Local Buffer Handling Flaw in Red Hat Enterprise Linux Kernel
CVE-2026-118593

5.9MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
30 October 2026

What is CVE-2026-118593?

A vulnerability has been identified in the kernel builds of Red Hat Enterprise Linux 9. The issue arises from an inadequate backport related to a fix in earlier versions, specifically affecting the seg6_input_core() function. This flaw results in a local_bh imbalance, allowing bottom halves to remain disabled erroneously, which can lead to softirq starvation. Systems configured with SRv6 tunnels may experience Denial of Service, impacting their performance and stability. This vulnerability does not extend to upstream builds or Red Hat Enterprise Linux 10.

References

https://access.redhat.com/security/cve/CVE-2026-118593
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2563095
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.