Loading story…
Red Hat released Important security updates for the Linux kernel across RHEL 8, RHEL 9, and RHEL 10, including kernel-rt for Real Time deployments, fixing vulnerabilities in core subsystems such as SMB/CIFS client code, iSCSI target handling, SMC, sched/psi, memfd, UDF, netfilter, POSIX CPU timers, and AMD GPU drivers. The advisories cover nine CVEs in RHEL 8, 26 CVEs in RHEL 9, and 24 CVEs in RHEL 10, with affected offerings spanning standard, Extended Life Cycle, Extended Update Support, SAP, NFV, and CodeReady Linux Builder channels across x86_64, s390x, ppc64le, and aarch64. Red Hat said systems should be rebooted after applying the updates and reiterated that kernel errata should be treated as security-relevant because of the kernel’s central role.
Among the patched flaws, Red Hat detailed CVE-2026-53143, a buffer overflow in the drm/amdkfd driver on GFX11 that could leak or corrupt adjacent GTT memory during CRIU checkpoint and restore operations because SDMA queues used compute-specific handlers with the wrong MQD size. The company also fixed CVE-2026-63952 in memfd, where writable mappings could persist even when SEAL_EXEC implicitly applied SEAL_WRITE, weakening the expected write-seal guarantees and undermining W^X protections. The RHEL 9 advisory also includes non-security fixes, including a regression in 5.14.0-687.5.1.el9_8 that broke Wi-Fi when FIPS was enabled.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
13 events from the most recent confirmed update back to the earliest known activity.
On 2026-08-20, a Red Hat Bugzilla entry described the resolution of CVE-2026-53356, a drm/i915/gem flaw in phys BO pread/pwrite handling where a non-zero offset could access the wrong parts of a buffer object due to incorrect pointer scaling. The entry states the fix was delivered in RHEL 9 and RHEL 10 through RHSA-2026:57252 and RHSA-2026:57251.
On 2026-08-20, a Red Hat Bugzilla entry described the resolution of CVE-2026-64382, an SMB client double-free in SMB2_open() replay handling caused by stale response bookkeeping across retry attempts. The entry states the fix was delivered in RHEL 9 and RHEL 10 through RHSA-2026:57252 and RHSA-2026:57251.
On 2026-08-20, a Red Hat Bugzilla entry described the resolution of CVE-2026-64386, an SMB client query_info() replay double-free caused by stale response bookkeeping across retry attempts. The entry states the fix was delivered in RHEL 9 and RHEL 10 through RHSA-2026:57252 and RHSA-2026:57251.
On 2026-08-20, a Red Hat Bugzilla entry described the resolution of CVE-2026-63952, a memfd sealing flaw that could leave writable mappings in place when SEAL_EXEC implicitly applied SEAL_WRITE. The entry states the fix was shipped in RHEL 9 and RHEL 10 via RHSA-2026:57252 and RHSA-2026:57251.
On 2026-08-20, a Red Hat Bugzilla entry described the resolution of CVE-2026-53143, a drm/amdkfd GFX11 SDMA queue checkpoint/restore buffer overflow that could leak or corrupt 1536 bytes of adjacent GTT memory. The entry states the fix was delivered in RHEL 9 and RHEL 10 through RHSA-2026:57252 and RHSA-2026:57251.
On 2026-08-20, Red Hat published Important advisory RHSA-2026:57251 for the RHEL 10 kernel. The update delivers security, bug-fix, and enhancement updates covering 24 CVEs across AMD GPU, SMB/CIFS, iSCSI, memfd, blk-mq, UDF, sched/psi, and POSIX CPU timer components.
On 2026-08-20, Red Hat published Important advisory RHSA-2026:57252 for the RHEL 9 kernel. The update addresses 26 CVEs affecting subsystems including netfilter, AMD GPU drivers, SMB client, iSCSI target, memfd, UDF, SMC, and POSIX CPU timers, and also includes several non-security bug fixes.
On 2026-08-20, Red Hat published Important advisory RHSA-2026:57254 for the kernel-rt package in RHEL 8. The update fixes nine kernel vulnerabilities and includes an additional fix for sfc TX queue stalls and NIC resets, with a reboot required after applying the package.
On 2026-08-20, Red Hat published Important advisory RHSA-2026:57253 for the RHEL 8 Linux kernel. The update provides fixes for nine CVEs across ieee802154, ip6_gre, sched/psi, huge memory, iSCSI, SMC, and SMB client code, and requires a reboot after installation.
On 2026-08-17, Red Hat published Important advisory RHSA-2026:55765 for the kernel-rt package in RHEL 8. The update addresses ten kernel vulnerabilities across components including mm/slub, drm/amdkfd, drm/amdgpu, drm/amd/display, drm/i915, crypto:ccp, and can:bcm, and requires a reboot after installation.
On 2026-08-17, Red Hat published Important advisory RHSA-2026:55764 for the RHEL 8 Linux kernel. The update addresses ten CVEs across components including mm/slub, drm/amdkfd, drm/amdgpu, drm/amd/display, drm/i915, crypto ccp, and can:bcm, and requires a reboot after installation.
On 2026-08-17, a Red Hat Bugzilla entry described the resolution of CVE-2026-53374, an amdgpu GART table initialization flaw that could let the GPU use stale garbage page table entries due to uninitialized PTEs being speculatively loaded. The entry states the fix was addressed in RHEL 8, 9, and 10 through RHSA-2026:55765, RHSA-2026:55764, RHSA-2026:57252, and RHSA-2026:57251.
On 2026-08-17, a Red Hat Bugzilla entry described the resolution of CVE-2026-63879, a drm/amdgpu flaw in amdgpu_hmm_range_get_pages where reading the notifier sequence more than once could cause the code to operate on invalid pages. The entry states the fix was addressed in RHEL 8, 9, and 10 through RHSA-2026:55765, RHSA-2026:55764, RHSA-2026:57252, and RHSA-2026:57251.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
14 references tracked. Mallory keeps watching after this page renders.
bugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released **Important** security updates for OpenSSL across multiple **RHEL 9** and **RHEL 10** channels to address two high-impact vulnerabilities, **`CVE-2025-15467`** and **`CVE-2025-69419`**. The first flaw affects parsing of CMS `AuthEnvelopedData` with AEAD ciphers, where an oversized initialization vector can overflow a fixed-size stack buffer before authentication or tag verification, creating a path to denial of service and possible remote code execution. The second flaw is a memory corruption bug in PKCS#12 processing, where `BMPString` to UTF-8 conversion can trigger an out-of-bounds heap write when an application parses an attacker-controlled PKCS#12 file, potentially causing a crash or arbitrary code execution. Upstream fixes were issued in OpenSSL **3.0.19**, **3.3.6**, **3.4.4**, **3.5.5**, **3.6.1**, and **1.1.1ze** for the affected branches, while OpenSSL **1.0.2** is not affected and the OpenSSL FIPS modules are outside the vulnerable code paths. Red Hat advisories including **RHSA-2026:1496**, **RHSA-2026:1503**, **RHSA-2026:1519**, **RHSA-2026:1594**, and **RHSA-2026:1733** cover impacted products such as RHEL 9.0, 9.2, 9.4, 9.6, and 10.0 variants, along with related SAP, AUS, EUS, OpenShift, and JBoss Core Services offerings, with updated package builds released for major architectures including `x86_64`, `aarch64`, `ppc64le`, and `s390x`.
Aug 20, 2026
Red Hat issued security advisories covering **Linux kernel vulnerabilities** that affect multiple products, including **Red Hat Enterprise Linux (RHEL)**, **RHEL Server**, **RHEL for Real Time**, and **Red Hat CodeReady Linux Builder** across several versions and platforms. A related notice from the Canadian Centre for Cyber Security summarized advisories published during the reporting period and directed administrators to review Red Hat's official guidance. The available notices do not provide specific `CVE` identifiers, exploitation details, or attribution, but they emphasize that affected organizations should identify impacted systems and apply the relevant Red Hat updates. The advisories are presented as routine but important remediation guidance for enterprises running Red Hat-based environments where kernel-level flaws could affect system security and stability.
Jul 20, 2026
Red Hat released **Important** security updates for Go across **RHEL 8, RHEL 9, and RHEL 10**, updating packages to **Go `1.26.5+1`** and addressing multiple vulnerabilities in the toolchain and bundled libraries. The advisories cover **CVE-2026-39821**, a privilege-escalation flaw in `golang.org/x/net/idna` caused by incorrect Punycode label handling that can bypass ASCII-only authorization checks, and **CVE-2026-39822`,** a Unix `os.Root` symlink-following bug that can enable directory traversal outside an intended root. Red Hat said the fixes apply across standard, extended support, and lifecycle variants on **x86_64, s390x, ppc64le, and aarch64** systems. The updates also include additional Go-related fixes depending on platform, including **CVE-2026-42505** in `crypto/tls`, which can leak pre-shared key identities during **Encrypted Client Hello (ECH)** handshakes and allow passive observers to correlate connections, and **CVE-2026-27145** on RHEL 8, described as a denial-of-service issue in `crypto/x509`. Red Hat rated **CVE-2026-39821** at **CVSS 8.2** and **CVE-2026-39822** at **CVSS 7.8**, and said there is no mitigation for the `os.Root` flaw other than updating to fixed Go releases such as **`1.25.12`** or **`1.26.5`**.
Aug 20, 2026