/
← Voltar ao feed
high

CERT-FR: Multiple Red Hat Enterprise Linux kernel vulnerabilities allow remote code execution, privilege escalation and DoS

1 fonte(s) · 1 atualização(ões) · publicado 15/10/2026 21:00 · coletado há 1 dia

CERT-FR advisory CERTFR-2026-AVI-1334, published 16 October 2026, reports multiple vulnerabilities in the Linux kernel shipped with Red Hat Enterprise Linux. Some of them allow a remote attacker to execute arbitrary code, escalate privileges and cause a remote denial of service. Other listed impacts are data integrity and confidentiality breaches and security policy bypass. The advisory covers about 58 CVEs and 13 Red Hat security bulletins (RHSA-2026:79786 through RHSA-2026:83207, dated 9 to 14 October 2026). It does not mention active exploitation, CVSS scores, IOCs or attribution.

Detalhes técnicos

  • Affected: Red Hat Enterprise Linux 8, 9 and 10 on x86_64, ARM 64 (aarch64), IBM z Systems (s390x) and Power little endian (ppc64le).
  • Affected: Red Hat Enterprise Linux variants including Extended Update Support, Extended Life Cycle, 4 years of updates and Update Services for SAP Solutions.
  • Affected: Red Hat Enterprise Linux for Real Time (8, plus 7 under Extended Life Cycle Support), Real Time for NFV 8, and CodeReady Linux Builder for the same architectures.
  • Affected: Red Hat Enterprise Linux Server 7 under Extended Life Cycle Support.
  • The advisory does not map individual CVEs to specific impacts or components.

Remediação

  • Apply the kernel updates published in the Red Hat bulletins RHSA-2026:79786, 81349, 81371, 81406, 81552, 82806, 82807, 82860, 83156, 83157, 83159 and 83207.
  • Refer to the Red Hat security bulletins for the fixed package versions matching each product and architecture.

Linha do tempo

  1. cert.ssi.gouv.fr ↗ · pub. 15/10/2026 21:00 · coletado 20/10 16:32 primeiro registro

    CERT-FR: Multiple Red Hat Enterprise Linux kernel vulnerabilities allow remote code execution, privilege escalation and DoS

    ler a análise desta fonte

    CERT-FR advisory CERTFR-2026-AVI-1334, published 16 October 2026, reports multiple vulnerabilities in the Linux kernel shipped with Red Hat Enterprise Linux. Some of them allow a remote attacker to execute arbitrary code, escalate privileges and cause a remote denial of service. Other listed impacts are data integrity and confidentiality breaches and security policy bypass. The advisory covers about 58 CVEs and 13 Red Hat security bulletins (RHSA-2026:79786 through RHSA-2026:83207, dated 9 to 14 October 2026). It does not mention active exploitation, CVSS scores, IOCs or attribution.

    Technical Details

    • Affected: Red Hat Enterprise Linux 8, 9 and 10 on x86_64, ARM 64 (aarch64), IBM z Systems (s390x) and Power little endian (ppc64le).
    • Affected: Red Hat Enterprise Linux variants including Extended Update Support, Extended Life Cycle, 4 years of updates and Update Services for SAP Solutions.
    • Affected: Red Hat Enterprise Linux for Real Time (8, plus 7 under Extended Life Cycle Support), Real Time for NFV 8, and CodeReady Linux Builder for the same architectures.
    • Affected: Red Hat Enterprise Linux Server 7 under Extended Life Cycle Support.
    • The advisory does not map individual CVEs to specific impacts or components.

    Remediation

    • Apply the kernel updates published in the Red Hat bulletins RHSA-2026:79786, 81349, 81371, 81406, 81552, 82806, 82807, 82860, 83156, 83157, 83159 and 83207.
    • Refer to the Red Hat security bulletins for the fixed package versions matching each product and architecture.