Loading story…
Red Hat released Moderate-security updates for Red Hat Enterprise Linux 8 kernel and kernel-rt packages to remediate CVE-2024-26935 and CVE-2024-50275. CVE-2024-26935 is a low-severity SCSI-core regression that can leave a removed SCSI host's procfs directory behind. CVE-2024-50275 affects ARM64 Scalable Vector Extension (SVE) trap handling: a preemption and CPU-migration race can retain stale floating-point/SVE CPU state, potentially allowing return to userspace without the required hardware-state restore.
The fixes are delivered in RHSA-2025:1067 for RHEL for Real Time 8 and related Real Time/NFV offerings, and RHSA-2025:1068 for standard RHEL 8 deployments. Red Hat provides version 4.18.0-553.37.1.rt7.378.el8_10 for kernel-rt and 4.18.0-553.37.1.el8_10 for standard kernel packages across supported architectures; organizations should install the applicable updates and reboot systems to activate the patched kernel.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2025:1068, a Moderate-severity RHEL 8 kernel update, fixing CVE-2024-26935 and CVE-2024-50275 across x86_64, s390x, ppc64le, and aarch64 deployments. Updated packages are version 4.18.0-553.37.1.el8_10, and systems must be rebooted after installation.
Red Hat issued RHSA-2025:1067, a Moderate-security update for RHEL 8 kernel-rt packages, fixing CVE-2024-26935 and CVE-2024-50275. The update provides kernel-rt version 4.18.0-553.37.1.rt7.378.el8_10 and requires a reboot.
Zack Miele reported the Linux kernel SCSI-core regression that can leave a procfs SCSI host directory unremoved. The issue was assigned CVE-2024-26935 and tracked by Red Hat as Bug 2278235.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
4 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Moderate-severity kernel and Real Time kernel updates for supported **RHEL 8.4 Extended Update Support** and specialized telecommunications/NFV channels to remediate `CVE-2022-0494` and `CVE-2022-1353`. The standard kernel update, version `4.18.0-305.62.1.el8_4`, covers x86_64, s390x, ppc64le, and aarch64 systems; the Real Time update is `4.18.0-305.62.1.rt7.134.el8_4`. `CVE-2022-0494` affects SCSI ioctl handling: a `SCSI_IOCTL_SEND_COMMAND` request can map a buffer that is not zero-initialized, allowing uninitialized kernel memory to be copied to a user-supplied buffer when a disk driver does not populate it. `CVE-2022-1353` affects `pfkey_register` and can also disclose kernel information. Administrators should install the applicable packages and reboot affected systems for the mitigations to take effect.
Aug 26, 2026
Red Hat released Moderate-severity RHEL 8 kernel and kernel-rt updates addressing three Linux kernel vulnerabilities: `CVE-2022-50543`, an RDMA RXE `mr->map` double-free that can cause a KASAN-detected kernel panic; `CVE-2023-53539`, incomplete state saving in the RDMA RXE requester path; and `CVE-2023-53401`, a NULL-pointer dereference in `obj_stock_flush_required()` in the memory-management subsystem. The double-free occurs when `rxe_mr_init_user()` fails and cleanup frees `mr->map` more than once; the fix assigns responsibility for freeing the allocation solely to `rxe_mr_cleanup()`. RHSA-2025:22801 provides kernel version `4.18.0-553.89.1.el8_10` for applicable RHEL 8 systems on x86_64, s390x, ppc64le, and aarch64, including supported Extended Life Cycle and CodeReady Linux Builder repositories. RHSA-2025:22800 supplies `kernel-rt-4.18.0-553.89.1.rt7.430.el8_10` for RHEL for Real Time 8, Real Time for NFV 8, and eligible RHEL 8.10 Extended Life Cycle deployments; administrators must reboot systems after applying the updates.
Aug 25, 2026
Red Hat released Important security updates `RHSA-2022:7110` and `RHSA-2022:7134` for Red Hat Enterprise Linux 8 standard and real-time kernels. The updates deliver `kernel-4.18.0-372.32.1.el8_6` and `kernel-rt-4.18.0-372.32.1.rt7.189.el8_6`, respectively, addressing a `cls_route` use-after-free that could permit privilege escalation and information-disclosure flaws in `scsi_ioctl()` and `pfkey_register`. The releases also mitigate speculative-execution vulnerabilities affecting AMD and Intel CPUs, including AMD RetBleed (`CVE-2022-23816`, `CVE-2022-29900`), Intel RetBleed (`CVE-2022-29901`), and AMD Branch Type Confusion (`CVE-2022-23825`), which could expose information through branch-predictor behavior. Affected RHEL 8 deployments—including real-time, NFV, SAP, virtualization, telecommunications, and extended-support channels—should install the applicable kernel packages and reboot systems to activate the fixes.
Aug 26, 2026