Linux · Security advisory · June 24, 2026

RHSA-2026:25217: Security update for 72 packages

RHSA-2026:25217, released June 24, 2026, fixes 11 CVEs across 72 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
11
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0073
54th percentile

Priority of the 11 CVEs

Patch now 0 Urgent 0 High 11 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelRHEL 90:5.14.0-687.15.1.el9_8
kernel-64kRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-debugRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-debug-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-debug-develRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-debug-devel-matchedRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-debug-modulesRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-debug-modules-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-debug-modules-extraRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-develRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-devel-matchedRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-modulesRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-modules-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-64k-modules-extraRHEL 90:5.14.0-687.15.1.el9_8
kernel-abi-stablelistsRHEL 90:5.14.0-687.15.1.el9_8
kernel-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-debugRHEL 90:5.14.0-687.15.1.el9_8
kernel-debug-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-debug-develRHEL 90:5.14.0-687.15.1.el9_8
kernel-debug-devel-matchedRHEL 90:5.14.0-687.15.1.el9_8
kernel-debug-modulesRHEL 90:5.14.0-687.15.1.el9_8
kernel-debug-modules-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-debug-modules-extraRHEL 90:5.14.0-687.15.1.el9_8
kernel-debug-uki-virtRHEL 90:5.14.0-687.15.1.el9_8
kernel-develRHEL 90:5.14.0-687.15.1.el9_8
kernel-devel-matchedRHEL 90:5.14.0-687.15.1.el9_8
kernel-docRHEL 90:5.14.0-687.15.1.el9_8
kernel-modulesRHEL 90:5.14.0-687.15.1.el9_8
kernel-modules-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-modules-extraRHEL 90:5.14.0-687.15.1.el9_8
kernel-rtRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-64kRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-64k-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-64k-debugRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-64k-debug-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-64k-debug-develRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-64k-debug-modulesRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-64k-debug-modules-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-64k-debug-modules-extraRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-64k-develRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-64k-modulesRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-64k-modules-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-64k-modules-extraRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-debugRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-debug-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-debug-develRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-debug-modulesRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-debug-modules-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-debug-modules-extraRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-develRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-modulesRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-modules-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-rt-modules-extraRHEL 90:5.14.0-687.15.1.el9_8
kernel-toolsRHEL 90:5.14.0-687.15.1.el9_8
kernel-tools-libsRHEL 90:5.14.0-687.15.1.el9_8
kernel-tools-libs-develRHEL 90:5.14.0-687.15.1.el9_8
kernel-uki-virtRHEL 90:5.14.0-687.15.1.el9_8
kernel-uki-virt-addonsRHEL 90:5.14.0-687.15.1.el9_8
kernel-zfcpdumpRHEL 90:5.14.0-687.15.1.el9_8
kernel-zfcpdump-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-zfcpdump-develRHEL 90:5.14.0-687.15.1.el9_8
kernel-zfcpdump-devel-matchedRHEL 90:5.14.0-687.15.1.el9_8
kernel-zfcpdump-modulesRHEL 90:5.14.0-687.15.1.el9_8
kernel-zfcpdump-modules-coreRHEL 90:5.14.0-687.15.1.el9_8
kernel-zfcpdump-modules-extraRHEL 90:5.14.0-687.15.1.el9_8
libperfRHEL 90:5.14.0-687.15.1.el9_8
perfRHEL 90:5.14.0-687.15.1.el9_8
python3-perfRHEL 90:5.14.0-687.15.1.el9_8
rtlaRHEL 90:5.14.0-687.15.1.el9_8
rvRHEL 90:5.14.0-687.15.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-43501 ipv6: rpl: reserve mac_len headroom when recompressed SRH grows 9.8 0.0073 None reported
High CVE-2026-43037 ip6_tunnel: clear skb2->cb[] in ip4ip6_err() 9.8 0.0069 None reported
High CVE-2026-43125 dlm: validate length in dlm_search_rsb_tree 9.8 0.0054 None reported
High CVE-2026-45852 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init... 7.8 0.0020 None reported
High CVE-2026-46181 RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() 7.8 0.0014 None reported
High CVE-2026-23216 scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() 8.4 0.0014 None reported
High CVE-2026-31419 net: bonding: fix use-after-free in bond_xmit_broadcast() 7.8 0.0013 None reported
High CVE-2026-31581 ALSA: 6fire: fix use-after-free on disconnect 7.8 0.0013 None reported
High CVE-2026-43056 linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in add_adev() erro... 7.8 0.0012 None reported
High CVE-2026-31508 net: openvswitch: Avoid releasing netdev before teardown completes 7.8 0.0011 None reported
High CVE-2026-43116 netfilter: ctnetlink: ensure safe access to master conntrack 7.8 0.0010 None reported
Showing 1 to 11 of 11 1