RHSA-2026:2535
Advisory lineage Upstream: 11 Downstream: 0
Published: 12 Feb 2026, 10:10
Last modified:08 May 2026, 10:06
Vulnerability Summary
Overall Risk (default)
medium
31/100 CVSS Score
7.8 HIGH
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
12 Feb 2026, 10:10
Published
Vulnerability first disclosed
08 May 2026, 10:06
Last Modified
Vulnerability information updated
Description
Red Hat Security Advisory: kernel security update
CVSS Metrics
- v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Systems
- redhat•bpftool
< 0:4.18.0-477.128.1.el8_8
- redhat•bpftool-debuginfo
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-abi-stablelists
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-core
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-debug
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-debug-core
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-debug-debuginfo
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-debug-devel
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-debug-modules
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-debug-modules-extra
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-debuginfo
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-debuginfo-common-ppc64le
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-debuginfo-common-x86_64
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-devel
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-doc
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-modules
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-modules-extra
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-tools
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-tools-debuginfo
< 0:4.18.0-477.128.1.el8_8
- redhat•kernel-tools-libs
< 0:4.18.0-477.128.1.el8_8
- redhat•perf
< 0:4.18.0-477.128.1.el8_8
- redhat•perf-debuginfo
< 0:4.18.0-477.128.1.el8_8
- redhat•python3-perf
< 0:4.18.0-477.128.1.el8_8
- redhat•python3-perf-debuginfo
< 0:4.18.0-477.128.1.el8_8
References (58)
- https://access.redhat.com/errata/RHSA-2026:2535
- https://access.redhat.com/security/updates/classification/#moderate
- https://bugzilla.redhat.com/show_bug.cgi?id=2373326
- https://bugzilla.redhat.com/show_bug.cgi?id=2402193
- https://bugzilla.redhat.com/show_bug.cgi?id=2407333
- https://bugzilla.redhat.com/show_bug.cgi?id=2414494
- https://bugzilla.redhat.com/show_bug.cgi?id=2418832
- https://bugzilla.redhat.com/show_bug.cgi?id=2418876
- https://bugzilla.redhat.com/show_bug.cgi?id=2419858
- https://bugzilla.redhat.com/show_bug.cgi?id=2419870
- https://bugzilla.redhat.com/show_bug.cgi?id=2419902
- https://bugzilla.redhat.com/show_bug.cgi?id=2420366
- https://bugzilla.redhat.com/show_bug.cgi?id=2422836
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2535.json
- https://access.redhat.com/security/cve/CVE-2023-53673
- https://www.cve.org/CVERecord?id=CVE-2023-53673
- https://nvd.nist.gov/vuln/detail/CVE-2023-53673
- https://lore.kernel.org/linux-cve-announce/2025100706-CVE-2023-53673-36b9@gregkh/T
- https://access.redhat.com/security/cve/CVE-2023-53751
- https://www.cve.org/CVERecord?id=CVE-2023-53751
- https://nvd.nist.gov/vuln/detail/CVE-2023-53751
- https://lore.kernel.org/linux-cve-announce/2025120842-CVE-2023-53751-2ff2@gregkh/T
- https://access.redhat.com/security/cve/CVE-2023-53833
- https://www.cve.org/CVERecord?id=CVE-2023-53833
- https://nvd.nist.gov/vuln/detail/CVE-2023-53833
- https://lore.kernel.org/linux-cve-announce/2025120954-CVE-2023-53833-09d9@gregkh/T
- https://access.redhat.com/security/cve/CVE-2025-38022
- https://www.cve.org/CVERecord?id=CVE-2025-38022
- https://nvd.nist.gov/vuln/detail/CVE-2025-38022
- https://lore.kernel.org/linux-cve-announce/2025061846-CVE-2025-38022-41b3@gregkh/T
- https://access.redhat.com/security/cve/CVE-2025-40096
- https://www.cve.org/CVERecord?id=CVE-2025-40096
- https://nvd.nist.gov/vuln/detail/CVE-2025-40096
- https://lore.kernel.org/linux-cve-announce/2025103016-CVE-2025-40096-09cc@gregkh/T
- https://access.redhat.com/security/cve/CVE-2025-40154
- https://www.cve.org/CVERecord?id=CVE-2025-40154
- https://nvd.nist.gov/vuln/detail/CVE-2025-40154
- https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40154-fd98@gregkh/T
- https://access.redhat.com/security/cve/CVE-2025-40240
- https://www.cve.org/CVERecord?id=CVE-2025-40240
- https://nvd.nist.gov/vuln/detail/CVE-2025-40240
- https://lore.kernel.org/linux-cve-announce/2025120403-CVE-2025-40240-745a@gregkh/T
- https://access.redhat.com/security/cve/CVE-2025-40258
- https://www.cve.org/CVERecord?id=CVE-2025-40258
- https://nvd.nist.gov/vuln/detail/CVE-2025-40258
- https://lore.kernel.org/linux-cve-announce/2025120433-CVE-2025-40258-d10d@gregkh/T
- https://access.redhat.com/security/cve/CVE-2025-40304
- https://www.cve.org/CVERecord?id=CVE-2025-40304
- https://nvd.nist.gov/vuln/detail/CVE-2025-40304
- https://lore.kernel.org/linux-cve-announce/2025120820-CVE-2025-40304-47b3@gregkh/T
- https://access.redhat.com/security/cve/CVE-2025-40322
- https://www.cve.org/CVERecord?id=CVE-2025-40322
- https://nvd.nist.gov/vuln/detail/CVE-2025-40322
- https://lore.kernel.org/linux-cve-announce/2025120823-CVE-2025-40322-6355@gregkh/T
- https://access.redhat.com/security/cve/CVE-2025-68301
- https://www.cve.org/CVERecord?id=CVE-2025-68301
- https://nvd.nist.gov/vuln/detail/CVE-2025-68301
- https://lore.kernel.org/linux-cve-announce/2025121643-CVE-2025-68301-be31@gregkh/T