Red Hat patches Linux kernel flaws
Red Hat released security updates addressing multiple Linux kernel vulnerabilities enabling remote code execution, privilege escalation, and denial of service across RHEL and OpenShift.
Sourcecert.ssi.gouv.fr — open the original
What to check
- Applies to
- The 36 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation
- A public exploit is recorded for CVE-2026-43284 (weaponized); no exploitation in the wild is recorded.
Red Hat has issued a comprehensive set of security advisories addressing multiple vulnerabilities in the Linux kernel affecting Red Hat Enterprise Linux (RHEL) versions 8, 9, and 10 across various architectures, as well as OpenShift Container Platform versions 4.12 and 4.13. The vulnerabilities pose risks including remote arbitrary code execution, privilege escalation, denial of service, data integrity compromise, data confidentiality breach, and security policy bypass.
The advisories, published between June 19-25, 2026, cover 35 distinct CVEs spanning from CVE-2026-4878 through CVE-2026-46331. The affected systems include RHEL deployments on ARM64, IBM z Systems (s390x), Power (ppc64le), and x86_64 architectures, with patches available for standard releases as well as extended update support and extended life cycle versions. OpenShift Container Platform users running versions 4.12 and 4.13 on RHEL 8 and 9 are also impacted.
Red Hat recommends applying the vendor-supplied patches immediately. Organizations running affected versions should consult the nineteen individual security bulletins referenced in the advisory and prioritize patching based on their deployment configuration and exposure profile.
Mentioned in this report
Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0808
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,433 reports from 149 sources, 661 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs