Red Hat Product Errata RHSA-2026:49211 - Security Advisory Issued: 2026-07-31 Updated: 2026-07-31 RHSA-2026:49211 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211) kernel: isofs: validate Rock Ridge CE continuation extent against volume size (CVE-2026-46303) kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () Bug Fix(es) and Enhancement(s): [DELL 10.2 FEAT] [LATE-ADD] - Include support for Ghostrider PTL mini config SKU with Realtek IC Solution [rhel-10.2.z] (JIRA:RHEL-185669) dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [rhel-10.2.z] (JIRA:RHEL-212063) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2422696 - CVE-2025-68211 kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item BZ - 2486471 - CVE-2026-46303 kernel: isofs: validate Rock Ridge CE continuation extent against volume size BZ - 2504052 - CVE-2026-64530 kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle CVEs CVE-2025-68211 CVE-2026-46303 CVE-2026-64530 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM kernel-6.12.0-211.42.1.el10_2.src.rpm SHA-256: 73c81cf84e68015a15ba41c94c0719290e4f0b9ca7f51d549fc76390f003d812 x86_64 kernel-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 05e2674a8500de23edd0bfe3adefee14664c86e5f6985a687459e25338a24068 kernel-abi-stablelists-6.12.0-211.42.1.el10_2.noarch.rpm SHA-256: d5b889a9d7ee3b2fb9ca01c3b34b2151506ec37066172cc07b6c533462eaf5e0 kernel-core-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: c934d8ebf40802887f56b658101954fdf3224ad833c7a477fa678a69e6a3ff7f kernel-debug-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: fb495cbd64bcc43841d201331ed1dad57449d52b0ea0eab01ca45b148c8a8094 kernel-debug-core-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: ffc770822ebd227faf934da3b7f10adb55ae1cafdbc8447a10032bc863ee70a8 kernel-debug-debuginfo-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 2b344e040ca0149fcaecaa1746c48787b4938c7c28652f301caa24b633cac7f2 kernel-debug-debuginfo-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 2b344e040ca0149fcaecaa1746c48787b4938c7c28652f301caa24b633cac7f2 kernel-debug-debuginfo-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 2b344e040ca0149fcaecaa1746c48787b4938c7c28652f301caa24b633cac7f2 kernel-debug-debuginfo-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 2b344e040ca0149fcaecaa1746c48787b4938c7c28652f301caa24b633cac7f2 kernel-debug-devel-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: ace81f09b074a0dac15c72d13fafb71fa4bb5fd83ee8630e19ec9788d9705b0f kernel-debug-devel-matched-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: b5d181223eec3816b4602f929a5a32dccea2c13f4090aa39e3801ba55d50ed06 kernel-debug-modules-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 42437ffcc457e7f16d3c57dba9841189d611b5a247e01b3034961c71f37d22b4 kernel-debug-modules-core-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: a2e839d59b1e54638bce8600b069effded3d5f07ec137c1fa3a88cd7799bab58 kernel-debug-modules-extra-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 4ee18f4fe634937bab207b6895f48a37b06da8c5b2bbbfaf69ba6a3dbbc3c570 kernel-debug-uki-virt-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: eac640db9deab775377329a5c966081abc07d339cc6f8ef6342c1972b9c97639 kernel-debuginfo-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 8d46056b11c8db07a0cc1684dfecfc0da68c5bc6c40198a933b882b95d2b1bc9 kernel-debuginfo-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 8d46056b11c8db07a0cc1684dfecfc0da68c5bc6c40198a933b882b95d2b1bc9 kernel-debuginfo-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 8d46056b11c8db07a0cc1684dfecfc0da68c5bc6c40198a933b882b95d2b1bc9 kernel-debuginfo-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 8d46056b11c8db07a0cc1684dfecfc0da68c5bc6c40198a933b882b95d2b1bc9 kernel-debuginfo-common-x86_64-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 19c5e367c666d934503bbc1399617da98a4ccc2aa56c681c74109f9feddd7b93 kernel-debuginfo-common-x86_64-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 19c5e367c666d934503bbc1399617da98a4ccc2aa56c681c74109f9feddd7b93 kernel-debuginfo-common-x86_64-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 19c5e367c666d934503bbc1399617da98a4ccc2aa56c681c74109f9feddd7b93 kernel-debuginfo-common-x86_64-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 19c5e367c666d934503bbc1399617da98a4ccc2aa56c681c74109f9feddd7b93 kernel-devel-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: e76645b6d9408311424e5598335a5e4f108da368b4fe32aa6e4ce3db5e61ca25 kernel-devel-matched-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: a25f249160c23b14228a66356781d035a115543dfd6630df5edade59077153b5 kernel-doc-6.12.0-211.42.1.el10_2.noarch.rpm SHA-256: b8fad98b59670081ef3b2ac68a03a66a958ba742777bd8cd83bb73d25fcf52fb kernel-headers-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 9a50a906ad694607dd6eeb946a28939519b9a66b9440c998282429a418a6fe80 kernel-modules-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 0974458d7b32f67f85eb7b06112c416513a8e6556e24560b33182f151544050a kernel-modules-core-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: b91074f1cf0e6c4d43fd77827f02ffd0b7ba18b2a445d9de5d71b39e17775600 kernel-modules-extra-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: bcda15cf7e64dba1e06da7bbcc1b87b44674d5a0228dab1d3fa2f26687348209 kernel-modules-extra-matched-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: a82780d98a5b355b90670d28c835cbb44749b79a5aa2969a93d4eb15cc425b0a kernel-rt-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 6a40c5c1e3ee9fdb0b222b7198b62b18cd8ed218ef44d522cdbdc3a431658cbf kernel-rt-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: 6a40c5c1e3ee9fdb0b222b7198b62b18cd8ed218ef44d522cdbdc3a431658cbf kernel-rt-core-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: eb16bf8606f154dd5046ec2cc4c0d509c8ed0b76041e48e6ebb58a46c33c8397 kernel-rt-core-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: eb16bf8606f154dd5046ec2cc4c0d509c8ed0b76041e48e6ebb58a46c33c8397 kernel-rt-debug-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: c4fad90ddf86df3e2f6ad913a7d0393ae23e08a7582a23031a1ccd102c9ded31 kernel-rt-debug-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: c4fad90ddf86df3e2f6ad913a7d0393ae23e08a7582a23031a1ccd102c9ded31 kernel-rt-debug-core-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: b244614365372ee26a562dffb875c26705c0bb3e98fec0d31b658aa06eb9667f kernel-rt-debug-core-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: b244614365372ee26a562dffb875c26705c0bb3e98fec0d31b658aa06eb9667f kernel-rt-debug-debuginfo-6.12.0-211.42.1.el10_2.x86_64.rpm SHA-256: bc9c2b751b8d7fa47bc0