RHSA-2026:72468 — Security Advisory

An update for kernel is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323)

• kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942)

• kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230)

• kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204)

• kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199)

• kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875)

• kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034)

• kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556)

• kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159)

• kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156)

• kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155)

• kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273)

• kernel: perf: Reject exited events as group leaders (CVE-2026-74753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.