Linux · 
Red Hat · Security advisory · June 24, 2026
Red Hat · Security advisory · June 24, 2026RHSA-2026:75560: kernel security update
RHSA-2026:75560, released June 24, 2026, fixes 17 CVEs in kernel (version 6.12.0-55.108.1.el10_0). None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
17
3 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0080
56th percentile
Priority of the 17 CVEs
Patch now 0
Urgent 3
High 14
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel | RHEL 10 | 6.12.0-55.108.1.el10_0 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-72130 | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers n... | 9.8 | 0.0080 | None reported |
| Urgent | CVE-2026-52993 | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 | None reported |
| Urgent | CVE-2026-64017 | blk-mq: pop cached request if it is usable | 9.8 | 0.0013 | None reported |
| High | CVE-2026-72098 | dm-verity: fix buffer overflow in FEC calculation | 9.8 | 0.0079 | None reported |
| High | CVE-2026-43493 | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | 9.8 | 0.0068 | None reported |
| High | CVE-2026-63919 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0065 | None reported |
| High | CVE-2026-68426 | xfrm: fix stale skb->prev after async crypto steals a GSO segment | 9.8 | 0.0050 | None reported |
| High | CVE-2026-64368 | mm/slab: do not limit zeroing to orig_size when only red zoning is enabled | 8.1 | 0.0042 | None reported |
| High | CVE-2026-22984 | kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in... | 8.8 | 0.0041 | None reported |
| High | CVE-2026-31467 | erofs: add GFP_NOIO in the bio completion if needed | 8.8 | 0.0038 | None reported |
| High | CVE-2026-31663 | xfrm: hold dev ref until after transport_finish NF_HOOK | 8.8 | 0.0022 | None reported |
| High | CVE-2026-63917 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0017 | None reported |
| High | CVE-2026-63921 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0016 | None reported |
| High | CVE-2026-68294 | net: qrtr: restrict socket creation to the initial network namespace | 8.8 | 0.0015 | None reported |
| High | CVE-2026-64438 | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in ad... | 8.8 | 0.0014 | None reported |
| High | CVE-2026-31581 | ALSA: 6fire: fix use-after-free on disconnect | 8.8 | 0.0013 | None reported |
| High | CVE-2026-53239 | xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() | 8.8 | 0.0010 | None reported |
Showing 1 to 17 of 17
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.