Loading story…
Red Hat released RHSA-2025:2270 for RHEL 9.4 Extended Update Support, updating the kernel to 5.14.0-427.57.1.el9_4 and remediating 21 vulnerabilities across EFI, memory management, networking, Open vSwitch, ACPI, ext4, SCTP, I2C, ARM64 probes, and graphics. The update applies across supported x86_64, aarch64, ppc64le, and s390x RHEL 9.4 EUS and associated update channels.
The advisory includes CVE-2024-26843, a medium-severity potential integer overflow in EFI runtime handling of soft-reserved region sizes, and CVE-2024-26846, a low-severity NVMe over Fibre Channel module-exit race that can indefinitely hang module unloading and cause a local availability impact. Upstream fixes for both issues were incorporated in Linux versions 5.10.211, 5.15.150, 6.1.80, 6.6.19, 6.7.7, and 6.8; Red Hat also delivered fixes for standard RHEL 8 and 9 kernels. Systems must be rebooted after installing the updated kernel.
See real exploitation activity before you spend the cycle.
8 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2024:7000 for the RHEL 8 kernel, remediating the nvme-fc module-unload vulnerability.
Robb Gatica reported Red Hat Bug 2275558 for CVE-2024-26846, a low-severity race condition that can cause an nvme-fc module unload to hang indefinitely.
Robb Gatica reported Red Hat Bug 2275565 for CVE-2024-26843, a medium-severity potential overflow in Linux EFI runtime soft-reserved-region sizing.
Red Hat released Moderate-severity advisory RHSA-2025:2270 for RHEL 9.4 Extended Update Support, supplying kernel version 5.14.0-427.57.1.el9_4 and fixing both CVE-2024-26843 and CVE-2024-26846 among 21 CVEs. Red Hat stated that systems must be rebooted after applying the update.
RHSA-2024:9315 remediated CVE-2024-26843 and CVE-2024-26846 in the standard RHEL 9 kernel.
Red Hat addressed the EFI runtime soft-reserved-region sizing vulnerability in RHEL 8 through RHSA-2024:5101 and RHSA-2024:5102.
The nvme-fc unload fix was included in upstream Linux kernel versions 5.10.211, 5.15.150, 6.1.80, 6.6.19, 6.7.7, and 6.8. The fix removes unnecessary ID destruction and flushes the controller-deletion workqueue before module exit.
The EFI runtime overflow issue was fixed in upstream Linux kernel versions 5.10.211, 5.15.150, 6.1.80, 6.6.19, 6.7.7, and 6.8.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
5 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourcebugzilla.redhat.com
Open sourceredhat.com
Open sourcebugzilla.redhat.com
Open sourcelore.kernel.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released **RHSA-2024:11313** for Red Hat Enterprise Linux 9.4 support channels, updating the kernel to `5.14.0-427.49.1.el9_4`. The update remediates four vulnerabilities: **CVE-2021-47384**, a w83793 hardware-monitoring driver NULL-pointer dereference that can cause system instability; **CVE-2024-38627**, a double-free in STM device registration; **CVE-2024-39499**, a VMCI event-delivery speculative information-leak risk; and **CVE-2024-40989**, an ARM64 KVM teardown flaw that can leave vCPUs with dangling redistributor-region pointers. The advisory applies across supported RHEL 9.4 x86_64, ARM64, IBM Z/s390x, and Power little-endian deployments, including EUS, AUS, SAP Update Services, and Extended Life Cycle channels. Red Hat rates the advisory Moderate; the w83793 flaw has a CVSS 3.1 score of 5.5 and requires local, low-privileged access, while the other fixes address memory-safety, speculative-execution, and virtualization risks. Organizations should deploy the updated kernel packages and reboot affected systems for the fixes to take effect.
Aug 26, 2026
Red Hat released **RHSA-2025:3021**, a Moderate-severity kernel update for Red Hat Enterprise Linux 9.4 support channels. The update remediates six issues spanning RDMA SRP target initialization, ACPI extended logging, mlx5e aRFS handling, PCI power management, and memory-control-group concurrency. Affected deployments should install the applicable `5.14.0-427.60.1.el9_4` kernel packages and reboot to activate the new kernel. The update includes the fix for **CVE-2024-26872**, in which the RDMA SRP target driver could register an event handler before an `srpt` device was fully initialized; upstream fixes defer registration until setup completes. It also carries the ACPI extlog code correction associated with **CVE-2023-52605**, a potential NULL-pointer dereference during cleanup that could cause a local denial of service, although that CVE was subsequently rejected upstream. The advisory applies across RHEL 9.4 x86_64, aarch64, ppc64le, and s390x channels, including EUS, ELS, AUS, SAP-related services, and associated CodeReady Linux Builder repositories.
Aug 26, 2026
Red Hat released Moderate-severity RHEL 9.0 Extended Update Support kernel updates addressing **CVE-2021-33631**, an integer-overflow flaw in ext4's `ext4_write_inline_data_end()`, and **CVE-2023-6931**, an out-of-bounds write in `perf_read_group()` caused by `perf_event` `read_size` overflow. CVE-2021-33631 also affected openEuler kernel versions 4.19.90 before 4.19.90-2401.3 and 5.10.0-60.18.0 before 5.10.0-183.0.0; the underlying issue was fixed upstream in Linux 6.2. RHSA-2024:1836 provides kernel `5.14.0-70.97.1.el9_0` for RHEL 9.0 EUS and SAP Update Services on x86_64, s390x, ppc64le, and aarch64. RHSA-2024:1840 supplies the Real Time kernel `5.14.0-70.97.1.rt21.169.el9_0` for x86_64 SAP Solutions 9.0 Update Services. Organizations using the affected EUS or real-time kernel packages should deploy the applicable update and reboot systems to activate the fixes.
Aug 26, 2026