Linux · Security advisory · June 24, 2026

RHSA-2026:64767: kernel security update

RHSA-2026:64767, released June 24, 2026, fixes 10 CVEs in kernel (version 6.12.0-55.103.1.el10_0). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
10
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0071
53rd percentile

Priority of the 10 CVEs

Patch now 0 Urgent 1 High 9 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelRHEL 106.12.0-55.103.1.el10_0

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-46155 linux: In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2_compo... 9.1 0.0048 None reported
High CVE-2026-63886 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... 9.8 0.0071 None reported
High CVE-2026-53006 ipv6: fix possible UAF in icmpv6_rcv() 9.8 0.0039 None reported
High CVE-2026-43114 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k... 9.4 0.0037 None reported
High CVE-2026-46099 net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels 8.1 0.0029 None reported
High CVE-2026-46056 Bluetooth: hci_event: fix potential UAF in SSP passkey handlers 8.8 0.0028 None reported
High CVE-2025-40149 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). 8.8 0.0017 None reported
High CVE-2026-64304 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths... 8.8 0.0017 None reported
High CVE-2026-46145 kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko point... 7.8 0.0015 None reported
High CVE-2026-53016 crypto: ccp - copy IV using skcipher ivsize 7.8 0.0014 None reported
Showing 1 to 10 of 10 1