VDB
RHSA-2026:59662
RHSA-2026:59662
PUBLISHED
CVSS 6.300000190734863 MEDIUM
A flaw was found in the Linux kernel's Asynchronous Transfer Mode (ATM) networking component. A local attacker, by acting as a malicious signaling daemon, could send a specially crafted message containing an unvalidated pointer. This unvalidated pointer would be directly used by the kernel, leading to the dereference of an arbitrary memory address. The consequence is a system crash, resulting in a Denial of Service (DoS).
Risk Scores
CVSS 3.1
6.300000190734863
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rtla-0:5.14.0-284.188.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-debuginfo-0:5.14.0-284.188.1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | bpftool-0:7.0.0-284.188.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | 0:7.0.0-284.188.1.el9_2 |
| Red Hat | kernel-debuginfo-0:5.14.0-284.188.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-tools-debuginfo-0:5.14.0-284.188.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-tools-0:5.14.0-284.188.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-devel-matched-0:5.14.0-284.188.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-debug-0:5.14.0-284.188.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-tools-0:5.14.0-284.188.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-debug-modules-0:5.14.0-284.188.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-64k-debug-debuginfo-0:5.14.0-284.188.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-core-0:5.14.0-284.188.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | bpftool-0:7.0.0-284.188.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | 0:7.0.0-284.188.1.el9_2 |
| Red Hat | kernel-modules-core-0:5.14.0-284.188.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-debug-devel-matched-0:5.14.0-284.188.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-modules-0:5.14.0-284.188.1.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-devel-matched-0:5.14.0-284.188.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-zfcpdump-devel-matched-0:5.14.0-284.188.1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | rtla-0:5.14.0-284.188.1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
| Red Hat | kernel-debug-core-0:5.14.0-284.188.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | 0:5.14.0-284.188.1.el9_2 |
…and 147 more
Timeline
- Aug 26, 2026 CVE Published
- Sep 1, 2026 CVE Updated
- Sep 1, 2026 Distribution Patch
- Sep 1, 2026 Distribution Patch
- Sep 1, 2026 Security Advisory
- Sep 1, 2026 Security Advisory
- Sep 1, 2026 Security Advisory
- Sep 1, 2026 Security Advisory
- Sep 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:59662 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2456521 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2467015 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2481972 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2492277 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59662.json advisory
- https://access.redhat.com/security/cve/CVE-2026-31411 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-31411 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31411 advisory
- https://lore.kernel.org/linux-cve-announce/2026040820-CVE-2026-31411-7ef9@gregkh/T advisory
- https://access.redhat.com/security/cve/CVE-2026-43112 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-43112 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-43112 advisory
- https://lore.kernel.org/linux-cve-announce/2026050625-CVE-2026-43112-f37f@gregkh/T advisory
- https://access.redhat.com/security/cve/CVE-2026-46099 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-46099 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-46099 advisory
- https://lore.kernel.org/linux-cve-announce/2026052704-CVE-2026-46099-2a55@gregkh/T advisory
- https://access.redhat.com/security/cve/CVE-2026-53059 advisory
…and 3 more