Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Linux Kernel Patches: Privilege Escalation Risk

published 3 months ago

Summary

Multiple patches for Red Hat's Linux kernel have been released to address a vulnerability that could allow an attacker to gain elevated privileges. This affects Red Hat Enterprise Linux systems. To stay secure, apply the latest patches to your system as soon as possible.

What to do

Update redhat kpatch-patch-5_14_0-284_117_1 to version 0:1-16.el9_2.
Update redhat kpatch-patch-5_14_0-284_117_1-debuginfo to version 0:1-16.el9_2.
Update redhat kpatch-patch-5_14_0-284_117_1-debugsource to version 0:1-16.el9_2.
Update redhat kpatch-patch-5_14_0-284_134_1 to version 0:1-10.el9_2.
Update redhat kpatch-patch-5_14_0-284_134_1-debuginfo to version 0:1-10.el9_2.
Update redhat kpatch-patch-5_14_0-284_134_1-debugsource to version 0:1-10.el9_2.
Update redhat kpatch-patch-5_14_0-284_148_1 to version 0:1-8.el9_2.
Update redhat kpatch-patch-5_14_0-284_148_1-debuginfo to version 0:1-8.el9_2.
Update redhat kpatch-patch-5_14_0-284_148_1-debugsource to version 0:1-8.el9_2.
Update redhat kpatch-patch-5_14_0-284_158_1 to version 0:1-6.el9_2.
Update redhat kpatch-patch-5_14_0-284_158_1-debuginfo to version 0:1-6.el9_2.
Update redhat kpatch-patch-5_14_0-284_158_1-debugsource to version 0:1-6.el9_2.
Update redhat kpatch-patch-5_14_0-284_172_1 to version 0:1-3.el9_2.
Update redhat kpatch-patch-5_14_0-284_172_1-debuginfo to version 0:1-3.el9_2.
Update redhat kpatch-patch-5_14_0-284_172_1-debugsource to version 0:1-3.el9_2.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_117_1	< 0:1-16.el9_2 Fix: upgrade to 0:1-16.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_117_1-debuginfo	< 0:1-16.el9_2 Fix: upgrade to 0:1-16.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_117_1-debugsource	< 0:1-16.el9_2 Fix: upgrade to 0:1-16.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_134_1	< 0:1-10.el9_2 Fix: upgrade to 0:1-10.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_134_1-debuginfo	< 0:1-10.el9_2 Fix: upgrade to 0:1-10.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_134_1-debugsource	< 0:1-10.el9_2 Fix: upgrade to 0:1-10.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_148_1	< 0:1-8.el9_2 Fix: upgrade to 0:1-8.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_148_1-debuginfo	< 0:1-8.el9_2 Fix: upgrade to 0:1-8.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_148_1-debugsource	< 0:1-8.el9_2 Fix: upgrade to 0:1-8.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_158_1	< 0:1-6.el9_2 Fix: upgrade to 0:1-6.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_158_1-debuginfo	< 0:1-6.el9_2 Fix: upgrade to 0:1-6.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_158_1-debugsource	< 0:1-6.el9_2 Fix: upgrade to 0:1-6.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_172_1	< 0:1-3.el9_2 Fix: upgrade to 0:1-3.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_172_1-debuginfo	< 0:1-3.el9_2 Fix: upgrade to 0:1-3.el9_2
Red Hat:rhel_e4s:9.2::baseos	redhat	kpatch-patch-5_14_0-284_172_1-debugsource	< 0:1-3.el9_2 Fix: upgrade to 0:1-3.el9_2

Original advisory text

Red Hat Security Advisory: kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update

References

https://access.redhat.com/errata/RHSA-2026:36532 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2453803 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2454844 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2457829 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36532.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-23401 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-23401 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-23401 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2026040108-CVE-2026-23401-956d@gregkh... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-31402 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-31402 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-31402 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2026040327-CVE-2026-31402-3e6a@gregkh... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-31419 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-31419 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-31419 Vendor Advisory
https://lore.kernel.org/linux-cve-announce/2026041353-CVE-2026-31419-e176@gregkh... Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.1 High

Timeline

Published8 Jul 2026

Updated8 Jul 2026

First seen8 Jul 2026

Sources

RHSA-2026:36532 · OSV

Track software like this

Free during beta