# RHSA-2026:55445: kernel security update

RHSA-2026:55445, released June 24, 2026, fixes 12 CVEs in kernel (version 6.12.0-55.98.1.el10_0). None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/rhsa-2026-55445
- Platform: Linux
- Released: Jun 24, 2026
- Priority: Urgent (Closes CVE-2025-10263, rated Critical)
- CVEs: 12, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://access.redhat.com/errata/RHSA-2026:55445

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | RHEL 10 | 6.12.0-55.98.1.el10_0 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-10263](https://patchblox.com/security/data/cve/CVE-2025-10263.md) | Urgent | ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] | 9.3 | 0.0054 |  |
| [CVE-2026-23455](https://patchblox.com/security/data/cve/CVE-2026-23455.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng... | 9.1 | 0.0159 |  |
| [CVE-2026-53264](https://patchblox.com/security/data/cve/CVE-2026-53264.md) | High | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 7.8 | 0.0049 |  |
| [CVE-2026-53000](https://patchblox.com/security/data/cve/CVE-2026-53000.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Flor... | 7.8 | 0.0018 |  |
| [CVE-2025-71089](https://patchblox.com/security/data/cve/CVE-2025-71089.md) | High | iommu: disable SVA when CONFIG_X86 is set | 7.8 | 0.0016 |  |
| [CVE-2026-31488](https://patchblox.com/security/data/cve/CVE-2026-31488.md) | High | drm/amd/display: Do not skip unrelated mode changes in DSC validation | 7.8 | 0.0014 |  |
| [CVE-2026-53059](https://patchblox.com/security/data/cve/CVE-2026-53059.md) | High | dm log: fix out-of-bounds write due to region_count overflow | 7.8 | 0.0014 |  |
| [CVE-2026-45998](https://patchblox.com/security/data/cve/CVE-2026-45998.md) | High | rxrpc: Fix potential UAF after skb_unshare() failure | 7.8 | 0.0014 |  |
| [CVE-2026-43279](https://patchblox.com/security/data/cve/CVE-2026-43279.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes... | 7.8 | 0.0012 |  |
| [CVE-2026-23375](https://patchblox.com/security/data/cve/CVE-2026-23375.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes f... | 7.5 | 0.0012 |  |
| [CVE-2026-23110](https://patchblox.com/security/data/cve/CVE-2026-23110.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: c... | 7.8 | 0.0011 |  |
| [CVE-2025-71131](https://patchblox.com/security/data/cve/CVE-2025-71131.md) | Routine | kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_a... | 5.5 | 0.0031 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo