RHSA-2026:19568

Description

Red Hat Security Advisory: kernel security update

CVSS Metrics

• v3.1•HIGH•Score: 8.1CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Systems

• redhat•kernel

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-core

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-debug

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-debug-core

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-debug-debuginfo

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-debug-devel

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-debug-devel-matched

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-debug-modules

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-debug-modules-core

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-debug-modules-extra

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-debuginfo

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-devel

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-devel-matched

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-modules

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-modules-core

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-64k-modules-extra

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-abi-stablelists

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-core

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debug

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debug-core

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debug-debuginfo

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debug-devel

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debug-devel-matched

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debug-modules

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debug-modules-core

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debug-modules-extra

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debug-uki-virt

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debuginfo

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debuginfo-common-aarch64

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debuginfo-common-ppc64le

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debuginfo-common-s390x

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-debuginfo-common-x86_64

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-devel

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-devel-matched

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-doc

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-modules

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-modules-core

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-modules-extra

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-rt

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-rt-64k

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-rt-64k-core

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-rt-64k-debug

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-rt-64k-debug-core

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-rt-64k-debug-debuginfo

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-rt-64k-debug-devel

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-rt-64k-debug-modules

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-rt-64k-debug-modules-core

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-rt-64k-debug-modules-extra

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

• redhat•kernel-rt-64k-debuginfo

  < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8 | < 0:5.14.0-687.10.1.el9_8

Showing first 50 affected entries in server-rendered view.

References (90)

• https://access.redhat.com/errata/RHSA-2026:19568
• https://access.redhat.com/security/updates/classification/#important
• https://bugzilla.redhat.com/show_bug.cgi?id=2394648
• https://bugzilla.redhat.com/show_bug.cgi?id=2425046
• https://bugzilla.redhat.com/show_bug.cgi?id=2429602
• https://bugzilla.redhat.com/show_bug.cgi?id=2432389
• https://bugzilla.redhat.com/show_bug.cgi?id=2432400
• https://bugzilla.redhat.com/show_bug.cgi?id=2439852
• https://bugzilla.redhat.com/show_bug.cgi?id=2439931
• https://bugzilla.redhat.com/show_bug.cgi?id=2448745
• https://bugzilla.redhat.com/show_bug.cgi?id=2453803
• https://bugzilla.redhat.com/show_bug.cgi?id=2454844
• https://bugzilla.redhat.com/show_bug.cgi?id=2461107
• https://bugzilla.redhat.com/show_bug.cgi?id=2461521
• https://bugzilla.redhat.com/show_bug.cgi?id=2467059
• https://bugzilla.redhat.com/show_bug.cgi?id=2467144
• https://bugzilla.redhat.com/show_bug.cgi?id=2467771
• https://bugzilla.redhat.com/show_bug.cgi?id=2477015
• https://bugzilla.redhat.com/show_bug.cgi?id=2477802
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19568.json
• https://access.redhat.com/security/cve/CVE-2025-39766
• https://www.cve.org/CVERecord?id=CVE-2025-39766
• https://nvd.nist.gov/vuln/detail/CVE-2025-39766
• https://lore.kernel.org/linux-cve-announce/2025091144-CVE-2025-39766-7465@gregkh/T
• https://access.redhat.com/security/cve/CVE-2025-68741
• https://www.cve.org/CVERecord?id=CVE-2025-68741
• https://nvd.nist.gov/vuln/detail/CVE-2025-68741
• https://lore.kernel.org/linux-cve-announce/2025122415-CVE-2025-68741-894a@gregkh/T
• https://access.redhat.com/security/cve/CVE-2025-71116
• https://www.cve.org/CVERecord?id=CVE-2025-71116
• https://nvd.nist.gov/vuln/detail/CVE-2025-71116
• https://lore.kernel.org/linux-cve-announce/2026011414-CVE-2025-71116-e57d@gregkh/T
• https://access.redhat.com/security/cve/CVE-2026-22984
• https://www.cve.org/CVERecord?id=CVE-2026-22984
• https://nvd.nist.gov/vuln/detail/CVE-2026-22984
• https://lore.kernel.org/linux-cve-announce/2026012349-CVE-2026-22984-001c@gregkh/T
• https://access.redhat.com/security/cve/CVE-2026-22990
• https://www.cve.org/CVERecord?id=CVE-2026-22990
• https://nvd.nist.gov/vuln/detail/CVE-2026-22990
• https://lore.kernel.org/linux-cve-announce/2026012351-CVE-2026-22990-a62e@gregkh/T
• https://access.redhat.com/security/cve/CVE-2026-23136
• https://www.cve.org/CVERecord?id=CVE-2026-23136
• https://nvd.nist.gov/vuln/detail/CVE-2026-23136
• https://lore.kernel.org/linux-cve-announce/2026021428-CVE-2026-23136-f28c@gregkh/T
• https://access.redhat.com/security/cve/CVE-2026-23204
• https://www.cve.org/CVERecord?id=CVE-2026-23204
• https://nvd.nist.gov/vuln/detail/CVE-2026-23204
• https://lore.kernel.org/linux-cve-announce/2026021437-CVE-2026-23204-be85@gregkh/T
• https://access.redhat.com/security/cve/CVE-2026-23270
• https://www.cve.org/CVERecord?id=CVE-2026-23270
• https://nvd.nist.gov/vuln/detail/CVE-2026-23270
• https://lore.kernel.org/linux-cve-announce/2026031847-CVE-2026-23270-cb9a@gregkh/T
• https://access.redhat.com/security/cve/CVE-2026-23401
• https://www.cve.org/CVERecord?id=CVE-2026-23401
• https://nvd.nist.gov/vuln/detail/CVE-2026-23401
• https://lore.kernel.org/linux-cve-announce/2026040108-CVE-2026-23401-956d@gregkh/T
• https://access.redhat.com/security/cve/CVE-2026-31402
• https://www.cve.org/CVERecord?id=CVE-2026-31402
• https://nvd.nist.gov/vuln/detail/CVE-2026-31402
• https://lore.kernel.org/linux-cve-announce/2026040327-CVE-2026-31402-3e6a@gregkh/T
• https://access.redhat.com/security/cve/CVE-2026-31532
• https://www.cve.org/CVERecord?id=CVE-2026-31532
• https://nvd.nist.gov/vuln/detail/CVE-2026-31532
• https://lore.kernel.org/linux-cve-announce/2026042349-CVE-2026-31532-a820@gregkh/T
• https://access.redhat.com/security/cve/CVE-2026-31607
• https://www.cve.org/CVERecord?id=CVE-2026-31607
• https://nvd.nist.gov/vuln/detail/CVE-2026-31607
• https://lore.kernel.org/linux-cve-announce/2026042420-CVE-2026-31607-7bac@gregkh/T
• https://access.redhat.com/security/cve/CVE-2026-43128
• https://www.cve.org/CVERecord?id=CVE-2026-43128
• https://nvd.nist.gov/vuln/detail/CVE-2026-43128
• https://lore.kernel.org/linux-cve-announce/2026050620-CVE-2026-43128-5ff4@gregkh/T
• https://access.redhat.com/security/cve/CVE-2026-43163
• https://www.cve.org/CVERecord?id=CVE-2026-43163
• https://nvd.nist.gov/vuln/detail/CVE-2026-43163
• https://lore.kernel.org/linux-cve-announce/2026050632-CVE-2026-43163-86e1@gregkh/T
• https://access.redhat.com/security/cve/CVE-2026-43284
• https://access.redhat.com/security/vulnerabilities/RHSB-2026-003
• https://www.cve.org/CVERecord?id=CVE-2026-43284
• https://nvd.nist.gov/vuln/detail/CVE-2026-43284
• https://dirtyfrag.io/
• https://access.redhat.com/security/cve/CVE-2026-46300
• https://www.cve.org/CVERecord?id=CVE-2026-46300
• https://nvd.nist.gov/vuln/detail/CVE-2026-46300
• https://access.redhat.com/security/cve/CVE-2026-46333
• https://access.redhat.com/security/vulnerabilities/RHSB-2026-004
• https://www.cve.org/CVERecord?id=CVE-2026-46333
• https://nvd.nist.gov/vuln/detail/CVE-2026-46333
• https://github.com/torvalds/linux/commit/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a
• https://blog.qualys.com/vulnerabilities-threat-research/2026/05/20/cve-2026-46333-local-root-privilege-escalation-and-credential-disclosure-in-the-linux-kernel-ptrace-path