RHSA-2026:98099HighCVSS 7.8

Red Hat Security Advisory: kernel security update

Published
November 11, 2026
Last Modified
November 12, 2026

🔗 CVE IDs covered (10)

CVE-2026-99152 →CVE-2026-46330 →CVE-2026-68123 →CVE-2026-74510 →CVE-2026-80842 →CVE-2026-99153 →CVE-2026-68398 →CVE-2026-90207 →CVE-2026-98116 →CVE-2026-98403 →

📋 Description

CVE-2026-46330 — kernel: Revert "net/smc: Introduce TCP ULP support" CVE-2026-68123 — kernel: openvswitch: fix GSO userspace truncation underflow CVE-2026-68398 — kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability CVE-2026-74510 — kernel: Bluetooth: mgmt: fix UAF in pair command cancellation CVE-2026-80842 — kernel: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context CVE-2026-90207 — kernel: ALSA: seq: midi: Serialize input teardown with event_input CVE-2026-98116 — kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF CVE-2026-98403 — kernel: s390/boot: Avoid IPL parameter append past command line CVE-2026-99152 — kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses CVE-2026-99153 — kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU

🎯 Affected products122

  • Red Hat Enterprise Linux BaseOS (v. 8)
  • Red Hat Enterprise Linux CRB (v. 8)
  • bpftool-0:4.18.0-553.185.1.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bpftool-0:4.18.0-553.185.1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bpftool-0:4.18.0-553.185.1.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bpftool-0:4.18.0-553.185.1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bpftool-debuginfo-0:4.18.0-553.185.1.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bpftool-debuginfo-0:4.18.0-553.185.1.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • bpftool-debuginfo-0:4.18.0-553.185.1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bpftool-debuginfo-0:4.18.0-553.185.1.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
  • bpftool-debuginfo-0:4.18.0-553.185.1.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bpftool-debuginfo-0:4.18.0-553.185.1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bpftool-debuginfo-0:4.18.0-553.185.1.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • kernel-0:4.18.0-553.185.1.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-0:4.18.0-553.185.1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-0:4.18.0-553.185.1.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-0:4.18.0-553.185.1.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-0:4.18.0-553.185.1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-abi-stablelists-0:4.18.0-553.185.1.el8_10.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-core-0:4.18.0-553.185.1.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-core-0:4.18.0-553.185.1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-core-0:4.18.0-553.185.1.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-core-0:4.18.0-553.185.1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-debug-0:4.18.0-553.185.1.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-debug-0:4.18.0-553.185.1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-debug-0:4.18.0-553.185.1.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-debug-0:4.18.0-553.185.1.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-debug-core-0:4.18.0-553.185.1.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-debug-core-0:4.18.0-553.185.1.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • kernel-debug-core-0:4.18.0-553.185.1.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • +92 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Workaround: To mitigate this issue, prevent module smc from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: If PPP over L2TP functionality is not required, prevent the 'pppol2tp' kernel module from loading to mitigate this vulnerability. Create a file named `/etc/modprobe.d/disable-pppol2tp.conf` with the following content: ``` install pppol2tp /bin/true ``` After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. This action may impact services relying on PPP over L2TP. Workaround: To mitigate this vulnerability, disable the Bluetooth kernel module if Bluetooth functionality is not required. Create a file `/etc/modprobe.d/bluetooth-blacklist.conf` with the following content: ``` blacklist bluetooth install bluetooth /bin/true ``` Reboot the system for the changes to take effect. Disabling the Bluetooth module will remove all Bluetooth functionality from the system. Workaround: To mitigate this vulnerability on systems where audio capabilities are not required, disable the ALSA PCM kernel module (`snd-pcm`). 1. Prevent the module from loading by creating a modprobe configuration file: # echo "install snd-pcm /bin/true" > /etc/modprobe.d/disable-snd-pcm.conf 2. If the module is currently loaded, unload it: # modprobe -r snd-pcm Caveats: Disabling this module prevents audio hardware, playback, and recording from operating. Warning: Unloading the module will interrupt active audio processes. If the module is currently in use and cannot be unloaded, a system restart is required for the configuration to take effect. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (13)