VDB
RHSA-2026:86089
RHSA-2026:86089
PUBLISHED
CVSS 8.800000190734863 HIGH
A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during packet handling, potentially leading to arbitrary code execution on the host, a system crash resulting in Denial of Service (DoS), or information disclosure of sensitive memory.
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | kernel-debug-debuginfo-0:5.14.0-427.157.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-tools-0:5.14.0-427.157.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | perf-debuginfo-0:5.14.0-427.157.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-doc-0:5.14.0-427.157.1.el9_4.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | python3-perf-0:5.14.0-427.157.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-debuginfo-0:5.14.0-427.157.1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-zfcpdump-modules-extra-0:5.14.0-427.157.1.el9_4.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-debug-debuginfo-0:5.14.0-427.157.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-0:5.14.0-427.157.1.el9_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | libperf-debuginfo-0:5.14.0-427.157.1.el9_4.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-rt-debug-modules-core-0:5.14.0-427.157.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-debuginfo-common-s390x-0:5.14.0-427.157.1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-debug-debuginfo-0:5.14.0-427.157.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-debuginfo-0:5.14.0-427.157.1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-64k-debug-debuginfo-0:5.14.0-427.157.1.el9_4.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-rt-debug-devel-0:5.14.0-427.157.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-devel-matched-0:5.14.0-427.157.1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | bpftool-0:7.3.0-427.157.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4) | 0:7.3.0-427.157.1.el9_4 |
| Red Hat | kernel-tools-libs-0:5.14.0-427.157.1.el9_4.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
| Red Hat | kernel-rt-devel-0:5.14.0-427.157.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) | 0:5.14.0-427.157.1.el9_4 |
…and 213 more
Timeline
- Oct 20, 2026 CVE Published
- Oct 22, 2026 CVE Updated
- Oct 22, 2026 Distribution Patch
- Oct 22, 2026 Distribution Patch
- Oct 22, 2026 Security Advisory
- Oct 22, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:86089 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2553429 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_86089.json advisory
- https://access.redhat.com/security/cve/CVE-2026-99999 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-99999 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-99999 advisory
- https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99999.mbox advisory