CERT-FR advisory CERTFR-2026-AVI-1471: Red Hat ships 23 kernel errata fixing over 100 Linux kernel CVEs across RHEL 7 to 10
CERT-FR published advisory CERTFR-2026-AVI-1471 on 6 November 2026 covering multiple vulnerabilities in the Linux kernel packages shipped by Red Hat. The advisory states that some of the flaws allow remote arbitrary code execution, privilege escalation and remote denial of service, with further impacts on data integrity and confidentiality, security policy bypass, CSRF and impacts left unspecified by the vendor. It references twenty-three Red Hat security errata published between 30 October and 5 November 2026, from RHSA-2026:93047 to RHSA-2026:95721, and lists more than one hundred CVE identifiers ranging from CVE-2022-50315 to the recent 2026-99xxx series. The affected scope is broad: Red Hat Enterprise Linux 8, 9 and 10 and their Extended Update Support, Extended Life Cycle, AUS, TUS, SAP Solutions and Real Time variants on x86_64, aarch64, ppc64le and s390x, plus the matching CodeReady Linux Builder repositories. No exploitation in the wild is mentioned, and the advisory provides no CVSS score, no prerequisite and no mapping of each CVE to a kernel subsystem.
Entenda a falha
A vulnerabilidade
CERT-FR advisory CERTFR-2026-AVI-1471 groups more than one hundred Linux kernel CVEs fixed in Red Hat kernel packages, from CVE-2022-50315 to the 2026 series. CERT-FR says the impacts include remote arbitrary code execution, remote denial of service, data integrity and confidentiality loss, security policy bypass, CSRF and unspecified effects. It gives no CVSS score, no prerequisites and no per-CVE detail, so severity cannot be ranked from it. Affected products are RHEL 7 Real Time, 8, 9 and 10 (including EUS, ELS, AUS, TUS, SAP and Real Time variants on x86_64, aarch64, ppc64le and s390x) and CodeReady Linux Builder. The exact affected and fixed versions are in the Red Hat errata RHSA-2026:93047 to RHSA-2026:95721.
Como funciona
The advisory does not describe how any of these flaws work, and it does not link each CVE to a kernel subsystem. No input path or failing step can be given from the sources. The story only notes that kernel flaws of this class generally need local access or a specific hardware, driver or protocol path to be reached. That is a general remark, not a statement about each CVE.
Por que é vulnerável
The sources give no root cause for any of the CVEs. The fix is to install the updated Red Hat kernel packages from the listed errata, then reboot or apply the matching kpatch live patch. The advisory names no workaround.
Como foi descoberta
CERT-FR published the advisory on 6 November 2026. It compiles twenty-three Red Hat security errata released between 30 October and 5 November 2026. The sources do not say who found the individual flaws or how. The advisory mentions no exploitation in the wild.
Explicação gerada por IA a partir da matéria e dos artigos, em 08/11/2026 11:22.
Detalhes técnicos
CERT-FR does not break down which CVE affects which RHEL release, kernel flavour or architecture, and refers administrators to the Red Hat errata for the exact affected and fixed package versions (cert.cyber.gouv.fr). Kernel vulnerabilities of this class generally require local access or a specific hardware, driver or protocol path to be reached, which limits the immediate operational urgency despite the remote code execution impact listed by the bulletin.
Remediação
Apply the kernel packages referenced in the corresponding Red Hat errata RHSA-2026:93047 through RHSA-2026:95721 and reboot the systems, or apply the matching live patch where kpatch is in use. The advisory names no workaround.
Linha do tempo
-
CERT-FR advisory CERTFR-2026-AVI-1471: Red Hat ships 23 kernel errata fixing over 100 Linux kernel CVEs across RHEL 7 to 10
ler a análise desta fonte ocultar
CERT-FR published advisory CERTFR-2026-AVI-1471 on 6 November 2026 covering multiple vulnerabilities in the Linux kernel packages shipped by Red Hat. The advisory states that some of the flaws allow remote arbitrary code execution, privilege escalation and remote denial of service, with further impacts on data integrity and confidentiality, security policy bypass, CSRF and impacts left unspecified by the vendor. It references twenty-three Red Hat security errata published between 30 October and 5 November 2026, from RHSA-2026:93047 to RHSA-2026:95721, and lists more than one hundred CVE identifiers ranging from CVE-2022-50315 to the recent 2026-99xxx series. The affected scope is broad: Red Hat Enterprise Linux 8, 9 and 10 and their Extended Update Support, Extended Life Cycle, AUS, TUS, SAP Solutions and Real Time variants on x86_64, aarch64, ppc64le and s390x, plus the matching CodeReady Linux Builder repositories. No exploitation in the wild is mentioned, and the advisory provides no CVSS score, no prerequisite and no mapping of each CVE to a kernel subsystem.
Technical Details
CERT-FR does not break down which CVE affects which RHEL release, kernel flavour or architecture, and refers administrators to the Red Hat errata for the exact affected and fixed package versions (cert.cyber.gouv.fr). Kernel vulnerabilities of this class generally require local access or a specific hardware, driver or protocol path to be reached, which limits the immediate operational urgency despite the remote code execution impact listed by the bulletin.
Remediation
Apply the kernel packages referenced in the corresponding Red Hat errata RHSA-2026:93047 through RHSA-2026:95721 and reboot the systems, or apply the matching live patch where kpatch is in use. The advisory names no workaround.