RHSA-2026:85321: CVEs fixed (Red Hat)
RHSA-2026:85321 fixes 5 tracked CVEs. Affected systems and fixed versions.
- CVE-2026-89633 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unva
- CVE-2026-74752 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before u
- CVE-2026-99999 CRITICAL 9.3 In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before comp
- CVE-2026-68300 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when
- CVE-2026-68117 CRITICAL 9.8 In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock->sk on the failed-insert
Applies to
- RHEL 10 · fixed in kernel-6.12.0-211.67.1.el10_2