A vulnerability (CVE-2026-46054) in the Linux kernel's SELinux subsystem within overlayfs incorrectly handles `mmap()` and `mprotect()` access checks, potentially allowing unauthorized access. Red Hat has rated this update as Important, though a specific CVSS score is not provided in the advisory text. The security update affects Red Hat Enterprise Linux 8 across all supported architectures, and the fix is delivered via updated kernel packages; a system reboot is required for the patch to take effect.
Red Hat Product Errata RHSA-2026:27811 - Security Advisory Issued: 2026-06-22 Updated: 2026-06-22 RHSA-2026:27811 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2482025 - CVE-2026-46054 kernel: selinux: fix overlayfs mmap() and mprotect() access checks CVEs CVE-2026-46054 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kernel-4.18.0-553.137.1.el8_10.src.rpm SHA-256: c1c23702d11117537b88b6f998ca5fe45f9691302d0d5a14316bf2ad7faa8fdd x86_64 bpftool-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 98f75cf2b8d7b1370a954224435596595ea8178015d3e6c73a9c3cc9aa4bf0f3 bpftool-debuginfo-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 8cd1d9110800380fcd78c950edf096a71f165c52fd53955731873c080450f25a kernel-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: c03bfa203775fa1faf8de244ee03808331b8a3836f6657fe9a9d14b50daa36ac kernel-abi-stablelists-4.18.0-553.137.1.el8_10.noarch.rpm SHA-256: 96c72278958ef4ec4f08c51705930556cfac8634bfb52e7c0d526701a34c94da kernel-core-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 35c7c6c1745c318fb3636030d235c7d096a1860b7b133ee3e8ddb863d749baf5 kernel-cross-headers-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 844ec5fd2eeca988db1b67077e2d2341c9cf3547423bc59bf795dc73534b1799 kernel-debug-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: a24ce47989b48b665acb458a9c2e0fbcefa3095bf0853ab3a2f3b65f8eec9da2 kernel-debug-core-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: af90f2d9ef0f73e4b6620238de6ba0cf1df8a5571ee341b7898a634b8236566a kernel-debug-debuginfo-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: b01c5c83901e3f6b1498df795270bc50240af9b5d77a742b8cb938d6217d72e4 kernel-debug-devel-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: d012df564ad4b975c8f1257c3e57932201a66abdfece4baaa2f019797f0c2ed7 kernel-debug-modules-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: b7508b250a8f72c8c8f62e9da2260c8339f0063eac64bc6a87246dd0141bb4a2 kernel-debug-modules-extra-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: d0a33873f9f9dc0754a4471ba5f9a3a7fd67189e7e14c5f25e4a00b31f961d4a kernel-debuginfo-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 1bd7917462d1a4570943846360c22210f8eee847a345b15f3e2e0599be913c72 kernel-debuginfo-common-x86_64-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: e5f13b7e2eec1eb34e9e8ff904010c8e89f6add190804bdf8cce440be0964ad6 kernel-devel-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 88d470451c85b68ff3ac720e21d0c6a45e90087eba2a71a2feb757c922935fd4 kernel-doc-4.18.0-553.137.1.el8_10.noarch.rpm SHA-256: f0162a488c6066df9bfb62f2e1f3c5a6325fd55f6dca9acc2ccc5b95de2f1539 kernel-headers-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 0c88fba2963a9e890d6c531716f94ed67006acbac115e10c44add64809c7be98 kernel-modules-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 5c40c0c28e08f92df5621214adc942844ac89dd5f0df000f9019ae437f7c6ae8 kernel-modules-extra-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 6849e25441bae58dc11aaec7c85ce94ae458f852d8bfe856930bba71bfbc9182 kernel-tools-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: c20db9760843f3eb02319491a4098961b63d0daeafe660af09c211396a80c75f kernel-tools-debuginfo-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: e52fabcb850c52c6ebaed1bb310a0984e99410b1be5aa9247d247a50aba45498 kernel-tools-libs-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 2ca29a8fd109a0a015a9bb4c48b58c04dada11b64521bf89513eb84c2a6d92b1 perf-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 3548d730ae930f04078c80d198109c2631e37b1dea39133244d5a4e1589ba092 perf-debuginfo-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 0b5f2093a66c37406b99a77a3ce3e2caa5fc21859b0888e1fae7d3dbeea213f2 python3-perf-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: 941ba103e45b17cd278fdbd43ea0bf66db2b2943c7750b6beca3d07d7fd4a966 python3-perf-debuginfo-4.18.0-553.137.1.el8_10.x86_64.rpm SHA-256: fefe53ebf8401d46e3860f6b1a7dcbcb33682709e3d5eb3710fd5fdd3a95401f Red Hat Enterprise Linux for IBM z Systems 8 SRPM kernel-4.18.0-553.137.1.el8_10.src.rpm SHA-256: c1c23702d11117537b88b6f998ca5fe45f9691302d0d5a14316bf2ad7faa8fdd s390x bpftool-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 9554df07b2cf929b7eff3cf22136333d119664b8a42c0e37d9377805a7586879 bpftool-debuginfo-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: acff2d11bf8ebbe8b8709048d103516985c4f564db5a6f222adfc21d4a177245 kernel-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 857bb25439fa690863ae5248eb77be9d5dca04b94cfb17f4df688e2be8cfa53b kernel-abi-stablelists-4.18.0-553.137.1.el8_10.noarch.rpm SHA-256: 96c72278958ef4ec4f08c51705930556cfac8634bfb52e7c0d526701a34c94da kernel-core-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 746ed1bcc4d220267fd5ce25eeeb4916a0fc72311c4acdbf535a00420caf5fba kernel-cross-headers-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: e4003f3f3c53ed0a0eb1f3fca6033b75a249c61d4c35851c889c9f5955967f14 kernel-debug-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 397822e4b2461e215ae52059bb931ce8a74994e836659073c25b16b8f621bc09 kernel-debug-core-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 401a751d06ee0b60e1b558b851ca8d4066c1a65205173cbfcbfd52fd6eaf7bc6 kernel-debug-debuginfo-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 4810d4d91607b28e5f3b541215fab6a2152e11bdf2676296a1d5cdccada079bd kernel-debug-devel-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 394d0233f58ce865a6395908a4044d45a903dee1e5602806511e01f6a2b31b74 kernel-debug-modules-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: e893ec188b3995348f7d24cbf68b430b8e3981b5e2893faa389290c29c28ff25 kernel-debug-modules-extra-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 313d3f7e7943b2c3ebafa8038349abd55bd753659beb2ed52604b7e0c62f4e1f kernel-debuginfo-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 14bc5b9ac581512ce2970191cff41196c4ef9898ebd0b6f55585fcef35190141 kernel-debuginfo-common-s390x-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 0863ddaa9d804c69e957345e03c6eedc62a71de4a767924b2a63fed6f2f9d193 kernel-devel-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 9cc1ffe9333ef4bc7d51a0c2778ce64389efc52206691dab8dfcc76cf5c5f033 kernel-doc-4.18.0-553.137.1.el8_10.noarch.rpm SHA-256: f0162a488c6066df9bfb62f2e1f3c5a6325fd55f6dca9acc2ccc5b95de2f1539 kernel-headers-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: df5b86dac2e3e69488e1d873d7cfbf5eeab56d9a0fa97ca1aab6c7473d475104 kernel-modules-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 4d06837539aff43bcba05a8963e807d4acff2734ebecefb7a902968ac2b09410 kernel-modules-extra-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 86705c68d63948669139672a5400f18376af747adea77b7bd92fa505370de617 kernel-tools-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 073503bf745e2162fc4773b448aafca9464a4924f7893f2e74b1c325ad43b8e0 kernel-tools-debuginfo-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 700b464ce4d4f722fd98d212af9d006e94e89ce1a48738297128bfa6a719a326 kernel-zfcpdump-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 8e01ece0672516ba6ec44aac247dc23ca0c883562e66158c03c829e82d12a8ab kernel-zfcpdump-core-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 89dc9fc534984cfc653a38f72e505dd89eed4471d14b4ad6579fb36f25341405 kernel-zfcpdump-debuginfo-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: f6913ae0809b03b356c85fcabd9a7277d988f053067acd28d7446c4fded39b56 kernel-zfcpdump-devel-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: cd8a255ca5685f179abbfc161e4a9478c2ed7db5f8a457fb5071060d97c53740 kernel-zfcpdump-modules-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: f2444d8ef7fff53154cc42fd6369a69361c546e078948f4b02acccabdceb8e78 kernel-zfcpdump-modules-extra-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: f0d6c5ad64107dafe750226a2893289a25cbc8edb0c2657c0bfbfa0b4a3e996c perf-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: a83c59a96dbe4382e469365c4770c80cd485fd5ef3f9e0c6d4d1b3ba7676e58c perf-debuginfo-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: 6b40d4b890253ee9d5908ce14f0a184f0cbb004c41c5c3a0cbc6a4c3f0135fa7 python3-perf-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: e2882a025fd8cacb04f53b99fba33bf143bb2602ad5eb38a9023c75390997b7b python3-perf-debuginfo-4.18.0-553.137.1.el8_10.s390x.rpm SHA-256: f022d034f96e36f5ad24fb90560e505dc34920dfb2b193c29389d42fa360cbd9 Red Hat Enterprise Linux for Power, little endian 8 SRPM kernel-4.18.0-553.137.1.el8_10.src.rpm SHA-256: c1c23702d11117537b88b6f998ca5fe45f9691302d0d5a14316bf2ad7faa8fd