Details:
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)
kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation. (CVE-2025-71238)
kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)
kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)
kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
0:7.3.0-427.124.1.el9_40:7.3.0-427.124.1.el9_40:5.14.0-427.124.1.el9_40:5.14.0-427.124.1.el9_40:5.14.0-427.124.1.el9_40:5.14.0-427.124.1.el9_40:5.14.0-427.124.1.el9_40:5.14.0-427.124.1.el9_40:5.14.0-427.124.1.el9_40:5.14.0-427.124.1.el9_4Exploitability
AV:LAC:HPR:NUI:NScope
S:CImpact
C:HI:HA:H8.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H