-0:2.6.32-754.61.1.el6.i686",
"product_id": "kernel-debug-devel-0:2.6.32-754.61.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-754.61.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"product_id": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-754.61.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"product": {
"name": "kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"product_id": "kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-754.61.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"product": {
"name": "kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"product_id": "kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-i686@2.6.32-754.61.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"product": {
"name": "perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"product_id": "perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-754.61.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"product": {
"name": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"product_id": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf-debuginfo@2.6.32-754.61.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-754.61.1.el6.i686",
"product": {
"name": "kernel-0:2.6.32-754.61.1.el6.i686",
"product_id": "kernel-0:2.6.32-754.61.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-754.61.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-754.61.1.el6.i686",
"product": {
"name": "kernel-debug-0:2.6.32-754.61.1.el6.i686",
"product_id": "kernel-debug-0:2.6.32-754.61.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-754.61.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-754.61.1.el6.i686",
"product": {
"name": "kernel-devel-0:2.6.32-754.61.1.el6.i686",
"product_id": "kernel-devel-0:2.6.32-754.61.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-754.61.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-754.61.1.el6.i686",
"product": {
"name": "perf-0:2.6.32-754.61.1.el6.i686",
"product_id": "perf-0:2.6.32-754.61.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-754.61.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:2.6.32-754.61.1.el6.i686",
"product": {
"name": "python-perf-0:2.6.32-754.61.1.el6.i686",
"product_id": "python-perf-0:2.6.32-754.61.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf@2.6.32-754.61.1.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "kernel-0:2.6.32-754.61.1.el6.s390x",
"product_id": "kernel-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "kernel-debug-0:2.6.32-754.61.1.el6.s390x",
"product_id": "kernel-debug-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x",
"product_id": "kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "kernel-devel-0:2.6.32-754.61.1.el6.s390x",
"product_id": "kernel-devel-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "kernel-kdump-0:2.6.32-754.61.1.el6.s390x",
"product_id": "kernel-kdump-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x",
"product_id": "kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump-devel@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "perf-0:2.6.32-754.61.1.el6.s390x",
"product_id": "perf-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product_id": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product_id": "kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"product_id": "kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-s390x@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product_id": "kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump-debuginfo@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product_id": "perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product_id": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf-debuginfo@2.6.32-754.61.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:2.6.32-754.61.1.el6.s390x",
"product": {
"name": "python-perf-0:2.6.32-754.61.1.el6.s390x",
"product_id": "python-perf-0:2.6.32-754.61.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf@2.6.32-754.61.1.el6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch",
"product": {
"name": "kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch",
"product_id": "kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-abi-whitelists@2.6.32-754.61.1.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:2.6.32-754.61.1.el6.noarch",
"product": {
"name": "kernel-doc-0:2.6.32-754.61.1.el6.noarch",
"product_id": "kernel-doc-0:2.6.32-754.61.1.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-doc@2.6.32-754.61.1.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-firmware-0:2.6.32-754.61.1.el6.noarch",
"product": {
"name": "kernel-firmware-0:2.6.32-754.61.1.el6.noarch",
"product_id": "kernel-firmware-0:2.6.32-754.61.1.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-firmware@2.6.32-754.61.1.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "kernel-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-754.61.1.el6.src as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.src"
},
"product_reference": "kernel-0:2.6.32-754.61.1.el6.src",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "kernel-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch"
},
"product_reference": "kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "kernel-debug-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-debug-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "kernel-debug-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "kernel-debug-devel-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "kernel-devel-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-devel-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "kernel-devel-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:2.6.32-754.61.1.el6.noarch as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-doc-0:2.6.32-754.61.1.el6.noarch"
},
"product_reference": "kernel-doc-0:2.6.32-754.61.1.el6.noarch",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-firmware-0:2.6.32-754.61.1.el6.noarch as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-firmware-0:2.6.32-754.61.1.el6.noarch"
},
"product_reference": "kernel-firmware-0:2.6.32-754.61.1.el6.noarch",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-kdump-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-kdump-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "perf-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "perf-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "perf-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "python-perf-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "python-perf-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "python-perf-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686"
},
"product_reference": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x"
},
"product_reference": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
},
"product_reference": "python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.src",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-doc-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-firmware-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-kdump-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T02:46:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.src",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-doc-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-firmware-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-kdump-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27719"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.src",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-doc-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-firmware-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-kdump-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.src",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-doc-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-firmware-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-kdump-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
},
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.src",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-doc-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-firmware-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-kdump-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T02:46:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.src",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-doc-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-firmware-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-kdump-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27719"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.src",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-doc-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-firmware-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-kdump-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.src",
"6Server-ELS.EXTENSION:kernel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-abi-whitelists-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debug-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-devel-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:kernel-doc-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-firmware-0:2.6.32-754.61.1.el6.noarch",
"6Server-ELS.EXTENSION:kernel-kdump-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:kernel-kdump-devel-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debug-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-i686-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-s390x-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:kernel-debuginfo-common-x86_64-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:kernel-kdump-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-0:2.6.32-754.61.1.el6.x86_64",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.i686",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.s390x",
"6Server-optional-ELS.EXTENSION:python-perf-debuginfo-0:2.6.32-754.61.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
}
]
}
RHSA-2026:27729
Vulnerability from csaf_redhat - Published: 2026-06-22 04:35 - Updated: 2026-07-09 22:59Summary
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Severity
Critical
Notes
Topic: An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
* kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
* kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
* kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)
Bug Fix(es) and Enhancement(s):
* RHEL-124698 missed the last line of the backport (JIRA:RHEL-168608)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) `umad` (User Mode Access Device) component. A local user can exploit this vulnerability by manipulating input, causing an integer underflow that leads to an out-of-bounds memory write. This memory corruption can result in a denial of service (DoS) by crashing the system, and may also lead to limited information disclosure or data integrity issues.
7.3 (High)
Affected products
Fixed
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
8.8 (High)
Affected products
Fixed
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. This vulnerability occurs because the driver fails to properly validate bsscfg indices in interface (IF) events. An attacker could exploit this by sending a specially crafted IF event with an invalid bsscfg index, which could lead to an out-of-bounds write or read, potentially causing a system crash and resulting in a denial of service (DoS).
7.5 (High)
Affected products
Fixed
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel's XFS filesystem. When adding extended attributes (xattrs), which are metadata associated with files, to leaf blocks, incorrect adjustments to the freemap can occur. This inconsistency allows the entries array and free space to overlap, leading to an assertion failure. A local user can exploit this to cause the filesystem to shut down, resulting in a Denial of Service (DoS).
7.0 (High)
Affected products
Fixed
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Linux kernel, specifically within the netfilter: xt_tcpmss module. A remote attacker could exploit this vulnerability by sending a specially crafted TCP packet. The TCP option parser does not properly validate the remaining option length, which results in an out-of-bounds read. This allows an attacker to access memory beyond the intended buffer, potentially leading to information disclosure.
7.5 (High)
Affected products
Fixed
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
41 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)\n\n* kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() (CVE-2026-43037)\n\n* kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)\n\n* kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)\n\n* kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)\n\n* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)\n\nBug Fix(es) and Enhancement(s):\n\n* RHEL-124698 missed the last line of the backport (JIRA:RHEL-168608)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:27729",
"url": "https://access.redhat.com/errata/RHSA-2026:27729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2448594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448594"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "2467014",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467014"
},
{
"category": "external",
"summary": "2467064",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467064"
},
{
"category": "external",
"summary": "2467210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467210"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27729.json"
}
],
"title": "Red Hat Security Advisory: kernel security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2026-07-09T22:59:19+00:00",
"generator": {
"date": "2026-07-09T22:59:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:27729",
"initial_release_date": "2026-06-22T04:35:46+00:00",
"revision_history": [
{
"date": "2026-06-22T04:35:46+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-22T04:35:46+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T22:59:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-libs@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "perf-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "perf-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool-debuginfo@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-x86_64@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-debuginfo@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf-debuginfo@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-libs-devel@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-bootwrapper@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-libs@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "perf-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "perf-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool-debuginfo@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-ppc64le@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-debuginfo@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf-debuginfo@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"product_id": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-libs-devel@3.10.0-1160.153.1.el7?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "kernel-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "kernel-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-bootwrapper@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-libs@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "perf-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "perf-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool-debuginfo@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-ppc64@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-debuginfo@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf-debuginfo@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"product_id": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-libs-devel@3.10.0-1160.153.1.el7?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "bpftool-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "bpftool-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "kernel-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "kernel-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump-devel@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "perf-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "perf-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "python-perf-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "python-perf-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool-debuginfo@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-s390x@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump-debuginfo@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@3.10.0-1160.153.1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product": {
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product_id": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf-debuginfo@3.10.0-1160.153.1.el7?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:3.10.0-1160.153.1.el7.src",
"product": {
"name": "kernel-0:3.10.0-1160.153.1.el7.src",
"product_id": "kernel-0:3.10.0-1160.153.1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@3.10.0-1160.153.1.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"product_id": "kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-abi-whitelists@3.10.0-1160.153.1.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"product": {
"name": "kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"product_id": "kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-doc@3.10.0-1160.153.1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "bpftool-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "kernel-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1160.153.1.el7.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src"
},
"product_reference": "kernel-0:3.10.0-1160.153.1.el7.src",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:3.10.0-1160.153.1.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch"
},
"product_reference": "kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "perf-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "perf-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "perf-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "perf-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "python-perf-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x"
},
"product_reference": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64"
},
"product_reference": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le"
},
"product_reference": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-23243",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-03-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448594"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s Remote Direct Memory Access (RDMA) `umad` (User Mode Access Device) component. A local user can exploit this vulnerability by manipulating input, causing an integer underflow that leads to an out-of-bounds memory write. This memory corruption can result in a denial of service (DoS) by crashing the system, and may also lead to limited information disclosure or data integrity issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: Denial of service and memory corruption in RDMA umad",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This bug is a kernel out-of-bounds write in the RDMA umad write path caused by a user-controlled length calculation that could underflow and pass an invalid data_len into MAD send buffer creation.\nA local user with access to the umad interface can trigger the issue by supplying mismatched MAD and RMPP header sizes, which leads to an out-of-bounds memset in the send MAD allocation path and can corrupt kernel memory.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23243"
},
{
"category": "external",
"summary": "RHBZ#2448594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23243"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026031816-CVE-2026-23243-b88e@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026031816-CVE-2026-23243-b88e@gregkh/T"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T04:35:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27729"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent module ib_umad from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
"product_ids": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Linux kernel: Denial of service and memory corruption in RDMA umad"
},
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T04:35:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27729"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
},
{
"cve": "CVE-2026-43110",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467014"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s brcmfmac Wi-Fi driver. This vulnerability occurs because the driver fails to properly validate bsscfg indices in interface (IF) events. An attacker could exploit this by sending a specially crafted IF event with an invalid bsscfg index, which could lead to an out-of-bounds write or read, potentially causing a system crash and resulting in a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: wifi: brcmfmac: validate bsscfg indices in IF events",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "brcmfmac IF event handling validates the firmware provided ifidx but still uses the raw bsscfgidx value as an index into the driver iflist array. A malformed firmware IF event with an out of range bsscfgidx can cause an out of bounds pointer read and may lead to an invalid pointer dereference or broader memory corruption depending on how the resulting ifp is used. For the CVSS the PR:N is used in the paranoid score because a practical attacker model may involve adjacent Wi-Fi influence over FullMAC firmware events rather than a local privileged user on the host. The issue is not reachable over a normal routed IP network. It is adjacent network or device firmware mediated. Impact is at least denial of service through a kernel crash or Wi-Fi driver failure. In the paranoid case, the unchecked firmware controlled array index potentially could lead to possible confidentiality and integrity impact (but primarily only Availability impact).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43110"
},
{
"category": "external",
"summary": "RHBZ#2467014",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467014"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43110",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43110"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43110",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43110"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050624-CVE-2026-43110-7309@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050624-CVE-2026-43110-7309@gregkh/T"
}
],
"release_date": "2026-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T04:35:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27729"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent module brcmfmac from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
"product_ids": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: wifi: brcmfmac: validate bsscfg indices in IF events"
},
{
"cve": "CVE-2026-43158",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467210"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s XFS filesystem. When adding extended attributes (xattrs), which are metadata associated with files, to leaf blocks, incorrect adjustments to the freemap can occur. This inconsistency allows the entries array and free space to overlap, leading to an assertion failure. A local user can exploit this to cause the filesystem to shut down, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A local user with the ability to set extended attributes on an XFS filesystem can trigger inconsistent xattr leaf freemap accounting through crafted xattr insertion patterns. This can cause xattr metadata regions to overlap, leading to filesystem corruption detection and XFS shutdown via a reachable assertion. The issue requires the creation of a specific filesystem metadata layout through repeated setxattr operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43158"
},
{
"category": "external",
"summary": "RHBZ#2467210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467210"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43158",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43158"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43158",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43158"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050631-CVE-2026-43158-cc20@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050631-CVE-2026-43158-cc20@gregkh/T"
}
],
"release_date": "2026-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T04:35:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27729"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks"
},
{
"cve": "CVE-2026-43190",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467064"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel, specifically within the netfilter: xt_tcpmss module. A remote attacker could exploit this vulnerability by sending a specially crafted TCP packet. The TCP option parser does not properly validate the remaining option length, which results in an out-of-bounds read. This allows an attacker to access memory beyond the intended buffer, potentially leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: netfilter: xt_tcpmss: check remaining length before reading optlen",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "xt_tcpmss can read one byte past the TCP option boundary when the last option byte is not EOL or NOP. The parser may evaluate op i plus 1 while i is already the final byte of the option area, so a crafted TCP packet can trigger an out of bounds read in the netfilter match path. If the attacker can send packets through a ruleset that uses the tcpmss match, then it can trigger this bug. The issue is network reachable only on systems with an applicable xt_tcpmss or iptables rule, and it is not a generic TCP stack exposure. Impact is primarily limited confidentiality risk from a one byte out of bounds read and possible low availability impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43190"
},
{
"category": "external",
"summary": "RHBZ#2467064",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467064"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43190",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43190"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050642-CVE-2026-43190-f1c9@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050642-CVE-2026-43190-f1c9@gregkh/T"
}
],
"release_date": "2026-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T04:35:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27729"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: netfilter: xt_tcpmss: check remaining length before reading optlen"
},
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T04:35:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27729"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.src",
"7Server-ELS:kernel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-abi-whitelists-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-bootwrapper-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-debuginfo-common-s390x-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-doc-0:3.10.0-1160.153.1.el7.noarch",
"7Server-ELS:kernel-kdump-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-kdump-devel-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:kernel-tools-libs-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.s390x",
"7Server-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:bpftool-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debug-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debug-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-debuginfo-common-x86_64-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:kernel-tools-libs-devel-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.ppc64le",
"7Server-optional-ELS:python-perf-debuginfo-0:3.10.0-1160.153.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
}
]
}
RHSA-2026:28738
Vulnerability from csaf_redhat - Published: 2026-06-24 04:13 - Updated: 2026-07-09 17:56Summary
Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update
Severity
Critical
Notes
Topic: An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-427.68.2.el9_4.
Security Fix(es):
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
8.8 (High)
Affected products
Fixed
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-427.68.2.el9_4.\n\nSecurity Fix(es):\n\n* kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() (CVE-2026-43037)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28738",
"url": "https://access.redhat.com/errata/RHSA-2026:28738"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28738.json"
}
],
"title": "Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update",
"tracking": {
"current_release_date": "2026-07-09T17:56:20+00:00",
"generator": {
"date": "2026-07-09T17:56:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:28738",
"initial_release_date": "2026-06-24T04:13:18+00:00",
"revision_history": [
{
"date": "2026-06-24T04:13:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-24T04:13:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:56:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:9.4::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.src",
"product": {
"name": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.src",
"product_id": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_68_2@1-13.el9_4?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.src",
"product": {
"name": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.src",
"product_id": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_84_1@1-8.el9_4?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.src",
"product": {
"name": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.src",
"product_id": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_100_1@1-6.el9_4?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.src",
"product": {
"name": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.src",
"product_id": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_113_1@1-4.el9_4?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.src",
"product": {
"name": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.src",
"product_id": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_126_1@1-1.el9_4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_68_2@1-13.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_68_2-debugsource@1-13.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_68_2-debuginfo@1-13.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_84_1@1-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_84_1-debugsource@1-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_84_1-debuginfo@1-8.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_100_1@1-6.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_100_1-debugsource@1-6.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_100_1-debuginfo@1-6.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_113_1@1-4.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_113_1-debugsource@1-4.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_113_1-debuginfo@1-4.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_126_1@1-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_126_1-debugsource@1-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.ppc64le",
"product_id": "kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_126_1-debuginfo@1-1.el9_4?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_68_2@1-13.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_68_2-debugsource@1-13.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_68_2-debuginfo@1-13.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_84_1@1-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_84_1-debugsource@1-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_84_1-debuginfo@1-8.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_100_1@1-6.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_100_1-debugsource@1-6.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_100_1-debuginfo@1-6.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_113_1@1-4.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_113_1-debugsource@1-4.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_113_1-debuginfo@1-4.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_126_1@1-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_126_1-debugsource@1-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.x86_64",
"product_id": "kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-427_126_1-debuginfo@1-1.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.src"
},
"product_reference": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.src",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.src"
},
"product_reference": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.src",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.src"
},
"product_reference": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.src",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.src"
},
"product_reference": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.src",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.src"
},
"product_reference": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.src",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T04:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28738"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-0:1-6.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debuginfo-0:1-6.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_100_1-debugsource-0:1-6.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-0:1-4.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debuginfo-0:1-4.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_113_1-debugsource-0:1-4.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-0:1-1.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debuginfo-0:1-1.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_126_1-debugsource-0:1-1.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-0:1-13.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debuginfo-0:1-13.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_68_2-debugsource-0:1-13.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.src",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-8.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debuginfo-0:1-8.el9_4.x86_64",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.ppc64le",
"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-debugsource-0:1-8.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
}
]
}
RHSA-2026:28740
Vulnerability from csaf_redhat - Published: 2026-06-24 04:34 - Updated: 2026-07-09 17:56Summary
Red Hat Security Advisory: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update
Severity
Critical
Notes
Topic: An update for multiple packages is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-570.17.1.el9_6.
Security Fix(es):
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
8.8 (High)
Affected products
Fixed
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for multiple packages is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-570.17.1.el9_6.\n\nSecurity Fix(es):\n\n* kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() (CVE-2026-43037)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28740",
"url": "https://access.redhat.com/errata/RHSA-2026:28740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28740.json"
}
],
"title": "Red Hat Security Advisory: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update",
"tracking": {
"current_release_date": "2026-07-09T17:56:19+00:00",
"generator": {
"date": "2026-07-09T17:56:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:28740",
"initial_release_date": "2026-06-24T04:34:11+00:00",
"revision_history": [
{
"date": "2026-06-24T04:34:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-24T04:34:11+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:56:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:9.6::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.src",
"product": {
"name": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.src",
"product_id": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1@1-16.el9_6?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.src",
"product": {
"name": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.src",
"product_id": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1@1-7.el9_6?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.src",
"product": {
"name": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.src",
"product_id": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1@1-6.el9_6?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.src",
"product": {
"name": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.src",
"product_id": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1@1-4.el9_6?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src",
"product": {
"name": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src",
"product_id": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_116_1@1-1.el9_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1@1-16.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1-debugsource@1-16.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1-debuginfo@1-16.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1@1-7.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1-debugsource@1-7.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1-debuginfo@1-7.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1@1-6.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1-debugsource@1-6.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1-debuginfo@1-6.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1@1-4.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1-debugsource@1-4.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1-debuginfo@1-4.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_116_1@1-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_116_1-debugsource@1-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le",
"product_id": "kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_116_1-debuginfo@1-1.el9_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1@1-16.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1-debugsource@1-16.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1-debuginfo@1-16.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1@1-7.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1-debugsource@1-7.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_39_1-debuginfo@1-7.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1@1-6.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1-debugsource@1-6.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_66_1-debuginfo@1-6.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1@1-4.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1-debugsource@1-4.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_94_1-debuginfo@1-4.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_116_1@1-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_116_1-debugsource@1-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.x86_64",
"product_id": "kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-570_116_1-debuginfo@1-1.el9_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src"
},
"product_reference": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.src"
},
"product_reference": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.src",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.src"
},
"product_reference": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.src",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.src"
},
"product_reference": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.src",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.src"
},
"product_reference": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.src",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T04:34:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28740"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.src",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debuginfo-0:1-4.el9_6.x86_64",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.ppc64le",
"BaseOS-9.6.0.Z.EUS:kpatch-patch-5_14_0-570_94_1-debugsource-0:1-4.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
}
]
}
RHSA-2026:28741
Vulnerability from csaf_redhat - Published: 2026-06-24 04:42 - Updated: 2026-07-09 17:56Summary
Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update
Severity
Critical
Notes
Topic: An update for kpatch-patch-5_14_0-687_10_1 is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-687.10.1.el9_8.
Security Fix(es):
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for kpatch-patch-5_14_0-687_10_1 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-687.10.1.el9_8.\n\nSecurity Fix(es):\n\n* kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() (CVE-2026-43037)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28741",
"url": "https://access.redhat.com/errata/RHSA-2026:28741"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28741.json"
}
],
"title": "Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update",
"tracking": {
"current_release_date": "2026-07-09T17:56:18+00:00",
"generator": {
"date": "2026-07-09T17:56:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:28741",
"initial_release_date": "2026-06-24T04:42:51+00:00",
"revision_history": [
{
"date": "2026-06-24T04:42:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-24T04:42:51+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:56:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.src",
"product": {
"name": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.src",
"product_id": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-687_10_1@1-1.el9_8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.ppc64le",
"product_id": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-687_10_1@1-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.ppc64le",
"product_id": "kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-687_10_1-debugsource@1-1.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.ppc64le",
"product_id": "kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-687_10_1-debuginfo@1-1.el9_8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.x86_64",
"product_id": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-687_10_1@1-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.x86_64",
"product_id": "kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-687_10_1-debugsource@1-1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.x86_64",
"product_id": "kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-687_10_1-debuginfo@1-1.el9_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.ppc64le",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.src"
},
"product_reference": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.src",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.x86_64",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.ppc64le",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.x86_64",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.ppc64le",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.x86_64",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.src",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T04:42:51+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.src",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28741"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.src",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.src",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-0:1-1.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debuginfo-0:1-1.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:kpatch-patch-5_14_0-687_10_1-debugsource-0:1-1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
}
]
}
RHSA-2026:28742
Vulnerability from csaf_redhat - Published: 2026-06-24 04:20 - Updated: 2026-07-09 17:56Summary
Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 security update
Severity
Critical
Notes
Topic: An update for kpatch-patch-6_12_0-211_16_1 is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-6.12.0-211.16.1.el10_2.
Security Fix(es):
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
8.8 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-1.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for kpatch-patch-6_12_0-211_16_1 is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-6.12.0-211.16.1.el10_2.\n\nSecurity Fix(es):\n\n* kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() (CVE-2026-43037)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28742",
"url": "https://access.redhat.com/errata/RHSA-2026:28742"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28742.json"
}
],
"title": "Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 security update",
"tracking": {
"current_release_date": "2026-07-09T17:56:18+00:00",
"generator": {
"date": "2026-07-09T17:56:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:28742",
"initial_release_date": "2026-06-24T04:20:15+00:00",
"revision_history": [
{
"date": "2026-06-24T04:20:15+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-24T04:20:15+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:56:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.src",
"product": {
"name": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.src",
"product_id": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-6_12_0-211_16_1@1-1.el10_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.ppc64le",
"product": {
"name": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.ppc64le",
"product_id": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-6_12_0-211_16_1@1-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-6_12_0-211_16_1-debugsource-0:1-1.el10_2.ppc64le",
"product": {
"name": "kpatch-patch-6_12_0-211_16_1-debugsource-0:1-1.el10_2.ppc64le",
"product_id": "kpatch-patch-6_12_0-211_16_1-debugsource-0:1-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-6_12_0-211_16_1-debugsource@1-1.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.ppc64le",
"product": {
"name": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.ppc64le",
"product_id": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-6_12_0-211_16_1-debuginfo@1-1.el10_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.x86_64",
"product": {
"name": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.x86_64",
"product_id": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-6_12_0-211_16_1@1-1.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.x86_64",
"product": {
"name": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.x86_64",
"product_id": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-6_12_0-211_16_1-debuginfo@1-1.el10_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.ppc64le"
},
"product_reference": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.src"
},
"product_reference": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.src",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.x86_64"
},
"product_reference": "kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.ppc64le"
},
"product_reference": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.x86_64"
},
"product_reference": "kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-6_12_0-211_16_1-debugsource-0:1-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-1.el10_2.ppc64le"
},
"product_reference": "kpatch-patch-6_12_0-211_16_1-debugsource-0:1-1.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-1.el10_2.ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T04:20:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-1.el10_2.ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28742"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-1.el10_2.ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.src",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-0:1-1.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.ppc64le",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debuginfo-0:1-1.el10_2.x86_64",
"BaseOS-10.2.Z:kpatch-patch-6_12_0-211_16_1-debugsource-0:1-1.el10_2.ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
}
]
}
RHSA-2026:28748
Vulnerability from csaf_redhat - Published: 2026-06-24 04:29 - Updated: 2026-07-09 17:56Summary
Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update
Severity
Critical
Notes
Topic: An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-4.18.0-477.97.1.el8_8.
Security Fix(es):
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
8.8 (High)
Affected products
Fixed
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-4.18.0-477.97.1.el8_8.\n\nSecurity Fix(es):\n\n* kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() (CVE-2026-43037)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28748",
"url": "https://access.redhat.com/errata/RHSA-2026:28748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28748.json"
}
],
"title": "Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update",
"tracking": {
"current_release_date": "2026-07-09T17:56:20+00:00",
"generator": {
"date": "2026-07-09T17:56:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:28748",
"initial_release_date": "2026-06-24T04:29:06+00:00",
"revision_history": [
{
"date": "2026-06-24T04:29:06+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-24T04:29:06+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:56:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:8.8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.src",
"product": {
"name": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.src",
"product_id": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_97_1@1-11.el8_8?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.src",
"product": {
"name": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.src",
"product_id": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_107_1@1-7.el8_8?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.src",
"product": {
"name": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.src",
"product_id": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_120_1@1-6.el8_8?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.src",
"product": {
"name": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.src",
"product_id": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_130_1@1-4.el8_8?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.src",
"product": {
"name": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.src",
"product_id": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_143_1@1-1.el8_8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_97_1@1-11.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_97_1-debugsource@1-11.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_97_1-debuginfo@1-11.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_107_1@1-7.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_107_1-debugsource@1-7.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_107_1-debuginfo@1-7.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_120_1@1-6.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_120_1-debugsource@1-6.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_120_1-debuginfo@1-6.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_130_1@1-4.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_130_1-debugsource@1-4.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_130_1-debuginfo@1-4.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_143_1@1-1.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_143_1-debugsource@1-1.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.ppc64le",
"product_id": "kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_143_1-debuginfo@1-1.el8_8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_97_1@1-11.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_97_1-debugsource@1-11.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_97_1-debuginfo@1-11.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_107_1@1-7.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_107_1-debugsource@1-7.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_107_1-debuginfo@1-7.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_120_1@1-6.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_120_1-debugsource@1-6.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_120_1-debuginfo@1-6.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_130_1@1-4.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_130_1-debugsource@1-4.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_130_1-debuginfo@1-4.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_143_1@1-1.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_143_1-debugsource@1-1.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.x86_64",
"product_id": "kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-477_143_1-debuginfo@1-1.el8_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.src"
},
"product_reference": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.src"
},
"product_reference": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.src"
},
"product_reference": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.src"
},
"product_reference": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.src"
},
"product_reference": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T04:29:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28748"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-0:1-7.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debuginfo-0:1-7.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_107_1-debugsource-0:1-7.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-0:1-6.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debuginfo-0:1-6.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_120_1-debugsource-0:1-6.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-0:1-4.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debuginfo-0:1-4.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_130_1-debugsource-0:1-4.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-0:1-1.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debuginfo-0:1-1.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_143_1-debugsource-0:1-1.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.src",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-0:1-11.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debuginfo-0:1-11.el8_8.x86_64",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.ppc64le",
"BaseOS-8.8.0.Z.E4S:kpatch-patch-4_18_0-477_97_1-debugsource-0:1-11.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
}
]
}
RHSA-2026:28749
Vulnerability from csaf_redhat - Published: 2026-06-24 04:43 - Updated: 2026-07-09 17:56Summary
Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update
Severity
Critical
Notes
Topic: An update for multiple packages is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-4.18.0-553.53.1.el8_10.
Security Fix(es):
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
8.8 (High)
Affected products
Fixed
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for multiple packages is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-4.18.0-553.53.1.el8_10.\n\nSecurity Fix(es):\n\n* kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() (CVE-2026-43037)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28749",
"url": "https://access.redhat.com/errata/RHSA-2026:28749"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28749.json"
}
],
"title": "Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update",
"tracking": {
"current_release_date": "2026-07-09T17:56:25+00:00",
"generator": {
"date": "2026-07-09T17:56:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:28749",
"initial_release_date": "2026-06-24T04:43:41+00:00",
"revision_history": [
{
"date": "2026-06-24T04:43:41+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-24T04:43:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:56:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.src",
"product": {
"name": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.src",
"product_id": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_53_1@1-11.el8_10?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.src",
"product": {
"name": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.src",
"product_id": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_72_1@1-8.el8_10?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.src",
"product": {
"name": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.src",
"product_id": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_85_1@1-6.el8_10?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.src",
"product": {
"name": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.src",
"product_id": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_109_1@1-4.el8_10?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.src",
"product": {
"name": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.src",
"product_id": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_125_1@1-1.el8_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_53_1@1-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_53_1-debugsource@1-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_53_1-debuginfo@1-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_72_1@1-8.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_72_1-debugsource@1-8.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_72_1-debuginfo@1-8.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_85_1@1-6.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_85_1-debugsource@1-6.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_85_1-debuginfo@1-6.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_109_1@1-4.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_109_1-debugsource@1-4.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_109_1-debuginfo@1-4.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_125_1@1-1.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_125_1-debugsource@1-1.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.ppc64le",
"product": {
"name": "kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.ppc64le",
"product_id": "kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_125_1-debuginfo@1-1.el8_10?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_53_1@1-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_53_1-debugsource@1-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_53_1-debuginfo@1-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_72_1@1-8.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_72_1-debugsource@1-8.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_72_1-debuginfo@1-8.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_85_1@1-6.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_85_1-debugsource@1-6.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_85_1-debuginfo@1-6.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_109_1@1-4.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_109_1-debugsource@1-4.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_109_1-debuginfo@1-4.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_125_1@1-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_125_1-debugsource@1-1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.x86_64",
"product": {
"name": "kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.x86_64",
"product_id": "kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-4_18_0-553_125_1-debuginfo@1-1.el8_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.src"
},
"product_reference": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.src",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.src"
},
"product_reference": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.src",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.src"
},
"product_reference": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.src",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.src"
},
"product_reference": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.src",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.src"
},
"product_reference": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.src",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.ppc64le"
},
"product_reference": "kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.x86_64"
},
"product_reference": "kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T04:43:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28749"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-0:1-4.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debuginfo-0:1-4.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_109_1-debugsource-0:1-4.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-0:1-1.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debuginfo-0:1-1.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_125_1-debugsource-0:1-1.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-0:1-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debuginfo-0:1-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_53_1-debugsource-0:1-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-0:1-8.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debuginfo-0:1-8.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_72_1-debugsource-0:1-8.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-0:1-6.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debuginfo-0:1-6.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:kpatch-patch-4_18_0-553_85_1-debugsource-0:1-6.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
}
]
}
RHSA-2026:28750
Vulnerability from csaf_redhat - Published: 2026-06-24 04:29 - Updated: 2026-07-09 17:56Summary
Red Hat Security Advisory: kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update
Severity
Critical
Notes
Topic: An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-284.117.1.el9_2.
Security Fix(es):
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
8.8 (High)
Affected products
Fixed
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-284.117.1.el9_2.\n\nSecurity Fix(es):\n\n* kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() (CVE-2026-43037)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28750",
"url": "https://access.redhat.com/errata/RHSA-2026:28750"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28750.json"
}
],
"title": "Red Hat Security Advisory: kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update",
"tracking": {
"current_release_date": "2026-07-09T17:56:20+00:00",
"generator": {
"date": "2026-07-09T17:56:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:28750",
"initial_release_date": "2026-06-24T04:29:01+00:00",
"revision_history": [
{
"date": "2026-06-24T04:29:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-24T04:29:01+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:56:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:9.2::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.src",
"product": {
"name": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.src",
"product_id": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1@1-14.el9_2?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.src",
"product": {
"name": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.src",
"product_id": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1@1-8.el9_2?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.src",
"product": {
"name": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.src",
"product_id": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1@1-6.el9_2?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.src",
"product": {
"name": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.src",
"product_id": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1@1-4.el9_2?arch=src"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.src",
"product": {
"name": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.src",
"product_id": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_172_1@1-1.el9_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1@1-14.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1-debugsource@1-14.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1-debuginfo@1-14.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1@1-8.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1-debugsource@1-8.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1-debuginfo@1-8.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1@1-6.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1-debugsource@1-6.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1-debuginfo@1-6.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1@1-4.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1-debugsource@1-4.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1-debuginfo@1-4.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_172_1@1-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_172_1-debugsource@1-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.ppc64le",
"product": {
"name": "kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.ppc64le",
"product_id": "kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_172_1-debuginfo@1-1.el9_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1@1-14.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1-debugsource@1-14.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_117_1-debuginfo@1-14.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1@1-8.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1-debugsource@1-8.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_134_1-debuginfo@1-8.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1@1-6.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1-debugsource@1-6.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_148_1-debuginfo@1-6.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1@1-4.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1-debugsource@1-4.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1-debuginfo@1-4.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_172_1@1-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_172_1-debugsource@1-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.x86_64",
"product": {
"name": "kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.x86_64",
"product_id": "kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kpatch-patch-5_14_0-284_172_1-debuginfo@1-1.el9_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.src"
},
"product_reference": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.src",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.src"
},
"product_reference": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.src",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.src"
},
"product_reference": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.src",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.src"
},
"product_reference": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.src",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.src"
},
"product_reference": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.src",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.ppc64le"
},
"product_reference": "kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.x86_64"
},
"product_reference": "kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T04:29:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28750"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-0:1-14.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debuginfo-0:1-14.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_117_1-debugsource-0:1-14.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-0:1-8.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debuginfo-0:1-8.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_134_1-debugsource-0:1-8.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-0:1-6.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debuginfo-0:1-6.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_148_1-debugsource-0:1-6.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-4.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debuginfo-0:1-4.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-debugsource-0:1-4.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.src",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-0:1-1.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debuginfo-0:1-1.el9_2.x86_64",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.ppc64le",
"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_172_1-debugsource-0:1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
}
]
}
RHSA-2026:28887
Vulnerability from csaf_redhat - Published: 2026-07-01 11:17 - Updated: 2026-07-09 23:00Summary
Red Hat Security Advisory: OpenShift Container Platform 4.14.68 bug fix and security update
Severity
Critical
Notes
Topic: Red Hat OpenShift Container Platform release 4.14.68 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container
Platform 4.14.
Red Hat Product Security has rated this update as having a security impact
of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.14.68. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHSA-2026:28886
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/
Security Fix(es):
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
* libcap: libcap: Privilege escalation via TOCTOU race condition in
cap_set_file() (CVE-2026-4878)
* OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not
preserving file mode (CVE-2026-35385)
* sudo: Sudo: Privilege escalation due to failure in privilege drop calls
(CVE-2026-35535)
* jq: out-of-bounds read in jv_parse_sized() on error formatting for
non-NUL-terminated buffers (CVE-2026-39979)
* jq: jq: Denial of Service via crafted JSON object causing hash collisions
(CVE-2026-40164)
* rsync: Rsync: Use-after-free vulnerability in extended attribute handling
(CVE-2026-41035)
* kernel: Linux kernel: smb: client: reject userspace cifs.spnego
descriptions (CVE-2026-46243)
* kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the
ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the
Linux kernel (CVE-2026-46300)
* kernel: net/sched: act_pedit: extend the writable skb range per key
(CVE-2026-46331)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.14 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.
6.7 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in jq, a command line JSON processor, specifically in the libjq API. Parsing a malformed JSON input from a non-NUL-terminated buffer using the `jv_parse_sized` function can cause an out-of-bounds read, resulting in an application crash and a possible memory disclosure within the error message generated by the parser.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in jq, a command-line JSON processor. A remote attacker could exploit this vulnerability by providing a specially crafted JSON object. This object leverages a weakness in jq's hashing algorithm, which uses a hardcoded, publicly known seed. By crafting the JSON object to cause hash collisions, an attacker can degrade the performance of JSON object hash table operations, leading to significant CPU exhaustion and a denial of service (DoS) for systems processing the malicious JSON data.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in rsync. When rsync is configured to handle extended attributes (using the -X or --xattrs option), a remote attacker can exploit a use-after-free vulnerability. This occurs because the receive_xattr function incorrectly processes an untrusted length value during a sorting operation, leading to memory corruption. Successful exploitation can result in a denial of service, causing the rsync process to crash, and may potentially allow for arbitrary code execution.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Linux kernel's traffic control packet editing (pedit) subsystem. In tcf_pedit_act(), the copy-on-write (COW) range for skb_ensure_writable() is computed once before iterating over edit keys, but the calculation does not account for runtime header offsets added by typed keys. This can leave part of the target write region without a proper copy-on-write, leading to an out-of-bounds write that corrupts page cache memory. A local attacker with the ability to configure traffic control rules could exploit this to escalate privileges or crash the system.
6.7 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
References
75 references
Acknowledgments
Ali Raza
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.14.68 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\n This release includes a security update for Red Hat OpenShift Container\nPlatform 4.14.\n\nRed Hat Product Security has rated this update as having a security impact\nof Critical. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container\nPlatform 4.14.68. See the following advisory for the RPM packages for this\nrelease:\n\nhttps://access.redhat.com/errata/RHSA-2026:28886\n\nSpace precludes documenting all of the container images in this advisory.\nSee the following Release Notes documentation, which will be updated\nshortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nSecurity Fix(es):\n\n* kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() (CVE-2026-43037)\n* libcap: libcap: Privilege escalation via TOCTOU race condition in\ncap_set_file() (CVE-2026-4878)\n* OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not\npreserving file mode (CVE-2026-35385)\n* sudo: Sudo: Privilege escalation due to failure in privilege drop calls\n(CVE-2026-35535)\n* jq: out-of-bounds read in jv_parse_sized() on error formatting for\nnon-NUL-terminated buffers (CVE-2026-39979)\n* jq: jq: Denial of Service via crafted JSON object causing hash collisions\n(CVE-2026-40164)\n* rsync: Rsync: Use-after-free vulnerability in extended attribute handling\n(CVE-2026-41035)\n* kernel: Linux kernel: smb: client: reject userspace cifs.spnego\ndescriptions (CVE-2026-46243)\n* kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the\nESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the\nLinux kernel (CVE-2026-46300)\n* kernel: net/sched: act_pedit: extend the writable skb range per key\n(CVE-2026-46331)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28887",
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "2451615",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
},
{
"category": "external",
"summary": "2454469",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454469"
},
{
"category": "external",
"summary": "2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "external",
"summary": "2458077",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458077"
},
{
"category": "external",
"summary": "2458084",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458084"
},
{
"category": "external",
"summary": "2458898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458898"
},
{
"category": "external",
"summary": "2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "2477015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
},
{
"category": "external",
"summary": "2479492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479492"
},
{
"category": "external",
"summary": "2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28887.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.14.68 bug fix and security update",
"tracking": {
"current_release_date": "2026-07-09T23:00:48+00:00",
"generator": {
"date": "2026-07-09T23:00:48+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:28887",
"initial_release_date": "2026-07-01T11:17:18+00:00",
"revision_history": [
{
"date": "2026-07-01T11:17:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-01T11:17:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T23:00:48+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.14",
"product": {
"name": "Red Hat OpenShift Container Platform 4.14",
"product_id": "9Base-RHOSE-4.14",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.14::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-aarch64-414.92.202606231112-0",
"product": {
"name": "rhcos-aarch64-414.92.202606231112-0",
"product_id": "rhcos-aarch64-414.92.202606231112-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@414.92.202606231112?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-ppc64le-414.92.202606231112-0",
"product": {
"name": "rhcos-ppc64le-414.92.202606231112-0",
"product_id": "rhcos-ppc64le-414.92.202606231112-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@414.92.202606231112?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-s390x-414.92.202606231112-0",
"product": {
"name": "rhcos-s390x-414.92.202606231112-0",
"product_id": "rhcos-s390x-414.92.202606231112-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@414.92.202606231112?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-x86_64-414.92.202606231112-0",
"product": {
"name": "rhcos-x86_64-414.92.202606231112-0",
"product_id": "rhcos-x86_64-414.92.202606231112-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@414.92.202606231112?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-aarch64-414.92.202606231112-0 as a component of Red Hat OpenShift Container Platform 4.14",
"product_id": "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0"
},
"product_reference": "rhcos-aarch64-414.92.202606231112-0",
"relates_to_product_reference": "9Base-RHOSE-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-ppc64le-414.92.202606231112-0 as a component of Red Hat OpenShift Container Platform 4.14",
"product_id": "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0"
},
"product_reference": "rhcos-ppc64le-414.92.202606231112-0",
"relates_to_product_reference": "9Base-RHOSE-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-s390x-414.92.202606231112-0 as a component of Red Hat OpenShift Container Platform 4.14",
"product_id": "9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0"
},
"product_reference": "rhcos-s390x-414.92.202606231112-0",
"relates_to_product_reference": "9Base-RHOSE-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-x86_64-414.92.202606231112-0 as a component of Red Hat OpenShift Container Platform 4.14",
"product_id": "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
},
"product_reference": "rhcos-x86_64-414.92.202606231112-0",
"relates_to_product_reference": "9Base-RHOSE-4.14"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Ali Raza"
]
}
],
"cve": "CVE-2026-4878",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-03-26T06:56:21.213270+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451615"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. A Time-of-Check-to-Time-of-Use (TOCTOU) race condition in libcap\u0027s cap_set_file() allows a local unprivileged user to escalate privileges. An attacker with write access to a parent directory can exploit a narrow window during file capability updates to redirect capabilities to an attacker-controlled file. This can lead to the injection of elevated privileges into an unintended executable when privileged processes, such as setcap or container tooling, invoke cap_set_file() on attacker-influenced paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4878"
},
{
"category": "external",
"summary": "RHBZ#2451615",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4878",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4878"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
}
],
"release_date": "2026-04-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:17:18+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:e042266bfafccf3f8f6afe39da6b9b91738fa836ba5159fa485e7eede34aefe3\n\n (For s390x architecture)\n The image digest is sha256:8d95bf587d1e567ee1d8f0635da6dcc6f458d8de115bf7fff93719ea008d4f20\n\n (For ppc64le architecture)\n The image digest is sha256:e5f2c65060d18b90639543de234f78356cefa2d77a8d4dbbaa00675171e7a2cd\n\n (For aarch64 architecture)\n The image digest is sha256:027ef407502543950504fd28ac3e4258594b52444fd471610bcc3da9656e816e\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()"
},
{
"cve": "CVE-2026-35385",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-04-02T17:01:07.052864+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454469"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35385"
},
{
"category": "external",
"summary": "RHBZ#2454469",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454469"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35385"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35385",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35385"
},
{
"category": "external",
"summary": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2",
"url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.3p1",
"url": "https://www.openssh.org/releasenotes.html#10.3p1"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/04/02/3",
"url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
}
],
"release_date": "2026-04-02T16:30:59.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:17:18+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:e042266bfafccf3f8f6afe39da6b9b91738fa836ba5159fa485e7eede34aefe3\n\n (For s390x architecture)\n The image digest is sha256:8d95bf587d1e567ee1d8f0635da6dcc6f458d8de115bf7fff93719ea008d4f20\n\n (For ppc64le architecture)\n The image digest is sha256:e5f2c65060d18b90639543de234f78356cefa2d77a8d4dbbaa00675171e7a2cd\n\n (For aarch64 architecture)\n The image digest is sha256:027ef407502543950504fd28ac3e4258594b52444fd471610bcc3da9656e816e\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode"
},
{
"cve": "CVE-2026-35535",
"cwe": {
"id": "CWE-272",
"name": "Least Privilege Violation"
},
"discovery_date": "2026-04-03T03:01:03.124541+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454714"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35535"
},
{
"category": "external",
"summary": "RHBZ#2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
},
{
"category": "external",
"summary": "https://bugs.debian.org/1130593",
"url": "https://bugs.debian.org/1130593"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
"url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
"url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
},
{
"category": "external",
"summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
"url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
}
],
"release_date": "2026-04-03T02:21:33.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:17:18+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:e042266bfafccf3f8f6afe39da6b9b91738fa836ba5159fa485e7eede34aefe3\n\n (For s390x architecture)\n The image digest is sha256:8d95bf587d1e567ee1d8f0635da6dcc6f458d8de115bf7fff93719ea008d4f20\n\n (For ppc64le architecture)\n The image digest is sha256:e5f2c65060d18b90639543de234f78356cefa2d77a8d4dbbaa00675171e7a2cd\n\n (For aarch64 architecture)\n The image digest is sha256:027ef407502543950504fd28ac3e4258594b52444fd471610bcc3da9656e816e\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
},
{
"cve": "CVE-2026-39979",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-04-13T23:01:01.219840+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458077"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jq, a command line JSON processor, specifically in the libjq API. Parsing a malformed JSON input from a non-NUL-terminated buffer using the `jv_parse_sized` function can cause an out-of-bounds read, resulting in an application crash and a possible memory disclosure within the error message generated by the parser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to supply malformed JSON from a non-NUL-terminated buffer to an application using the `jv_parse_sized` function. This allows the attacker to trigger the out-of-bounds read, causing an application crash and potentially disclosing memory with no other security impact. As this issue affects the libjq library, it is more likely to be exposed to untrusted input. Due to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39979"
},
{
"category": "external",
"summary": "RHBZ#2458077",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458077"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39979",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39979"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39979",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39979"
},
{
"category": "external",
"summary": "https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f",
"url": "https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f"
},
{
"category": "external",
"summary": "https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p",
"url": "https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p"
}
],
"release_date": "2026-04-13T22:18:56.252000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:17:18+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:e042266bfafccf3f8f6afe39da6b9b91738fa836ba5159fa485e7eede34aefe3\n\n (For s390x architecture)\n The image digest is sha256:8d95bf587d1e567ee1d8f0635da6dcc6f458d8de115bf7fff93719ea008d4f20\n\n (For ppc64le architecture)\n The image digest is sha256:e5f2c65060d18b90639543de234f78356cefa2d77a8d4dbbaa00675171e7a2cd\n\n (For aarch64 architecture)\n The image digest is sha256:027ef407502543950504fd28ac3e4258594b52444fd471610bcc3da9656e816e\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"category": "workaround",
"details": "To mitigate this issue, manually ensure that every buffer is NUL-terminated before passing it to the \u0027jv_parse_sized\u0027 function.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers"
},
{
"cve": "CVE-2026-40164",
"cwe": {
"id": "CWE-341",
"name": "Predictable from Observable State"
},
"discovery_date": "2026-04-14T00:01:04.003115+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458084"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jq, a command-line JSON processor. A remote attacker could exploit this vulnerability by providing a specially crafted JSON object. This object leverages a weakness in jq\u0027s hashing algorithm, which uses a hardcoded, publicly known seed. By crafting the JSON object to cause hash collisions, an attacker can degrade the performance of JSON object hash table operations, leading to significant CPU exhaustion and a denial of service (DoS) for systems processing the malicious JSON data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jq: jq: Denial of Service via crafted JSON object causing hash collisions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40164"
},
{
"category": "external",
"summary": "RHBZ#2458084",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458084"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40164",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40164"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40164",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40164"
},
{
"category": "external",
"summary": "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784",
"url": "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784"
},
{
"category": "external",
"summary": "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29",
"url": "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29"
}
],
"release_date": "2026-04-13T23:40:12.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:17:18+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:e042266bfafccf3f8f6afe39da6b9b91738fa836ba5159fa485e7eede34aefe3\n\n (For s390x architecture)\n The image digest is sha256:8d95bf587d1e567ee1d8f0635da6dcc6f458d8de115bf7fff93719ea008d4f20\n\n (For ppc64le architecture)\n The image digest is sha256:e5f2c65060d18b90639543de234f78356cefa2d77a8d4dbbaa00675171e7a2cd\n\n (For aarch64 architecture)\n The image digest is sha256:027ef407502543950504fd28ac3e4258594b52444fd471610bcc3da9656e816e\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jq: jq: Denial of Service via crafted JSON object causing hash collisions"
},
{
"cve": "CVE-2026-41035",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-04-16T08:00:54.200357+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458898"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in rsync. When rsync is configured to handle extended attributes (using the -X or --xattrs option), a remote attacker can exploit a use-after-free vulnerability. This occurs because the receive_xattr function incorrectly processes an untrusted length value during a sorting operation, leading to memory corruption. Successful exploitation can result in a denial of service, causing the rsync process to crash, and may potentially allow for arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rsync: Rsync: Use-after-free vulnerability in extended attribute handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in rsync that allows a remote attacker to cause a denial of service or potentially execute arbitrary code. The vulnerability is present when rsync is used with extended attributes enabled via the `-X` or `--xattrs` option, which is not a default configuration. Exploitation requires the victim to explicitly enable this feature.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41035"
},
{
"category": "external",
"summary": "RHBZ#2458898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41035"
},
{
"category": "external",
"summary": "https://github.com/RsyncProject/rsync/issues/871",
"url": "https://github.com/RsyncProject/rsync/issues/871"
},
{
"category": "external",
"summary": "https://github.com/RsyncProject/rsync/releases",
"url": "https://github.com/RsyncProject/rsync/releases"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/04/16/2",
"url": "https://www.openwall.com/lists/oss-security/2026/04/16/2"
}
],
"release_date": "2026-04-16T06:53:05.237000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:17:18+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:e042266bfafccf3f8f6afe39da6b9b91738fa836ba5159fa485e7eede34aefe3\n\n (For s390x architecture)\n The image digest is sha256:8d95bf587d1e567ee1d8f0635da6dcc6f458d8de115bf7fff93719ea008d4f20\n\n (For ppc64le architecture)\n The image digest is sha256:e5f2c65060d18b90639543de234f78356cefa2d77a8d4dbbaa00675171e7a2cd\n\n (For aarch64 architecture)\n The image digest is sha256:027ef407502543950504fd28ac3e4258594b52444fd471610bcc3da9656e816e\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using the -X or --xattrs options with rsync if extended attribute handling is not essential for your operations. Disabling these options prevents the vulnerable code path from being exercised. This may impact functionality that relies on extended attributes.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rsync: Rsync: Use-after-free vulnerability in extended attribute handling"
},
{
"cve": "CVE-2026-43037",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-05-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464351"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel\u0027s IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash (denial of service) or potentially allow arbitrary code execution with kernel privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Critical flaw in the Linux kernel\u0027s IPv6 tunneling error handling can lead to a stack buffer overflow. An unauthenticated remote attacker could exploit this by sending specially crafted network packets, potentially resulting in a denial of service or information disclosure on affected Red Hat Enterprise Linux systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "RHBZ#2464351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43037"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T",
"url": "https://lore.kernel.org/linux-cve-announce/2026050102-CVE-2026-43037-0346@gregkh/T"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:17:18+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:e042266bfafccf3f8f6afe39da6b9b91738fa836ba5159fa485e7eede34aefe3\n\n (For s390x architecture)\n The image digest is sha256:8d95bf587d1e567ee1d8f0635da6dcc6f458d8de115bf7fff93719ea008d4f20\n\n (For ppc64le architecture)\n The image digest is sha256:e5f2c65060d18b90639543de234f78356cefa2d77a8d4dbbaa00675171e7a2cd\n\n (For aarch64 architecture)\n The image digest is sha256:027ef407502543950504fd28ac3e4258594b52444fd471610bcc3da9656e816e\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.\n~~~\nHow do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~\n\nWe may also want to detection and monitoring an affected system as below:\n~~~\nMonitor for exploitation attempts:\n\n# Enable kernel audit for IPv6 tunnel operations\nauditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel\n\n# Monitor system logs for kernel panics/crashes\njournalctl -k -p err -f | grep -i \"ip6_tunnel\\|icmp\\|stack\"\n~~~",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()"
},
{
"cve": "CVE-2026-46243",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-26T15:07:49.955000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481486"
}
],
"notes": [
{
"category": "description",
"text": "A privilege escalation vulnerability was found in the Linux kernel\u0027s CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important severity primarily because a low-privileged local user can achieve full privilege escalation to root without any user interaction. The attack requires local access, which prevents remote exploitation and is the primary factor keeping the rating at Important rather than Critical.\n\nExploitation requires three components to be present on the system: the `cifs` kernel module (loaded or loadable), the `cifs-utils` package with its default `cifs.spnego` request-key rule, and the ability to create unprivileged user and mount namespaces. All three must be present for the attack chain to succeed. Environments that do not use SMB/CIFS file shares or Active Directory integration are unlikely to have `cifs-utils` installed, reducing their exposure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "RHBZ#2481486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481486"
},
{
"category": "external",
"summary": "RHSB-2026-005",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3da1fdf4efbc490041eb4f836bf596201203f8f2"
},
{
"category": "external",
"summary": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/",
"url": "https://lore.kernel.org/linux-cve-announce/2026060140-CVE-2026-46243-3d1c@gregkh/"
}
],
"release_date": "2026-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:17:18+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:e042266bfafccf3f8f6afe39da6b9b91738fa836ba5159fa485e7eede34aefe3\n\n (For s390x architecture)\n The image digest is sha256:8d95bf587d1e567ee1d8f0635da6dcc6f458d8de115bf7fff93719ea008d4f20\n\n (For ppc64le architecture)\n The image digest is sha256:e5f2c65060d18b90639543de234f78356cefa2d77a8d4dbbaa00675171e7a2cd\n\n (For aarch64 architecture)\n The image digest is sha256:027ef407502543950504fd28ac3e4258594b52444fd471610bcc3da9656e816e\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions"
},
{
"cve": "CVE-2026-46300",
"cwe": {
"id": "CWE-123",
"name": "Write-what-where Condition"
},
"discovery_date": "2026-05-13T13:28:21.270000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477015"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46300"
},
{
"category": "external",
"summary": "RHBZ#2477015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
},
{
"category": "external",
"summary": "RHSB-2026-003",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300"
}
],
"release_date": "2026-05-13T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:17:18+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:e042266bfafccf3f8f6afe39da6b9b91738fa836ba5159fa485e7eede34aefe3\n\n (For s390x architecture)\n The image digest is sha256:8d95bf587d1e567ee1d8f0635da6dcc6f458d8de115bf7fff93719ea008d4f20\n\n (For ppc64le architecture)\n The image digest is sha256:e5f2c65060d18b90639543de234f78356cefa2d77a8d4dbbaa00675171e7a2cd\n\n (For aarch64 architecture)\n The image digest is sha256:027ef407502543950504fd28ac3e4258594b52444fd471610bcc3da9656e816e\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
},
{
"cve": "CVE-2026-46331",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-05-18T06:17:23.219000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2479492"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s traffic control packet editing (pedit) subsystem. In tcf_pedit_act(), the copy-on-write (COW) range for skb_ensure_writable() is computed once before iterating over edit keys, but the calculation does not account for runtime header offsets added by typed keys. This can leave part of the target write region without a proper copy-on-write, leading to an out-of-bounds write that corrupts page cache memory. A local attacker with the ability to configure traffic control rules could exploit this to escalate privileges or crash the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net/sched: act_pedit: extend the writable skb range per key",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this flaw as Important severity.\n\nThis vulnerability is in the kernel\u0027s traffic control (tc) pedit action, which requires CAP_NET_ADMIN capability to configure. By default in Red Hat Enterprise Linux, this limits exploitation to the root user or processes explicitly granted network administration capabilities. However, in some circumstances unprivileged users may obtain CAP_NET_ADMIN within user namespaces. Successful exploitation could lead to arbitrary code execution in kernel context or a system crash.\n\nRed Hat Enterprise Linux 7 and earlier are not affected. Within OpenShift Container Platform, the vulnerable module is not loaded by default, reducing the severity to Low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46331"
},
{
"category": "external",
"summary": "RHBZ#2479492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479492"
},
{
"category": "external",
"summary": "RHSB-2026-008",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46331",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46331"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46331",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46331"
},
{
"category": "external",
"summary": "https://lore.kernel.org/netdev/20260516162825.1480113-1-rollkingzzc@gmail.com/",
"url": "https://lore.kernel.org/netdev/20260516162825.1480113-1-rollkingzzc@gmail.com/"
}
],
"release_date": "2026-05-18T04:04:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T11:17:18+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:e042266bfafccf3f8f6afe39da6b9b91738fa836ba5159fa485e7eede34aefe3\n\n (For s390x architecture)\n The image digest is sha256:8d95bf587d1e567ee1d8f0635da6dcc6f458d8de115bf7fff93719ea008d4f20\n\n (For ppc64le architecture)\n The image digest is sha256:e5f2c65060d18b90639543de234f78356cefa2d77a8d4dbbaa00675171e7a2cd\n\n (For aarch64 architecture)\n The image digest is sha256:027ef407502543950504fd28ac3e4258594b52444fd471610bcc3da9656e816e\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-s390x-414.92.202606231112-0",
"9Base-RHOSE-4.14:rhcos-x86_64-414.92.202606231112-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: net/sched: act_pedit: extend the writable skb range per key"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…