Loading story…
Red Hat addressed CVE-2021-47287, a Linux kernel driver-core flaw in drivers/base/auxiliary.c that leaks memory when driver_register() fails. In the affected __auxiliary_driver_register() path, memory allocated for auxdrv->driver.name was not released before the function returned, creating a local denial-of-service risk through resource exhaustion. Red Hat assigns the issue a CVSS 3.1 score of 5.5 (medium), with low-privilege local access required and availability as the affected security property.
The defect was introduced in Linux kernel 5.11 and fixed upstream in versions 5.13.6 and 5.14. Red Hat released fixes for affected RHEL 8 kernel and kernel-rt packages through RHSA-2024:7000 and RHSA-2024:7001; RHEL 6, 7, and 9 kernel variants are listed as not affected. Organizations running affected RHEL 8 systems should apply the advisory updates and reboot into the updated kernel; upstream recommends using the latest stable kernel release rather than cherry-picking the patch.
See real exploitation activity before you spend the cycle.
4 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2024:7000 for the affected RHEL 8 kernel and RHSA-2024:7001 for the affected RHEL 8 kernel-rt package.
Red Hat published its record for CVE-2021-47287, a low-severity Linux kernel auxiliary-bus memory leak. The issue requires local access and low privileges and is rated CVSS 3.1 5.5.
The auxiliary-bus memory leak was fixed upstream in Linux kernel 5.13.6 and 5.14. The fixes were delivered by commits ce5b3de58fc2 and 4afa0c22eed3, respectively.
A change in Linux kernel 5.11 introduced a memory leak in drivers/base/auxiliary.c: __auxiliary_driver_register() did not free auxdrv->driver.name when driver_register() failed.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
bugzilla.redhat.com
Open sourceredhat.com
Open sourcelore.kernel.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**CVE-2021-47466** affects the Linux kernel's SLUB allocator in `mm/slub.c`, where the error path in `kmem_cache_open()` can fail to release a cache's `random_seq` resource after initialization fails. Introduced in kernel version 4.8, the flaw can cause a memory leak and potentially degrade system availability. It carries a CVSS v3.1 score of 5.5 and requires local access with low privileges. Upstream fixes are available in kernel versions 5.4.156, 5.10.76, 5.14.15, and 5.15 and later; the Linux kernel CVE team recommends deploying a current stable kernel rather than backporting an individual patch. Red Hat remediated affected RHEL 8 kernel and `kernel-rt` packages through advisories **RHSA-2024:7000** and **RHSA-2024:7001**. RHEL 9 and its real-time kernel are not affected, while unsupported RHEL 6 and 7 deployments should be treated as potentially vulnerable unless separately mitigated or upgraded.
Aug 26, 2026
**CVE-2023-52662** is a low-severity memory-leak flaw in the Linux kernel's VMware graphics driver, `drm/vmwgfx`. In `vmw_gmrid_man_get_node`, failure of `ida_alloc_max` can leave `kmalloc`-allocated memory and resources initialized through `ttm_resource_init` unfreed, potentially causing a local, low-privileged user to exhaust system memory and affect availability. The issue was introduced in Linux kernel 5.14 and has a CVSS v3.1 score of 5.5. The flaw is fixed in upstream stable kernels 5.15.153, 6.1.83, 6.6.23, 6.7.11, 6.8.2, and 6.9. Red Hat released corrected standard and real-time kernel packages for RHEL 8 and standard kernel packages for RHEL 9, including RHEL 9.4 EUS; the RHEL 9 real-time kernel fix remains deferred. RHEL 6 and RHEL 7 kernel packages are outside support scope and should be treated as affected unless mitigated or upgraded. Organizations should deploy supported updated kernel packages and reboot affected hosts.
Aug 26, 2026
Red Hat released **Important** Linux kernel security updates for Red Hat Enterprise Linux (RHEL) 8, 9, and 10, remediating vulnerabilities that could cause memory corruption, information disclosure, denial of service, and potentially privilege escalation. The advisories are `RHSA-2026:1142` for RHEL 8, `RHSA-2026:1143` for RHEL 9, and `RHSA-2026:1690` for RHEL 10, covering supported x86_64, ARM64/aarch64, IBM Z/s390x, and Power little-endian deployments, as well as applicable EUS, ELS, SAP, and CodeReady Linux Builder channels. Notable fixes include `CVE-2025-38453`, a use-after-free condition in `io_uring` `msg_ring` request handling; `CVE-2025-40301`, which could expose uninitialized memory or cause denial of service through Bluetooth HCI command-complete event processing; and `CVE-2025-38731`, a double-free flaw in the DRM Xe driver's `xe_vm_bind_ioctl` path. RHEL 8 updates also address Bluetooth, vsock memory-corruption, Intel ASoC, and VMware SVGA driver flaws. Organizations should deploy the appropriate updated kernel packages and reboot affected systems, as the fixes do not take effect until restart.
Aug 25, 2026