Critical Kernel Security Update for Red Hat Packages: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:85000: Red Hat Security Advisory: kernel security update. Affects bpftool versions < 0:4.18.0-372.223.1.el8_6. Fixed in 0:4.18.0-372.223.1.el8_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The affected packages, including 'bpftool', 'kernel', and their associated components, are integral to the Red Hat Enterprise Linux (RHEL) ecosystem. These packages provide essential functionalities for network packet filtering, performance monitoring, and system resource management. The kernel serves as the core of the operating system, managing hardware resources and providing a platform for applications. The vulnerabilities identified pose significant risks to system integrity and security, making timely updates crucial.
Vulnerability Detail
The vulnerabilities stem from various issues within the kernel and related packages, including potential privilege escalation and denial of service. These vulnerabilities can be exploited by attackers to gain unauthorized access to system resources or disrupt system operations. The vulnerabilities are cataloged under multiple CVEs, indicating a range of security concerns that could lead to severe ramifications if left unaddressed.
How To Fix
Minimum fixed version
0:4.18.0-372.223.1.el8_6
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can limit access to the affected services or restrict user permissions until the packages are updated. This can be done by modifying user roles or disabling specific services that rely on the vulnerable components.
Conclusion
In summary, the identified vulnerabilities in Red Hat packages pose significant risks that require immediate attention. Updating to the patched version is crucial to maintaining system security. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for bpftool →
FAQ
The CVSS score of the vulnerability is 7.1, indicating a high severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability could lead to unauthorized access, privilege escalation, or denial of service, compromising system security.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
If immediate updates are not possible, consider implementing access restrictions or disabling vulnerable services as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
