RHEL 10 : kernel (RHSA-2026:97040)

medium Nessus Plugin ID 378134

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:97040 advisory.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Linux kernel: Denial of Service via unsafe requeue in rxrpc_recvmsg (CVE-2026-23066)

* kernel: Kernel: Race condition in espintcp can lead to denial of service (CVE-2026-23239)

* kernel: Linux kernel: Denial of service due to a race condition in the TLS subsystem (CVE-2026-23240)

* kernel: Linux kernel: xfrm single-frag length not properly limited ()

* kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942)

* kernel: Revert wireguard: device: enable threaded NAPI (CVE-2026-52945)

* kernel: iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset (CVE-2026-52952)

* kernel: nfsd: fix dead ACL conflict guard in nfsd4_create (CVE-2026-53395)

* kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)

* kernel: nvme-pci: fix dma_vecs leak on p2p memory (CVE-2026-64020)

* kernel: xfrm: route MIGRATE notifications to caller's netns (CVE-2026-63914)

* kernel: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (CVE-2026-64025)

* kernel: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (CVE-2026-63987)

* kernel: net: hsr: fix potential OOB access in supervision frame handling (CVE-2026-64000)

* kernel: bpf: Reject fragmented frames in devmap (CVE-2026-64355)

* kernel: net/handshake: Take a long-lived file reference at submit (CVE-2026-64523)

* kernel: i2c: core: fix adapter deregistration race (CVE-2026-64279)

* kernel: proc: protect ptrace_may_access() with exec_update_lock (FD links) (CVE-2026-64375)

* kernel: iio: event: Fix event FIFO reset race (CVE-2026-64496)

* kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle ()

* kernel: Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups (CVE-2026-68390)

* kernel: drm/amdgpu: reject mapping a reserved doorbell to a new queue (CVE-2026-68103)

* kernel: tcp: fix TIME_WAIT socket reference leak on PSP policy failure (CVE-2026-68379)

Bug Fix(es) and Enhancement(s):

* Backport ESWIN drivers from upstream 6.19 (JIRA:RHEL-129062)

* [IBM 10.3 FEAT] Expose die_id and die_cpumask (JIRA:RHEL-138728)

* [RHEL 10 CIFS]: return Permission denied when mount krb5 with multichannel and max_channels (JIRA:RHEL-151838)

* RHIVOS - Backport NXP OCOTP fuse driver (JIRA:RHEL-152643)

* [nfsv3/nfsv4] kernel crash while nfs_lookup_revalidate was triggered. (JIRA:RHEL-153335)

* Reorganize socket binary layout for data locality (UDP prerequisites) (JIRA:RHEL-145975)

* CIFS: mount with remount,invalid return success [rhel-10] (JIRA:RHEL-150776)

* xfstests generic/126 fails with pNFS SCSI (JIRA:RHEL-135095)

* [RHEL-10] BUG: kernel NULL pointer dereference, address: 0000000000000000 in pagemap_scan_pmd_entry (JIRA:RHEL-97168)

* Fix the Mac address issue during the vdpa enablement (JIRA:RHEL-127007)

* CCP PSP fails to reinitialize after hibernation causing TEE errors (JIRA:RHEL-130538)

* AMD PMF driver timing issue which causes the custom BIOS input event value could not be saved properly (JIRA:RHEL-130539)

* autofs: excessive log entries when listing contents of indirect mount from propagation private namespace [rhel-10] (JIRA:RHEL-134674)

* block layer: update with upstream v6.19 (JIRA:RHEL-144763)

* [centos-stream-10/main] Enable CONFIG_AQTION for aarch64 (JIRA:RHEL-150852)

* general protection fault during exportfs / nfsd4_revoke_states [rhel-10] (JIRA:RHEL-152916)

* RFE: Install proper modules when installing kernel-selftests-internal (JIRA:RHEL-102523)

* [Broadcom 10.2 feat] bnxt_re: Update driver to the latest upstream version (JIRA:RHEL-108694)

* [RHEL 10.3] Backport upstream cgroup commits up to v6.18 (JIRA:RHEL-113305)

* [Intel 10.3 FEAT] [NVL] IO: Add Intel Human Interface Device ID (JIRA:RHEL-117305)

* [RHEL 10.x] Rebase drivers/firmware/arm_scmi to upstream v6.17 (JIRA:RHEL-120360)

* block: fix ordering of recursive split IO (JIRA:RHEL-122816)

* Reorganize the TCP socket binary layout for data locality (JIRA:RHEL-123211)

* RHEL 10.3 updates for drivers/i2c/busses/i2c-i801.c (JIRA:RHEL-129782)

* [RHEL-10.2] selftests: memfd:memfd_test failed (JIRA:RHEL-132213)

* [rhel-10.2] RHEL6/buildcheck failed on x86_64 and s390x when use out-of-tree (JIRA:RHEL-132871)

* [RHEL-10] Kernel panic at kfree() to free kvm_task_sleep_node (JIRA:RHEL-141540)

* NVIDIA:PCI: Add PCI_BRIDGE_NO_ALIASES quirk for ASPEED AST1150 - RHEL 10.2 (JIRA:RHEL-143320)

* [RHEL-10.2 debug] kmemleak detected at blktests nvme/057 (JIRA:RHEL-143907)

* backport geneve: introduce double tunnel GSO/GRO support (JIRA:RHEL-145367)

* [rhel-10] Accessing /proc/sys/user/* may trigger spurious sys_resource SELinux denials (JIRA:RHEL-145590)

* [RHEL-10.3 FEAT] USB/TB code rebase of supported drivers to upstream v6.18 (JIRA:RHEL-147788)

* [HP Bug 10.3] [TI AMP] Speaker Right channel sound is siginificant small (JIRA:RHEL-148197)

* Backport core net locking changes (JIRA:RHEL-150155)

* ftrace: backports fixes from stable [rhel-10.3] (JIRA:RHEL-151695)

* [RHEL 10] Update the kernel/time codebase up to v6.18 with fixes (JIRA:RHEL-152433)

* [RHEL-10.3] trigger kernel panic with block/039 (JIRA:RHEL-153616)

* blktests block/038 failed with possible circular locking dependency detected at:
__kernfs_remove+0x1d3/0x600 and del_gendisk+0xfd/0x190 (JIRA:RHEL-154184)

* [kernel panic]BUG: unable to handle page fault for address (JIRA:RHEL-155383)

* RHEL10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs (JIRA:RHEL-155896)

* System hang with tasks stuck in pnfs_update_layout [rhel-10] (JIRA:RHEL-157444)

* RHEL10.0 - s390/pci: Avoid deadlock between error recovery and mlx5 crdump (JIRA:RHEL-157932)

* [Fujitsu 10.3 FEAT]: AGDI driver update for interrupt-based signaling mode support (JIRA:RHEL-111893)

* Restore IP ID correctly for encapsulated packets at GSO segmentation time (JIRA:RHEL-123213)

* [RHEL-10][hv_netvsc][Backport] net: hv_netvsc: reject RSS hash key programming without RX indirection table (JIRA:RHEL-145154)

* OOB in SMB2_open_free crashing the system [rhel-10] (JIRA:RHEL-154397)

* Build Failure Due to Missing xxd Dependency (JIRA:RHEL-157473)

* RHEL10.0 - dasd: Fix PPRC copy pair swap state and format information. (JIRA:RHEL-161531)

* Update PCI subsystem with content from v6.18 (JIRA:RHEL-139968)

* WARNING in get_xsave_addr/ssp_get: ptrace PTRACE_GETREGSET with NT_X86_CET on non-CET thread triggers WARN_ON in x86 FPU/CET code (JIRA:RHEL-152371)

* mlxbf-bootctl: driver update to Linux v6.16 [Nvidia 10.3 FEAT] (JIRA:RHEL-103899)

* RHEL10.1 [P11] [6.12.0-103.el10.ppc64le] FS/EXT4: generic/388 fails with warning at fs/ext4/super.c:1339 ext4_put_super+0x47c/0x580 [ext4] (JIRA:RHEL-108931)

* kselftest: charge_reserved_hugetlb.sh: Waiting for hugetlb memory reservation to reach size 2684354560 (JIRA:RHEL-130552)

* [RHEL10] va_high_addr_switch HugeTLB failure and bugs (JIRA:RHEL-134020)

* [ice]WARNING: CPU: 1 PID: 168931 at net/ipv4/udp_tunnel_nic.c:646
__udp_tunnel_nic_assert_locked+0x86/0xb0 [udp_tunnel] (JIRA:RHEL-143670)

* Reorganize socket binary layout for data locality (UDP) (JIRA:RHEL-145977)

* ALSA (sound) driver - update all drivers to the upstream for RHEL rhel-10.3 (upstream kernel 6.19) (JIRA:RHEL-152846)

* fix krb5 mount with username option [rhel-10] (JIRA:RHEL-158991)

* [AMDSERVER 10.3 Feature] Support CpuidUserDis (CPUID User Disable() (JIRA:RHEL-140358)

* NVIDIA:Backport gpio: tegra186: Simplify GPIO line name prefix handling - RHEL 10.3 (JIRA:RHEL-151653)

* NVIDIA: Backport iommu: Report effective PCIe ATS support status - RHEL 10.3 (JIRA:RHEL-160188)

* DGX Spark spurious reboots (JIRA:RHEL-163405)

* CONFIG_INIT_STACK_ALL_ZERO is not enabled for cs10 automotive kernel (JIRA:RHEL-164033)

* [Intel 10.3 FEAT] [NVL] IO: PCH: Add I2C Device ID (JIRA:RHEL-117325)

* IIO: Backport bmp280/bme280 driver from upstream (JIRA:RHEL-120353)

* RHEL 10.3 cpupower - updates (JIRA:RHEL-133086)

* kernel module .ko ELF files with non-zero sh_addr section addresses (JIRA:RHEL-152959)

* CNB103: net: page_pool: avoid false positive warning if NAPI was never added [rhel-10] (JIRA:RHEL-162141)

* [RHEL10] VLAN creation does not immediately disable LRO on real dev (JIRA:RHEL-80405)

* [DELL 10.3 FEAT] - Include support soundwire on Intel PTL-H - Cirrus Logic IC Solution (JIRA:RHEL-85741)

* rtla low-latency BPF-side actions feature [rhel-10] (JIRA:RHEL-112653)

* [IBM 10.3 FEAT] perf interface support for capturing DTL (Dispatch Trace Log) data (JIRA:RHEL-138521)

* [RHEL-10.3 FEAT] USB/TB code rebase of supported drivers to upstream v6.19 (JIRA:RHEL-147795)

* [RHEL10.3] Rebase IOMMU and DMA Mapping API to v7.0 (JIRA:RHEL-147902)

* fanotify_mark() on an anonymous pipe should not hit an LSM/SELinux check (JIRA:RHEL-53850)

* clk: renesas: cpg-mssr: Fix 'soc' node handling in cpg_mssr_reserved_init() (JIRA:RHEL-77269)

* RHEL 10.3 turbostat updates (JIRA:RHEL-129778)

* [AMDSERVER 10.3 Feature] Debug interface to walk/dump IOMMU data structures (JIRA:RHEL-140474)

* Enable LTO for kernel-tools binaries to resolve annocheck failures (JIRA:RHEL-145204)

* ?? rtla does not have debuginfo [rhel-10.3] (JIRA:RHEL-85865)

* ?? rv does not have debuginfo [rhel-10.3] (JIRA:RHEL-85868)

* Enable sched and RTapp RV monitors [rhel-10.3] (JIRA:RHEL-116706)

* ZF - Enable Multi Channel SPI driver for OMAP [rhel-10] (JIRA:RHEL-118418)

* RHEL 10.3 update intel_idle (JIRA:RHEL-129779)

* RHEL 10.3 intel_pstate updates (JIRA:RHEL-133082)

* Update PCI subsystem with content from v6.19 (JIRA:RHEL-139975)

* NVIDIA:CPPC: Enhanced autonomous selection and improvements- RHEL 10.2 (JIRA:RHEL-143330)

* NVIDIA:CPPC: Backport online CPU fixes - RHEL 10.3 (JIRA:RHEL-151651)

* Rebase Bluetooth stack to kernel v6.19 [rhel-10.3] (JIRA:RHEL-157827)

* [RHEL10.3] Rebase x86/resctrl up to v7.0 (JIRA:RHEL-163514)

* zl3073x: update the driver to upstream v7.0 (JIRA:RHEL-164429)

* [RFE][sfc] software tx timestamping needed for ptp4l [rhel-10] (JIRA:RHEL-165819)

* RHIVOS - QCOM_SCM (JIRA:RHEL-170163)

* NVIDIA:Backport VMM can handle guest SEA via KVM_EXIT_ARM_SEA - RHEL 10.3 (JIRA:RHEL-133965)

* [KASLR] Proactive backports RHEL-10.3 (JIRA:RHEL-144438)

* [Audit] Proactive backports RHEL-10.3 (JIRA:RHEL-145403)

* [rhel-10 wireless] Wireless core and drivers rebase to v6.19 (JIRA:RHEL-145612)

* [rhel-10] MHI bus update to v6.19 (JIRA:RHEL-151312)

* kselftests mm - vmalloc: OOM panic on Aarch64 64k kernel. (JIRA:RHEL-151432)

* xxhash64 should not be fips approved (JIRA:RHEL-154016)

* selftests: net: unify the Makefile formats (JIRA:RHEL-155384)

* [RHEL-10.3] BUG: kernel NULL dereference during kdump in intel gen14+ systems (JIRA:RHEL-161592)

* RHEL10.0 - s390/mm: Add missing secure storage access fixups (JIRA:RHEL-168792)

* RHEL10: HYPERV hv_storvsc driver can we add additional code to allow PERSISTENT_RESERVE_IN [rhel-10] (JIRA:RHEL-171460)

* oslat normal prio isolated high spike from kworker (JIRA:RHEL-68981)

* RHEL-10.3 kvm/arm: rebase up to v7.0 (JIRA:RHEL-157318)

* RHEL 10.3 update drivers/platform/x86/intel/pmc (JIRA:RHEL-129781)

* RHEL 10.3 update drivers/thermal/intel (JIRA:RHEL-130009)

* RHEL 10.3 Update Intel MCE (JIRA:RHEL-130026)

* RHEL 10.3 platform/x86/intel/tpmi and platform/x86: ISST updates (JIRA:RHEL-133093)

* mlx5: introduce CX9 PCI ID (JIRA:RHEL-142605)

* mlx5: introduce BF4 PCI ID (JIRA:RHEL-142608)

* [rhel-10] [aarch64] sched: DL de-boosted task PID 22725: REPLENISH flag missing - WARNING: CPU: 93 PID:
0 at kernel/sched/deadline.c:239 dequeue_task_dl+0x15c/0x1f8 (JIRA:RHEL-145610)

* Scheduler updates for 10.3 (JIRA:RHEL-147186)

* NVIDIA: Backport arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults (JIRA:RHEL-154155)

* [RHEL-10.2] kernel BUG at lib/list_debug.c:23! observed with liburing buf-ring-upgrade.t (JIRA:RHEL-161187)

* mlx5: Disable ConnectX-10 (JIRA:RHEL-166116)

* RHEL 10.2 tpm crb failing (JIRA:RHEL-167985)

* [RHEL10] Update SPD5118 and I3C drivers from upstream v7.0 (JIRA:RHEL-168906)

* CNB103: PCI/PTM: Drop pci_enable_ptm() granularity parameter (JIRA:RHEL-172222)

* NVIDIA:Grace-Hopper:Backport mm: Implement ECC handling for pfn with no struct page - RHEL 10.1 (JIRA:RHEL-73608)

* [RHEL-10.3] NVIDIA:Backport arm_mpam: Add basic mpam driver (JIRA:RHEL-100932)

* [RHEL-10] panic during suspend and hibernate on systems with Intel E810 NICs (JIRA:RHEL-147247)

* CNB103: BIG TCP without HBH in IPv6 (JIRA:RHEL-156515)

* [GNR-D DPLL] zl3073x: Implement ref-sync support (JIRA:RHEL-157828)

* [HPEMC BUG RHEL 10] x86/platform/uv: fix panic when deconfiguring socket. (JIRA:RHEL-158967)

* [RHEL-10.3] WARNING: CPU: 11 PID: 704 at crypto/crypto_engine.c:58 crypto_finalize_request (JIRA:RHEL-159000)

* NVIDIA: Backport iommu/tegra241-cmdqv: Fix initialization and uAPI related to HYP_OWN - RHEL 10.3 (JIRA:RHEL-160189)

* CNB103: Update RDMA core to Linux v7.0 (JIRA:RHEL-163515)

* [RHEL10.3] Enable Pretimeout Watchdog Panic Functionality on x86 (JIRA:RHEL-164699)

* [GNR-D DPLL] zl3073x: Implement frequency monitoring (JIRA:RHEL-165161)

* RHEL10.0 - s390/pfault: Fix virtual vs physical address confusion (JIRA:RHEL-170908)

* CNB103: lib/vsprintf: Add specifier for printing struct timespec64 (JIRA:RHEL-172105)

* ice: backport changes to default number of RSS queues (JIRA:RHEL-172305)

* RHEL10.0 - s390: nospec hardening for entry code (JIRA:RHEL-174629)

* bpf: update to upstream v6.18 (JIRA:RHEL-78291)

* CNB103: lib/bitmap: update to v7.1 (JIRA:RHEL-174745)

* zl3073x: update the driver to upstream v7.1 (JIRA:RHEL-171979)

* [RHEL10.3] NVIDIA:Backport arm_mpam: Add KVM/arm64 and resctrl glue code (JIRA:RHEL-164228)

* i2c: i801: Revert i2c: i801: replace acpi_lock with I2C bus lock [rhel-10] (JIRA:RHEL-154387)

* [rhel10] ltp cpuset_hotplug failed: test task was still in general group, but its cpus is NULL (JIRA:RHEL-160958)

* [IBM 10.3 FEAT] Set Kernel Config Option CONFIG_SCLP_OFB=y (JIRA:RHEL-170705)

* Rebase Bluetooth stack to kernel v7.0 [rhel-10.3] (JIRA:RHEL-172460)

* CNB103: slab: Introduce kmalloc_obj() and family (JIRA:RHEL-174796)

* NVIDIA:Grace-Hopper:Backport iommu/arm-smmu-v3: Introduce an RCU-protected invalidation array - RHEL 10.2 (JIRA:RHEL-88961)

* [RHEL10] blktests block/037 failed at tests/block/037: line 42: echo: write error: Cannot allocate memory (JIRA:RHEL-93825)

* [Intel 10.3 FEAT] [NVL] power: Enable intel_rapl driver (JIRA:RHEL-117269)

* RHEL 10.3 AMD PMF driver updates (JIRA:RHEL-127641)

* RHEL 10.3 amd-pstate updates (JIRA:RHEL-127643)

* RHEL 10.3 Update drivers/hwmon/k10temp.c (JIRA:RHEL-127650)

* bpf: update to upstream v6.19 (JIRA:RHEL-139985)

* [RHEL 10.3] Backport EFI support up through linux v6.19 (JIRA:RHEL-164371)

* The kernel still panicked in cached_dir_offload_close despite applying commit 734e99623c5b [rhel-10] (JIRA:RHEL-171638)

* NVIDIA:Vera: Add support for FEAT_{LS64, LS64_V} and related tests (JIRA:RHEL-151899)

* ibmveth Adapter Freeze with Small MSS (JIRA:RHEL-175521)

* Update PCI subsystem with content from v7.0 (JIRA:RHEL-151449)

* ses enclosure devices attach to scsi devices on different scsi hosts from the enclosure (JIRA:RHEL-153020)

* kernel: fs/notify: call exportfs_encode_fid with s_umount (JIRA:RHEL-167108)

* [RHEL-10.3] crypto: authenc - Correctly pass EINPROGRESS back up to the caller (JIRA:RHEL-130557)

* [10.3] drivers/video rebase (fbcon/fbdev) (JIRA:RHEL-135265)

* [IBM 10.3 FEAT] Support 128 KB tape block sizes (JIRA:RHEL-136091)

* Core entry refactor: generic entry split required for arm64 v6.18 backports (JIRA:RHEL-150903)

* backport of upstream commit 2da20fd (kernel/rcu/tree_stall: add /sys/kernel/rcu_stall_count) and aaf05e9 (kernel/watchdog: add /sys/kernel/{hard,soft}lockup_count) to RHEL 9 and RHEL 10. [rhel-10] (JIRA:RHEL-154147)

* update drivers/base subsystem to match upstream Linux v7.0 for RHEL-10.3 (JIRA:RHEL-156428)

* [RHEL10] WARNING: possible recursive locking detected at pqi_shutdown+0xd5/0x470 [smartpqi] (JIRA:RHEL-169577)

* DPLL: Add support for pin operational state (JIRA:RHEL-173188)

* DPLL: Add support for fractional frequency offset between pin and device (JIRA:RHEL-173193)

* cs10/main-ivos-qualcomm: [PDR team task] Validator Failure: config-io-uring-disabled (kernel- automotive-6.12.0-211.el10iv) (JIRA:RHEL-178183)

* ALSA (sound) driver - update all drivers to the upstream for RHEL 10.3 (upstream kernel 7.0) (JIRA:RHEL-168082)

* NVIDIA: Backport iommu/arm-smmu-v3: Do not set disable_ats unless vSTE is Translate - RHEL 10.3 (JIRA:RHEL-155346)

* [Intel 10.3 FEAT] [NVL] security: mei: Add platform to Management Engine Interface (mei) driver (JIRA:RHEL-117353)

* RHEL 10.3 pinctrl: updates for intel (JIRA:RHEL-129783)

* RHEL 10.3 Update platform/x86/intel-uncore-freq (JIRA:RHEL-133081)

* CLONE - [RHEL 10.2 Bug] qla2xxx flash image validation failure (JIRA:RHEL-157286)

* rbd: eliminate a race in lock_dwork draining on unmap (JIRA:RHEL-180187)

* NVIDIA:Kernel support for Vera PMU - RHEL 10.3 (JIRA:RHEL-110828)

* [10.3] MDRAID - Update to the latest upstream (JIRA:RHEL-129337)

* NVIDIA:i2c support for T410 (Vera) - RHEL 10.3 (JIRA:RHEL-143333)

* [RHEL 10.3] riscv core updates for rva23 (JIRA:RHEL-147291)

* Kernel panic while shutting down ice driver due to use-after-free (JIRA:RHEL-163186)

* CrowdStrike: Request to backport upstream ef378c3b8233 [rhel-10.3] (JIRA:RHEL-180193)

* RHEL10.2 : When fadump enabled seeing error message Failed to init cma area for firmware-assisted dump (JIRA:RHEL-174883)

* BPF test_progs fail due to missing configuration (JIRA:RHEL-76113)

* [IBM 10.3 FEAT] zcrypt driver overwrite function - kernel part (JIRA:RHEL-113464)

* [Lenovo 10.3 FEAT]Intel ice driver update (JIRA:RHEL-137412)

* CNB103: Add support for io_uring zero copy rx (JIRA:RHEL-141853)

* Objtool 10.3: backports from upstream linux 7.0 (JIRA:RHEL-152189)

* Livepatch 10.3: backports from upstream linux 7.0 (JIRA:RHEL-152193)

* tcp: stable backport for 10.3 phase 1 (JIRA:RHEL-152718)

* tunnels: stable backport for 10.3 phase 1 (JIRA:RHEL-152728)

* wireguard: stable backport for 10.3 phase 1 (JIRA:RHEL-152735)

* [Intel 10.3 FEAT] [DMR] Accel-DSA: dmaengine: idxd: Add support for DSA 3.0 devices (JIRA:RHEL-154485)

* Update ACPI support to match upstream v7.0 for RHEL 10.3 (JIRA:RHEL-156420)

* Backport S32G3 SAR ADC driver (JIRA:RHEL-156761)

* netfilter: rebase to 7.1-rc2 (JIRA:RHEL-168848)

* rtmutex: Fix potential UAF of a task's pi_blocked_on field (JIRA:RHEL-171746)

* [RHEL10.3] DMA Engine: backport recent fixes to RHEL10.3 for supported drivers (JIRA:RHEL-172442)

* RHIVOS - P&S: NXP S32G Optimization ? Build storage driver into kernel (JIRA:RHEL-181039)

* crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (JIRA:RHEL-182119)

* [RHEL 10.3] BUG: KASAN: slab-use-after-free in io_kbuf_recycle_legacy+0x463/0x5c0 (JIRA:RHEL-183200)

* RHEL 10: Backport b95e0e792822 (JIRA:RHEL-183464)

* RHEL 10.3 DRM backport - dependencies (JIRA:RHEL-176018)

* IOMMU/AMD: Mark IOMMUFD support as tech preview (JIRA:RHEL-168270)

* Core net locking changes follow-ups (JIRA:RHEL-161561)

* [IBM 10.3 FEAT] Upgrade the QETH driver to latest from upstream, e.g. kernel 6.20 (JIRA:RHEL-136140)

* [Intel 10.3 FEAT] [DMR][NVL] CPU: Add Advanced Performance Extensions (APX) instruction (JIRA:RHEL-115162)

* [AMDSERVER 10.3 Feature] Venice: Add support for new SMCA bank types (JIRA:RHEL-100951)

* RHEL 10.3 Updates for platform/x86/intel/pmt (JIRA:RHEL-133094)

* [RHEL10.2] Dlpar of memory is hung for more than 20 hrs, waiting to free one of the page frame but reference count showing 2 indicating still in use. (JIRA:RHEL-146153)

* Rebase vfio to v7.1-rc1 (JIRA:RHEL-149504)

* RHEL 10.3 turbostat fixes (JIRA:RHEL-172176)

* Adding missing commit for RHEL-174629 (JIRA:RHEL-183314)

* [rhel-10] Long not preemteble time in tpm_hwrng_read on RL300 (JIRA:RHEL-69440)

* [RHEL10.0] WARNING: CPU: 0 PID: 54877 at mm/page_alloc.c:694 __del_page_from_free_list+0x2b0/0x380 (JIRA:RHEL-74463)

* [Intel 10.2 FEAT] [WCL-U] x86: Add vsec device ID to support PMT features (Crash Log, Telemetry Aggregator) (JIRA:RHEL-95636)

* Move vdoformat functionality into the kernel module (JIRA:RHEL-113137)

* [RHEL10] device-mapper: verity-fec: 9:127: FEC: recursion too deep (JIRA:RHEL-127492)

* [Broadcom 10.3 feat] bnxt_re: Update driver to the latest upstream version (JIRA:RHEL-135357)

* [IBM 10.3 FEAT] Upgrade the SMC driver to latest from upstream, e.g. kernel 6.20 (JIRA:RHEL-136142)

* [IBM 10.3 FEAT] Update dm-crypt/dm-integrity Subsystem to 6.19+ Level (Secure Execution) (JIRA:RHEL-136802)

* dm-integrity returns I/O error after growing the device in bitmap mode. (JIRA:RHEL-144458)

* Hit Reservation conflict when unregister the key on failovering multipath [rhel-10] (JIRA:RHEL-148451)

* [RHEL-10.3] dm: sync with upstream v6.19 (JIRA:RHEL-154975)

* dm cache: Memory leak on metadata abort when dealing concurrent metadata io errors (JIRA:RHEL-155190)

* Add Gemini / Epoch code to kernel.spec file for rv and rv-debuginfo [rhel-10.3] (JIRA:RHEL-163488)

* dm thin: possible race during parallel activity leading to what looks like it could be discard/delete race leading to an error [rhel-10] (JIRA:RHEL-169623)

* CNB103: net: Introduce netif_xmit_timeout_ms() helper (JIRA:RHEL-180966)

* RHEL 10: s390: Revert support for DCACHE_WORD_ACCESS (JIRA:RHEL-184095)

* Unexpected execmem SELinux denials after CVE-2026-46054 fix [rhel-10.3] (JIRA:RHEL-185115)

* Kernel NULL pointer dereference while writing to a dm-cache device in passthrough mode (JIRA:RHEL-92782)

* CNB103: net: Add 1600Gbps (1.6T) link mode support (JIRA:RHEL-165176)

* Update NFS/NFSD/LOCKD/SUNRPC RHEL10.3 to 7.1 (JIRA:RHEL-171581)

* Sched required late fixes for 10.3 (JIRA:RHEL-174703)

* [RHEL10] WARNING: possible circular locking dependency detected (rhashtable_bucket --> &rq->__lock --> &dsq->lock) (JIRA:RHEL-115002)

* [IBM 10.3 FEAT] in-kernel crypto: disable default use of clear keys by PAES and PHMAC (JIRA:RHEL-136440)

* [IBM 10.3 FEAT] KVM: Enhancement for IBM Test Accelerator for Z (TAZ) (JIRA:RHEL-136477)

* tegra-se fixes and updates [RHEL-10.3] (JIRA:RHEL-176465)

* Please sign CentOS Stream kernels with 800 series certificates (JIRA:RHEL-178260)

* [RHEL10-debug]: BUG: KASAN: slab-use-after-free in __pv_queued_spin_lock_slowpath (JIRA:RHEL-185104)

* RHEL10.0 - KVM: s390: Increase SE header size from 8 KiB to 1 MiB. (JIRA:RHEL-185661)

* RHEL10.3 - crash at device_del+61 when removing NVMe/FC controller (JIRA:RHEL-186079)

* evm=fix doesn't work when a file already has IMA signature stored in security.ima (JIRA:RHEL-104343)

* Integrate rtla code consolidation work into rhel-10.3 (JIRA:RHEL-115523)

* Improve RTLA auto-analysis stack print not to stop at unknown function [rhel-10] (JIRA:RHEL-136812)

* rtla-timerlat-top doesn't stop properly when threshold is reached on multiple CPUs at once [rhel-10.3] (JIRA:RHEL-147742)

* Rebase RTLA to upstream 7.1 [rhel-10.3] (JIRA:RHEL-151369)

* RTLA segfaults on freed memory access on double SIGINT [rhel-10.3] (JIRA:RHEL-151475)

* RHEL 10.3 Update MEI to upstream 7.0 (JIRA:RHEL-177639)

* x86/microcode: Add platform mask to Intel microcode old list [RHEL-10] (JIRA:RHEL-184788)

* [RHEL10] scsi device removal may hang from race with error recovery (JIRA:RHEL-186142)

* irdma: update driver to v7.0 (JIRA:RHEL-186151)

* [Intel 10.4 FEAT] [NVL] GPIO: Add ACPI GPIO events support PCH GPEs (JIRA:RHEL-117349)

* RHEL 10.3 update intel_rapl (JIRA:RHEL-130025)

* NVIDIA:soc/tegra: Use Arm SMCCC to get chip ID, revision, and platform info - RHEL 10.3 (JIRA:RHEL-143339)

* [RHEL 10.3] SpacemiT SoC base driver backport (JIRA:RHEL-174301)

* [RHEL 10.3] Update StarFive JH7110 drivers and DT (JIRA:RHEL-174305)

* RHEL 10.3 platform/x86/amd: hfi updates (JIRA:RHEL-176387)

* rhel 10.3 Update drivers/platform/x86/intel to upstream 7.0 (JIRA:RHEL-176441)

* RHEL 10.3 fix for platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (JIRA:RHEL-182291)

* dma-debug triggers a possibly false positive kernel warning on x86_64 (JIRA:RHEL-182720)

* [RHEL 10.3] ACPI Fixes for RISC-V (JIRA:RHEL-187991)

* [RHEL 10.3] Fix RISC-V regression from kernel-6.12.0-234 (JIRA:RHEL-188766)

* Objtool 10.3: backports from upstream linux 7.1 (JIRA:RHEL-152190)

* [RHEL10.3] kernel \ Storage \ Kernel Target (LIO): Component Rebase (JIRA:RHEL-163760)

* CNB103: arm64/simd: Add scoped guard API for kernel mode SIMD (JIRA:RHEL-180976)

* [FEAT] CNB103: net: add basic PSP encryption for TCP connections (JIRA:RHEL-185448)

* prctl for PR_GET_NAME returns number of /dev/fd/ instead of program, when script executes under sudo + checksum verification (JIRA:RHEL-95059)

* [AMDSERVER 10.2 Feature] Venice: EDAC Updates (JIRA:RHEL-100950)

* CNB103: Ethtool: update (phase 1 ) ethtool to v7.0-rc7 (JIRA:RHEL-167299)

* [rhel-10] MHI bus update to v7.0 (JIRA:RHEL-171362)

* CNB103: bridge: update bridge/switchdev core to upstream v7 (JIRA:RHEL-171990)

* Update cpufreq to match Linux v7.0 for RHEL-10.3 (JIRA:RHEL-176381)

* Update cpuidle to match Linux v7.0 for RHEL-10.3 (JIRA:RHEL-176383)

* System crash observed during lpfc driver load/unload (JIRA:RHEL-178259)

* gve: backport large queue depth patches (JIRA:RHEL-178516)

* [RHEL 10] Bonding reports unknown speed/duplex for tg3 interface (JIRA:RHEL-182561)

* Update crypto subsystem to upstream kernel 6.14 (JIRA:RHEL-186630)

* CNB103: net: sleepable ndo_set_rx_mode (JIRA:RHEL-186369)

* Post Rebase fixes for Bluetooth kernel v7.0 [rhel-10.3] (JIRA:RHEL-184635)

* proactively backport the fix for CVE-2026-52943 (10.3) (JIRA:RHEL-192922)

* rhel 10.3 fix for powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() (JIRA:RHEL-193546)

* Livepatch 10.3: backports from upstream linux 7.1 (JIRA:RHEL-152194)

* [RHEL-10.3] mounting NFS share over rdma causes kernel Oops (JIRA:RHEL-192306)

* MediaTek SoC enablement (JIRA:RHEL-191344)

* vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter (JIRA:RHEL-189045)

* kernel-headers: linux/vm_sockets.h fails to compile standalone ? missing sa_family_t definition breaks AC_CHECK_HEADERS auto-detection (JIRA:RHEL-185312)

* Revert commit 2a010c412853 that allows writing to running executable (JIRA:RHEL-159585)

* CNB103: PCI/TPH: Expose pcie_tph_get ...

Please note that the description has been truncated due to length. Please refer to vendor advisory for the full description.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

Plugin Details

Severity: Medium

ID: 378134

File Name: redhat-RHSA-2026-97040.nasl

Version: 1.1

Type: Local

Agent: unix

Family: Red Hat Local Security Checks

Published: 11/10/2026

Updated: 11/10/2026

Supported Sensors: Nessus Agent, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.6

Percentile: 98.28

Vendor

Vendor Severity: Important

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2026-23066

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:redhat:enterprise_linux:10.3, p-cpe:/a:redhat:enterprise_linux:kernel-64k-core, p-cpe:/a:redhat:enterprise_linux:kernel-64k-debug-core, p-cpe:/a:redhat:enterprise_linux:kernel-64k-debug-devel-matched, p-cpe:/a:redhat:enterprise_linux:kernel-64k-debug-devel, p-cpe:/a:redhat:enterprise_linux:kernel-64k-debug-modules-core, p-cpe:/a:redhat:enterprise_linux:kernel-64k-debug-modules-extra, p-cpe:/a:redhat:enterprise_linux:kernel-64k-debug-modules, p-cpe:/a:redhat:enterprise_linux:kernel-64k-debug, p-cpe:/a:redhat:enterprise_linux:kernel-64k-devel-matched, p-cpe:/a:redhat:enterprise_linux:kernel-64k-devel, p-cpe:/a:redhat:enterprise_linux:kernel-64k-modules-core, p-cpe:/a:redhat:enterprise_linux:kernel-64k-modules-extra, p-cpe:/a:redhat:enterprise_linux:kernel-64k-modules, p-cpe:/a:redhat:enterprise_linux:kernel-64k, p-cpe:/a:redhat:enterprise_linux:kernel-core, p-cpe:/a:redhat:enterprise_linux:kernel-debug-core, p-cpe:/a:redhat:enterprise_linux:kernel-debug-devel-matched, p-cpe:/a:redhat:enterprise_linux:kernel-debug-devel, p-cpe:/a:redhat:enterprise_linux:kernel-debug-modules-core, p-cpe:/a:redhat:enterprise_linux:kernel-debug-modules-extra, p-cpe:/a:redhat:enterprise_linux:kernel-debug-modules, p-cpe:/a:redhat:enterprise_linux:kernel-debug-uki-virt, p-cpe:/a:redhat:enterprise_linux:kernel-debug, p-cpe:/a:redhat:enterprise_linux:kernel-devel-matched, p-cpe:/a:redhat:enterprise_linux:kernel-devel, p-cpe:/a:redhat:enterprise_linux:kernel-modules-core, p-cpe:/a:redhat:enterprise_linux:kernel-modules-extra-matched, p-cpe:/a:redhat:enterprise_linux:kernel-modules-extra, p-cpe:/a:redhat:enterprise_linux:kernel-modules, p-cpe:/a:redhat:enterprise_linux:kernel-rt-64k-core, p-cpe:/a:redhat:enterprise_linux:kernel-rt-64k-debug-core, p-cpe:/a:redhat:enterprise_linux:kernel-rt-64k-debug-devel, p-cpe:/a:redhat:enterprise_linux:kernel-rt-64k-debug-modules-core, p-cpe:/a:redhat:enterprise_linux:kernel-rt-64k-debug-modules-extra, p-cpe:/a:redhat:enterprise_linux:kernel-rt-64k-debug-modules, p-cpe:/a:redhat:enterprise_linux:kernel-rt-64k-debug, p-cpe:/a:redhat:enterprise_linux:kernel-rt-64k-devel, p-cpe:/a:redhat:enterprise_linux:kernel-rt-64k-modules-core, p-cpe:/a:redhat:enterprise_linux:kernel-rt-64k-modules-extra, p-cpe:/a:redhat:enterprise_linux:kernel-rt-64k-modules, p-cpe:/a:redhat:enterprise_linux:kernel-rt-64k, p-cpe:/a:redhat:enterprise_linux:kernel-rt-core, p-cpe:/a:redhat:enterprise_linux:kernel-rt-debug-core, p-cpe:/a:redhat:enterprise_linux:kernel-rt-debug-devel, p-cpe:/a:redhat:enterprise_linux:kernel-rt-debug-modules-core, p-cpe:/a:redhat:enterprise_linux:kernel-rt-debug-modules-extra, p-cpe:/a:redhat:enterprise_linux:kernel-rt-debug-modules, p-cpe:/a:redhat:enterprise_linux:kernel-rt-debug, p-cpe:/a:redhat:enterprise_linux:kernel-rt-devel, p-cpe:/a:redhat:enterprise_linux:kernel-rt-modules-core, p-cpe:/a:redhat:enterprise_linux:kernel-rt-modules-extra, p-cpe:/a:redhat:enterprise_linux:kernel-rt-modules, p-cpe:/a:redhat:enterprise_linux:kernel-rt, p-cpe:/a:redhat:enterprise_linux:kernel-tools-libs-devel, p-cpe:/a:redhat:enterprise_linux:kernel-tools-libs, p-cpe:/a:redhat:enterprise_linux:kernel-tools, p-cpe:/a:redhat:enterprise_linux:kernel-uki-virt-addons, p-cpe:/a:redhat:enterprise_linux:kernel-uki-virt, p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump-core, p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump-devel-matched, p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump-devel, p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump-modules-core, p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump-modules-extra, p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump-modules, p-cpe:/a:redhat:enterprise_linux:kernel-zfcpdump, p-cpe:/a:redhat:enterprise_linux:kernel, p-cpe:/a:redhat:enterprise_linux:libperf, p-cpe:/a:redhat:enterprise_linux:perf, p-cpe:/a:redhat:enterprise_linux:python3-perf, p-cpe:/a:redhat:enterprise_linux:rtla, p-cpe:/a:redhat:enterprise_linux:rv

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Ease: No known exploits are available

Patch Publication Date: 11/10/2026

Vulnerability Publication Date: 2/4/2026

Reference Information

CVE: CVE-2026-23066, CVE-2026-23239, CVE-2026-23240, CVE-2026-52945, CVE-2026-52952, CVE-2026-53395, CVE-2026-63914, CVE-2026-63987, CVE-2026-64000, CVE-2026-64020, CVE-2026-64025, CVE-2026-64279, CVE-2026-64355, CVE-2026-64375, CVE-2026-64496, CVE-2026-68103, CVE-2026-68379, CVE-2026-68390, CVE-2026-72319

CWE: 125, 131, 20, 200, 364, 366, 367, 416, 772, 787, 825

RHSA: 2026:97040

Detections

Analytics