Red Hat Ships Broad Linux Kernel Security Updates Across RHEL 7, 8, 9, and 10

Red Hat released a series of kernel and kernel-rt security advisories affecting RHEL 7 ELS, RHEL 8, RHEL 9, and RHEL 10 product streams, including AUS, EUS, SAP Solutions, Telecommunications, Extended Life Cycle, and Extended Update Support channels. The updates fix clusters of vulnerabilities across networking, storage, memory management, and filesystem components, with repeated remediation for flaws such as CVE-2026-23270 in traffic control act_ct, CVE-2026-31419 in the bonding driver, CVE-2026-43163 in md/bitmap, and multiple libceph, netfilter, RDMA, SMB, IPv6, SCTP, ALSA, and BPF issues. Red Hat rated several advisories Important and some Critical, citing impacts that include denial of service, memory corruption, out-of-bounds reads, use-after-free conditions, and possible local privilege escalation.

The advisories span updated kernel builds including 3.10.0-1160.151.1.el7, 4.18.0-305.197.1.el8_4, 4.18.0-477.150.1.el8_8, 4.18.0-553.132.1.el8_10, 5.14.0-284.176.1.el9_2, 5.14.0-427.127.1.el9_4, 5.14.0-570.119.1.el9_6, and 6.12.0-55.82.1.el10_0, and Red Hat said affected systems must be rebooted after patching. One separately documented flaw, CVE-2025-71116, was traced to libceph decode_pool() parsing of malformed osdmap data, allowing an authenticated remote Ceph OSD or monitor to crash a client kernel; Red Hat said the issue was fixed with explicit bounds checks and advised preventing the libceph module from loading where Ceph is not used.