Red Hat Product Errata RHSA-2026:33743 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33743 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) Bug Fix(es) and Enhancement(s): [RHEL 8.10.z] Add an .sbat section to the x86 kernel (JIRA:RHEL-182788) Incorrect message "NFS: Server wrote zero bytes" is shown in the logs (JIRA:RHEL-147665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2440630 - CVE-2026-23216 kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() BZ - 2481922 - CVE-2026-45984 kernel: gfs2: Fix use-after-free in iomap inline data write path BZ - 2482588 - CVE-2026-46189 kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path CVEs CVE-2026-23216 CVE-2026-45984 CVE-2026-46189 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kernel-4.18.0-553.139.1.el8_10.src.rpm SHA-256: f1fcb6e4bf72265f8071b6aacf4ee3347a8644a6f7d9ed7f685247c003c427f7 x86_64 bpftool-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: a1c643651f0230229d646fbc232bb8925f7dfad811ac5afac97fddd814834b0a bpftool-debuginfo-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 904e1c22da489d6ea1b7ddcf5d32084117efc43d170c099241c4d3d438670c35 kernel-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: faa84639abff9495d346552fcb9a008ac04a930ef38239fd43dd0353d349ae92 kernel-abi-stablelists-4.18.0-553.139.1.el8_10.noarch.rpm SHA-256: fc1f9f47c6fba35c4b177925d11db98ffba3a993d2bf567dfeeeca47c6f7e6d7 kernel-core-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 3329732d88b0a6d768460cc6c2fc992fddbb41b30bdc1dca876155f10dd9ff92 kernel-cross-headers-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: cbe75711959222a4a66637125448d7cfd4ace47128a92dceef92177ff1753cff kernel-debug-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 6ad25f788eecd6cd397ae25fbb7c304c8bd88db4e2c45467d1e20d660331dc0b kernel-debug-core-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 09889a0e8e6ae21da00361ac0e0b23aabfa6ba5ce69204f8b1bd05e21a82b205 kernel-debug-debuginfo-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 88426a95306989d4650e73269dbbd993122970761406cf2b4ebaf33ae047b7c0 kernel-debug-devel-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 183808ce273569cd4d7b8f7f5a5fc17d10d0ac3d510ef692e092f8c69d14c857 kernel-debug-modules-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 24dfc0a599c1e8f8777bd6a8554c8da9e374fd2aad23707ad280130c42e328a2 kernel-debug-modules-extra-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: e9e313376282ee03362abbfc83f5874592ee8db4d5fa5023f5e165bac5d26bca kernel-debuginfo-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 59e78487a2c08c440be3e6b6f49d2892039dcf063ffb47dbbb252142cdbd9cba kernel-debuginfo-common-x86_64-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 4d71f653bc04347d1dd342cbba20e5d426f1413140f78cfd8e13ea43aeefb0d0 kernel-devel-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 3e5bcc013b35a756f6780d71cac65561e698f2c4acd15370722dc7fa65529b1e kernel-doc-4.18.0-553.139.1.el8_10.noarch.rpm SHA-256: e50a39df5a04792e7728a83666f44786ee7b5b78c7c12d24fb8f404374e453e7 kernel-headers-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 74be535cecdd000a665b173abf7e70317ba3ca67fa0f489e6e61d826a117ca35 kernel-modules-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: adf5d53f56814404c15f3830d5aa142adbe7d5033ff3436abe80f442b778c1d3 kernel-modules-extra-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: d8790c7f4aa09b475feaa7c4b184e190e6754983f73417a62c48157d467212c6 kernel-tools-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: c037fdd6931381f0cc1156c69ab461dff3ffd7e3b9b23a4de16b34c97b236329 kernel-tools-debuginfo-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 3235edcd47617f7c2d4cc88f4260f26d0f6feb45c56c8be5c62e9337e8c808f4 kernel-tools-libs-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 8ada4393552b601a8d2d6351dda9d9f2fe371524bb06e9dc959f39ad01c1caf8 perf-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: b0c21be9fbf3bd04c2397a29d3910946d19861deffb2f7b7d729895014b14ec6 perf-debuginfo-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 0c8a3f9c19abe977f57aab99c66ac55dc70800611f0403eb1192735edfb5b5c8 python3-perf-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: 9d324e05ddf31ea10d576e81a031103078c549f5f45a7edf292325192206a579 python3-perf-debuginfo-4.18.0-553.139.1.el8_10.x86_64.rpm SHA-256: fb891e4f00431022063b0eb195faa5c6f30570010135f5fd5af0e9e5b789e572 Red Hat Enterprise Linux for IBM z Systems 8 SRPM kernel-4.18.0-553.139.1.el8_10.src.rpm SHA-256: f1fcb6e4bf72265f8071b6aacf4ee3347a8644a6f7d9ed7f685247c003c427f7 s390x bpftool-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: aa80914715cd776f6a8873acc54dd15393bb50ae11069308a354c54f23812937 bpftool-debuginfo-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 7f12dff951938a1ad9591872fb45d6828d6adba5076f342bc829fde59fc96ee5 kernel-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: b61da32ee3bb5e88d71c31ab79964897d2147032a89258d2f62523e4ccf19718 kernel-abi-stablelists-4.18.0-553.139.1.el8_10.noarch.rpm SHA-256: fc1f9f47c6fba35c4b177925d11db98ffba3a993d2bf567dfeeeca47c6f7e6d7 kernel-core-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 89b80c8c056da19eed03ddb43d2c8316e3f1cbb2fed256e525dd0e57c71f4f09 kernel-cross-headers-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 36ec3b95e7d631d054f31ee940daac2f5c3e03a27c2f21b6ffc55d97dc9c3048 kernel-debug-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: e6175f40ff53a00fcc22da96f1a8aa45eee4f07a4284bf48ea3ede75417df18b kernel-debug-core-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 3bf27f45c4439f6d2a323ead9c4873eebbfa7405b272bed0f8ac77f013f094e1 kernel-debug-debuginfo-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: e1354edef8aa330aea892e08780c0eb128baaca19a37a3b1af4087bfefe008d5 kernel-debug-devel-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 64130add1cc8490f91670a4a26cf95c088a31c5042bd7a27b47757b160cbc70a kernel-debug-modules-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: f5301cea47d883a8b1d9860d0597f64adeb334f771869dfcb8e211be76c01692 kernel-debug-modules-extra-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: b2c4f01cded528f0dd858ac437a9b32c110c0000cfe0d51300ad186cc296e5f5 kernel-debuginfo-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: af6ce3ae4fb3f145f66302d0ef201de54aaa43a8d4807f537cde6d1eade5375c kernel-debuginfo-common-s390x-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 25d79595c105e4d5c25396c89583272f279eb388084eeabe868f408736403c64 kernel-devel-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 92ccb304b7882243c46f8f86df3aad604109b21babf0d02527f6e4dd4001dba3 kernel-doc-4.18.0-553.139.1.el8_10.noarch.rpm SHA-256: e50a39df5a04792e7728a83666f44786ee7b5b78c7c12d24fb8f404374e453e7 kernel-headers-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: eef7c201368091f54c7baaad1c93ea33c007aa41c9de9195c2a41dc3aa1fab5b kernel-modules-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 56c7025131db1f73af919fb8d07c6a37d3cecaa461610d967dcd632e052a3828 kernel-modules-extra-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 4c8c7fe438e4f6495f9ba2c88b29891a5901d69dcf3e5420d2e2b9617b420c93 kernel-tools-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: ac6d032826d92080f91f0c04af11f467c1599898ffe13abff8f6200414b6588d kernel-tools-debuginfo-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 0f0ea41b1cbe7a58011df19760de179d028730e07034a403b7ce1b1c73e9171c kernel-zfcpdump-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: f91d55fae0b9fca753f27f1f001061baf0fbd2a68ef40f799233ff4efb82d20a kernel-zfcpdump-core-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 296a283a78cef51862b1faeeea205a23bde7f4dd7368a07f3fda963171456c2d kernel-zfcpdump-debuginfo-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 5bed44ebfe44f44645701e2b67ddc728fde207267ff5748cf9f2dbe90c15723f kernel-zfcpdump-devel-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 4cf2f9551e13c950615c1f470c41cc8e872c1e5f1b1fc00001d2743bad2b9377 kernel-zfcpdump-modules-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 773c3842fdbe8014669365191227e41ff98a35c85a06b65fceca4f26771890dd kernel-zfcpdump-modules-extra-4.18.0-553.139.1.el8_10.s390x.rpm SHA-256: 291eba3c38b28690744ea3040edda9693afebf28ce187cb6d8d8b652489659
This Red Hat kernel security update addresses three use-after-free and double-free vulnerabilities (CVE-2026-23216, CVE-2026-45984, CVE-2026-46189), each with a CVSS 3.1 score of 7.8 (High). The vulnerabilities affect multiple upstream Linux kernel versions, for example CVE-2026-23216 affects versions 3.1 through 5.10.249, 5.11 through 5.15.199, and others as specified in the NVD data. The update provides the patched kernel packages for Red Hat Enterprise Linux 8, and a system reboot is required after application.