RHSA-2026:39371

Details:

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)

• kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

• kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)

• kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

• kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

• kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074)

• kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330)

• kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414)

• kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)

• kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)

• kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135)

• kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242)

• kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

• kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.