RHSA-2026:14165

HIGH7.8

Red Hat Security Advisory: kernel security update

Published May 6, 2026

Modified Today

Fix available

Details

Details:

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation. (CVE-2025-71238)
kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Packages(24 packages)

bpftool

Red Hat rhel_aus 8.4 baseosRed Hat rhel_eus_long_life 8.4 baseos

Fixed in:

0:4.18.0-305.190.1.el8_4

bpftool-debuginfo

Red Hat rhel_aus 8.4 baseosRed Hat rhel_eus_long_life 8.4 baseos

Fixed in:

0:4.18.0-305.190.1.el8_4

kernel

Red Hat rhel_aus 8.4 baseosRed Hat rhel_eus_long_life 8.4 baseos

Fixed in:

0:4.18.0-305.190.1.el8_4

kernel-abi-stablelists

Red Hat rhel_aus 8.4 baseosRed Hat rhel_eus_long_life 8.4 baseos

Fixed in:

0:4.18.0-305.190.1.el8_4

kernel-core

Red Hat rhel_aus 8.4 baseosRed Hat rhel_eus_long_life 8.4 baseos

Fixed in:

0:4.18.0-305.190.1.el8_4

kernel-debug

Red Hat rhel_aus 8.4 baseosRed Hat rhel_eus_long_life 8.4 baseos

Fixed in:

0:4.18.0-305.190.1.el8_4

kernel-debug-core

Red Hat rhel_aus 8.4 baseosRed Hat rhel_eus_long_life 8.4 baseos

Fixed in:

0:4.18.0-305.190.1.el8_4

kernel-debug-debuginfo

Red Hat rhel_aus 8.4 baseosRed Hat rhel_eus_long_life 8.4 baseos

Fixed in:

0:4.18.0-305.190.1.el8_4

kernel-debug-devel

Red Hat rhel_aus 8.4 baseosRed Hat rhel_eus_long_life 8.4 baseos

Fixed in:

0:4.18.0-305.190.1.el8_4

kernel-debug-modules

Red Hat rhel_aus 8.4 baseosRed Hat rhel_eus_long_life 8.4 baseos

Fixed in:

0:4.18.0-305.190.1.el8_4

References

https://access.redhat.com/errata/RHSA-2026:14165

https://access.redhat.com/security/updates/classification/#important

https://bugzilla.redhat.com/show_bug.cgi?id=2439887

https://bugzilla.redhat.com/show_bug.cgi?id=2444398

https://bugzilla.redhat.com/show_bug.cgi?id=2454844

https://bugzilla.redhat.com/show_bug.cgi?id=2460538

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14165.json

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Upstream

CVE-2025-71238 CVE-2026-23193 CVE-2026-31402 CVE-2026-31431 CVE-2026-43077

Ecosystems

Red Hat rhel_aus 8.4 baseos Red Hat rhel_eus_long_life 8.4 baseos

Timeline

PublishedMay 6, 2026

ModifiedMay 7, 2026

RHSA-2026:14165 | Mondoo Vulnerability Intelligence