Loading story…
Red Hat released RHSA-2024:2004 for standard Red Hat Enterprise Linux 7 kernels and RHSA-2024:2003 for RHEL for Real Time 7, addressing five vulnerabilities: CVE-2020-36558, CVE-2023-2002, CVE-2023-25775, CVE-2023-4622, and CVE-2023-4623. The flaws include use-after-free conditions in unix_stream_sendpage and sch_hfsc, unauthorized Bluetooth management-command execution, improper access control in irdma, and a race in the VT_RESIZEX ioctl handler that can trigger a NULL-pointer dereference and crash a system.
The standard RHEL 7 advisory provides kernel version 3.10.0-1160.118.1.el7; the Real Time advisory affects RHEL for Real Time, Real Time for NFV, and eligible x86_64 Extended Life Cycle Support deployments. Red Hat previously tracked the VT console issue as CVE-2020-36558, affecting kernels before 5.5.7, and had also issued RHEL 8 fixes through earlier kernel updates. Administrators should apply applicable prerequisite errata and updated kernel packages, then reboot systems for the mitigations to take effect.
See real exploitation activity before you spend the cycle.
8 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHBA-2024:2615 to update the rhscl/devtoolset-12-perftools-rhel7 container image for RHEL 7. The image update addresses the kernel security issues covered by RHSA-2024:2004, including CVE-2020-36558, and users were advised to rebuild dependent container images.
Red Hat issued Important-security advisory RHSA-2024:2004 for RHEL 7, providing kernel version 3.10.0-1160.118.1.el7 and fixing CVE-2020-36558 plus four additional vulnerabilities. The update covers supported RHEL 7 variants and requires a reboot for the new kernel to take effect.
Red Hat issued Important-security advisory RHSA-2024:2003 for RHEL 7 Real Time kernel packages, updating them to 3.10.0-1160.118.1.rt56.1269.el7 and fixing CVE-2020-36558 and four other vulnerabilities. The update applies to RHEL for Real Time, Real Time for NFV, and the x86_64 Extended Life Cycle Support offering.
Red Hat provided a fix for CVE-2020-36558 in the RHEL 8.6 Extended Update Support channel through RHSA-2023:5627.
Red Hat closed its tracking issue, Bug 2112693, for the VT_RESIZEX ioctl race condition identified as CVE-2020-36558.
Red Hat issued RHSA-2022:7444 for the RHEL 8 kernel-rt package, remediating CVE-2020-36558 in the RHEL 8 Real Time kernel channel.
Red Hat issued Moderate-security advisory RHSA-2022:7683 for RHEL 8, delivering kernel version 4.18.0-425.3.1.el8 and remediating CVE-2020-36558 along with numerous other kernel vulnerabilities.
Red Hat tracked Fedora as affected by CVE-2020-36558 under Bug 2274389.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
6 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceredhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Important kernel updates for **RHEL 7** and **RHEL for Real Time 7** that remediate nine vulnerabilities, including use-after-free, double-free, out-of-bounds-write, information-disclosure, and local privilege-escalation flaws. The fixes include **CVE-2021-3752**, a Bluetooth `lock_sock_nested()` use-after-free condition that a local user could potentially trigger to gain partial privilege escalation. Updated packages are `kernel-3.10.0-1160.59.1.el7` for RHEL 7 and `kernel-rt-3.10.0-1160.59.1.rt56.1200.el7` for the real-time variant, covering supported x86_64, IBM Z, IBM Power, and related RHEL 7 deployments. Administrators should install the updates published in **RHSA-2022:0620** and **RHSA-2022:0622** and reboot affected hosts, as the kernel fixes do not take effect until restart. Red Hat also updated the `3scale-amp2/system-rhel7` container image through **RHBA-2022:0679** to incorporate the RHEL 7 security fixes; 3scale API Management users should upgrade that image and rebuild dependent container images.
Aug 26, 2026
Red Hat released Linux kernel security updates for supported **RHEL 8 and RHEL 9** streams, addressing dozens of flaws across networking, virtualization, storage, graphics, Bluetooth, filesystems, and device drivers. The updates include **CVE-2024-36886**, a TIPC message-reassembly use-after-free issue that could permit remote code execution on affected RHEL 8.6 systems, as well as memory-corruption, information-disclosure, race-condition, denial-of-service, and NULL-pointer defects. RHEL 9.2 updates delivered kernel `5.14.0-284.75.1.el9_2`, while RHEL 8.8 and 8.6 updates provided `4.18.0-477.64.1.el8_8` and `4.18.0-372.111.1.el8_6`, respectively; Real Time kernel users received `5.14.0-284.75.1.rt14.360.el9_2`. The fixes cover, among other issues, **CVE-2024-35791**, a KVM SVM use-after-free in `svm_register_enc_region()`, **CVE-2024-36952**, a race condition in the SCSI `lpfc` driver's NPIV cleanup sequence, and **CVE-2024-27417**, an IPv6 reference leak in `inet6_rtm_getaddr()`. Red Hat shipped remediation through RHSA-2024:4823, RHSA-2024:4831, RHSA-2024:4740, RHSA-2024:4447, RHSA-2024:0113, and RHSA-2024:6567 for affected x86_64, ARM64, IBM Z, and Power offerings, including EUS, SAP, and extended-lifecycle channels. Organizations should apply the applicable kernel packages and **reboot systems** to activate the fixes.
Aug 26, 2026
Red Hat released Important-rated Linux kernel updates for RHEL 7 Extended Life Cycle Support, RHEL 8.2 Advanced Update Support, and RHEL 9.0 Update Services for SAP Solutions, including corresponding Real Time kernel packages. The advisories remediate multiple kernel memory-safety and scheduler defects, notably **CVE-2025-38250**, a use-after-free race in the Bluetooth Virtual HCI driver's `vhci_flush()` path, and **CVE-2025-38177**, an unsafe HFSC traffic-control queue notification flaw that could cause repeated state updates and unsafe RB-tree removal. The updates also address double-free, use-after-free, information-disclosure, NFS, ext4, ftrace, AMD TEE, QRTR, and network-scheduler issues, plus **CVE-2022-49991**, in which hugetlb atomic-copy handling could corrupt `page->mapping`. Updated packages include `kernel-3.10.0-1160.137.1.el7` for RHEL 7 ELS, `kernel-4.18.0-193.165.1.el8_2` for RHEL 8.2 AUS, `kernel-rt-3.10.0-1160.137.1.rt56.1289.el7` for RHEL 7 Real Time ELS, and `kernel-rt-5.14.0-70.144.1.rt21.216.el9_0` for RHEL 9 SAP systems; administrators must reboot after installation for the fixes to take effect.
Aug 26, 2026