This Red Hat security advisory addresses seven Important-severity kernel vulnerabilities, including a high-severity NVMe double-free flaw (CVE-2024-41073, CVSS 7.8) and multiple IPv6 and iSCSI use-after-free or race condition issues. The update specifically applies to Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Telecommunications Update Service. A system reboot is required after applying the patch, which remediates all listed CVEs.
Red Hat Product Errata RHSA-2026:22964 - Security Advisory Issued: 2026-06-03 Updated: 2026-06-04 RHSA-2026:22964 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: nvme: avoid double free special payload (CVE-2024-41073) kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170) kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135) kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158) kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2301637 - CVE-2024-41073 kernel: nvme: avoid double free special payload BZ - 2414506 - CVE-2025-40170 kernel: net: use dst_dev_rcu() in sk_setup_caps() BZ - 2414521 - CVE-2025-40135 kernel: ipv6: use RCU in ip6_xmit() BZ - 2414523 - CVE-2025-40158 kernel: ipv6: use RCU in ip6_output() BZ - 2440630 - CVE-2026-23216 kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() BZ - 2464351 - CVE-2026-43037 kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() BZ - 2464397 - CVE-2026-43038 kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() CVEs CVE-2024-41073 CVE-2025-40135 CVE-2025-40158 CVE-2025-40170 CVE-2026-23216 CVE-2026-43037 CVE-2026-43038 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 SRPM kernel-4.18.0-477.145.1.el8_8.src.rpm SHA-256: 17afd571dce170e5d3a6dc04b00c7f35e6cd79d68b3d12bf1e0b8b8ae38d8a2f x86_64 bpftool-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 70d5fbee8a147fcc8ac1386ed4e6f821e5dc8499c8806d1c8c3eb330dc81cd7a bpftool-debuginfo-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 099dd175dce38b7745dbfb8292c9107ad3e52b2e2fedb340693caecbbc03af34 kernel-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 9bde72d95bf423c0295bddc62fe01de46916bccb1121e29ce6fb5f50585f39fe kernel-abi-stablelists-4.18.0-477.145.1.el8_8.noarch.rpm SHA-256: a940befbb93993d5da10243a70dccac50a000a504c9ad6d8df743470e1e26085 kernel-core-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: cac85814639bb49cc24b51f8f3bda9d145b5afedf11a8271c84a64912ff7a483 kernel-cross-headers-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: c0981529ad698ccd516bedba610cf23a17bb24d5444f1f077353bb3c46961b80 kernel-debug-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 9995b86adeeb73366bd4175274f8f86a8dd4cb5f418fb8dcd5547457c46ef070 kernel-debug-core-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 678079e8f8690dfa5e37177fb3c792d66b6662a36646d81a09822d9f7278a64b kernel-debug-debuginfo-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 5df66de57de622a94f50a2f86aff2d995ee0c2ba2d7292fdf17c5fdea33d7a5b kernel-debug-devel-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 244ef269c7fb68dfd281e025248e20679f72de8e2c80343a98118e8f68e5b71c kernel-debug-modules-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 675687e9472d5b867df4f905d9ba82391e7832d612de32d791e2d8263262d823 kernel-debug-modules-extra-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 4fff78e157d9b2d791374f544b38a9eb472010290f992144756a0a9e52896f68 kernel-debuginfo-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 2bc160f65676c3d5d532f48de9fcda1a27e58fa40b62c4c4855ff9e54c119aad kernel-debuginfo-common-x86_64-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 2a4d3f3869e4798614c1c19f9c829acc56881b804f71f686fa715c4c14347c39 kernel-devel-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: d81f2839dbdd59fcc43084606becb1908e22b8e0b16b5be5cee8833b3f6870ec kernel-doc-4.18.0-477.145.1.el8_8.noarch.rpm SHA-256: 6a6a595a85b9489177751b974124333e7da1507512b5def9a551ad1c55bfc621 kernel-headers-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 1566571af43852f6e5612e7e0d889f8660338436d02a6921088473b71bd5bd02 kernel-modules-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 1bd96dbd4faff86dc132c2aeaf8bf20973e7e8ce3a2097316449cf6c42bd3708 kernel-modules-extra-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: f624526e69f89061638f39a41a6e84619408a77358d29786ac60ea47d740c460 kernel-tools-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 245b41cf49c3232df092102f6d5e09def2084a77cdb0919b2c133c20da921766 kernel-tools-debuginfo-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 7a1dc2719771081d70e737d162b9c182608765eea70b673e67e5d65eb6f17897 kernel-tools-libs-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 0a3663be6b97c57dc7dbaccc19b843b5da27daad6e58acda6e4d4c0455f637da perf-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 0dcac81d31853645b7b2231666b0a9f3c3d74261023978fa881993ffc620ef6c perf-debuginfo-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: e27ef64f0b42cd9b2ea225b8c7b64c7ab813a561c87e41e55944efe4a3deb22b python3-perf-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 677afdbbcb78f7df59274ee1e456577d74262b3608cf399f8632b8ea0143b9cc python3-perf-debuginfo-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 494a094a524ca66d3fc0a23f76fe373a5e7ca1579f3ace73876867dd56950cf1 Red Hat Enterprise Linux Server - TUS 8.8 SRPM kernel-4.18.0-477.145.1.el8_8.src.rpm SHA-256: 17afd571dce170e5d3a6dc04b00c7f35e6cd79d68b3d12bf1e0b8b8ae38d8a2f x86_64 bpftool-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 70d5fbee8a147fcc8ac1386ed4e6f821e5dc8499c8806d1c8c3eb330dc81cd7a bpftool-debuginfo-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 099dd175dce38b7745dbfb8292c9107ad3e52b2e2fedb340693caecbbc03af34 kernel-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 9bde72d95bf423c0295bddc62fe01de46916bccb1121e29ce6fb5f50585f39fe kernel-abi-stablelists-4.18.0-477.145.1.el8_8.noarch.rpm SHA-256: a940befbb93993d5da10243a70dccac50a000a504c9ad6d8df743470e1e26085 kernel-core-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: cac85814639bb49cc24b51f8f3bda9d145b5afedf11a8271c84a64912ff7a483 kernel-cross-headers-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: c0981529ad698ccd516bedba610cf23a17bb24d5444f1f077353bb3c46961b80 kernel-debug-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 9995b86adeeb73366bd4175274f8f86a8dd4cb5f418fb8dcd5547457c46ef070 kernel-debug-core-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 678079e8f8690dfa5e37177fb3c792d66b6662a36646d81a09822d9f7278a64b kernel-debug-debuginfo-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 5df66de57de622a94f50a2f86aff2d995ee0c2ba2d7292fdf17c5fdea33d7a5b kernel-debug-devel-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 244ef269c7fb68dfd281e025248e20679f72de8e2c80343a98118e8f68e5b71c kernel-debug-modules-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 675687e9472d5b867df4f905d9ba82391e7832d612de32d791e2d8263262d823 kernel-debug-modules-extra-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 4fff78e157d9b2d791374f544b38a9eb472010290f992144756a0a9e52896f68 kernel-debuginfo-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 2bc160f65676c3d5d532f48de9fcda1a27e58fa40b62c4c4855ff9e54c119aad kernel-debuginfo-common-x86_64-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 2a4d3f3869e4798614c1c19f9c829acc56881b804f71f686fa715c4c14347c39 kernel-devel-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: d81f2839dbdd59fcc43084606becb1908e22b8e0b16b5be5cee8833b3f6870ec kernel-doc-4.18.0-477.145.1.el8_8.noarch.rpm SHA-256: 6a6a595a85b9489177751b974124333e7da1507512b5def9a551ad1c55bfc621 kernel-headers-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 1566571af43852f6e5612e7e0d889f8660338436d02a6921088473b71bd5bd02 kernel-modules-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 1bd96dbd4faff86dc132c2aeaf8bf20973e7e8ce3a2097316449cf6c42bd3708 kernel-modules-extra-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: f624526e69f89061638f39a41a6e84619408a77358d29786ac60ea47d740c460 kernel-tools-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 245b41cf49c3232df092102f6d5e09def2084a77cdb0919b2c133c20da921766 kernel-tools-debuginfo-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 7a1dc2719771081d70e737d162b9c182608765eea70b673e67e5d65eb6f17897 kernel-tools-libs-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 0a3663be6b97c57dc7dbaccc19b843b5da27daad6e58acda6e4d4c0455f637da perf-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 0dcac81d31853645b7b2231666b0a9f3c3d74261023978fa881993ffc620ef6c perf-debuginfo-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: e27ef64f0b42cd9b2ea225b8c7b64c7ab813a561c87e41e55944efe4a3deb22b python3-perf-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 677afdbbcb78f7df59274ee1e456577d74262b3608cf399f8632b8ea0143b9cc python3-perf-debuginfo-4.18.0-477.145.1.el8_8.x86_64.rpm SHA-256: 494a094a524ca66d3fc0a23f76fe373a5e7ca1579f3ace73876867dd56950cf1 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM kernel-4.