Red Hat Product Errata RHSA-2026:36172 - Security Advisory Issued: 2026-07-07 Updated: 2026-07-07 RHSA-2026:36172 - Security Advisory Overview Updated Packages Synopsis Important: kpatch-patch-5_14_0-687_10_1 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kpatch-patch-5_14_0-687_10_1 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-687.10.1.el9_8. Security Fix(es): kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Fixes BZ - 2457829 - CVE-2026-31419 kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service CVEs CVE-2026-31419 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM kpatch-patch-5_14_0-687_10_1-1-3.el9_8.src.rpm SHA-256: f3cbf342b6cebe0957e46a0bc2806107b5b6af35ca0ce0c75c9a92b250e753b1 x86_64 kpatch-patch-5_14_0-687_10_1-1-3.el9_8.x86_64.rpm SHA-256: 6c27aea37693ef71c1387f44474247c574099194f2e05ea4aecfb1197155edb6 kpatch-patch-5_14_0-687_10_1-debuginfo-1-3.el9_8.x86_64.rpm SHA-256: 07104fb229a566afecf8b0da8ab1e10713d8d5eef0f3f130097b61c6381eaab7 kpatch-patch-5_14_0-687_10_1-debugsource-1-3.el9_8.x86_64.rpm SHA-256: 8876e42b7307e9abed1a48484a8f98bc39ec2521fff21e600d6e13caa22c6fba Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM kpatch-patch-5_14_0-687_10_1-1-3.el9_8.src.rpm SHA-256: f3cbf342b6cebe0957e46a0bc2806107b5b6af35ca0ce0c75c9a92b250e753b1 x86_64 kpatch-patch-5_14_0-687_10_1-1-3.el9_8.x86_64.rpm SHA-256: 6c27aea37693ef71c1387f44474247c574099194f2e05ea4aecfb1197155edb6 kpatch-patch-5_14_0-687_10_1-debuginfo-1-3.el9_8.x86_64.rpm SHA-256: 07104fb229a566afecf8b0da8ab1e10713d8d5eef0f3f130097b61c6381eaab7 kpatch-patch-5_14_0-687_10_1-debugsource-1-3.el9_8.x86_64.rpm SHA-256: 8876e42b7307e9abed1a48484a8f98bc39ec2521fff21e600d6e13caa22c6fba Red Hat Enterprise Linux for Power, little endian 9 SRPM kpatch-patch-5_14_0-687_10_1-1-3.el9_8.src.rpm SHA-256: f3cbf342b6cebe0957e46a0bc2806107b5b6af35ca0ce0c75c9a92b250e753b1 ppc64le kpatch-patch-5_14_0-687_10_1-1-3.el9_8.ppc64le.rpm SHA-256: b3d840efce1828d66d8c2cb33054ff7d1022d4083d7d63ff873bb4c35f7a064b kpatch-patch-5_14_0-687_10_1-debuginfo-1-3.el9_8.ppc64le.rpm SHA-256: d09cc7d655e3c432b23a333dc2532d78dfabac72cc2ffc72a9d4865df123f2d9 kpatch-patch-5_14_0-687_10_1-debugsource-1-3.el9_8.ppc64le.rpm SHA-256: 1116554187bfa844a1ede158d853c98c269f527de01b9c60603374ee6113312d Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM kpatch-patch-5_14_0-687_10_1-1-3.el9_8.src.rpm SHA-256: f3cbf342b6cebe0957e46a0bc2806107b5b6af35ca0ce0c75c9a92b250e753b1 ppc64le kpatch-patch-5_14_0-687_10_1-1-3.el9_8.ppc64le.rpm SHA-256: b3d840efce1828d66d8c2cb33054ff7d1022d4083d7d63ff873bb4c35f7a064b kpatch-patch-5_14_0-687_10_1-debuginfo-1-3.el9_8.ppc64le.rpm SHA-256: d09cc7d655e3c432b23a333dc2532d78dfabac72cc2ffc72a9d4865df123f2d9 kpatch-patch-5_14_0-687_10_1-debugsource-1-3.el9_8.ppc64le.rpm SHA-256: 1116554187bfa844a1ede158d853c98c269f527de01b9c60603374ee6113312d Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM kpatch-patch-5_14_0-687_10_1-1-3.el9_8.src.rpm SHA-256: f3cbf342b6cebe0957e46a0bc2806107b5b6af35ca0ce0c75c9a92b250e753b1 ppc64le kpatch-patch-5_14_0-687_10_1-1-3.el9_8.ppc64le.rpm SHA-256: b3d840efce1828d66d8c2cb33054ff7d1022d4083d7d63ff873bb4c35f7a064b kpatch-patch-5_14_0-687_10_1-debuginfo-1-3.el9_8.ppc64le.rpm SHA-256: d09cc7d655e3c432b23a333dc2532d78dfabac72cc2ffc72a9d4865df123f2d9 kpatch-patch-5_14_0-687_10_1-debugsource-1-3.el9_8.ppc64le.rpm SHA-256: 1116554187bfa844a1ede158d853c98c269f527de01b9c60603374ee6113312d Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM kpatch-patch-5_14_0-687_10_1-1-3.el9_8.src.rpm SHA-256: f3cbf342b6cebe0957e46a0bc2806107b5b6af35ca0ce0c75c9a92b250e753b1 x86_64 kpatch-patch-5_14_0-687_10_1-1-3.el9_8.x86_64.rpm SHA-256: 6c27aea37693ef71c1387f44474247c574099194f2e05ea4aecfb1197155edb6 kpatch-patch-5_14_0-687_10_1-debuginfo-1-3.el9_8.x86_64.rpm SHA-256: 07104fb229a566afecf8b0da8ab1e10713d8d5eef0f3f130097b61c6381eaab7 kpatch-patch-5_14_0-687_10_1-debugsource-1-3.el9_8.x86_64.rpm SHA-256: 8876e42b7307e9abed1a48484a8f98bc39ec2521fff21e600d6e13caa22c6fba Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 SRPM kpatch-patch-5_14_0-687_10_1-1-3.el9_8.src.rpm SHA-256: f3cbf342b6cebe0957e46a0bc2806107b5b6af35ca0ce0c75c9a92b250e753b1 x86_64 kpatch-patch-5_14_0-687_10_1-1-3.el9_8.x86_64.rpm SHA-256: 6c27aea37693ef71c1387f44474247c574099194f2e05ea4aecfb1197155edb6 kpatch-patch-5_14_0-687_10_1-debuginfo-1-3.el9_8.x86_64.rpm SHA-256: 07104fb229a566afecf8b0da8ab1e10713d8d5eef0f3f130097b61c6381eaab7 kpatch-patch-5_14_0-687_10_1-debugsource-1-3.el9_8.x86_64.rpm SHA-256: 8876e42b7307e9abed1a48484a8f98bc39ec2521fff21e600d6e13caa22c6fba Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 SRPM kpatch-patch-5_14_0-687_10_1-1-3.el9_8.src.rpm SHA-256: f3cbf342b6cebe0957e46a0bc2806107b5b6af35ca0ce0c75c9a92b250e753b1 ppc64le kpatch-patch-5_14_0-687_10_1-1-3.el9_8.ppc64le.rpm SHA-256: b3d840efce1828d66d8c2cb33054ff7d1022d4083d7d63ff873bb4c35f7a064b kpatch-patch-5_14_0-687_10_1-debuginfo-1-3.el9_8.ppc64le.rpm SHA-256: d09cc7d655e3c432b23a333dc2532d78dfabac72cc2ffc72a9d4865df123f2d9 kpatch-patch-5_14_0-687_10_1-debugsource-1-3.el9_8.ppc64le.rpm SHA-256: 1116554187bfa844a1ede158d853c98c269f527de01b9c60603374ee6113312d The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .