Linux · Security advisory · September 24, 2026

RHSA-2026:71232: Security update for 72 packages

RHSA-2026:71232, released September 24, 2026, fixes 14 CVEs across 72 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
14
3 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0147
73rd percentile

Priority of the 14 CVEs

Patch now 0 Urgent 3 High 11 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelRHEL 90:5.14.0-687.51.1.el9_8
kernel-64kRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-debugRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-debug-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-debug-develRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-debug-devel-matchedRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-debug-modulesRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-debug-modules-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-debug-modules-extraRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-develRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-devel-matchedRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-modulesRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-modules-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-64k-modules-extraRHEL 90:5.14.0-687.51.1.el9_8
kernel-abi-stablelistsRHEL 90:5.14.0-687.51.1.el9_8
kernel-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-debugRHEL 90:5.14.0-687.51.1.el9_8
kernel-debug-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-debug-develRHEL 90:5.14.0-687.51.1.el9_8
kernel-debug-devel-matchedRHEL 90:5.14.0-687.51.1.el9_8
kernel-debug-modulesRHEL 90:5.14.0-687.51.1.el9_8
kernel-debug-modules-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-debug-modules-extraRHEL 90:5.14.0-687.51.1.el9_8
kernel-debug-uki-virtRHEL 90:5.14.0-687.51.1.el9_8
kernel-develRHEL 90:5.14.0-687.51.1.el9_8
kernel-devel-matchedRHEL 90:5.14.0-687.51.1.el9_8
kernel-docRHEL 90:5.14.0-687.51.1.el9_8
kernel-modulesRHEL 90:5.14.0-687.51.1.el9_8
kernel-modules-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-modules-extraRHEL 90:5.14.0-687.51.1.el9_8
kernel-rtRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-64kRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-64k-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-64k-debugRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-64k-debug-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-64k-debug-develRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-64k-debug-modulesRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-64k-debug-modules-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-64k-debug-modules-extraRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-64k-develRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-64k-modulesRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-64k-modules-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-64k-modules-extraRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-debugRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-debug-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-debug-develRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-debug-modulesRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-debug-modules-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-debug-modules-extraRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-develRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-modulesRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-modules-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-rt-modules-extraRHEL 90:5.14.0-687.51.1.el9_8
kernel-toolsRHEL 90:5.14.0-687.51.1.el9_8
kernel-tools-libsRHEL 90:5.14.0-687.51.1.el9_8
kernel-tools-libs-develRHEL 90:5.14.0-687.51.1.el9_8
kernel-uki-virtRHEL 90:5.14.0-687.51.1.el9_8
kernel-uki-virt-addonsRHEL 90:5.14.0-687.51.1.el9_8
kernel-zfcpdumpRHEL 90:5.14.0-687.51.1.el9_8
kernel-zfcpdump-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-zfcpdump-develRHEL 90:5.14.0-687.51.1.el9_8
kernel-zfcpdump-devel-matchedRHEL 90:5.14.0-687.51.1.el9_8
kernel-zfcpdump-modulesRHEL 90:5.14.0-687.51.1.el9_8
kernel-zfcpdump-modules-coreRHEL 90:5.14.0-687.51.1.el9_8
kernel-zfcpdump-modules-extraRHEL 90:5.14.0-687.51.1.el9_8
libperfRHEL 90:5.14.0-687.51.1.el9_8
perfRHEL 90:5.14.0-687.51.1.el9_8
python3-perfRHEL 90:5.14.0-687.51.1.el9_8
rtlaRHEL 90:5.14.0-687.51.1.el9_8
rvRHEL 90:5.14.0-687.51.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-64564 sctp: don't free the ASCONF's own transport in DEL-IP processing 9.8 0.0143 None reported
Urgent CVE-2026-89846 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rsp_info_len to avoid OOB s... 9.1 0.0071 None reported
Urgent CVE-2026-64534 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_un... 9.8 0.0032 None reported
High CVE-2026-74469 sctp: prevent peer transport count overflow 8.8 0.0147 None reported
High CVE-2026-64383 smb: client: fix double-free in SMB2_flush() replay 9.8 0.0046 None reported
High CVE-2026-80844 xfrm: ah6: validate routing header segments_left 8.3 0.0043 None reported
High CVE-2026-81000 linux: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user()... 8.3 0.0036 None reported
High CVE-2026-63831 mac802154: llsec: add skb_cow_data() before in-place crypto 8.8 0.0031 None reported
High CVE-2026-23007 kernel: In the Linux kernel, the following vulnerability has been resolved: block: zero non-PI portion of auto integrity buff... 8.3 0.0020 None reported
High CVE-2026-68201 linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its... 8.3 0.0017 None reported
High CVE-2026-72261 linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Validate size in snd_so... 8.3 0.0017 None reported
High CVE-2026-53005 af_unix: Drop all SCM attributes for SOCKMAP. 8.3 0.0014 None reported
High CVE-2026-64053 kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.3 0.0013 None reported
High CVE-2026-63802 blk-cgroup: fix UAF in __blkcg_rstat_flush() 8.3 0.0010 None reported
Showing 1 to 14 of 14 1