Loading story…
Red Hat released Important RHEL 8 kernel and real-time kernel updates to remediate CVE-2026-46117 and CVE-2026-53071. The updates include kernel version 4.18.0-553.146.1.el8_10 and real-time kernel version 4.18.0-553.146.1.rt7.487.el8_10, covering supported RHEL 8, RHEL 8.10 Extended Life Cycle, Real Time 8, and Real Time for NFV 8 deployments across applicable architectures.
CVE-2026-46117 affects the RDMA/MANA mana_ib_create_qp_rss() path, where user-supplied work queues sharing a completion queue could trigger WARN_ON() and lead to kernel corruption; the fix rejects the invalid configuration. CVE-2026-53071 fixes a missing lock in Bluetooth L2CAP enhanced credit-based reconfiguration handling that could let a remote BLE device corrupt the channel list through a crafted response. Organizations should install the applicable RHSA updates and reboot affected systems to activate the patched kernels.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued Important-rated RHSA-2026:42552 for standard RHEL 8 kernel packages across supported architectures. The update fixes the RDMA/MANA WARN_ON issue tracked as CVE-2026-46117 and the Bluetooth L2CAP locking flaw tracked as CVE-2026-53071.
Red Hat issued Important-rated RHSA-2026:42550 for RHEL 8 kernel-rt packages, including Real Time and Real Time for NFV offerings. The update fixes CVE-2026-46117 and CVE-2026-53071 and addresses the vmd_pci_write lock-order deadlock tracked as RHEL-174916.
Red Hat issued Important-rated advisory RHSA-2026:30129 for Red Hat Enterprise Linux 10 kernel packages. The update remediates eight vulnerabilities, including CVE-2026-46117, and fixes unexpected execmem SELinux denials following the CVE-2026-46054 fix.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
5 references tracked. Mallory keeps watching after this page renders.
bugzilla.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released **RHSA-2023:6901**, an Important security update for the `kernel-rt` package in Red Hat Enterprise Linux 8. The update affects RHEL for Real Time 8, Real Time for NFV 8, and RHEL for x86_64 Extended Life Cycle 8.10, remediating a broad set of kernel memory-safety, race-condition, denial-of-service, information-disclosure, and speculative-execution weaknesses. Organizations should install the applicable updated kernel package and reboot affected hosts for the protections to take effect. Notable issues addressed across the associated RHEL errata include `CVE-2023-31436`, an out-of-bounds access in traffic-control QFQ that can enable local privilege escalation; `CVE-2023-1998`, which can defeat Spectre v2 speculation protections between SMT sibling threads; and Bluetooth L2CAP flaws `CVE-2022-3640` and `CVE-2022-42895`, involving use-after-free and kernel-pointer disclosure. Other fixes cover double-free, buffer-overflow, and device-driver vulnerabilities, including `CVE-2023-1079` in the ASUS HID driver and `CVE-2023-26545` in MPLS. Where patching cannot be immediate, Red Hat documents limited mitigations such as preventing the `usb_8dev` module or affected ASUS HID driver from loading; however, applying the relevant security errata remains the recommended remediation.
Aug 26, 2026
Red Hat released Important kernel and real-time kernel updates for selected **RHEL 8.2 Telecommunications Update Service** channels to remediate **CVE-2022-42896**, a Bluetooth L2CAP use-after-free vulnerability. An unauthenticated attacker within Bluetooth range could exploit the flaw during L2CAP connection handling to disclose kernel memory or execute arbitrary code; Red Hat rates it **CVSS 8.1**. Systems not requiring Bluetooth can reduce exposure by disabling Bluetooth, blocking its kernel modules, or disabling the hardware. The updates also address **CVE-2023-4128**, use-after-free flaws in the `cls_fw`, `cls_u32`, and `cls_route` network traffic classifiers, alongside a filelayout double-free defect and Hyper-V virtual-machine stability issues. Affected standard RHEL 8.2 update-service deployments should install kernel version `4.18.0-193.116.1.el8_2` under RHSA-2023:5589; RHEL for Real Time and Real Time for NFV Telecommunications Update Service deployments should install `4.18.0-193.116.1.rt13.167.el8_2` under RHSA-2023:5588, then reboot.
Aug 26, 2026
Red Hat released updated Linux kernel packages for Red Hat Enterprise Linux 8.6 extended-support channels and RHEL 8.8 supported update channels, remediating **CVE-2022-3640**, a Bluetooth L2CAP use-after-free flaw in `l2cap_conn_del`. The vulnerability can allow compromise of confidentiality, integrity, and availability from an adjacent network under specific conditions; Red Hat rates it Moderate (CVSS 7.1), while NVD rates it 8.8. RHEL 7, 8, 9, and Red Hat Virtualization 4 product streams received fixes, while RHEL 6 is not affected. RHSA-2024:1877 covers RHEL 8.6 EUS and associated ELL, AUS, TUS, SAP, virtualization-host, and CodeReady Linux Builder channels, while RHSA-2024:2621 supplies kernel `4.18.0-477.55.1.el8_8` for RHEL 8.8 on x86_64, s390x, ppc64le, and aarch64. The advisories also address other kernel defects, including AMD CPU, ext4, x86 emulation, veth/GRO, GSM multiplexing, virtual-machine-monitor, and information-disclosure issues. Red Hat reports no generally deployable mitigation for the affected Bluetooth flaw; organizations should install the applicable errata and reboot systems to load the updated kernel.
Aug 26, 2026