This Red Hat kernel security update addresses five vulnerabilities, including a high-severity denial-of-service flaw in the CAKE network scheduler (CVE-2025-39766, CVSS 7.8) and multiple medium-severity issues causing denial-of-service in the ice driver, bonding driver, and RCU subsystem. Affected version ranges are extensive; for example, CVE-2025-39766 affects Linux kernel versions 4.19 through 5.4.296, 5.5 through 5.10.240, 5.11 through 5.15.189, 5.16 through 6.1.148, and 6.2 through 6.6.102. The fixed versions are specified per CVE, such as upgrading to kernel 5.4.297, 5.10.241, 5.15.190, 6.1.149, 6.6.103, 6.12.44, or 6.16.4 for CVE-2025-39766, and a system reboot is required after applying the update.
Red Hat Product Errata RHSA-2026:22334 - Security Advisory Issued: 2026-06-01 Updated: 2026-06-01 RHSA-2026:22334 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: rcu/nocb: Fix missed RCU barrier on deoffloading (CVE-2024-56547) kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210) kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2334521 - CVE-2024-56547 kernel: rcu/nocb: Fix missed RCU barrier on deoffloading BZ - 2394648 - CVE-2025-39766 kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit BZ - 2439895 - CVE-2026-23210 kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild BZ - 2457829 - CVE-2026-31419 kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service BZ - 2467059 - CVE-2026-43163 kernel: md/bitmap: fix GPF in write_page caused by resize race CVEs CVE-2024-56547 CVE-2025-39766 CVE-2026-23210 CVE-2026-31419 CVE-2026-43163 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM kernel-6.12.0-55.76.1.el10_0.src.rpm SHA-256: fe8523c7e1dea9a6f2d36a9872e8fda7f5028429a0a28a820964b6cd63f4f831 x86_64 kernel-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: dbecbee91e99731be2ac23c532c10c3b58630876a0a84eecc31e5203a85333ab kernel-abi-stablelists-6.12.0-55.76.1.el10_0.noarch.rpm SHA-256: d7854f408edbde4e0a2cce0aeedddd292ab667381d7b1180deb5ef373140ed31 kernel-core-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 44b58555ee1529c74373763f905754c54366ce34d43005fb1c3b9b6b5a4010a4 kernel-debug-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 86325eb3d24647ab2e773f9c908db30d871364385cedad05a5b0645eff4309b6 kernel-debug-core-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: b4ca40310c6b20c729481d947c19b86e2c85e1606481570760e14ef599f3baff kernel-debug-debuginfo-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 3b67ee26e8e133ba1ab765d9f3e29f8af7865e84dba1f38ae2f58b8376aa74b7 kernel-debug-debuginfo-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 3b67ee26e8e133ba1ab765d9f3e29f8af7865e84dba1f38ae2f58b8376aa74b7 kernel-debug-debuginfo-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 3b67ee26e8e133ba1ab765d9f3e29f8af7865e84dba1f38ae2f58b8376aa74b7 kernel-debug-debuginfo-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 3b67ee26e8e133ba1ab765d9f3e29f8af7865e84dba1f38ae2f58b8376aa74b7 kernel-debug-devel-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: a4501a0a06926f02eeaa1f5eaccdcf79bcb20dd5749514ad973eff0cf155fa59 kernel-debug-devel-matched-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 8c495e936929c9287eb92a8805ff054b8e45af020ceddecfd22626002af9736d kernel-debug-modules-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: c36dd17320ee04cb15488fcdca592bd45adf4f3775e43e196c1a9f79e20890a9 kernel-debug-modules-core-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 8b578dd991e6cd9f54bc4a7ac81de60adf53c288766ee5a30e34985a6d0fe553 kernel-debug-modules-extra-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 5cdb37e8ffd1ae6763301728771e1ed8953490687694cf018c9d85c7bfc645dc kernel-debug-uki-virt-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 45c8977a1a3c7f1295b8923cb727f4c0151a7079f29cd4ee979dfaca16f8880a kernel-debuginfo-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 4f03103755ee6689f5723cc9af2979bc5ef27aebe8c3c4849971beec11ad7ff7 kernel-debuginfo-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 4f03103755ee6689f5723cc9af2979bc5ef27aebe8c3c4849971beec11ad7ff7 kernel-debuginfo-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 4f03103755ee6689f5723cc9af2979bc5ef27aebe8c3c4849971beec11ad7ff7 kernel-debuginfo-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 4f03103755ee6689f5723cc9af2979bc5ef27aebe8c3c4849971beec11ad7ff7 kernel-debuginfo-common-x86_64-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: b57a71d4088163fadfd4e63f3d3fe8450836279d90c6fa8432d0bf5fa57a56ed kernel-debuginfo-common-x86_64-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: b57a71d4088163fadfd4e63f3d3fe8450836279d90c6fa8432d0bf5fa57a56ed kernel-debuginfo-common-x86_64-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: b57a71d4088163fadfd4e63f3d3fe8450836279d90c6fa8432d0bf5fa57a56ed kernel-debuginfo-common-x86_64-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: b57a71d4088163fadfd4e63f3d3fe8450836279d90c6fa8432d0bf5fa57a56ed kernel-devel-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 4fe44fe258a034b0fa0b61dab76fbdc3dad68d5fc7f46f5928212545209a2d57 kernel-devel-matched-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: f14f13f53fb624ce18fcd52e25494aec45dd73bf1d890550c9290bf4acbcae19 kernel-doc-6.12.0-55.76.1.el10_0.noarch.rpm SHA-256: f644f9876d5703b4565115b7bcf8d98d489f914cd89d366aaeb0669d306dbe5f kernel-headers-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 4817367e89d75e68b07bf5c8a649ba851747cefc3327a4874479bd32c86ea7b4 kernel-modules-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 473a02d5b3e5de555ddee1ffddd27f8ed3c7d99d42f09c543c039f48c240c422 kernel-modules-core-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: a9c0720ea9dad8d067908abf6316d136986b8b5f9a0fbd83c7523010311756f3 kernel-modules-extra-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: a6680c5ffe4ee09b6cadc44a59619a24c008c452890e170fabab0acf33f577e3 kernel-rt-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 6e7dafa2360f010c5651d641812951e2b33a1a604ad2b151af20298916e45ac9 kernel-rt-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 6e7dafa2360f010c5651d641812951e2b33a1a604ad2b151af20298916e45ac9 kernel-rt-core-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 9ea431ba17c3f4728cb8dd3c54db9883950518624ab4b51f5f51bae1ad7ea87b kernel-rt-core-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 9ea431ba17c3f4728cb8dd3c54db9883950518624ab4b51f5f51bae1ad7ea87b kernel-rt-debug-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 2fa2e885f4717e5f274fed94c0dd859deadadb3a776b346e2eb4c2837beef21c kernel-rt-debug-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 2fa2e885f4717e5f274fed94c0dd859deadadb3a776b346e2eb4c2837beef21c kernel-rt-debug-core-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 4048eb793696c95c79f3cbbba302766f9a384aee58c832b221ba5ee4758b8131 kernel-rt-debug-core-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 4048eb793696c95c79f3cbbba302766f9a384aee58c832b221ba5ee4758b8131 kernel-rt-debug-debuginfo-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 874fcf29b5eeae3e9237d7c33644b121f101cf03b2150176a732f3d389aaad15 kernel-rt-debug-debuginfo-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 874fcf29b5eeae3e9237d7c33644b121f101cf03b2150176a732f3d389aaad15 kernel-rt-debug-debuginfo-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 874fcf29b5eeae3e9237d7c33644b121f101cf03b2150176a732f3d389aaad15 kernel-rt-debug-debuginfo-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: 874fcf29b5eeae3e9237d7c33644b121f101cf03b2150176a732f3d389aaad15 kernel-rt-debug-devel-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: e77035b1951a1ab85315eb3bf464cef790b184c401ab57b326292a09fdad7e78 kernel-rt-debug-devel-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: e77035b1951a1ab85315eb3bf464cef790b184c401ab57b326292a09fdad7e78 kernel-rt-debug-kvm-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: ba9c4eea7d282ddeee50a3e96ce8779d4c39bcc628794eff6d328fc45587f6dc kernel-rt-debug-modules-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: c63f020c1e4e919f1574de52aca37f60d46e52c9f9cc326fdc66dbde14d64a3e kernel-rt-debug-modules-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: c63f020c1e4e919f1574de52aca37f60d46e52c9f9cc326fdc66dbde14d64a3e kernel-rt-debug-modules-core-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: d288aa00f26cf0b42dda2f598c8c299c91828580193041a987746b036468ff41 kernel-rt-debug-modules-core-6.12.0-55.76.1.el10_0.x86_64.rpm SHA-256: d288aa00f26cf0b42dda2f598c8c299c91828580193041a987746b036468ff41 kernel-rt-debug-modules-extra-6.12.0-55.76.1.el10_0.x86_64.rpm SH