This Red Hat security advisory addresses five Important-severity Linux kernel vulnerabilities, including use-after-free flaws in KVM shadow paging (CVE-2026-46113, CVSS 8.8) and netfilter (CVE-2026-43027, CVSS 7.8), a NULL pointer dereference in futex (CVE-2026-53166), and issues in rtmutex (CVE-2026-43499, CVSS 7.8). The affected version ranges are broad; for example, CVE-2026-46113 affects Linux kernels from 2.6.20 up to but excluding 6.1.175, and from 6.2 up to but excluding 6.6.140, among other ranges. Fixed versions are provided per CVE, such as 6.1.175, 6.6.140, 6.12.88, 6.18.30, or 7.0.7 for CVE-2026-46113, and a system reboot is required after applying the update.
Red Hat Product Errata RHSA-2026:40082 - Security Advisory Issued: 2026-07-15 Updated: 2026-07-15 RHSA-2026:40082 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2464369 - CVE-2026-43027 kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup BZ - 2480453 - CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() BZ - 2482587 - CVE-2026-46113 kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN BZ - 2492805 - CVE-2026-53166 kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock BZ - 2497033 - CVE-2026-53359 kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role CVEs CVE-2026-43027 CVE-2026-43499 CVE-2026-46113 CVE-2026-53166 CVE-2026-53359 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM kernel-5.14.0-284.181.1.el9_2.src.rpm SHA-256: 1a986f3760f833cc36e17f55844dc2c90d6217e0d0d1380a77428eeac0f23554 x86_64 bpftool-7.0.0-284.181.1.el9_2.x86_64.rpm SHA-256: c98e1855d726cfa0c749be3d4363da6a143d468fc8a1d925729513fe3eaa00a3 bpftool-debuginfo-7.0.0-284.181.1.el9_2.x86_64.rpm SHA-256: e019aa5ecab0d2199a74bfab3b988f09e219bb7118460780184e5c9983d8febb bpftool-debuginfo-7.0.0-284.181.1.el9_2.x86_64.rpm SHA-256: e019aa5ecab0d2199a74bfab3b988f09e219bb7118460780184e5c9983d8febb kernel-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 804ac259b67dc281bba38bff62cbdedebb7314d8bade1f89fcda4c0ad697b3f8 kernel-abi-stablelists-5.14.0-284.181.1.el9_2.noarch.rpm SHA-256: ac3fd7f594c89e0c54f30524eee687a9b456e50dc57a1bce78a97d8bec66ed53 kernel-core-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: aedc605363bd3c56be8a89ec4dbfc461f290eea60ebff0dee642a6ec9415053a kernel-debug-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 314e4edfbf96904426a391453410b443e44ca9a96f744adf1dfbb92074fa2e14 kernel-debug-core-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 0bb3eb2be36e6013b62ebf17f5f485594c7cd33587c8ab817686a83ae6c42667 kernel-debug-debuginfo-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 3bfa613ca25ceeb4e9e4ac2a077b2f1948448d7b6ced31900c94f884875da5bf kernel-debug-debuginfo-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 3bfa613ca25ceeb4e9e4ac2a077b2f1948448d7b6ced31900c94f884875da5bf kernel-debug-devel-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 5754b8edce75bbab1001bfc7aabcf22e7301059676dfb1107000afe06f14685b kernel-debug-devel-matched-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: fe6657c47e1735f19673208112af6f58f233a20932e6ad1104e7beaf56adf8e9 kernel-debug-modules-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: a7a7d6b4cfbefee8ba01c29ec3c4d0cad26a2f74f2da4de733338f306ce7f013 kernel-debug-modules-core-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: fc960e75c26ba0d3002dac6608e281bff216613d0434537099bea28e2c401b33 kernel-debug-modules-extra-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: ff6189254553a93e9d035e803611542ab032492ebeffbe6dda729fda468fa8c1 kernel-debug-uki-virt-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 0f28f3e01f83a531caeb83d9b2f055a2ce6f26d0dfdf80e1b76e7313e3f34e48 kernel-debuginfo-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 086b761b1d5bf380463cacfd439a07689f2ffa316606d8b749d67513a0fe14d1 kernel-debuginfo-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 086b761b1d5bf380463cacfd439a07689f2ffa316606d8b749d67513a0fe14d1 kernel-debuginfo-common-x86_64-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: c3cdfc0025acdae009c45b168e7cf27e5def3add564e8be0e32fe1c3c7ef46b0 kernel-debuginfo-common-x86_64-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: c3cdfc0025acdae009c45b168e7cf27e5def3add564e8be0e32fe1c3c7ef46b0 kernel-devel-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 2c3a74f46a73fec8ff3e7c090ed6a6fa1f3cd3fb7ed1091da0e2f2057d59076f kernel-devel-matched-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 7260c67649f738d7049c97f54ef0d6fe86b1f8ad1cacbbfb5e44255312a8753e kernel-doc-5.14.0-284.181.1.el9_2.noarch.rpm SHA-256: d8adc5b1a1fd942cf75757f3b074a99f120a3089af68cfbaca1e86ac0b42c713 kernel-headers-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 7756027d5d063ce8366b90df228c48816ab3c4760182499e453845156f0e0287 kernel-modules-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: dcc1c368fedc0b3dd227a26eb54ae6a0d9ca4cc7890bb4d49d2190d0527038dd kernel-modules-core-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: b3cd6cd2a384ebdbfc7f728c96527f0337172a253980ebab6465a8f763dd7f85 kernel-modules-extra-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 269e829b631f78bacab203692b7015ac7869edaa8fd1684dc4d02b3ea5376bc1 kernel-tools-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 522a260745467d02557f3aaeeee7d71207a05776da599539e6154160b8fdcdc1 kernel-tools-debuginfo-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 6a4df7c220becca86ee04d2a3e1cfa6fef0a2c4fdc52d95ef76cf9efea66b868 kernel-tools-debuginfo-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 6a4df7c220becca86ee04d2a3e1cfa6fef0a2c4fdc52d95ef76cf9efea66b868 kernel-tools-libs-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 85113ca1d11f2794b5f78c2066ce26e2e56af99b3251dfecb1c048fc80345710 kernel-uki-virt-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 6e64b06349c3a86b2ebeba2cf88dd35108541dd2eaffc6957deeb9487c82621d perf-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: ccde0c0033a675a1e773c4d41f0de9c350f002169e941354061eefbf964ade96 perf-debuginfo-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 0f1aa4cf1468e97c8ae5b5ef577083cebe9985ada974f76c10d86f408ac5987c perf-debuginfo-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 0f1aa4cf1468e97c8ae5b5ef577083cebe9985ada974f76c10d86f408ac5987c python3-perf-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 9346a2b752d2cd9f9b2db34448c55af6ec1402e145a98b3a4df35c733606cdf9 python3-perf-debuginfo-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 8c6d1703f68faa23273f71e03c372f78ef7558b9d67b202a16fdf481332251ca python3-perf-debuginfo-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: 8c6d1703f68faa23273f71e03c372f78ef7558b9d67b202a16fdf481332251ca rtla-5.14.0-284.181.1.el9_2.x86_64.rpm SHA-256: fb4d7b15aea48ea5e24fa0ffcd54858da4c442bef82067bfdca4233d43c8b5d4 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM kernel-5.14.0-284.181.1.el9_2.src.rpm SHA-256: 1a986f3760f833cc36e17f55844dc2c90d6217e0d0d1380a77428eeac0f23554 ppc64le bpftool-7.0.0-284.181.1.el9_2.ppc64le.rpm SHA-256: 5b59b2f90b72da17807c6552ae1ad317befd436d25e064d3d73f652cce751212 bpftool-debuginfo-7.0.0-284.181.1.el9_2.ppc64le.rpm SHA-256: 36e3e592269e130d193b1cdcce74220a9ebbec4e495998260cb9b326fd3f4def bpftool-debuginfo-7.0.0-284.181.1.el9_2.ppc64le.rpm SHA-256: 36e3e592269e130d193b1cdcce74220a9ebbec4e495998260cb9b326fd3f4def kernel-5.14.0-284.181.1.el9_2.ppc64le.rpm SHA-256: 8b01576035a2ffa301a48fec82e676675d241011f0c5cd2d09a7c66a42674b31 kernel-abi-stablelists-5.14.0-284.181.1.el9_2.noarch.rpm SHA-256: ac3fd7f594c89e0c54f30524eee687a9b456e50dc57a1bce78a97d8bec66ed53 kernel-core-5.14.0-284.181.1.el9_2.ppc64le.rpm SHA-256: 79c9bc19f93dbd93ef85eb511c798b6b2433b957c06a66b4c235af628b2b3222 kernel-debug-5.14.0-284.181.1.el9_2.ppc64le.rpm SHA-256: bd44c9e0c2f6c0c856548f208f3d57d2b29803b5c36d5d790877c656f870770d kernel-debug-core-5.14.0-284.181.1.el9_2.ppc64le.rpm SHA-256: dc14007ab980cef0fdcfc49eca014337042d139908f0f5cc89af03a03dc42781 kernel-debug-debuginfo-5.14.0-284.181.1.el9_2.ppc64le.rpm SHA-256: 2d76f7817deaf5cc0142499f9f5520f635594bda1fd7d59bc22d0f0e5ad97501 kernel-debug-debuginfo-5.14.0-284.181.1.el9_2.ppc64le.rpm SHA-256: 2d76f7817deaf5cc0142499f9f5520f635594bda1fd7d59bc22d0f0e5ad97501 kernel-debug-devel-5.14.0-284.181.1.el9_2.ppc64le.rpm SHA-256: 1a0cd724c2dd294a3f46117a50d3bffda01f1e99281eda9ac34d37a2d205e11c kernel-debug-devel-matched-5.14.0-284.181.1.el9_2.ppc64le.rpm SHA-256: f97ece21bb967fd743d64a7eb16ad71b57c275c8e3276e