Red Hat Ships Broad Linux Kernel Fixes for CAN, RDMA, and qla2xxx Flaws

Red Hat released multiple kernel security advisories across RHEL 8, 9, and 10 product streams to remediate a set of Linux kernel vulnerabilities affecting core subsystems including CAN raw sockets, RDMA/umad, and the qla2xxx SCSI driver. The updates span standard, real-time, Extended Update Support, Extended Life Cycle, SAP, Telecommunications, and mission-critical channels, with advisories including RHSA-2026:13932, RHSA-2026:18134, RHSA-2026:19521, RHSA-2026:19875, RHSA-2026:20130, and RHSA-2026:27353. Red Hat rated several of the releases Important and said affected systems must be rebooted after installation for the fixes to take effect.

Among the patched issues, CVE-2026-31532 fixes a use-after-free in net/can/raw.c where raw_rcv() could access freed ro->uniq memory during deferred receiver deletion, while CVE-2026-23243 addresses an RDMA umad flaw in ib_umad_write() that could turn a negative data_len into memory corruption through an out-of-bounds memset. Red Hat advisories also include CVE-2025-71238, a double-free bug in qla2xxx BSG request handling that can crash the kernel and may enable privilege escalation, alongside other kernel flaws such as local privilege escalation, denial of service, and unauthorized file reads. Upstream Linux kernel guidance for the CAN issue points administrators to updated stable kernel releases rather than cherry-picking individual commits.