Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

RHSA-2026:45114 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceRHSA-2026:45114

RHSA-2026:45114

HIGH7.3

Red Hat Security Advisory: kernel security update

Published Jul 24, 2026

Modified 2 days ago

Fix available

Details

Details:

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237)
kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110)
kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)
kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)
kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

Affected Packages(90 packages)

kernel

RHEL 10

Fixed in:

0:6.12.0-211.39.1.el10_2

kernel-64k

RHEL 10

Fixed in:

0:6.12.0-211.39.1.el10_2

kernel-64k-core

RHEL 10

Fixed in:

0:6.12.0-211.39.1.el10_2

kernel-64k-debug

RHEL 10

Fixed in:

0:6.12.0-211.39.1.el10_2

kernel-64k-debug-core

RHEL 10

Fixed in:

0:6.12.0-211.39.1.el10_2

kernel-64k-debug-debuginfo

RHEL 10

Fixed in:

0:6.12.0-211.39.1.el10_2

kernel-64k-debug-devel

RHEL 10

Fixed in:

0:6.12.0-211.39.1.el10_2

kernel-64k-debug-devel-matched

RHEL 10

Fixed in:

0:6.12.0-211.39.1.el10_2

kernel-64k-debug-modules

RHEL 10

Fixed in:

0:6.12.0-211.39.1.el10_2

kernel-64k-debug-modules-core

RHEL 10

Fixed in:

0:6.12.0-211.39.1.el10_2

References

https://access.redhat.com/errata/RHSA-2026:45114

https://access.redhat.com/security/updates/classification/#important

https://bugzilla.redhat.com/show_bug.cgi?id=2418829

https://bugzilla.redhat.com/show_bug.cgi?id=2436755

https://bugzilla.redhat.com/show_bug.cgi?id=2464093

https://bugzilla.redhat.com/show_bug.cgi?id=2481972

https://bugzilla.redhat.com/show_bug.cgi?id=2492277

https://bugzilla.redhat.com/show_bug.cgi?id=2492413

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_45114.json

CVSS Analysis

CVSS v3.1

7.3

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

LowI:L

Availability

HighA:H

7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Upstream

CVE-2025-40237 CVE-2026-23110 CVE-2026-31692 CVE-2026-46099 CVE-2026-52973 CVE-2026-53059 CVE-2026-64561

Ecosystems

Timeline

PublishedJul 24, 2026

ModifiedSep 14, 2026