Multiple Vulnerabilities in Red Hat Linux Kernel Allow Remote Code Execution and Denial of Service
Multiple critical vulnerabilities have been discovered in the Linux kernel used by Red Hat Enterprise Linux and related products. These include remote code execution, privilege escalation, remote denial of service, server-side request forgery (SSRF), and cross-site request forgery (CSRF). The affected versions span multiple Red Hat Enterprise Linux releases and Red Hat OpenShift Container Platform versions across various architectures such as x86_64, ARM64, IBM Z, and Power. Red Hat has released multiple security advisories (RHSA-2026:95346 and others) in early November 2026 providing patches and mitigations. Immediate patching is recommended to protect against exploitation. Multiple CVEs have been assigned to these issues, including CVE-2025-22063, CVE-2026-103111, and CVE-2026-111497 among many others. The vulnerabilities impact data integrity, confidentiality, security policy enforcement, availability, and allow arbitrary code execution.
Entenda a falha
A vulnerabilidade
The CERT-FR bulletin CERTFR-2026-AVI-1536 groups many vulnerabilities in the Linux kernel shipped by Red Hat, with more than 100 CVEs listed, from CVE-2025-22063 to CVE-2026-89972. The impacts named are remote code execution, remote denial of service, security policy bypass, loss of data integrity and confidentiality, SSRF and CSRF. The articles give no per-CVE severity, component or attack requirements. Affected products are Red Hat Enterprise Linux 9.4 and 9.6 variants (EUS, ELS, AUS, SAP update services, 4 years of updates), CodeReady Linux Builder 9.6, and OpenShift Container Platform 4.12 to 4.15, 4.19 to 4.22 and 5.0. Architectures are x86_64, aarch64, s390x and ppc64le. Red Hat has published patches in advisories such as RHSA-2026:95346.
Como foi descoberta
The articles do not say who found the flaws or how. The CERT-FR bulletin, published on 2026-11-13, says multiple vulnerabilities were discovered in the Red Hat Linux kernel. According to the story, Red Hat released the security advisories in early November 2026, with patches and mitigations.
Explicação gerada por IA a partir da matéria e dos artigos, em 13/11/2026 12:24.
Linha do tempo
-
Multiple Vulnerabilities in Red Hat Linux Kernel Allow Remote Code Execution and Denial of Service
ler a análise desta fonte ocultar
Multiple critical vulnerabilities have been discovered in the Linux kernel used by Red Hat Enterprise Linux and related products. These include remote code execution, privilege escalation, remote denial of service, server-side request forgery (SSRF), and cross-site request forgery (CSRF). The affected versions span multiple Red Hat Enterprise Linux releases and Red Hat OpenShift Container Platform versions across various architectures such as x86_64, ARM64, IBM Z, and Power. Red Hat has released multiple security advisories (RHSA-2026:95346 and others) in early November 2026 providing patches and mitigations. Immediate patching is recommended to protect against exploitation. Multiple CVEs have been assigned to these issues, including CVE-2025-22063, CVE-2026-103111, and CVE-2026-111497 among many others. The vulnerabilities impact data integrity, confidentiality, security policy enforcement, availability, and allow arbitrary code execution.