Loading story…
Red Hat released Moderate-severity RHEL 8 kernel and kernel-rt updates addressing three Linux kernel vulnerabilities: CVE-2022-50543, an RDMA RXE mr->map double-free that can cause a KASAN-detected kernel panic; CVE-2023-53539, incomplete state saving in the RDMA RXE requester path; and CVE-2023-53401, a NULL-pointer dereference in obj_stock_flush_required() in the memory-management subsystem. The double-free occurs when rxe_mr_init_user() fails and cleanup frees mr->map more than once; the fix assigns responsibility for freeing the allocation solely to rxe_mr_cleanup().
RHSA-2025:22801 provides kernel version 4.18.0-553.89.1.el8_10 for applicable RHEL 8 systems on x86_64, s390x, ppc64le, and aarch64, including supported Extended Life Cycle and CodeReady Linux Builder repositories. RHSA-2025:22800 supplies kernel-rt-4.18.0-553.89.1.rt7.430.el8_10 for RHEL for Real Time 8, Real Time for NFV 8, and eligible RHEL 8.10 Extended Life Cycle deployments; administrators must reboot systems after applying the updates.
See real exploitation activity before you spend the cycle.
6 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued Moderate-severity advisory RHSA-2025:22801 for RHEL 8 kernel packages, fixing CVE-2022-50543 alongside CVE-2023-53401 and CVE-2023-53539. The update provides kernel-4.18.0-553.89.1.el8_10 for supported RHEL 8 architectures and requires a reboot.
Red Hat issued Moderate-severity advisory RHSA-2025:22800 for RHEL 8 kernel-rt packages, including a fix for CVE-2022-50543. The update supplies kernel-rt 4.18.0-553.89.1.rt7.430.el8_10 and requires a reboot.
The remediation made rxe_mr_cleanup() solely responsible for freeing mr->map after successful allocation, preventing the double free that could trigger a KASAN-detected kernel panic.
Commit 1e75550648da reverted “RDMA/rxe: Create duplicate mapping tables for FMRs” and also reverted the earlier double-free correction, reintroducing the issue.
Linux kernel commit 8ff5f5d9d8cf, “RDMA/rxe: Prevent double freeing rxe_map_set(),” corrected the RDMA RXE double-free issue.
Linux kernel commit b18c7da63fcb, “RDMA/rxe: Fix memory leak in error path code,” introduced the error-path condition in which failed user memory-region initialization could lead to a second free of mr->map.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released RHEL 8 kernel security updates through **RHSA-2022:1975** for Real Time Linux and **RHSA-2022:1988** for related RHEL 8 packages, remediating numerous kernel vulnerabilities affecting memory safety, privilege boundaries, networking, USB, eBPF, denial of service, information disclosure, and speculative execution. Notable fixes include `CVE-2021-3612`, an out-of-bounds write in joystick ioctl handling; `CVE-2021-3759`, which could bypass memory-cgroup accounting and crash a host; `CVE-2021-3743`, an out-of-bounds read in the QRTR protocol handler; and `CVE-2021-3773`, involving Netfilter behavior that could affect certain OpenVPN NAT deployments. Affected Real Time, NFV, Telecommunications Update Service, and Extended Life Cycle RHEL 8 x86_64 systems should update to `kernel-rt-4.18.0-372.9.1.rt7.166.el8` or a later applicable package and reboot. Red Hat also refreshed Quarkus 2.7, CodeReady Workspaces 2.0, and `rhpam-kogito-builder-rhel8` container images that incorporate the kernel fixes; organizations using those images should pull the updated versions, update Dockerfile or build-script references, and rebuild dependent images.
Aug 29, 2026
Red Hat released kernel security updates for multiple RHEL 8.2, 8.8, 9.2, and 10 lifecycle, SAP, telecommunications, and extended-support offerings. The advisories address vulnerabilities including USB DWC3 gadget event-buffer bounds handling (`CVE-2025-37810`), SunRPC TLS-alert processing (`CVE-2025-38566`), VKMS/DRM use-after-free and double-free conditions (`CVE-2025-22097`), UDP memory-accounting leaks (`CVE-2025-22058`), RDMA/IWCM use-after-free (`CVE-2025-38211`), POSIX CPU-timer races (`CVE-2025-38352`), and a `sch_qfq` scheduler race (`CVE-2025-38477`). Additional fixes cover ext4 attributes, IPv6 multicast, MD RAID10, TIPC, Intel i40e MMIO access, vsock TOCTOU handling, netfilter conntrack removal, SMB oplocks, and DRM/GEM framebuffer references. Affected organizations should deploy the applicable updated packages, including RHEL 9.2 kernel `5.14.0-284.137.1.el9_2`, RHEL 9.2 real-time kernel `5.14.0-284.140.1.rt14.425.el9_2`, and RHEL 8.2 AUS kernel `4.18.0-193.168.1.el8_2`. The updates apply across supported x86_64, ARM64, ppc64le, and s390x offerings where listed; systems must be rebooted after installation for the patched kernel to become active.
Aug 26, 2026
Red Hat released **RHSA-2023:6901**, an Important security update for the `kernel-rt` package in Red Hat Enterprise Linux 8. The update affects RHEL for Real Time 8, Real Time for NFV 8, and RHEL for x86_64 Extended Life Cycle 8.10, remediating a broad set of kernel memory-safety, race-condition, denial-of-service, information-disclosure, and speculative-execution weaknesses. Organizations should install the applicable updated kernel package and reboot affected hosts for the protections to take effect. Notable issues addressed across the associated RHEL errata include `CVE-2023-31436`, an out-of-bounds access in traffic-control QFQ that can enable local privilege escalation; `CVE-2023-1998`, which can defeat Spectre v2 speculation protections between SMT sibling threads; and Bluetooth L2CAP flaws `CVE-2022-3640` and `CVE-2022-42895`, involving use-after-free and kernel-pointer disclosure. Other fixes cover double-free, buffer-overflow, and device-driver vulnerabilities, including `CVE-2023-1079` in the ASUS HID driver and `CVE-2023-26545` in MPLS. Where patching cannot be immediate, Red Hat documents limited mitigations such as preventing the `usb_8dev` module or affected ASUS HID driver from loading; however, applying the relevant security errata remains the recommended remediation.
Aug 26, 2026