Loading story…
Red Hat issued Important-rated kernel security updates for multiple Red Hat Enterprise Linux (RHEL) 7 and RHEL 8 support channels. RHSA-2024:1249 updates RHEL 7 to kernel 3.10.0-1160.114.2.el7, addressing six vulnerabilities including use-after-free flaws in Bluetooth L2CAP, sch_qfq, and nf_tables; an Intel IGB driver buffer flaw; the fbcon console issue tracked as CVE-2023-38409; and a sched/membarrier flaw. CVE-2023-38409 could leave framebuffer-console mappings pointing to obsolete fb_info objects; upstream fixed it in kernel 6.2.12.
Additional advisories deliver fixes to specialized RHEL channels: RHSA-2024:0980 updates RHEL 7.6 AUS for Bluetooth, scheduler, and IGB flaws; RHSA-2024:3319 updates RHEL 7.7 AUS for CVE-2024-1086 in nf_tables and Intel Gather Data Sampling (CVE-2022-40982); and RHSA-2024:1278 provides a live kpatch-patch update for RHEL 8.2 SAP Solutions covering nine kernel vulnerabilities across networking, NVMe, kTLS, and IGB components. Administrators should apply the applicable packages and reboot systems where required; live-patch deployments should follow Red Hat’s kpatch update procedure.
See real exploitation activity before you spend the cycle.
8 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued Important-rated RHSA-2024:3319 for RHEL Server AUS 7.7 on x86_64, supplying kernel version 3.10.0-1062.88.1.el7. The update fixed the nf_tables use-after-free CVE-2024-1086 and Intel Gather Data Sampling vulnerability CVE-2022-40982; installation required a reboot.
Red Hat issued Important-rated RHSA-2024:1368 for RHEL 8.8 supported update channels on x86_64 and ppc64le. The kpatch-patch update remediated CVE-2023-4921 in the sch_qfq scheduler and CVE-2024-0646 in kTLS, supplying patches for kernel builds 4.18.0-477.27.1, 4.18.0-477.36.1, and 4.18.0-477.43.1.
Red Hat issued Important-rated RHSA-2024:1249 for RHEL 7, providing kernel-3.10.0-1160.114.2.el7 for supported architectures and product variants. The update remediated CVE-2023-38409 along with five other kernel vulnerabilities, and required affected systems to reboot.
Red Hat issued Important-rated RHSA-2024:1278 for the RHEL 8.2 SAP Solutions kpatch-patch module on x86_64 and ppc64le. The live-patch update addressed nine kernel vulnerabilities affecting kTLS, networking schedulers, nftables, NVMe, and the Intel IGB driver.
Red Hat issued RHSA-2024:0980 for RHEL 7.6 Advanced Update Support on x86_64, updating the kernel to 3.10.0-957.111.1.el7. The update remediated CVE-2022-42896, CVE-2023-4921, and CVE-2023-45871 and required a reboot.
Red Hat issued Important-rated RHSA-2024:0876 for RHEL 8 kpatch-patch modules on x86_64 and ppc64le, including specified RHEL 8.10 Extended Life Cycle offerings. The live-patch update remediated CVE-2023-4623, CVE-2023-4921, CVE-2023-45871, and CVE-2024-0646.
Red Hat issued Important-rated RHSA-2024:0851 for RHEL 8.6 support channels, providing kpatch-patch live kernel modules for x86_64 and ppc64le. The update remediated CVE-2023-4921 and CVE-2024-0646, including a kTLS flaw that can overwrite read-only memory pages during splice operations.
The upstream Linux kernel corrected an fbcon flaw in set_con2fb_map that could desynchronize fbcon arrays and leave con2fb_map referencing an obsolete fb_info structure. The fix was made in commit fffb0b52d5258554c645c966c6cbef7de50b851d.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
8 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Important-rated kernel and `kernel-rt` updates for affected Red Hat Enterprise Linux (RHEL) 8 and 9 deployments, remediating vulnerabilities including **CVE-2023-0386**, a FUSE flaw that allows a low-privileged local user to escalate privileges, and **CVE-2023-0179**, a Netfilter/nftables integer overflow that can disclose memory addresses and potentially enable root-level code execution. The advisories also address use-after-free defects in Bluetooth L2CAP (**CVE-2022-3564**), ALSA PCM handling (**CVE-2023-0266**), and NFSv4.2 server-side copy handling (**CVE-2022-4379**), the latter of which can permit remote denial of service, as well as procfs stack-overflow and TC mirred CPU soft-lockup flaws. The updates span standard kernels, Real Time kernels, and support-channel variants including EUS, AUS, TUS, SAP, NFV, and telecommunications offerings across x86_64, aarch64, s390x, ppc64le, and selected IBM Power systems. Administrators should deploy the applicable updated kernel packages and reboot systems to activate conventional kernel fixes; RHEL 8 customers covered by RHSA-2023:1659 can instead install the updated `kpatch-patch` module, which loads automatically to live-patch four vulnerabilities without a normal reboot.
Aug 26, 2026
Red Hat released Important-rated Linux kernel updates for RHEL 7 Extended Life Cycle Support, RHEL 8.2 Advanced Update Support, and RHEL 9.0 Update Services for SAP Solutions, including corresponding Real Time kernel packages. The advisories remediate multiple kernel memory-safety and scheduler defects, notably **CVE-2025-38250**, a use-after-free race in the Bluetooth Virtual HCI driver's `vhci_flush()` path, and **CVE-2025-38177**, an unsafe HFSC traffic-control queue notification flaw that could cause repeated state updates and unsafe RB-tree removal. The updates also address double-free, use-after-free, information-disclosure, NFS, ext4, ftrace, AMD TEE, QRTR, and network-scheduler issues, plus **CVE-2022-49991**, in which hugetlb atomic-copy handling could corrupt `page->mapping`. Updated packages include `kernel-3.10.0-1160.137.1.el7` for RHEL 7 ELS, `kernel-4.18.0-193.165.1.el8_2` for RHEL 8.2 AUS, `kernel-rt-3.10.0-1160.137.1.rt56.1289.el7` for RHEL 7 Real Time ELS, and `kernel-rt-5.14.0-70.144.1.rt21.216.el9_0` for RHEL 9 SAP systems; administrators must reboot after installation for the fixes to take effect.
Aug 26, 2026
Red Hat released updated Linux kernel packages for Red Hat Enterprise Linux 8.6 extended-support channels and RHEL 8.8 supported update channels, remediating **CVE-2022-3640**, a Bluetooth L2CAP use-after-free flaw in `l2cap_conn_del`. The vulnerability can allow compromise of confidentiality, integrity, and availability from an adjacent network under specific conditions; Red Hat rates it Moderate (CVSS 7.1), while NVD rates it 8.8. RHEL 7, 8, 9, and Red Hat Virtualization 4 product streams received fixes, while RHEL 6 is not affected. RHSA-2024:1877 covers RHEL 8.6 EUS and associated ELL, AUS, TUS, SAP, virtualization-host, and CodeReady Linux Builder channels, while RHSA-2024:2621 supplies kernel `4.18.0-477.55.1.el8_8` for RHEL 8.8 on x86_64, s390x, ppc64le, and aarch64. The advisories also address other kernel defects, including AMD CPU, ext4, x86 emulation, veth/GRO, GSM multiplexing, virtual-machine-monitor, and information-disclosure issues. Red Hat reports no generally deployable mitigation for the affected Bluetooth flaw; organizations should install the applicable errata and reboot systems to load the updated kernel.
Aug 26, 2026