Loading story…
Red Hat released RHEL 8 kernel updates that remediate CVE-2024-26593, a defect in the Linux kernel i2c-i801 driver’s handling of SMBus block process-call transactions. The driver did not reset its block-buffer index before reading returned data, contrary to Intel’s documented transaction sequence, causing it to read from the wrong buffer position. The issue was assessed as having potentially low impact, pending deployment-specific validation.
The fix is included in RHEL 8 kernel version 4.18.0-553.5.1.el8_10 under RHSA-2024:3618 and the Real Time kernel version 4.18.0-553.5.1.rt7.346.el8_10 under RHSA-2024:3627. These advisories also address numerous other kernel flaws across virtualization, cryptography, networking, USB, wireless, filesystems, and memory management; affected RHEL 8 and RHEL for Real Time deployments must reboot after installing the updated packages for mitigations to take effect.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2024:3627, a Moderate-security kernel-rt update for RHEL 8, which included a fix for CVE-2024-26593. It delivered kernel-rt version 4.18.0-553.5.1.rt7.346.el8_10 for supported Real Time deployments.
Red Hat issued RHSA-2024:3618, a Moderate-severity RHEL 8 kernel update containing a fix for CVE-2024-26593 in I2C i801 block-process-call transactions. The update supplied kernel version 4.18.0-553.5.1.el8_10 and required affected systems to reboot after installation.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Important RHEL 8 kernel and kernel-rt updates that remediate **CVE-2022-2873**, an out-of-bounds memory-access flaw in the Intel iSMT SMBus driver; **CVE-2022-41222**, a use-after-free race in `mm/mremap.c`; and **CVE-2022-43945**, an NFS server buffer overflow triggered by malformed RPC-over-TCP traffic. CVE-2022-2873 can be triggered locally through the `I2C_SMBUS` ioctl with block-data input and can crash the system, while CVE-2022-41222 can leave stale TLB entries during concurrent memory operations. RHSA-2023:0832 provides kernel version `4.18.0-425.13.1.el8_7` for supported RHEL 8 architectures, including x86_64, aarch64, ppc64le, and s390x. RHSA-2023:0854 supplies `4.18.0-425.13.1.rt7.223.el8_7` for supported RHEL 8 Real Time, NFV, telecommunications, and Extended Life Cycle deployments. Administrators should install the applicable updated packages and reboot affected systems to activate the fixes.
Aug 26, 2026
Red Hat released **RHSA-2023:6901**, an Important security update for the `kernel-rt` package in Red Hat Enterprise Linux 8. The update affects RHEL for Real Time 8, Real Time for NFV 8, and RHEL for x86_64 Extended Life Cycle 8.10, remediating a broad set of kernel memory-safety, race-condition, denial-of-service, information-disclosure, and speculative-execution weaknesses. Organizations should install the applicable updated kernel package and reboot affected hosts for the protections to take effect. Notable issues addressed across the associated RHEL errata include `CVE-2023-31436`, an out-of-bounds access in traffic-control QFQ that can enable local privilege escalation; `CVE-2023-1998`, which can defeat Spectre v2 speculation protections between SMT sibling threads; and Bluetooth L2CAP flaws `CVE-2022-3640` and `CVE-2022-42895`, involving use-after-free and kernel-pointer disclosure. Other fixes cover double-free, buffer-overflow, and device-driver vulnerabilities, including `CVE-2023-1079` in the ASUS HID driver and `CVE-2023-26545` in MPLS. Where patching cannot be immediate, Red Hat documents limited mitigations such as preventing the `usb_8dev` module or affected ASUS HID driver from loading; however, applying the relevant security errata remains the recommended remediation.
Aug 26, 2026
Red Hat released Important-rated RHEL 8 kernel security updates addressing flaws in the iMON media remote-control driver, Ceph client, SCTP, SMB/CIFS client, EFI variable filesystem, and other kernel components. The primary defects include a use-after-free caused by a disconnect race in `imon_disconnect()` (**CVE-2025-39993**), a libceph use-after-free during session initialization (**CVE-2025-68285**), an SMB-client rename race (**CVE-2025-39825**), and an out-of-bounds read in `efivarfs_d_compare` (**CVE-2025-39817**). The iMON and Ceph issues stem from unsynchronized access to device or map pointers; upstream fixes add disconnected-state validation and locking around protected data. Advisories **RHSA-2026:0443** and **RHSA-2026:0444** provide kernel and kernel-rt version `4.18.0-553.92.1` for supported RHEL 8 and RHEL 8.10 Extended Life Cycle streams, remediating CVE-2025-39993, CVE-2025-68285, and SCTP NULL-pointer dereference CVE-2025-40240. **RHSA-2026:0533** updates RHEL 8.4 Advanced Update Support and Extended Life Cycle Long Life deployments with `4.18.0-305.183.1.el8_4` or later, addressing 12 kernel issues including SMB, EFI, media, and Ceph vulnerabilities. Organizations should apply the applicable package update and reboot affected systems to activate the patched kernel.
Aug 26, 2026