Loading story…
Red Hat released Important-rated kernel security updates for supported Red Hat Enterprise Linux 8.4 and 8.8 extended-support offerings, remediating memory-safety flaws including CVE-2022-50066 in the Aquantia Atlantic network driver and CVE-2022-49846 in the UDF filesystem. CVE-2022-50066 could access the aq_vec array out of bounds during Atlantic driver suspend handling because of unsafe loop logic; UBSAN observed access to index 8 in an eight-element array. CVE-2022-49846 is a slab out-of-bounds write in the UDF filesystem's udf_find_entry() function.
RHSA-2025:10828 supplies kernel 4.18.0-305.162.1.el8_4 for RHEL 8.4 Advanced Update Support and Extended Life Cycle Long Life systems, also fixing CVE-2022-49395 in UML LDT setup and CVE-2022-49328 in the mt76 wireless driver. RHSA-2025:10834 supplies kernel 4.18.0-477.101.1.el8_8 for RHEL 8.8 Extended Life Cycle Long Life, Telecommunications Update Service, and SAP update-service deployments on x86_64 and ppc64le. Red Hat requires affected systems to reboot after installation for the corrected kernels to take effect.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued Important-rated advisory RHSA-2025:10834 for supported RHEL 8.8 offerings, including Extended Life Cycle Long Life, Telecommunications Update Service, and SAP Solutions. Kernel build 4.18.0-477.101.1.el8_8 fixes the UDF filesystem flaw CVE-2022-49846 and Atlantic driver flaw CVE-2022-50066; rebooting is required for the fixes to take effect.
Red Hat issued Important-rated advisory RHSA-2025:10828 for RHEL 8.4 AUS and Extended Life Cycle Long Life systems. Kernel build 4.18.0-305.162.1.el8_4 remediates CVE-2022-49395, CVE-2022-49328, CVE-2022-49846, and CVE-2022-50066; affected systems require a reboot after installation.
Red Hat issued Important-rated advisory RHSA-2025:10761 for RHEL 8.2 Advanced Update Support on x86_64. Kernel build 4.18.0-193.159.1.el8_2 remediates CVE-2022-49846 in the UDF filesystem and CVE-2022-50066 in the Atlantic driver; affected systems must be rebooted after installation.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
5 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Moderate-severity kernel security updates for supported Red Hat Enterprise Linux 8 and 9 update-service, extended-support, SAP, and specialized deployment channels. The updates remediate memory-safety and reliability flaws across ext4, Intel `iwlwifi`, MD RAID, CIFS, ATM, media, RDMA, networking, memory management, and net-scheduling code, including use-after-free, double-free, out-of-bounds read, overflow, and uninitialized-access conditions. Affected ext4 issues include unsafe processing of extended attributes beyond valid boundaries (`CVE-2025-37738` and `CVE-2025-22121`) and a journal-destruction race that can cause a kernel failure during unmount (`CVE-2025-22113`). Other fixes limit an unterminated firmware-provided string in the `iwlwifi` driver (`CVE-2025-21905`), prevent invalid transparent-huge-page migration-entry dereferencing (`CVE-2025-37958`), validate Clause 45 MDIO PHY addresses (`CVE-2025-38110`), and correct an MD RAID5 use-after-free (`CVE-2022-50022`). Administrators should install the kernel build designated for their exact RHEL release and entitlement channel—examples include `4.18.0-305.165.1.el8_4`, `4.18.0-372.155.1.el8_6`, and `5.14.0-70.140.1.el9_0`—then reboot affected systems to activate the fixes. Red Hat's advisory for the RHEL 8.2 AUS update did not report known exploitation in the wild.
Aug 26, 2026
Red Hat released RHEL 8 kernel security updates through **RHSA-2022:1975** for Real Time Linux and **RHSA-2022:1988** for related RHEL 8 packages, remediating numerous kernel vulnerabilities affecting memory safety, privilege boundaries, networking, USB, eBPF, denial of service, information disclosure, and speculative execution. Notable fixes include `CVE-2021-3612`, an out-of-bounds write in joystick ioctl handling; `CVE-2021-3759`, which could bypass memory-cgroup accounting and crash a host; `CVE-2021-3743`, an out-of-bounds read in the QRTR protocol handler; and `CVE-2021-3773`, involving Netfilter behavior that could affect certain OpenVPN NAT deployments. Affected Real Time, NFV, Telecommunications Update Service, and Extended Life Cycle RHEL 8 x86_64 systems should update to `kernel-rt-4.18.0-372.9.1.rt7.166.el8` or a later applicable package and reboot. Red Hat also refreshed Quarkus 2.7, CodeReady Workspaces 2.0, and `rhpam-kogito-builder-rhel8` container images that incorporate the kernel fixes; organizations using those images should pull the updated versions, update Dockerfile or build-script references, and rebuild dependent images.
Aug 29, 2026
Red Hat released Important kernel security updates for RHEL 8.4 extended-support channels and RHEL 9.0 Extended Update Support to remediate **CVE-2022-4139** and **CVE-2022-2964**. CVE-2022-4139 affects Intel Gen12 i915 GPUs: an incorrect GPU TLB flush can leave stale mappings that enable random memory access, potentially resulting in data exposure or memory corruption. CVE-2022-2964 is a memory-corruption vulnerability in handling AX88179_178A USB Ethernet devices. Affected organizations should install kernel `4.18.0-305.76.1.el8_4` on applicable RHEL 8.4 deployments and `5.14.0-70.43.1.el9_0` on applicable RHEL 9.0 EUS systems, then reboot to activate the fixes. Red Hat also delivered the fixes through its RHEL 9 live-kernel-patching package, alongside remediation for a watch-queue privilege-escalation race condition and an `nfsd` TCP/RPC buffer-overflow flaw; the live patch is available for x86_64 and little-endian Power RHEL 9 systems.
Aug 26, 2026