Loading story…
Red Hat released Moderate-severity kernel and Real Time kernel updates for supported RHEL 8.4 Extended Update Support and specialized telecommunications/NFV channels to remediate CVE-2022-0494 and CVE-2022-1353. The standard kernel update, version 4.18.0-305.62.1.el8_4, covers x86_64, s390x, ppc64le, and aarch64 systems; the Real Time update is 4.18.0-305.62.1.rt7.134.el8_4.
CVE-2022-0494 affects SCSI ioctl handling: a SCSI_IOCTL_SEND_COMMAND request can map a buffer that is not zero-initialized, allowing uninitialized kernel memory to be copied to a user-supplied buffer when a disk driver does not populate it. CVE-2022-1353 affects pfkey_register and can also disclose kernel information. Administrators should install the applicable packages and reboot affected systems for the mitigations to take effect.
See real exploitation activity before you spend the cycle.
11 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2022:7110 for RHEL 8 and Red Hat Virtualization 4 kernel packages, and RHSA-2022:7134 for RHEL 8 kernel-rt packages, remediating the CVE-2022-0494 SCSI ioctl information-disclosure flaw.
Red Hat issued RHSA-2022:6460 for RHEL 8 and Red Hat Virtualization 4 kernel packages, addressing CVE-2022-48943. The moderate KVM x86 MMU race condition could cause a guest task to block indefinitely, affecting availability.
Red Hat issued RHSA-2022:6248, a Moderate-security update for the RHEL 8.4 Real Time Linux Kernel in Extended Update Support offerings. Kernel-rt version 4.18.0-305.62.1.rt7.134.el8_4 fixed the CVE-2022-0494 scsi_ioctl() and CVE-2022-1353 pfkey_register information-disclosure flaws.
Red Hat issued RHSA-2022:6243, a Moderate-severity kernel security and bug-fix update for RHEL 8.4 extended and specialized support channels. The 4.18.0-305.62.1.el8_4 update remediated CVE-2022-0494 and CVE-2022-1353; affected systems required a reboot.
Red Hat issued RHSA-2022:5934, a Moderate security and bug-fix update for the RHEL 8.2 Extended Update Support Real Time Linux Kernel. Kernel-rt version 4.18.0-193.90.1.rt13.140.el8_2 remediated the CVE-2022-1353 pfkey_register information-disclosure flaw; affected systems required a reboot.
Red Hat issued RHSA-2022:6003, a Moderate-severity kernel security advisory for RHEL 9. The update remediated CVE-2022-0494 and CVE-2022-1055, included reliability fixes, and required affected systems to reboot after installation.
Red Hat issued RHSA-2022:6002, a Moderate-severity security and bug-fix update for the RHEL 9 x86_64 Real Time Linux Kernel. Kernel-rt version 5.14.0-70.22.1.rt21.94.el9_0 remediated CVE-2022-0494 and CVE-2022-1055; systems required a reboot after installation.
Red Hat issued RHSA-2022:5998, a Moderate-severity kernel security and bug-fix update for RHEL 8.2 Extended Update Support and associated channels. Kernel version 4.18.0-193.90.1.el8_2 fixed CVE-2022-1353 in pfkey_register along with several kernel bugs; affected systems required a reboot.
Haimin Zhang submitted a one-line patch to zero pages allocated by bio_copy_kern, preventing uninitialized bio-buffer contents from being copied to userspace through the SCSI_IOCTL_SEND_COMMAND path. The patch adds __GFP_ZERO to the alloc_page flags in block/blk-map.c.
Red Hat Product Security DevOps marked Bugzilla BZ#2039448, tracking the CVE-2022-0494 Linux kernel SCSI ioctl information-disclosure vulnerability, closed.
Red Hat closed its tracking bug for CVE-2022-1055, a medium-severity Linux kernel use-after-free flaw in tc_new_tfilter() that could enable local privilege escalation when unprivileged user namespaces are available.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
11 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceredhat.com
Open sourcebugzilla.redhat.com
Open sourcelore.kernel.org
Open sourcecwe.mitre.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Linux kernel security updates for supported **RHEL 8 and RHEL 9** streams, addressing dozens of flaws across networking, virtualization, storage, graphics, Bluetooth, filesystems, and device drivers. The updates include **CVE-2024-36886**, a TIPC message-reassembly use-after-free issue that could permit remote code execution on affected RHEL 8.6 systems, as well as memory-corruption, information-disclosure, race-condition, denial-of-service, and NULL-pointer defects. RHEL 9.2 updates delivered kernel `5.14.0-284.75.1.el9_2`, while RHEL 8.8 and 8.6 updates provided `4.18.0-477.64.1.el8_8` and `4.18.0-372.111.1.el8_6`, respectively; Real Time kernel users received `5.14.0-284.75.1.rt14.360.el9_2`. The fixes cover, among other issues, **CVE-2024-35791**, a KVM SVM use-after-free in `svm_register_enc_region()`, **CVE-2024-36952**, a race condition in the SCSI `lpfc` driver's NPIV cleanup sequence, and **CVE-2024-27417**, an IPv6 reference leak in `inet6_rtm_getaddr()`. Red Hat shipped remediation through RHSA-2024:4823, RHSA-2024:4831, RHSA-2024:4740, RHSA-2024:4447, RHSA-2024:0113, and RHSA-2024:6567 for affected x86_64, ARM64, IBM Z, and Power offerings, including EUS, SAP, and extended-lifecycle channels. Organizations should apply the applicable kernel packages and **reboot systems** to activate the fixes.
Aug 26, 2026
Red Hat released Important and Moderate Linux kernel updates across RHEL 8 and RHEL 9 support channels, including Real Time, SAP Solutions, Extended Life Cycle, and selected update services. The advisories address multiple kernel memory-safety and validation vulnerabilities, notably `CVE-2025-38051`, a race-driven use-after-free in the CIFS/SMB client directory-reading path; `CVE-2025-39933`, insufficient SMB response-length validation; and `CVE-2025-68301`, an Atlantic NIC receive-path fragment overflow that can trigger an out-of-bounds write and kernel panic when processing oversized multi-descriptor packets. Additional fixes cover `CVE-2022-50865`, a signed integer overflow in TCP backlog handling, alongside flaws in vsock, Bluetooth L2CAP, DRM scheduling and i915, RDMA, devlink, and other drivers. Affected organizations should install the kernel packages supplied for their specific RHEL release and subscription channel—such as `4.18.0-553.94.1.rt7.435.el8_10`, `5.14.0-427.109.1.el9_4`, or `5.14.0-284.155.1.el9_2`—and reboot systems to activate the mitigations.
Aug 26, 2026
Red Hat released kernel security updates for multiple RHEL 8.2, 8.8, 9.2, and 10 lifecycle, SAP, telecommunications, and extended-support offerings. The advisories address vulnerabilities including USB DWC3 gadget event-buffer bounds handling (`CVE-2025-37810`), SunRPC TLS-alert processing (`CVE-2025-38566`), VKMS/DRM use-after-free and double-free conditions (`CVE-2025-22097`), UDP memory-accounting leaks (`CVE-2025-22058`), RDMA/IWCM use-after-free (`CVE-2025-38211`), POSIX CPU-timer races (`CVE-2025-38352`), and a `sch_qfq` scheduler race (`CVE-2025-38477`). Additional fixes cover ext4 attributes, IPv6 multicast, MD RAID10, TIPC, Intel i40e MMIO access, vsock TOCTOU handling, netfilter conntrack removal, SMB oplocks, and DRM/GEM framebuffer references. Affected organizations should deploy the applicable updated packages, including RHEL 9.2 kernel `5.14.0-284.137.1.el9_2`, RHEL 9.2 real-time kernel `5.14.0-284.140.1.rt14.425.el9_2`, and RHEL 8.2 AUS kernel `4.18.0-193.168.1.el8_2`. The updates apply across supported x86_64, ARM64, ppc64le, and s390x offerings where listed; systems must be rebooted after installation for the patched kernel to become active.
Aug 26, 2026