Red Hat Product Errata RHSA-2026:36216 - Security Advisory Issued: 2026-07-07 Updated: 2026-07-07 RHSA-2026:36216 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2467228 - CVE-2026-43198 kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() BZ - 2482532 - CVE-2026-46181 kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() CVEs CVE-2026-43198 CVE-2026-46181 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM kernel-3.10.0-1160.155.1.el7.src.rpm SHA-256: e8bf417946deee46b78e0a6ac9dd6b8893a7f5c5e91a1696128f441e38f81a10 x86_64 bpftool-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 8b0f7f9f18ba329c88440f4ae0c89b7dbea0fe3270c954f2aecb8f63b656793f bpftool-debuginfo-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 7d2df0a704ced8e25238ae8241364e6bbe46fd4b80ddf8ed00a59c9caf33940a bpftool-debuginfo-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 7d2df0a704ced8e25238ae8241364e6bbe46fd4b80ddf8ed00a59c9caf33940a kernel-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: e9c83b4347a5aba896352e8c41ab9bee8cd010dfbd4567684ba536fc4525d298 kernel-abi-whitelists-3.10.0-1160.155.1.el7.noarch.rpm SHA-256: 2df9343335c0525c674cc7c48c90649824dd3dbf7f21ee7fa6e61eed02739927 kernel-debug-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 03a6f5385d302ac72031ec3f966a7c564e0d5ee94e5fd8a6351e7c1ba2ce487e kernel-debug-debuginfo-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 3c47448447a0837bf24ebe39a26c5d9aa3e30ee9fef7080dc88af2c60e0bee95 kernel-debug-debuginfo-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 3c47448447a0837bf24ebe39a26c5d9aa3e30ee9fef7080dc88af2c60e0bee95 kernel-debug-devel-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 7a080ce2ede1f651a2353c6b75fae1aa3e35d7e37957db7a5ee7968992524ce3 kernel-debuginfo-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 7e597263a0d7420b2cad83e41438f1b7cf95a70e17145647ea0963afc4a84173 kernel-debuginfo-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 7e597263a0d7420b2cad83e41438f1b7cf95a70e17145647ea0963afc4a84173 kernel-debuginfo-common-x86_64-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: be8d46850ed74ff264b52669354d5307869a1c5d3a0c306e17cbad13e0e4068f kernel-debuginfo-common-x86_64-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: be8d46850ed74ff264b52669354d5307869a1c5d3a0c306e17cbad13e0e4068f kernel-devel-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: cfd789dffda40b6c514fcb9684fcb9d1cddc0e6ef304ea7bef5d0292840b9606 kernel-doc-3.10.0-1160.155.1.el7.noarch.rpm SHA-256: 17ad36c4e2d1fd4b8ad740202bf3d04246c0bd31072dff49cb931f3d17e71afc kernel-headers-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 98959aaeebb8afbb9386ecb3482c87b4162d7461b99f394b74ce9c51e77fe36d kernel-tools-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 7c68f1d4e94748350e70a25d139fd3f70aebeed5bd867d6463218a2e6e0834e2 kernel-tools-debuginfo-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 20c5ba07c090fb26894dca5208955317845f09d319c4a9a99a17e94a67a616ea kernel-tools-debuginfo-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 20c5ba07c090fb26894dca5208955317845f09d319c4a9a99a17e94a67a616ea kernel-tools-libs-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 8efd6817e43da9bf7fda5281ed0790acb63861f82d8a2ba2c00fd192e81d69de kernel-tools-libs-devel-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 8baab81fbb1d7ea158baa2011e93b53ec32188fba493c6bd9b26d8ea84a1be42 perf-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: f82bbbdc0485644895aad020f44e359c99227f53a1095a4dc58a760fcaa2e684 perf-debuginfo-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 895633800bbc56a0f9e975807b0af5b34522628c39c43f008dd6fb940e92d2f3 perf-debuginfo-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 895633800bbc56a0f9e975807b0af5b34522628c39c43f008dd6fb940e92d2f3 python-perf-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: 7ceb0085dcb197d2d9091d7fd04a0f4874b333709de1140411accc07161fb71f python-perf-debuginfo-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: fa777c8b38b9166f614df70625850c88eb8b117383bc7226e9f56e2703c2c98f python-perf-debuginfo-3.10.0-1160.155.1.el7.x86_64.rpm SHA-256: fa777c8b38b9166f614df70625850c88eb8b117383bc7226e9f56e2703c2c98f Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM kernel-3.10.0-1160.155.1.el7.src.rpm SHA-256: e8bf417946deee46b78e0a6ac9dd6b8893a7f5c5e91a1696128f441e38f81a10 s390x bpftool-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: 1d7c2dc30a3111570c13966e60fa339e1383fd4423957a0d108b93e099d64aae bpftool-debuginfo-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: 0979ddc2b500a887c31877cc62785935f672610712655061a3ff23c3485ba41b kernel-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: fe31ad3ce0301f8dfe8d31f60d3826092d8cb87b8989ea7506089f7cf06afc96 kernel-abi-whitelists-3.10.0-1160.155.1.el7.noarch.rpm SHA-256: 2df9343335c0525c674cc7c48c90649824dd3dbf7f21ee7fa6e61eed02739927 kernel-debug-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: d031cb3d51cf265fe8adc92847ab839c7a0675e52e40537380be556cc8003ffe kernel-debug-debuginfo-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: 94e25d63ba97b1e52278028db849a9bde4fcf574009566350369954911214e61 kernel-debug-devel-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: 388f7eb363d11aa5100ba9e1e791aa6243e700cc3e099e7c7c56f938c18daf64 kernel-debuginfo-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: 2a4b159a5c9425d1fc848376bf0933b9e0351e643d88d6afdbd3a17253275a3f kernel-debuginfo-common-s390x-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: 31bc22541e6edb08c69cc5bd1e3011f150c5dff321fb74e96ed97d05ec8713ce kernel-devel-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: 5ef7f5153208e91ce084fe37b0caa11fbfd43e60d2e6f612851c25b0e3561c41 kernel-doc-3.10.0-1160.155.1.el7.noarch.rpm SHA-256: 17ad36c4e2d1fd4b8ad740202bf3d04246c0bd31072dff49cb931f3d17e71afc kernel-headers-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: bfb26c56c6f7675396b3c5b8a29f5782aa49d397ef88f65f8c2fb7411470d098 kernel-kdump-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: 277184bea8fb9b4832667daca20d9782bf5d6672f532ffbcb2bca85883af26b6 kernel-kdump-debuginfo-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: d4c90a00c0ca81b5c99194982d604d0b57d6d1de5a398a8332152a457f801b55 kernel-kdump-devel-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: 951c753358ea371d22ae14b1f15541b9b6ae6775f9a96f9639857946bf90ef7e perf-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: 624f7bd06739c074df0b3fe3ef00e7ace78f4380358728865e4f8446067ac7b5 perf-debuginfo-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: 49d50645712f44cde3a5aea68440922042f664eb76f5184dc450c2c22945b62f python-perf-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: d1992db09436f1c924c900ca2161047446f9653a76f718a500f7d2cccde9c78b python-perf-debuginfo-3.10.0-1160.155.1.el7.s390x.rpm SHA-256: 8cfa199891e52780e2f64998c4726cc9b1a7eb78bf477e0c2020ecc9a8fcbade Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM kernel-3.10.0-1160.155.1.el7.src.rpm SHA-256: e8bf417946deee46b78e0a6ac9dd6b8893a7f5c5e91a1696128f441e38f81a10 ppc64 bpftool-3.10.0-1160.155.1.el7.ppc64.rpm SHA-256: 2d2e3a3ba23b0b6cca907c48ffc1c985bc0e5e31f4a5e4011ac2e9e4165c0567 bpftool-debuginfo-3.10.0-1160.155.1.el7.ppc64.rpm SHA-256: 33d0ac9b95fceb5ae7070767a9ec4da0e17712fcd32bd828423aa8be9f26e0d2 bpftool-debuginfo-3.10.0-1160.155.1.el7.ppc64.rpm SHA-256: 33d0ac9b95fceb5ae7070767a9ec4da0e17712fcd32bd828423aa8be9f26e0d2 kernel-3.10.0-1160.155.1.el7.ppc64.rpm SHA-256: 024b8691c2cde1139a3748a116f1406bcc80eea92fc6acffae794ad6f71a0db5 kernel-abi-whitelists-3.10.0-1160.155.1.el7.noarch.rpm SHA-256: 2df9343335c0525c674cc7c48c90649824dd3dbf7f21ee7fa6e61eed02739927 kernel-bootwrapper-3.10.0-1160.155.1.el7.ppc64.rpm SHA-256: 94fb5aad475bb3ff03ecab0d5b999cd2278778d396e1ef3aaaa397a1804ecb45 kernel-debug-3.10.0-1160.155.1.el7.ppc64.rpm SHA-256: fd7ac4cfabb9f1325fa3b5138b6f1b11e622d7ad6219994213f14ee7d6536831 kernel-debug-debuginfo-3.10.0-1160.155.1.el7.ppc64.rpm SHA-256: bd4c38768d22a5f0916c06a38dc4bf32293234600358450572d8397b1c902bc0 kernel-debug-debuginfo-3.10.0-1160.155.1.el7.ppc64.rpm SHA-256: bd4c38768d22a5f0916c06a38dc4bf32293234600358450572d8397b1c902bc0 kernel-debug-devel-3.10.0-1160.155.1.el7.ppc64.rpm SHA-256: f07449461003b7d64f2f8ad7f65a709a14d84c628bcf8094099e023f162bda17 kernel-debuginfo-3.10.0-1160.155.1.el7.ppc64.rpm SHA-256: a76b025aff3ba1cd8db277ace0c83b4c77def41043a036a7324b251465754442 kernel-debuginfo-3.10.0-1160.155.1.el7.ppc64.rpm SHA-256: a76b025aff3ba1cd8db277ace0c83b4c77def41043a036a7324b251465754442 kernel-debuginfo-common-ppc64-3.10.0-1160.155.1.el7
This advisory addresses two vulnerabilities in the Linux kernel: CVE-2026-43198, a critical race condition in TCP IPv6 connection handling (CVSS 9.8), and CVE-2026-46181, a high-severity RCU misuse in the RDMA driver (CVSS 7.8). The NVD data indicates affected kernel versions are up to 6.18.16 and 6.19.6 for CVE-2026-43198, and up to 6.18.30 and 7.0.7 for CVE-2026-46181, with fixes available in those respective versions. For Red Hat Enterprise Linux 7 ELS, the specific remediation is to apply the provided kernel update and reboot the system.