# RHSA-2026:67471: kernel security update

RHSA-2026:67471, released August 10, 2026, fixes 12 CVEs in kernel (version 6.12.0-211.55.1.el10_2). None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/rhsa-2026-67471
- Platform: Linux
- Released: Aug 10, 2026
- Priority: High (Closes CVE-2026-53131, high severity)
- CVEs: 12, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://access.redhat.com/errata/RHSA-2026:67471

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | RHEL 10 | 6.12.0-211.55.1.el10_2 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-53131](https://patchblox.com/security/data/cve/CVE-2026-53131.md) | High | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 |  |
| [CVE-2026-63889](https://patchblox.com/security/data/cve/CVE-2026-63889.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0036 |  |
| [CVE-2026-31539](https://patchblox.com/security/data/cve/CVE-2026-31539.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirect_socket.recv_i... | 8.8 | 0.0033 |  |
| [CVE-2026-43248](https://patchblox.com/security/data/cve/CVE-2026-43248.md) | High | vhost: move vdpa group bound check to vhost_vdpa | 8.8 | 0.0016 |  |
| [CVE-2026-43368](https://patchblox.com/security/data/cve/CVE-2026-43368.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential overflow of shmem scatter... | 8.8 | 0.0016 |  |
| [CVE-2026-68264](https://patchblox.com/security/data/cve/CVE-2026-68264.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe/pt: Reset current_op in xe_pt_update_ops_... | 8.8 | 0.0014 |  |
| [CVE-2026-64111](https://patchblox.com/security/data/cve/CVE-2026-64111.md) | High | kernel-zfcpdump-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0014 |  |
| [CVE-2026-31479](https://patchblox.com/security/data/cve/CVE-2026-31479.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe: always keep track of remap prev/next Duri... | 8.8 | 0.0013 |  |
| [CVE-2026-31566](https://patchblox.com/security/data/cve/CVE-2026-31566.md) | High | drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib | 8.8 | 0.0013 |  |
| [CVE-2026-43370](https://patchblox.com/security/data/cve/CVE-2026-43370.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire... | 8.8 | 0.0012 |  |
| [CVE-2026-23466](https://patchblox.com/security/data/cve/CVE-2026-23466.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Open-code GGTT MMIO access protection GGT... | 8.8 | 0.0010 |  |
| [CVE-2026-31656](https://patchblox.com/security/data/cve/CVE-2026-31656.md) | High | drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat | 8.8 | 0.0009 |  |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.