High7.8Red Hat Linux

High [CVE-2026-31402] fix heap overflow in NFSv4.0 LOCK replay cache

This high-severity Red Hat Linux advisory covers CVE-2026-31402 affecting Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION), Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION), Red Hat Enterprise Linux Server (v. 7 ELS).

CVE-2026-31402 Published Apr 3, 2026

CVE-2026-31402

Affected products & platforms

Red Hat LinuxUnclassified

Open vendor advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

fix heap overflow in NFSv4.0 LOCK replay cache. Red Hat rates this important (CVSS 7.8).

Weakness: CWE-787. Affected package(s): kernel, kernel-rt.

Resolved in Red Hat advisory RHSA-2026:13936 — update the affected packages (`sudo dnf update`).

Affected products named by the advisory: Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION); Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION); Red Hat Enterprise Linux Server (v. 7 ELS); Red Hat Enterprise Linux for Real Time (v. 7 ELS); and 60 more.

Affected versions

kernel-0:4.18.0-553.123.1.el8_10
kernel-0:4.18.0-372.190.1.el8_6
kernel-0:4.18.0-477.139.1.el8_8
kernel-0:6.12.0-55.72.1.el10_0
kernel-rt-0:5.14.0-70.178.1.rt21.250.el9_0
kernel-rt-0:4.18.0-553.123.1.rt7.464.el8_10
kernel-0:5.14.0-611.54.1.el9_7
kernel-0:5.14.0-687.10.1.el9_8
kernel-0:5.14.0-427.121.1.el9_4
kernel-0:5.14.0-570.110.1.el9_6
kernel-0:5.14.0-70.178.1.el9_0
kernel-rt-0:3.10.0-1160.149.1.rt56.1301.el7

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Fixed versions

RHSA-2026:13936

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Update the affected package(s) to the fixed version shipped in RHSA-2026:13936 (`sudo dnf update` / `yum update`).

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.