Loading story…
Red Hat has documented multiple CWE-772 resource-management flaws that can exhaust memory or device references and cause denial of service. In the Linux kernel, CVE-2022-50269 leaks a configuration object if VKMS initialization fails; CVE-2022-50318 leaks PCI-device references in Intel uncore performance-monitoring code; and CVE-2022-50372 leaks a CIFS/SMB session-setup request when NTLMSSP negotiate-blob construction fails. Each kernel issue is rated CVSS 5.5 and requires local, low-privileged access to trigger resource exhaustion.
Fixes are available for affected RHEL kernel packages, including RHEL 8 for the CIFS issue under RHSA-2024:5101, while some RHEL 9 and real-time kernel fixes remain deferred; unsupported branches are generally unaffected where the vulnerable code is absent. Separately, CVE-2024-2398 affects curl/libcurl HTTP/2 server-push handling: a remote server can repeatedly send oversized pushed headers and cause leaked header memory when libcurl aborts the push. Rated CVSS 7.5, that flaw was fixed for affected JBoss Core Services HTTPD 2.4 components on RHEL 7 and 8 in RHSA-2024:2693.
See real exploitation activity before you spend the cycle.
12 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2025:13960 and RHSA-2025:13961, fixing affected RHEL 8 kernel and kernel-rt updates for CVE-2022-50269.
Red Hat released RHSA-2024:5101, fixing CVE-2022-50372 in the RHEL 8 kernel. The flaw could leak a session-setup request when NTLMSSP negotiate-blob construction failed during a CIFS mount.
Red Hat issued RHSA-2024:2693 to address CVE-2024-2398 in affected JBoss Core Services HTTPD 2.4 components for RHEL 7 and RHEL 8.
Red Hat published CVE-2024-2398, describing a curl/libcurl HTTP/2 server-push header memory leak that a malicious remote server could repeatedly trigger to consume client memory.
Red Hat released RHSA-2023:7077, fixing affected RHEL 8 kernel packages for CVE-2022-50318 and CVE-2022-50269.
Red Hat released RHSA-2023:2951 to fix CVE-2022-50318 in affected Red Hat Enterprise Linux 8 kernel packages.
Red Hat released RHSA-2023:2458, fixing CVE-2022-50318 in affected Red Hat Enterprise Linux 9 kernel packages.
Red Hat published the CVE-2022-50269 record for a VKMS-module memory leak that can lead to local denial of service through memory exhaustion.
Red Hat released RHSA-2025:15670 to fix CVE-2022-50269 in the RHEL 9.0 Update Services for SAP Solutions kernel package.
Red Hat released RHSA-2025:15658 to fix CVE-2022-50269 in the RHEL 9.0 Update Services for SAP Solutions kernel-rt package.
Red Hat released RHSA-2024:2394, providing an additional fix for CVE-2022-50318 in Red Hat Enterprise Linux 9 kernel packages.
RHSA-2023:4789 fixed CVE-2022-50318 in Red Hat Enterprise Linux 8.6 Extended Update Support kernel packages and Red Hat Virtualization 4 for RHEL 8.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
5 references tracked. Mallory keeps watching after this page renders.
redhat.com
Open sourceredhat.com
Open sourceredhat.com
Open sourceredhat.com
Open sourcecwe.mitre.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released kernel updates for **RHEL 9** and **RHEL 10** addressing several locally exploitable Linux kernel flaws, including `CVE-2025-21647` in the `sch_cake` traffic-control scheduler. An underflow in per-host bulk-flow fairness counters could lead to an out-of-bounds read, potentially exposing kernel memory or crashing the system; Red Hat assigned it a CVSS 3.1 score of 7.1. The upstream correction adds centralized bounds checking for counter access. The updates also remediate denial-of-service issues in the mt76 `mt7925` Wi-Fi driver (`CVE-2024-57989`), HID core (`CVE-2024-57986`), IDPF driver (`CVE-2024-58057`), and Realtek Bluetooth setup path (`CVE-2024-57987`). These flaws can trigger NULL-pointer dereferences, CPU-workqueue starvation, or system crashes under local attack conditions. RHEL 9 `kernel-rt` remains affected or will not fix for several listed issues; organizations should apply the applicable kernel errata and reboot systems to activate the patched kernel.
Aug 26, 2026
Red Hat released **RHSA-2025:13598** for Red Hat Enterprise Linux 10, updating kernel packages to remediate seven Moderate-severity vulnerabilities across `x86_64`, `aarch64`, `ppc64le`, and `s390x` systems, including applicable Extended Update Support and lifecycle channels. The flaws include a double-free condition, memory-management races, out-of-bounds reads, invalid memory access, and hardware-related kernel issues. Among the fixed issues, **CVE-2025-38079** affects the AF_ALG `algif_hash` socket `hash_accept` path: a local low-privileged attacker may trigger a double free and slab use-after-free through `accept(2)` under a specific `MSG_MORE` and `crypto_ahash_import` failure condition, potentially causing memory corruption or code execution. **CVE-2025-38084** fixes a hugetlb page-table race during virtual-memory-area splitting, while **CVE-2025-38159** corrects an rtw88 Wi-Fi-driver out-of-bounds read that could disclose memory or crash the kernel; preventing the `rtw88` module from loading is a temporary mitigation. Organizations should install the updated kernel and reboot affected RHEL 10 hosts.
Aug 26, 2026
Red Hat released fixes across supported **RHEL 8** and **RHEL 9** streams for a set of Linux kernel flaws affecting networking, device drivers, USB Type-C, x86 machine-check handling, and the block layer. The remediated issues include `CVE-2024-36929`, where handling `SKB_GSO_FRAGLIST` packets through `skb_copy` or `skb_copy_expand` could yield invalid packets and subsequently crash the kernel; Red Hat rated it Moderate (CVSS 3.1 5.5). Other Moderate-rated issues include an integer overflow in `blk_ioctl_discard()` (`CVE-2024-36917`) and a potential uninitialized-value access in IPv6 `__ip6_make_skb()` (`CVE-2024-36903`). Additional fixes address rtnetlink nested VLAN attribute validation (`CVE-2024-36017`), bonding setup, atl1c DMA receive overflow handling, mlxsw ACL TCAM list handling, and Intel igb firmware-version string truncation, as well as null-pointer, buffer-sizing, and read-limit defects in rtw89 and ath11k Wi-Fi drivers and the UCSI USB Type-C subsystem. Most require local access or concern specialized hardware and were assessed as Low to Moderate impact; the references report no exploitation in the wild. Organizations should apply the applicable Red Hat kernel and kernel-rt advisories, including Extended Update Support and specialized RHEL channels where deployed. `CVE-2024-35876`, concerning x86 MCE locking, was later rejected by the upstream Linux kernel CVE process despite having been tracked and patched in Red Hat advisories.
Aug 26, 2026