Linux · 
Red Hat · Security advisory · August 6, 2026
Red Hat · Security advisory · August 6, 2026RHSA-2026:64775: kernel security update
RHSA-2026:64775, released August 6, 2026, fixes 18 CVEs in kernel (version 6.12.0-211.52.1.el10_2). None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
18
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0058
47th percentile
Priority of the 18 CVEs
Patch now 0
Urgent 2
High 16
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel | RHEL 10 | 6.12.0-211.52.1.el10_2 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-46266 | linux: In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop in... | 9.1 | 0.0047 | None reported |
| Urgent | CVE-2026-53075 | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 | None reported |
| High | CVE-2026-53228 | ipv6: sit: reload inner IPv6 header after GSO offloads | 9.8 | 0.0058 | None reported |
| High | CVE-2026-46306 | flow_dissector: do not dissect PPPoE PFC frames | 8.1 | 0.0045 | None reported |
| High | CVE-2026-53235 | linux: In the Linux kernel, the following vulnerability has been resolved: net: add pskb_may_pull() to skb_gro_receive_list... | 7.8 | 0.0044 | None reported |
| High | CVE-2026-64597 | smb: client: fix double-free in SMB2_close() replay | 9.8 | 0.0036 | None reported |
| High | CVE-2025-38004 | can: bcm: add locking for bcm_op runtime updates | 7.8 | 0.0028 | None reported |
| High | CVE-2026-53275 | ipv6: mcast: Fix use-after-free when processing MLD queries | 8.8 | 0.0026 | None reported |
| High | CVE-2026-64287 | KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU | 8.2 | 0.0018 | None reported |
| High | CVE-2026-64265 | linux: In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_r... | 7.8 | 0.0017 | None reported |
| High | CVE-2026-64563 | rhashtable: clear stale iter->p on table restart | 8.1 | 0.0017 | None reported |
| High | CVE-2026-43339 | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... | 8.1 | 0.0016 | None reported |
| High | CVE-2026-53223 | kernel: In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue sk... | 8.1 | 0.0014 | None reported |
| High | CVE-2026-46015 | tcp: call sk_data_ready() after listener migration | 8.1 | 0.0014 | None reported |
| High | CVE-2026-23442 | ipv6: add NULL checks for idev in SRv6 paths | 7.8 | 0.0013 | None reported |
| High | CVE-2026-31503 | udp: Fix wildcard bind conflict check when using hash2 | 7.8 | 0.0013 | None reported |
| High | CVE-2026-53259 | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: anycast: insert aca into global hash under... | 7.8 | 0.0012 | None reported |
| High | CVE-2026-53277 | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table wal... | 8.8 | 0.0011 | None reported |
Showing 1 to 18 of 18
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.