Linux · Security advisory · June 24, 2026
RHSA-2026:26427: Security update for 23 packages
RHSA-2026:26427, released June 24, 2026, fixes 8 CVEs across 23 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
8
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0047
40th percentile
Priority of the 8 CVEs
Patch now 0
Urgent 0
High 8
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-abi-stablelists | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-core | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-debug | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-debug-core | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-debug-devel | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-debug-modules | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-debug-modules-extra | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-devel | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-doc | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-modules | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-modules-extra | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-tools | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-tools-libs | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-tools-libs-devel | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-zfcpdump | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-zfcpdump-core | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-zfcpdump-devel | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-zfcpdump-modules | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| kernel-zfcpdump-modules-extra | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| perf | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
| python3-perf | RHEL 8 | 0:4.18.0-553.134.1.el8_10 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2026-31669 | mptcp: fix slab-use-after-free in __inet_lookup_established | 9.8 | 0.0047 | None reported | |
| High | CVE-2026-46125 | wifi: mac80211: remove station if connection prep fails | 8.8 | 0.0030 | None reported | |
| High | CVE-2026-46056 | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers | 8.8 | 0.0028 | None reported | |
| High | CVE-2026-43110 | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF ev... | 8.8 | 0.0027 | None reported | |
| High | CVE-2026-31786 | kernel: In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c T... | 7.8 | 0.0020 | None reported | |
| High | CVE-2026-31787 | kernel: In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting pr... | 7.8 | 0.0018 | None reported | |
| High | CVE-2026-43329 | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 7.8 | 0.0018 | None reported | |
| High | CVE-2026-46152 | wifi: mac80211: drop stray 'static' from fast-RX rx_result | 8.8 | 0.0017 | None reported |
Showing 1 to 8 of 8
1