A critical vulnerability (CVE-2026-43037, CVSS 9.8) in the Linux kernel's ip6_tunnel module allows for potential exploitation by failing to clear the skb2->cb[] buffer in the ip4ip6_err() function. Affected versions include Linux kernel 2.6.22 through 5.10.252, 5.11 through 5.15.202, 5.16 through 6.1.167, 6.2 through 6.6.133, and 6.7 through 6.12.80. The issue is fixed in kernel versions 5.10.253, 5.15.203, 6.1.168, 6.6.134, and 6.12.81, with Red Hat providing the patched kernel packages in this advisory.
Red Hat Product Errata RHSA-2026:25534 - Security Advisory Issued: 2026-06-12 Updated: 2026-06-12 RHSA-2026:25534 - Security Advisory Overview Updated Packages Synopsis Critical: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Critical Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for NVIDIA for RHEL 10. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the NVIDIA for RHEL 10 Release Notes linked from the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for ARM 64 10 aarch64 Fixes BZ - 2464351 - CVE-2026-43037 kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() VOYAGER-1032 - CVE-2026-43037 kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() [voyager-26.01.z] CVEs CVE-2026-43037 References https://access.redhat.com/security/updates/classification/#critical Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for ARM 64 10 SRPM kernel-6.12.0-212.10.el10nv.src.rpm SHA-256: 827872ce538efc12dfe27a233e9435f811b6f2abd4afe609cfe34a8adc508d45 aarch64 kernel-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 5fef415cb882b023e5a6d1ed9ae80f9389165c671cb1f1669e0309c216d1facb kernel-64k-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 1857e0a0938bd3614e0047774c2a9fb05c5831e629e6d2b9817e8870fe947e02 kernel-64k-core-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 351fa1416280b962cfa4388a632ccc5324b157541eed36c5f82bc05428a004fa kernel-64k-debug-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: a5f74fa72a236e29a9edd8993be5c56b05b04d762be5c95cec39dd6b4c915abc kernel-64k-debug-core-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: b427c30fe96626cb60035dff409321472ea889e3e76439f440214a2154ebf238 kernel-64k-debug-debuginfo-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 0587beb961faadd63879ce462b701d6e316b51bbc3a928e4a765663245538957 kernel-64k-debug-modules-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 42f824d79031af811c5cc008eaffd3e73d5f86b22fa7594330093f1cc8eadd7b kernel-64k-debug-modules-core-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 7e431fb30a3af6c99f3b7c0f8c3162a36d82a3438ddd33b0c35d4e95d2c0fd94 kernel-64k-debug-modules-extra-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: f98568a462b6940a37680d71bdf444b5c322c2b1d5993133a040f260c2f9d1b0 kernel-64k-debuginfo-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 9e625c15ead94362b79cc6fdb87381bbcbe2625b51e8cd3fa38c264064095ba9 kernel-64k-modules-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 8bb9f34caa50f636bbe9088fc4d8493202342053a653316419381d0730838128 kernel-64k-modules-core-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 484eef79ec6652d67eb8bc567a8040961e4ee7a183ae97ff51653c7ee5fa1f86 kernel-64k-modules-extra-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: a33b09e7411c3c500abdbc3c9d3e0b98112f4177b5ec2dbe0e9a3f71ca14e862 kernel-abi-stablelists-6.12.0-212.10.el10nv.noarch.rpm SHA-256: 23624651f047fd6095371a5485cfd4c62192431f0e45cefb4154c082b5d6009b kernel-core-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 4593037268fd40b31bad82314ce4bd304eb2cad7f79fcddf7bcfe5809a4425df kernel-debug-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 9d174e3020ebb183d84e0504965739fafb4935fbf44706134fc64b864c9485f6 kernel-debug-core-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 1cef3dc902a5e3fb66caff2ad88884f673b9fdeeab8e899f073307a8040fe2db kernel-debug-debuginfo-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 2fda323129c0f5a2adc3fa611a181945c4836a5174a11601de3ab99e5cafb89e kernel-debug-devel-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 40906e1ddf0dccd9ebd560f894960af7485a487e6bb341b7bd4a923debe86d1f kernel-debug-devel-matched-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 706ca51a14e621de880d6ecffd33af2a62c0aeb93203e168c33643c957cc47ef kernel-debug-modules-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: cda5aa9de0d751fe2297e268afe3bdd6fc2bcab39982a5d6000e84350897e3c2 kernel-debug-modules-core-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 0e1b5ee8d000700b7187ef5ce471310cad36d188b268ab48062e6e3182e3cbf6 kernel-debug-modules-extra-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 237f571468f5c38ad0d0ce24591d08fff2d75e35ab8ad253681c9d6d594be0ec kernel-debuginfo-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 138e8befe7723d9da412235ba851b5f11bf83a50d41e37af0771530af63881bf kernel-debuginfo-common-aarch64-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 192cdf763dede6c2bde548b25e7e74026914371361b53d56cd71a1b3397f29e7 kernel-devel-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: d8c8757dede8ad2987a7b687a7af46d8495348b9052d609bd60c342d42825fd3 kernel-devel-matched-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 3a167ccea7e4d0a0e00ed2417fcf1c6c9889268adc87a42e68959e6f165897f8 kernel-doc-6.12.0-212.10.el10nv.noarch.rpm SHA-256: d023847601a546ea7b3fa3249e03bd9c13b1a719130857bc7b5945564d3831d9 kernel-headers-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: e3ce144c19a58273745e231be4317374063f5baef364c0c139817a5bd8d72ad8 kernel-modules-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 34d06459518bc4eccd10ba41c58a03b9c53c7a1a1946c2bd8a30b636d05c7679 kernel-modules-core-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: c0637a84872467253931145e171913fc236f41b47c6c8c102ac7818051808c7e kernel-modules-extra-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: d7c73343392fe20b4f0ef1b745783ad0f078cfd71a2775b2e034a62550663f45 kernel-modules-extra-matched-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: f3473606262033f4399f304c0abc2d87bc7187e7048647bb91be3de4b6a80e8f kernel-tools-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 4e9e8da5d67c220a720f95aa61bfd2467bfcc0d91c46da9c1b3e23f329668571 kernel-tools-debuginfo-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 9c258e1d4816b3f5e18326c0de2a1d29ac030252bebd70fc95cfa4ef9834e579 kernel-tools-libs-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 159b198e5d21eab24ff042ef3186de7126f64621f5a0f3901832dbbaf76cf943 kernel-uki-virt-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 144ed92c039708e6074301f671f92de540747135a64a5c0b12e236da782e6c28 kernel-uki-virt-addons-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: d2ab4a4538aa42cb21c8dae5d8cb0f18d54b365c1a953090842bd9e2c9ac5c86 libperf-debuginfo-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 08b19b402b42a1b71cd039fec52bb2d8cb111a124af192bc8ec9f745646b1b95 perf-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: f0df15a5a6905e683d80e49088d5c87318d4480069988f4b59ce69333bdab290 perf-debuginfo-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 0d5ae09484147899d6d93a307ecfd08530579e75063d9ba86dc6bbfa5bc43b52 python3-perf-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 798849178722f707a882cb7945c26a1913abea204dbb31f1880f4d778c77c28a python3-perf-debuginfo-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 1642fdfa17588eb3b26ba97ae93304dd8fb999193be99055ceabf24173d6486d rtla-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: 8b59782b6c630ab086cb435d689c2b2439cd85936caad8397153403276c99da1 rv-6.12.0-212.10.el10nv.aarch64.rpm SHA-256: a274e7dd3771c60c86f2441c386f1fa29d880e4e8ab9e0627d51e1f01125129b The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .