RHSA-2026:36767

Details:

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (CVE-2024-27398)

• kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125)

• kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

• kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

• kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

• kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)

• kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)

• kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984)

• kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)

• kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)

Bug Fix(es) and Enhancement(s):

• Kernel panic while shutting down ice driver due to use-after-free [rhel-9.4.z] (JIRA:RHEL-177523)

• crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [rhel-9.4.z] (JIRA:RHEL-182538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.