EN PT-BR
← Voltar ao feed
high

CERT-FR: Multiple Red Hat Linux kernel vulnerabilities allow remote code execution, privilege escalation and DoS

1 fonte(s) · 1 atualização(ões) · publicado 29/10/2026 21:00 · coletado há 1 hora

The French CERT-FR published advisory CERTFR-2026-AVI-1431 on multiple vulnerabilities in the Linux kernel shipped with Red Hat products. According to the advisory, some of the flaws let an attacker achieve remote arbitrary code execution, privilege escalation and remote denial of service. Other impacts listed are security policy bypass, data integrity and confidentiality breach, and SSRF. The advisory covers a very wide range of Red Hat Enterprise Linux variants (x86_64, ARM64, IBM Z, Power, Real Time, EUS/AUS/TUS/SAP and Extended Life Cycle streams), the CodeReady Linux Builder channels and Red Hat OpenShift Container Platform 4.12 to 4.22. It does not mention exploitation in the wild.

Entenda a falha

A vulnerabilidade

CERT-FR advisory CERTFR-2026-AVI-1431 covers many Linux kernel vulnerabilities in Red Hat products, with CVE identifiers from 2022 to 2026. It says some of them allow remote arbitrary code execution, privilege escalation and remote denial of service. Other listed impacts are security policy bypass, data integrity and confidentiality breach, and SSRF. The advisory gives no per-CVE description, CVSS score or attack conditions, so what an attacker needs for each flaw is unknown. Affected: RHEL 8, 9 and 10 (including EUS, AUS, TUS, SAP, 4-year and Extended Life Cycle streams), RHEL 6 ELS, CodeReady Linux Builder, RHEL for Real Time 8 and for NFV 8, and OpenShift Container Platform 4.12 to 4.22. Fixes are in the Red Hat errata (RHSA) dated 23-30 October 2026.

Como foi descoberta

The CERT-FR published the advisory on 30 October 2026, based on Red Hat security bulletins (RHSA). The material provided does not say who found the individual flaws or how they were reported. The advisory does not mention exploitation in the wild.

Explicação gerada por IA a partir da matéria e dos artigos, em 02/11/2026 12:30.

Detalhes técnicos

  • Affected: Red Hat Enterprise Linux 8, 9 and 10 (including EUS, 4-year, ELS, AUS, TUS and SAP Update Services variants), RHEL 6 Extended Life Cycle Support Extension, Red Hat CodeReady Linux Builder, RHEL for Real Time and Real Time for NFV 8, and OpenShift Container Platform 4.12, 4.14, 4.16 and 4.18-4.22 on x86_64, aarch64, s390x and ppc64le.
  • The advisory lists many CVEs, from 2022 to 2026 identifiers, with no per-CVE description, CVSS score or exploitation conditions.
  • Impact categories: remote code execution, privilege escalation, remote DoS, security policy bypass, integrity and confidentiality breach, SSRF.
  • Red Hat errata referenced: RHSA-2026:88687, 89082, 89083, 89814, 89816, 89890, 89197, 89232, 89333, 89651, 89714, 89725, 89838, 90272, 90933, 91493, 91565, 91585, 91648, 92208, 92209, 92362, 92993 and 92997 (23-30 October 2026).

Remediação

  • Refer to the Red Hat security bulletins (RHSA) listed in the advisory and apply the corresponding kernel patches for each affected product stream, then reboot as required.

Linha do tempo

  1. cert.cyber.gouv.fr ↗ · pub. 29/10/2026 21:00 · coletado 02/11 12:01 primeiro registro

    CERT-FR: Multiple Red Hat Linux kernel vulnerabilities allow remote code execution, privilege escalation and DoS

    ler a análise desta fonte

    The French CERT-FR published advisory CERTFR-2026-AVI-1431 on multiple vulnerabilities in the Linux kernel shipped with Red Hat products. According to the advisory, some of the flaws let an attacker achieve remote arbitrary code execution, privilege escalation and remote denial of service. Other impacts listed are security policy bypass, data integrity and confidentiality breach, and SSRF. The advisory covers a very wide range of Red Hat Enterprise Linux variants (x86_64, ARM64, IBM Z, Power, Real Time, EUS/AUS/TUS/SAP and Extended Life Cycle streams), the CodeReady Linux Builder channels and Red Hat OpenShift Container Platform 4.12 to 4.22. It does not mention exploitation in the wild.

    Technical Details

    • Affected: Red Hat Enterprise Linux 8, 9 and 10 (including EUS, 4-year, ELS, AUS, TUS and SAP Update Services variants), RHEL 6 Extended Life Cycle Support Extension, Red Hat CodeReady Linux Builder, RHEL for Real Time and Real Time for NFV 8, and OpenShift Container Platform 4.12, 4.14, 4.16 and 4.18-4.22 on x86_64, aarch64, s390x and ppc64le.
    • The advisory lists many CVEs, from 2022 to 2026 identifiers, with no per-CVE description, CVSS score or exploitation conditions.
    • Impact categories: remote code execution, privilege escalation, remote DoS, security policy bypass, integrity and confidentiality breach, SSRF.
    • Red Hat errata referenced: RHSA-2026:88687, 89082, 89083, 89814, 89816, 89890, 89197, 89232, 89333, 89651, 89714, 89725, 89838, 90272, 90933, 91493, 91565, 91585, 91648, 92208, 92209, 92362, 92993 and 92997 (23-30 October 2026).

    Remediation

    • Refer to the Red Hat security bulletins (RHSA) listed in the advisory and apply the corresponding kernel patches for each affected product stream, then reboot as required.