Loading story…
Red Hat released moderate-severity advisory RHSA-2025:8796 for supported RHEL 9.4 update channels, delivering kernel version 5.14.0-427.72.1.el9_4. The update applies across x86_64, aarch64, ppc64le, and s390x deployments in EUS, AUS, SAP, extended-life-cycle, and CodeReady Linux Builder repositories. Administrators must reboot affected systems after installing the updated kernel.
The advisory remediates kernel issues including CVE-2024-26921, which could release an IPv4 defragmentation socket while still in use; CVE-2024-26645, a tracing-map insertion race condition that can cause local denial of service; CVE-2024-27042, a potential out-of-bounds access in AMDGPU discovery-register initialization; CVE-2024-35930, a possible LPFC SCSI-driver memory leak; and CVE-2024-36933, an NSH GSO packet-header handling flaw. It also addresses a PowerPC vector-operation issue and references CVE-2023-54114; RHEL 9 kernel-rt remains listed as affected by CVE-2024-26645 without a corresponding erratum.
See real exploitation activity before you spend the cycle.
9 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued Moderate-severity advisory RHSA-2025:8796 with kernel version 5.14.0-427.72.1.el9_4 for supported RHEL 9.4 update channels. It fixes CVE-2023-52606 and CVE-2024-26645, CVE-2024-26921, CVE-2024-27042, CVE-2024-35930, and CVE-2024-36933; a reboot is required for the new kernel to take effect.
Red Hat released RHSA-2024:7000 for the RHEL 8 kernel and RHSA-2024:7001 for RHEL 8 kernel-rt, addressing CVE-2024-26645.
An upstream Linux kernel advisory was published for CVE-2024-35930, a possible memory leak in the LPFC SCSI driver's lpfc_rcv_padisc() function.
Zack Miele reported Red Hat bug 2278447 for CVE-2024-27042, a potential out-of-bounds access in amdgpu_discovery_reg_base_init().
The Linux kernel CVE team assigned CVE-2024-26921 to an inet_defrag flaw in which a socket could be released while still in use. The upstream fix prevents the premature socket release.
The Linux kernel CVE team publicly disclosed CVE-2024-26645, a race condition affecting visibility when inserting an element into tracing_map. The upstream resolution ensures visibility during tracing_map insertion.
The Linux kernel CVE team assigned CVE-2024-36933 to an NSH Generic Segmentation Offload issue in nsh_gso_segment(). The resolution restores socket-buffer protocol, data, and MAC-header fields for the outer header.
Upstream Linux kernel releases 6.6.23, 6.7.11, 6.8.2, and 6.9-rc1 incorporated fixes for CVE-2024-27042, the potential out-of-bounds access in amdgpu_discovery_reg_base_init().
Red Hat released RHSA-2024:9315 to fix CVE-2024-26645 in the RHEL 9 kernel.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
7 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourceredhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released **RHSA-2024:11313** for Red Hat Enterprise Linux 9.4 support channels, updating the kernel to `5.14.0-427.49.1.el9_4`. The update remediates four vulnerabilities: **CVE-2021-47384**, a w83793 hardware-monitoring driver NULL-pointer dereference that can cause system instability; **CVE-2024-38627**, a double-free in STM device registration; **CVE-2024-39499**, a VMCI event-delivery speculative information-leak risk; and **CVE-2024-40989**, an ARM64 KVM teardown flaw that can leave vCPUs with dangling redistributor-region pointers. The advisory applies across supported RHEL 9.4 x86_64, ARM64, IBM Z/s390x, and Power little-endian deployments, including EUS, AUS, SAP Update Services, and Extended Life Cycle channels. Red Hat rates the advisory Moderate; the w83793 flaw has a CVSS 3.1 score of 5.5 and requires local, low-privileged access, while the other fixes address memory-safety, speculative-execution, and virtualization risks. Organizations should deploy the updated kernel packages and reboot affected systems for the fixes to take effect.
Aug 26, 2026
Red Hat released **RHSA-2025:3021**, a Moderate-severity kernel update for Red Hat Enterprise Linux 9.4 support channels. The update remediates six issues spanning RDMA SRP target initialization, ACPI extended logging, mlx5e aRFS handling, PCI power management, and memory-control-group concurrency. Affected deployments should install the applicable `5.14.0-427.60.1.el9_4` kernel packages and reboot to activate the new kernel. The update includes the fix for **CVE-2024-26872**, in which the RDMA SRP target driver could register an event handler before an `srpt` device was fully initialized; upstream fixes defer registration until setup completes. It also carries the ACPI extlog code correction associated with **CVE-2023-52605**, a potential NULL-pointer dereference during cleanup that could cause a local denial of service, although that CVE was subsequently rejected upstream. The advisory applies across RHEL 9.4 x86_64, aarch64, ppc64le, and s390x channels, including EUS, ELS, AUS, SAP-related services, and associated CodeReady Linux Builder repositories.
Aug 26, 2026
Red Hat released **RHSA-2024:8157** for Red Hat Enterprise Linux 9.2 kernel update channels, delivering kernel version `5.14.0-284.88.1.el9_2` and remediating 11 CVEs across x86_64, aarch64, ppc64le, and s390x offerings. The update includes a fix for **CVE-2024-36244** in the `taprio` network scheduler, extending its minimum interval restriction to the entire scheduling cycle, alongside fixes for kernel NULL-pointer dereferences, deadlocks, memory leaks, and other subsystem defects. Systems must be rebooted after installation for the updated kernel to take effect. The related kernel flaws include **CVE-2024-41066**, in which inconsistent `ibmvnic` transmit bookkeeping can overwrite a non-null socket-buffer pointer and leak memory, potentially stopping TCP congestion control and causing `ETIMEDOUT` denial-of-service conditions. Red Hat rated that issue Low (CVSS 4.4) because exploitation requires high local privileges and affected IBM virtual-network hardware; organizations unable to patch can disable or blacklist the `ibmvnic` module. Red Hat also documented **CVE-2024-42284**, a Moderate (CVSS 7.3) TIPC buffer overflow triggered by invalid UDP media-address handling; affected deployments should apply available RHEL 8/9 kernel fixes and review exposure where TIPC is enabled.
Aug 26, 2026