This Red Hat kernel security update addresses four vulnerabilities, including a high-severity flaw (CVE-2026-43499, CVSS 7.8) in the rtmutex subsystem that could allow local privilege escalation by exploiting a race condition in the `remove_waiter()` function. The vulnerabilities affect a wide range of Linux kernel versions, including kernels from 2.6.39 to before 6.1.175 for CVE-2026-43499 and from 2.6.19 to before 5.15.210 for CVE-2026-46116. Red Hat has provided fixed packages for Red Hat Enterprise Linux 7 Extended Lifecycle Support, requiring a system reboot.
Red Hat Product Errata RHSA-2026:41235 - Security Advisory Issued: 2026-07-17 Updated: 2026-07-17 RHSA-2026:41235 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2461757 - CVE-2026-31684 kernel: net: sched: act_csum: validate nested VLAN headers BZ - 2480453 - CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() BZ - 2482523 - CVE-2026-46116 kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete BZ - 2492805 - CVE-2026-53166 kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock CVEs CVE-2026-31684 CVE-2026-43499 CVE-2026-46116 CVE-2026-53166 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM kernel-3.10.0-1160.156.1.el7.src.rpm SHA-256: c09f5572465fc53336861be89943721fffeac60a785e31bc7153778f5aab616f x86_64 bpftool-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: a3db629b65ea934fe16a526b5f28c794288b817d30ca5772e494fa88460d5131 bpftool-debuginfo-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 0b1617f136344cd2924a3a8a0deda7ffcd0cf05ed8ce77881eb781ee20c66137 bpftool-debuginfo-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 0b1617f136344cd2924a3a8a0deda7ffcd0cf05ed8ce77881eb781ee20c66137 kernel-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 9c8921a45d087d91a8cf9b3f811bb83cb8f02d08cd8bf9cb676f9ccb28818f1b kernel-abi-whitelists-3.10.0-1160.156.1.el7.noarch.rpm SHA-256: eb35be0057d205bc4548a35cb021379b0979d63abdc5e4788861b369c2cd1e2b kernel-debug-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 6909125ef44435b12a001f483b919c0e97abad24c23769b62f4b10efa9dc4e15 kernel-debug-debuginfo-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 4c96265a5e90338e804ff89762abedfdafb0bea49775bfbab5079c8559e57da7 kernel-debug-debuginfo-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 4c96265a5e90338e804ff89762abedfdafb0bea49775bfbab5079c8559e57da7 kernel-debug-devel-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 8eb13cf4e8fb51b2c0002bef0a54d6aa1fb376b63cc5b56a73c7decc5d2a1623 kernel-debuginfo-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 69f58d6450ea0fd73e7b4d35e7ba44794dd397f2c413be1c31df633efd78733a kernel-debuginfo-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 69f58d6450ea0fd73e7b4d35e7ba44794dd397f2c413be1c31df633efd78733a kernel-debuginfo-common-x86_64-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: bcdc5a840d810583245833c94619bd638691a5249a39bf75791e912cdcbb287a kernel-debuginfo-common-x86_64-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: bcdc5a840d810583245833c94619bd638691a5249a39bf75791e912cdcbb287a kernel-devel-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 2bcf9a16f37897d50612c61ffe96cf009671b4f5218f089f293cf09a5e9326c8 kernel-doc-3.10.0-1160.156.1.el7.noarch.rpm SHA-256: dd60bcf19a26de849acd0c9613d265bb9b31209c5d12c516ece083c057323cac kernel-headers-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 726297d107d093bb7fb794ad87e0ef63de7af0a26279ce551bcd06a7c9f6f0da kernel-tools-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: f8d016c1a5e4032dc03d939c1b99a7f94579db3d979f9965ec317872d5b371e0 kernel-tools-debuginfo-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 3aa87ee3ee771dddc5b74d7515dde884f6a7a53a42a3fcd2478fa56befbc4f10 kernel-tools-debuginfo-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 3aa87ee3ee771dddc5b74d7515dde884f6a7a53a42a3fcd2478fa56befbc4f10 kernel-tools-libs-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: d77ca3920bacc0e18880895039167b95ad9355bec971ea1e0a7e0ba3b62f7858 kernel-tools-libs-devel-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 88745f609961064abadf2b5c7ed7ad011a92962e6d7fca4d6f5a3ee9583bd793 perf-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: ce2884617470b5d1e041e4aaf4e22a1b9e3903e38088e0b6440ab03864e45e83 perf-debuginfo-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 71f84a0b32c3e6574e77425081dbb3265d6ea2508111dfdbb747e8dd2119e0c1 perf-debuginfo-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: 71f84a0b32c3e6574e77425081dbb3265d6ea2508111dfdbb747e8dd2119e0c1 python-perf-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: ded23cf1442a7fd4e0dac4691cfad7ebfd559a888fee4665f2c918ce444d2d83 python-perf-debuginfo-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: eb9f388b01788b77bcf9e2d78f291540671a4a8593f8be3d417de96e21873274 python-perf-debuginfo-3.10.0-1160.156.1.el7.x86_64.rpm SHA-256: eb9f388b01788b77bcf9e2d78f291540671a4a8593f8be3d417de96e21873274 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM kernel-3.10.0-1160.156.1.el7.src.rpm SHA-256: c09f5572465fc53336861be89943721fffeac60a785e31bc7153778f5aab616f s390x bpftool-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: 540a6b1f50f780b918e925cb43be9d217f40eda2e431eda4039465c4082ee5ee bpftool-debuginfo-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: d00d8cca46c5930a8c194a6f5c8a2a11378b84e33cd7b609e6ec4649d2b18f19 kernel-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: 5a36c1014d187e5e9e3c21358fcb1998acb3ebea26311a3e32aa1b42f7a113d8 kernel-abi-whitelists-3.10.0-1160.156.1.el7.noarch.rpm SHA-256: eb35be0057d205bc4548a35cb021379b0979d63abdc5e4788861b369c2cd1e2b kernel-debug-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: 99d687b872108a8a772d66c1e1fcde07c98e8ea300735a9475134091f9b6732b kernel-debug-debuginfo-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: 51fd577faca70000dd4b70f5ed52b298e7678330c670a7563098e15dce7b5df9 kernel-debug-devel-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: 23a4598c2bed77b47898fe6254cb9811bd758d738b8a44cf9e4956e1e4dadbee kernel-debuginfo-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: 537e536f97abe641d40a24643d2ca55bb963644daa4278a354e2b111bc49817c kernel-debuginfo-common-s390x-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: 8dcd124cd01b67c5fc2c8220e7fac4bae8bd655781b31bbdbf956f9f7f919242 kernel-devel-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: fb0ba4ee109729903c839e4955465e876042c8709fc8c08206d61407753202bf kernel-doc-3.10.0-1160.156.1.el7.noarch.rpm SHA-256: dd60bcf19a26de849acd0c9613d265bb9b31209c5d12c516ece083c057323cac kernel-headers-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: 218ddec962c181e34e71ce2bfd9c00b473000f901d79261c70a0253518c37dbd kernel-kdump-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: b396d25b7415780a929cdbc1bd49fae1d1bc0e1e684b8baf34fdcf3f2c709d33 kernel-kdump-debuginfo-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: ebfd9ffd841f94ac0e26eb7487e0d9789fdffd18fa04d3d22c66c7fce926addc kernel-kdump-devel-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: e426141e141bb381c4fbf85369cb9d5eb2a1c53c24024768cfd2456cd0c6556f perf-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: 81f2c44e69cc2b2c091f3dce424bf65a629d50623a8e59b3e632fbff554fdd38 perf-debuginfo-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: 3beab33bd03ccfd36c2898ef6c087adc5e18ecf903068de038b7d82c7ea992e1 python-perf-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: 55bc421732d8fc78c81cf00a0226e1b54c8a0cce766474b7602986b82f569b46 python-perf-debuginfo-3.10.0-1160.156.1.el7.s390x.rpm SHA-256: eea7be4a4744200f61e53bfa15dcf36af59b22176e065f3ee28d895f194ee2c3 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM kernel-3.10.0-1160.156.1.el7.src.rpm SHA-256: c09f5572465fc53336861be89943721fffeac60a785e31bc7153778f5aab616f ppc64 bpftool-3.10.0-1160.156.1.el7.ppc64.rpm SHA-256: 749aafb69c2ef009e71f244065c911d21f5ef661909a0812144de5796de7d524 bpftool-debuginfo-3.10.0-1160.156.1.el7.ppc64.rpm SHA-256: 16cdc4ad89d8b3a42c91c4637100334312dae1a778f76be0aa70e6668e55827e bpftool-debuginfo-3.10.0-1160.156.1.el7.ppc64.rpm SHA-256: 16cdc4ad89d8b3a42c91c4637100334312dae1a778f76be0aa70e6668e55827e kernel-3.10.0-1160.156.1.el7.ppc64.rpm SHA-256: f852bf582b779fc0781c1cd800b96c655be7de518b9047f1124a1239977991d3 kernel-abi-whitelists-3.10.0-1160.156.1.el7.noarch.rpm SHA-256: eb35be0057d205bc4548a35cb021379b0979d63abdc5e4788861b369c2cd1e2b kernel-bootwrapper-3.10.0-1160.156.1.el7.ppc64.rpm SHA-256: 1871e81b81795072c061dfc5a84b95e7e5bd7fc78211a1c746b85b65a3bc31aa kernel-debug-3.10.0-1160.156.1.el7.ppc64.rpm SHA-256: bbd762c4534b861e548675a9a2653ec02af7704aa1fbb136a325d5e7fead7f6d kernel-debug-debuginfo-3.10.0-1160.156.1.el7.ppc64.rpm SHA-256: 34b84db20f20b36e29501f584382b62a124aae396308223da94fccdd0b5d93b2 kernel-debug-debuginfo-3.10.0-1160.156.1.el7.ppc64.rpm SHA-256: 34b