Linux · Security advisory · June 24, 2026
RHSA-2026:27353: Security update for 23 packages
RHSA-2026:27353, released June 24, 2026, fixes 8 CVEs across 23 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
8
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0064
50th percentile
Priority of the 8 CVEs
Patch now 0
Urgent 0
High 8
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-abi-stablelists | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-core | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-debug | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-debug-core | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-debug-devel | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-debug-modules | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-debug-modules-extra | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-devel | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-doc | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-modules | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-modules-extra | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-tools | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-tools-libs | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-tools-libs-devel | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-zfcpdump | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-zfcpdump-core | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-zfcpdump-devel | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-zfcpdump-modules | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| kernel-zfcpdump-modules-extra | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| perf | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
| python3-perf | RHEL 8 | 0:4.18.0-553.136.1.el8_10 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2026-46331 | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 | None reported | |
| High | CVE-2026-46135 | nvmet-tcp: fix race between ICReq handling and queue teardown | 9.8 | 0.0040 | None reported | |
| High | CVE-2026-46145 | kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko point... | 7.8 | 0.0015 | None reported | |
| High | CVE-2026-31488 | drm/amd/display: Do not skip unrelated mode changes in DSC validation | 7.8 | 0.0014 | None reported | |
| High | CVE-2026-31419 | net: bonding: fix use-after-free in bond_xmit_broadcast() | 8.8 | 0.0013 | None reported | |
| High | CVE-2026-43279 | kernel: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes... | 7.8 | 0.0012 | None reported | |
| High | CVE-2026-43056 | kernel-default-base: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues we... | 8.8 | 0.0012 | None reported | |
| High | CVE-2026-46090 | ALSA: aloop: Fix peer runtime UAF during format-change stop | 7.8 | 0.0010 | None reported |
Showing 1 to 8 of 8
1