Red Hat Product Errata RHSA-2026:44694 - Security Advisory Issued: 2026-07-23 Updated: 2026-07-23 RHSA-2026:44694 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) Bug Fix(es) and Enhancement(s): rbd: eliminate a race in lock_dwork draining on unmap [rhel-10.0.z] (JIRA:RHEL-183126) NVMe-FC: Panic during NVMe Controller Reset tests [rhel-10.0.z] (JIRA:RHEL-193238) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2461757 - CVE-2026-31684 kernel: net: sched: act_csum: validate nested VLAN headers BZ - 2467064 - CVE-2026-43190 kernel: netfilter: xt_tcpmss: check remaining length before reading optlen BZ - 2482563 - CVE-2026-46152 kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result CVEs CVE-2026-31684 CVE-2026-43190 CVE-2026-46152 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM kernel-6.12.0-55.92.1.el10_0.src.rpm SHA-256: 0b36b127f658d549f3f2fb0d8646c9a596c346f9a8f0146198c8452b850910bc x86_64 kernel-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 234d92bffa025a2dfa69e0c625037d4ecb2f60f6479375cda06fa5569ed8effa kernel-abi-stablelists-6.12.0-55.92.1.el10_0.noarch.rpm SHA-256: bbab5bdecf5201ec5d8f6843d0b969948c12a910178eedcf15e7b547e68623b7 kernel-core-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 0fb08815c40b63bc66bfad169a6b8d82a6ad9c409f251aace4986f56c40b0fb2 kernel-debug-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: fc3d3a53039eb6a9cfd44e8815f6d436905c833219a7461853ff002a20453d40 kernel-debug-core-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: f8f7c051e6b17ac29ced2359490b939bfb9c178c9e05c8e7ef587e0faa6e5b20 kernel-debug-debuginfo-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 82f1a15da6a44f3d76821c47d332707c1125a4dfbe1f48f1d248791a7c01f8b6 kernel-debug-debuginfo-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 82f1a15da6a44f3d76821c47d332707c1125a4dfbe1f48f1d248791a7c01f8b6 kernel-debug-debuginfo-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 82f1a15da6a44f3d76821c47d332707c1125a4dfbe1f48f1d248791a7c01f8b6 kernel-debug-debuginfo-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 82f1a15da6a44f3d76821c47d332707c1125a4dfbe1f48f1d248791a7c01f8b6 kernel-debug-devel-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 1970d3c3aa0be609b4590db0bd9dd8e566622a30f43fee7c3c09681e42b12972 kernel-debug-devel-matched-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 6876c682f25b268ccb0851753d1c772fbf106936e9582ae3e79e28f0bbaf216f kernel-debug-modules-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 40742f35c1c01517b5e5c41531ffbfb32de8a0f783ef1e418e4d724e1155ec6b kernel-debug-modules-core-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 8d4322ca348178df3ed5be2c412df0171ee13b09eded3a4b43c80a8d156ea200 kernel-debug-modules-extra-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: fa328af14d9a4091c03ac2836d996fb5c856288f957775677dcae95d9c55c939 kernel-debug-uki-virt-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 9647d581440078f4de9cc71f540eb9bfbade068309c8e9864ed44a29c9da9752 kernel-debuginfo-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 08447e02a44ff659373d0b78140f376bab96aa7e09437b360f87fdf5c42833ea kernel-debuginfo-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 08447e02a44ff659373d0b78140f376bab96aa7e09437b360f87fdf5c42833ea kernel-debuginfo-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 08447e02a44ff659373d0b78140f376bab96aa7e09437b360f87fdf5c42833ea kernel-debuginfo-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 08447e02a44ff659373d0b78140f376bab96aa7e09437b360f87fdf5c42833ea kernel-debuginfo-common-x86_64-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: a4ac5630de68e2b56915c5ab8eee65756b3777d912618091e8b61e62f8eb8f30 kernel-debuginfo-common-x86_64-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: a4ac5630de68e2b56915c5ab8eee65756b3777d912618091e8b61e62f8eb8f30 kernel-debuginfo-common-x86_64-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: a4ac5630de68e2b56915c5ab8eee65756b3777d912618091e8b61e62f8eb8f30 kernel-debuginfo-common-x86_64-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: a4ac5630de68e2b56915c5ab8eee65756b3777d912618091e8b61e62f8eb8f30 kernel-devel-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 2f1e3a586ca346bc0d12293bad5dfabfdecbffe50cd8ad6e9b9ac5998c7ab005 kernel-devel-matched-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: e1b9491f3cbee43436c508d824650b9565da65a77067599bb099318383a94043 kernel-doc-6.12.0-55.92.1.el10_0.noarch.rpm SHA-256: 8849ef1739eb5bc36027f4120248d8cfaa34f8d71219be189246033e6573b641 kernel-headers-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: b4f8f78313bb0dfd28f02f30373df125eabfb0e225206ff163022d7c66410106 kernel-modules-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 36396a17e470222d3340c19bb8fbaf28d06b79db68a94c8a905a3c9937602549 kernel-modules-core-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: caee22aa219d26ef03996356904c9bf61e6b8582f238b2388d36382bd9f772e9 kernel-modules-extra-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: cc62d6df4b74261bc05cbf6243a094666a95e27fff5ced69b553b73f1e0e8b61 kernel-rt-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 701f5abdcf316c85ae4ab0a21476735538ac68b8185f6dde3876de996f3d25d1 kernel-rt-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 701f5abdcf316c85ae4ab0a21476735538ac68b8185f6dde3876de996f3d25d1 kernel-rt-core-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 0a344f1f05218e91e4b1ab97b8dffb355525d1b6120d596df57381c496710bd1 kernel-rt-core-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 0a344f1f05218e91e4b1ab97b8dffb355525d1b6120d596df57381c496710bd1 kernel-rt-debug-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: a25813bd71a24d501c0455f35eff99ca887b98a283aa9788364c03a584c3eff6 kernel-rt-debug-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: a25813bd71a24d501c0455f35eff99ca887b98a283aa9788364c03a584c3eff6 kernel-rt-debug-core-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: e690f9d45f48119ad280102b35b0c3e33d04bd6fa1f23569594417e4db32feb2 kernel-rt-debug-core-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: e690f9d45f48119ad280102b35b0c3e33d04bd6fa1f23569594417e4db32feb2 kernel-rt-debug-debuginfo-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: ef7f5aea8e5083ac0477331993fb1d52db170894ee0cfea171b5b9df91b51cb8 kernel-rt-debug-debuginfo-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: ef7f5aea8e5083ac0477331993fb1d52db170894ee0cfea171b5b9df91b51cb8 kernel-rt-debug-debuginfo-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: ef7f5aea8e5083ac0477331993fb1d52db170894ee0cfea171b5b9df91b51cb8 kernel-rt-debug-debuginfo-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: ef7f5aea8e5083ac0477331993fb1d52db170894ee0cfea171b5b9df91b51cb8 kernel-rt-debug-devel-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: d3e4a9e79c4e3c89f6af4d724e1a5b981a07a665f1e6e4f0bd63ffd46512acdc kernel-rt-debug-devel-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: d3e4a9e79c4e3c89f6af4d724e1a5b981a07a665f1e6e4f0bd63ffd46512acdc kernel-rt-debug-kvm-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 307a1487481362327fb2c0dacf5bd3632e549f3fa18f34773e2e993d6e338f7c kernel-rt-debug-modules-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: d61cde12f8acfd67f33be692e07e40f3add24a0058c306edd6ccea0e28c14ef1 kernel-rt-debug-modules-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: d61cde12f8acfd67f33be692e07e40f3add24a0058c306edd6ccea0e28c14ef1 kernel-rt-debug-modules-core-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 7493f7dcfd9c086d8b44bd9be8f27ee3f894d9ac9ff5a6ed2838f8b96ef7f8ab kernel-rt-debug-modules-core-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 7493f7dcfd9c086d8b44bd9be8f27ee3f894d9ac9ff5a6ed2838f8b96ef7f8ab kernel-rt-debug-modules-extra-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 6b5715f482297dc6cb94bd59e3dd539e80f67f6c8a99ddf38b0ed1a7d6a893dc kernel-rt-debug-modules-extra-6.12.0-55.92.1.el10_0.x86_64.rpm SHA-256: 6b5715f482297dc6cb94bd59e3dd539e80f67f6c8a99ddf38b0ed1a7d6a893dc kernel-rt-debuginfo-6.12.0-55.92.1.el1