This Red Hat kernel security update addresses multiple vulnerabilities, including CVE-2026-31488 (CVSS 7.8 High) in the AMD display driver and CVE-2026-46116 (CVSS 7.8 High) in the xfrm subsystem, which could lead to privilege escalation or denial of service. Affected kernel versions vary per CVE, with CVE-2026-31488 impacting Linux kernels from 5.18.1 to 6.12.80, 6.13 to 6.18.21, and 6.19 to 6.19.11, and CVE-2026-46116 impacting versions from 2.6.19 to 5.15.210, 5.16 to 6.1.176, 6.2 to 6.6.140, 6.7 to 6.12.88, and 6.13 to 6.18.30. The advisory provides fixed packages for Red Hat Enterprise Linux 9.4 variants and requires a system reboot.
Red Hat Product Errata RHSA-2026:43231 - Security Advisory Issued: 2026-07-22 Updated: 2026-07-22 RHSA-2026:43231 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) Bug Fix(es) and Enhancement(s): NVMe-FC: Panic during NVMe Controller Reset tests [rhel-9.4.z] (JIRA:RHEL-171742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2460619 - CVE-2026-31488 kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation BZ - 2461757 - CVE-2026-31684 kernel: net: sched: act_csum: validate nested VLAN headers BZ - 2482523 - CVE-2026-46116 kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete BZ - 2482636 - CVE-2026-46209 kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() BZ - 2482654 - CVE-2026-46135 kernel: nvmet-tcp: fix race between ICReq handling and queue teardown CVEs CVE-2026-31488 CVE-2026-31684 CVE-2026-46116 CVE-2026-46135 CVE-2026-46209 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM kernel-5.14.0-427.139.1.el9_4.src.rpm SHA-256: 3e97c3ef706085aa5b6cd690c899bd19fbfd6d2a14ef83218b197755f24317aa x86_64 bpftool-7.3.0-427.139.1.el9_4.x86_64.rpm SHA-256: 6ccf900b84d6e9294d27b745e79977336810238bd9db7bb1234e3a0780eab840 bpftool-debuginfo-7.3.0-427.139.1.el9_4.x86_64.rpm SHA-256: b8aec0cc46f2b7b98d44e7eb48c2c56dcc22fbcad406d31a3396901d8590c42e bpftool-debuginfo-7.3.0-427.139.1.el9_4.x86_64.rpm SHA-256: b8aec0cc46f2b7b98d44e7eb48c2c56dcc22fbcad406d31a3396901d8590c42e kernel-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 930e617bdfdcb3204355be5b7061fd67c756c8b81b1a3f2fb4fa23a2e055aa34 kernel-abi-stablelists-5.14.0-427.139.1.el9_4.noarch.rpm SHA-256: 1a023bb49ebbb2037e3e7615f640247a77f05faf85c92b54fb962b4ea980a557 kernel-core-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 9aec9e65512d320d17ee4d5c26365b9511563c34cc208793319729bc05989302 kernel-debug-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 8e9406ba51cdcc3f227f0f3d5c494068ef3e9c71ed63c01a7b85d2542ce6ef0f kernel-debug-core-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 25d19f0628ca44f08961eef3a1712748df23325b2c660b410856b610f38c3aba kernel-debug-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: e9d6c8984f7214aac26faaa20199c9fd399599c7b71e9e0ad49718bb17b50620 kernel-debug-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: e9d6c8984f7214aac26faaa20199c9fd399599c7b71e9e0ad49718bb17b50620 kernel-debug-devel-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 140609250567f8ca85e195bb323f510a7bb9faa7263d846ca8d7b5a95561049c kernel-debug-devel-matched-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 69ac8c82b203309a05d17cb6f9169da4b35fe3f1a1bb71ba1916d4e4a351497e kernel-debug-modules-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 1b20aeca73fd5ab47b7536b0e6e7b03a1160e976cf970538bfa95b0318161fd2 kernel-debug-modules-core-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: e16bf22bd0d9f255635f5b23852f789200d84ff12d6e701ecfbaf8d56c9f8b6a kernel-debug-modules-extra-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 77128df6f627eb17825a5d422539a3f079334072efadc995e0811a9468355028 kernel-debug-uki-virt-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 39aba4be2492adee80b715c2aefc285d44e16d98e8d0eec77406a53c41d77bdf kernel-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 898320fecbf9d2ad856fa0585a33eedb3d4cbd5f29654f3934e9605bc7310d9d kernel-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 898320fecbf9d2ad856fa0585a33eedb3d4cbd5f29654f3934e9605bc7310d9d kernel-debuginfo-common-x86_64-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 6cb200ccc4ad46125e48dd6da535929b0fb9f7463e867b2fb5fc88eeeb56a43f kernel-debuginfo-common-x86_64-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 6cb200ccc4ad46125e48dd6da535929b0fb9f7463e867b2fb5fc88eeeb56a43f kernel-devel-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 9469e857b94a8d6f640e301d3270d0a8192b0bbc4bc0d94c8e67cd8fcace0260 kernel-devel-matched-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 7fdfd6d18dd57250308673706416759345b15156754ba67e7c22e53a410072d9 kernel-doc-5.14.0-427.139.1.el9_4.noarch.rpm SHA-256: 796818df413a03ffd5aac210bb1e6add54161f3e198b43fa58b9d187cf15b2d4 kernel-headers-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: c8bd94a0d6837ded6c6f9bf5cf248df0e308f929a54db31de548b38b82a5e99a kernel-modules-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: a9038450388aafcdb19b57f228e0a08b86f4d4ee848cf182290edc71ed50233f kernel-modules-core-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 32998262591aab3737ed58e0bd2dee3f27095a26f9a323c1bc760f8abce98214 kernel-modules-extra-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: dcb49acda1bac3d75630d20bc11d6e2318b054d9a73b27c0dc1e165418285cff kernel-rt-debug-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 5deec016518d2b304c30d5891c1e21a52eb942e4ad14c0957444cdcb17b3b748 kernel-rt-debug-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 5deec016518d2b304c30d5891c1e21a52eb942e4ad14c0957444cdcb17b3b748 kernel-rt-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 26e668c39a186fe3d91aa7f6bf2bf7b9207177ae90c5d085164adab60793755f kernel-rt-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 26e668c39a186fe3d91aa7f6bf2bf7b9207177ae90c5d085164adab60793755f kernel-tools-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: acf66754f35f67fee679e54bea0defd34c98230039f563d3157099b9b571a087 kernel-tools-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: f14e10826d28328a157db88bbf9b44274117342cb07946224e32281733ffed4e kernel-tools-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: f14e10826d28328a157db88bbf9b44274117342cb07946224e32281733ffed4e kernel-tools-libs-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: d58f0000f7c1025ad1a15d39f39e7b724a874234ec49cb4ec2d12749feb273b2 kernel-uki-virt-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 2e94ce826332d8f9a5a207c7fd778cb69648a2ca13e4e349ed9da02f6302a61b libperf-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 127476c15e3ef948f510b31244c6f70239f516d770038cfdd5f98d52f8121094 libperf-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 127476c15e3ef948f510b31244c6f70239f516d770038cfdd5f98d52f8121094 perf-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: ab0efe43fcc9cc40e5fdd6d9235ffea22e9993f9e451ab16c6a3985a2820f194 perf-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 98b0cd2ba8366404fb6c4f31822139e5c47d94e3e119b720847373d431c6f839 perf-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 98b0cd2ba8366404fb6c4f31822139e5c47d94e3e119b720847373d431c6f839 python3-perf-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: bd731a8de53540e55866ad08a0c1f87419c99aa77411bc95d22ac22fe8db45f9 python3-perf-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: e7ae9a371afa4598cef6b9ddfe83f85453be7dc99a9c9159f7598fcd3d9e27c0 python3-perf-debuginfo-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: e7ae9a371afa4598cef6b9ddfe83f85453be7dc99a9c9159f7598fcd3d9e27c0 rtla-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 995283aed5b8b3e96809a56585eb11a3369b654b7806be1618a998c04a2c862b rv-5.14.0-427.139.1.el9_4.x86_64.rpm SHA-256: 481665f7308a6b5abf53812b8faeb04768af637d4ec9a9f39e44a4ae9c677e13 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM kernel-5.14.0-427.139.1.el9_4.src.rpm SHA-256: 3e97c3ef706085aa5b6cd690c899bd19fbfd6d2a14ef83218b197755f24317aa ppc64le bpftool-7.3.0-427.139.1.el9_4.ppc64le.rpm SHA-256: c5a1c281a0a008fe384a169af286963137e1d55535e7c7c83b4e8641cd2dfffa bpftool-debuginfo-7.3.0-427.139.1.el9_4.ppc64le.rpm SHA-256: 5ca918d7fe98ab2e6cf26c9cae847776228ded6016f82db9c176d6378c2fa8f9 bpftool-debuginfo-7.3.0-427.139.1.el9_4.ppc64le.rpm SHA-256: 5ca918d7fe98ab2e6cf26c9cae847776228ded6016f82db9c176d6378c2fa8f9 kernel-5.14.0-427.139.1.el9_4.ppc64le.rpm SHA-256: 86adc76e6e94d80284975240ce9005c449876fa0ed90950d3fd08e0049f9ad