This Red Hat security advisory addresses two kernel vulnerabilities: CVE-2026-31411, a medium-severity (CVSS 5.5) crash in the ATM subsystem due to an unvalidated pointer, and CVE-2026-43198, a critical (CVSS 9.8) race condition in the IPv6 TCP stack that could potentially lead to remote code execution. Based on NVD data, CVE-2026-31411 affects kernel versions from 2.6.12.1 up to but before 5.10.252, 5.11 up to 5.15.202, 5.16 up to 6.1.165, 6.2 up to 6.6.128, and 6.7 up to 6.12.75, while CVE-2026-43198 affects versions from 2.6.12.1 up to but before 6.18.16 and 6.19 up to 6.19.6. The advisory provides updated kernel packages for RHEL 9, requiring a system reboot for the fixes to take effect.
Red Hat Product Errata RHSA-2026:33285 - Security Advisory Issued: 2026-06-29 Updated: 2026-06-29 RHSA-2026:33285 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411) kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) Bug Fix(es) and Enhancement(s): [RHEL 9.8 Bug] qla2xxx flash image validation failure [rhel-9.8.z] (JIRA:RHEL-181886) crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [rhel-9.8.z] (JIRA:RHEL-182540) tegra-se fixes and updates [rhel-9.8.z] (JIRA:RHEL-182760) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2456521 - CVE-2026-31411 kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() BZ - 2467228 - CVE-2026-43198 kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() CVEs CVE-2026-31411 CVE-2026-43198 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM kernel-5.14.0-687.20.1.el9_8.src.rpm SHA-256: 03e20fe697a2cf93c67e77676e17e921ee714325fee60027ce10655406147415 x86_64 kernel-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 4dbb3187f61f13d7eeb974eaf346b1e2ab9b5f4564d6f756f05311567f711f19 kernel-abi-stablelists-5.14.0-687.20.1.el9_8.noarch.rpm SHA-256: d3252ce2a170784138fcba0937b4e19c866107b75d0375091a9d6ae9dbdc3f90 kernel-core-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 8ac6e0bc044644b711a0e320db2f768b7d0ce5d29fe231b8f169cb7fbc7a387b kernel-debug-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: afb6c63e4d844dd4f4cd4091954dcd97564f5749e7ce12e50617fadaae8c638e kernel-debug-core-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 7741b87fa59febe5bdb1b96c6beab5e5b6393c162e33237bc4ee85b72022ecf7 kernel-debug-debuginfo-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: a9ae00ac014cf283c9ccb5e2941b9b8511acece5e52e02177b159af8be3dbac0 kernel-debug-debuginfo-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: a9ae00ac014cf283c9ccb5e2941b9b8511acece5e52e02177b159af8be3dbac0 kernel-debug-debuginfo-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: a9ae00ac014cf283c9ccb5e2941b9b8511acece5e52e02177b159af8be3dbac0 kernel-debug-debuginfo-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: a9ae00ac014cf283c9ccb5e2941b9b8511acece5e52e02177b159af8be3dbac0 kernel-debug-devel-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 91397a341063b7e01651a2b55e6d31c6a65c6de25d6623d3d8ef7b80a5380111 kernel-debug-devel-matched-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 2eda0848cb54564b672fc61367eab0b0b404f6f7ee19fc50f591c45f9658cfda kernel-debug-modules-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: c0b8f67bc6707421c0a8306e84ca0682e9be49e1d76b6f97fab82120fa2b66c0 kernel-debug-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: e02145ab5689dee70d11a0e9b65eaf4f8384b68e50acd5879e322649bc58e6e8 kernel-debug-modules-extra-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 9fce8c6b2448fef58990dff4d2fc601b5d9a952e07b4399e95b9b522289f4255 kernel-debug-uki-virt-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 48fb34386afa89013aad00e127d464fecff2c6b169d16bfeeae40d133c87d4ee kernel-debuginfo-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 29cbd4d3a985fbeb527e5036dc00f40a4b21c2873534a92aea97ddd81dded7dc kernel-debuginfo-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 29cbd4d3a985fbeb527e5036dc00f40a4b21c2873534a92aea97ddd81dded7dc kernel-debuginfo-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 29cbd4d3a985fbeb527e5036dc00f40a4b21c2873534a92aea97ddd81dded7dc kernel-debuginfo-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 29cbd4d3a985fbeb527e5036dc00f40a4b21c2873534a92aea97ddd81dded7dc kernel-debuginfo-common-x86_64-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 536e6c1487da67650ab0a1b283e892fe55cc4e3605d4a61768ebf974fb0cde64 kernel-debuginfo-common-x86_64-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 536e6c1487da67650ab0a1b283e892fe55cc4e3605d4a61768ebf974fb0cde64 kernel-debuginfo-common-x86_64-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 536e6c1487da67650ab0a1b283e892fe55cc4e3605d4a61768ebf974fb0cde64 kernel-debuginfo-common-x86_64-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 536e6c1487da67650ab0a1b283e892fe55cc4e3605d4a61768ebf974fb0cde64 kernel-devel-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: cceb921c2ce37b0aee7bdd78f8b757c7220ee1d6bda694ea5a149c2979db201d kernel-devel-matched-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: afe36b33c09f37a6d12d3dcee72cda8cf36ae624d1c9e937b28125894a7107c6 kernel-doc-5.14.0-687.20.1.el9_8.noarch.rpm SHA-256: afd999a350d66bffd994c5a06f4c500c3f09f73ed6e31e4ee3b64e8885d09767 kernel-headers-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 15bc07a73a86aa6278eafa5d523c4de21c8a37f6178b94283845b1bfd929e7f7 kernel-modules-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: cbfdc1d6449f3c52e6ff9d26185b50bde0608994ab4bf4040907c5b41e5ffc47 kernel-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 0c9508bd40334cc514dbed683e6349dd9928f611ac8d7b11922c7a3ceb731010 kernel-modules-extra-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: cff1ef5a3ed5ba11fe0da6abf19812b1c807ed90601be21a6bbd52e51d35efbd kernel-rt-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 739c8743a7ce749868173d0d5e17d57db2f5d1c173ae25563d953bc03a1c10a3 kernel-rt-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 739c8743a7ce749868173d0d5e17d57db2f5d1c173ae25563d953bc03a1c10a3 kernel-rt-core-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: a14097b5aefcebfc08b71cbc7b79b33a677a56038c8c11f35bab899be64d822d kernel-rt-core-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: a14097b5aefcebfc08b71cbc7b79b33a677a56038c8c11f35bab899be64d822d kernel-rt-debug-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 7fd5ec1aef3f3c9126b74a161ddc32b92b1e46d1cf971613ddbf4c971ef569d7 kernel-rt-debug-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 7fd5ec1aef3f3c9126b74a161ddc32b92b1e46d1cf971613ddbf4c971ef569d7 kernel-rt-debug-core-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 64302f609a8fb22be7bcc2cb4acd79313340c1a24c169eb93414563566e8e1b9 kernel-rt-debug-core-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 64302f609a8fb22be7bcc2cb4acd79313340c1a24c169eb93414563566e8e1b9 kernel-rt-debug-debuginfo-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 8da37a2adcaa2d41e4a2d3dfa5eb129cc19d70905b7f8d181b78c86d540c7858 kernel-rt-debug-debuginfo-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 8da37a2adcaa2d41e4a2d3dfa5eb129cc19d70905b7f8d181b78c86d540c7858 kernel-rt-debug-debuginfo-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 8da37a2adcaa2d41e4a2d3dfa5eb129cc19d70905b7f8d181b78c86d540c7858 kernel-rt-debug-debuginfo-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 8da37a2adcaa2d41e4a2d3dfa5eb129cc19d70905b7f8d181b78c86d540c7858 kernel-rt-debug-devel-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: ef1e1a5c344d872ca69e33caf4e70b7ab3afad293a7077ffd2755b764f073f09 kernel-rt-debug-devel-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: ef1e1a5c344d872ca69e33caf4e70b7ab3afad293a7077ffd2755b764f073f09 kernel-rt-debug-modules-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 20720b123548d7ddd21b56fc79f1cd8ed53bef18ff8833abe83cf416c1465a1c kernel-rt-debug-modules-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: 20720b123548d7ddd21b56fc79f1cd8ed53bef18ff8833abe83cf416c1465a1c kernel-rt-debug-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpm SHA-256: f4b1ae4c4298b4353c057a530bfa713e94f76f8ae3aab1980bcc78f99628d7e9 k