NVIDIA for RHEL 10 vulnerabilities

8 known vulnerabilities in NVIDIA for RHEL 10 from Red Hat. 8 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Linux: Integer Overflow or Wraparound

  CVE-2026-46331Jun 16, 2026Linux

  In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key loop using tcfp_off_max_hint, but the hin

• 7.1 High severity

  In the Linux kernel, the following vulnerability has been resolved: smb: client: reject…

  CVE-2026-46243Jun 1, 2026Linux

  In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as ker

• 7.8 High severity

  Linux Kernel Missing Initialization of a Variable Exploited

  CVE-2026-46300May 23, 2026LinuxEPSS 16.1%

  In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain th

• 8.8 High severity

  Linux: Insufficient Control Flow Management

  CVE-2026-43503May 23, 2026LinuxEPSS 1.99%

  In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail to propagate the SKBFL_SHARED_FRAG bit in skb_shin

• 7.1 High severity

  Linux: Improper Privilege Management

  CVE-2026-46333May 15, 2026LinuxEPSS 4.3%

  In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about the memory image of the task - the concept comes from whether it can core dump or not - and mak

• 8.8 High severity

  Linux: Write-what-where Condition

  CVE-2026-43284May 8, 2026LinuxEPSS 94.2%

  In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter(),

• 9.8 Critical severity

  Linux: Out-of-bounds Write

  CVE-2026-43037May 1, 2026Linux

  In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem. ip4ip6_err() calls icmp_send() on a cloned skb whose cb[] was written by the IPv6 receive path as struct

• 7.8 High severity

  Linux Kernel Incorrect Resource Transfer Between Spheres Exploited

  CVE-2026-31431Apr 22, 2026LinuxEPSS 98.1%

  In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_