Red Hat Product Errata RHSA-2026:23237 - Security Advisory Issued: 2026-06-04 Updated: 2026-06-04 RHSA-2026:23237 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170) kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135) kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158) kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089) kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2414506 - CVE-2025-40170 kernel: net: use dst_dev_rcu() in sk_setup_caps() BZ - 2414521 - CVE-2025-40135 kernel: ipv6: use RCU in ip6_xmit() BZ - 2414523 - CVE-2025-40158 kernel: ipv6: use RCU in ip6_output() BZ - 2424886 - CVE-2025-68724 kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id BZ - 2429104 - CVE-2025-71089 kernel: iommu: disable SVA when CONFIG_X86 is set BZ - 2440630 - CVE-2026-23216 kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() BZ - 2451218 - CVE-2026-23392 kernel: netfilter: nf_tables: release flowtable after rcu grace period on error BZ - 2461759 - CVE-2026-31685 kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets BZ - 2464351 - CVE-2026-43037 kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() BZ - 2464397 - CVE-2026-43038 kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() BZ - 2464476 - CVE-2026-31709 kernel: smb: client: validate the whole DACL before rewriting it in cifsacl BZ - 2467014 - CVE-2026-43110 kernel: wifi: brcmfmac: validate bsscfg indices in IF events CVEs CVE-2025-40135 CVE-2025-40158 CVE-2025-40170 CVE-2025-68724 CVE-2025-71089 CVE-2026-23216 CVE-2026-23392 CVE-2026-31685 CVE-2026-31709 CVE-2026-43037 CVE-2026-43038 CVE-2026-43110 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM kernel-5.14.0-427.129.1.el9_4.src.rpm SHA-256: 1eb708d32e9408aea103aa94f077a9258220721c55e1475fd5e2468d6cac4e2f x86_64 bpftool-7.3.0-427.129.1.el9_4.x86_64.rpm SHA-256: 5e154f7378e0f6bb044188fd40e46069bc82bc66c7b1cba8f0c90c936bbea63e bpftool-debuginfo-7.3.0-427.129.1.el9_4.x86_64.rpm SHA-256: 8a758c139257636607c491dc7e61a92afddd37cc0c1678493bd564ea3c5e104d bpftool-debuginfo-7.3.0-427.129.1.el9_4.x86_64.rpm SHA-256: 8a758c139257636607c491dc7e61a92afddd37cc0c1678493bd564ea3c5e104d kernel-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 7324d1fc3252f1f4ef04f1c6a6cadcc72661b3b4d585ff325059c59faebb50d5 kernel-abi-stablelists-5.14.0-427.129.1.el9_4.noarch.rpm SHA-256: 85c6dc1ba26866896026af06f20c281c95b1bf79b42c3b8a727ca0132ef5b57d kernel-core-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: bdead0b8d9e659b00e5b5d129e828bdd885bb2f8fdcfd69749ba28880c0052eb kernel-debug-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 428347e904fdb460db472be2edd2fa57d73c5a2662b65d563bd5034ecf6131e9 kernel-debug-core-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 1eef578a4707c1b82cffb6e5ea6d316a228f743af2f91255a8b903b5aff91f1e kernel-debug-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 3196943d53c32bfc7809f7d0c0e1330a19b8b950f00c0aeea1e9aefc392ee2b5 kernel-debug-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 3196943d53c32bfc7809f7d0c0e1330a19b8b950f00c0aeea1e9aefc392ee2b5 kernel-debug-devel-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: e108fc992fb7ee85c0ee882cb29e116ce7715b9387f4158e7255cdb8f22fbaf3 kernel-debug-devel-matched-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 6622c4875a6ff9889088f9fda1b65d30e57f35908fd02d80239a35c36c216fed kernel-debug-modules-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 843b90a782025e8050e8df122a5616fbd029c8defd3636a313c5626483023028 kernel-debug-modules-core-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: a72c5be6a8f5378c01279e5cd3b6e9be53f7e900e9e740bd9bc5a650f8f6fc8c kernel-debug-modules-extra-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 87d8af4ecf9be613f47432bbf0f5be2b13a3ca8b08e9daec1e7a385d513b824b kernel-debug-uki-virt-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 17cbe5011d41d209607ea420d9426d63a14669b90c1d1ea1caf5b79459124262 kernel-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 7ecba62061ed237c9e9c45f55753c0ce7b2f0adfd9bf98d177dce355bd84a984 kernel-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 7ecba62061ed237c9e9c45f55753c0ce7b2f0adfd9bf98d177dce355bd84a984 kernel-debuginfo-common-x86_64-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 6aa63b389ec08034e59f0dee52c8446256d32045517c0a2676d004e0e0e1c67a kernel-debuginfo-common-x86_64-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 6aa63b389ec08034e59f0dee52c8446256d32045517c0a2676d004e0e0e1c67a kernel-devel-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: b9c504b32b93c09c72e69bd864905336464d16f1536257be7f45120dd4ed5b61 kernel-devel-matched-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 46dd51581e575e1521da26f8195591d234f167ca0b814bc63adabd32cfff2b25 kernel-doc-5.14.0-427.129.1.el9_4.noarch.rpm SHA-256: 56c5e3320bdeb070ceae6269597f8cad319d9b46ee91f5bee6b84419bc53b9a5 kernel-headers-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 71c38a93e6f03e81db23fdca483339c95176790655afae91bbb0a2a1c515c518 kernel-modules-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: efdb719e3a4012c608530ba79e95225dda37786f4741d61bdd98efac75fc8901 kernel-modules-core-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: b46575608235053265af8fff4d0fbbc4c478547e8d0496351e96c9650e05e5c5 kernel-modules-extra-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 67032e94fd18044237fc1777a3d2e262f222ec950da1eead77891e7e89182351 kernel-rt-debug-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 41611726df47a55e67f1b3e60947c2dfc16833fb1cf493c6bcd218e8b18ecda6 kernel-rt-debug-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 41611726df47a55e67f1b3e60947c2dfc16833fb1cf493c6bcd218e8b18ecda6 kernel-rt-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 14ba5559f5b5a446a2861fb6c686bcc1bd8f47936be70ee3ac49d4e311601236 kernel-rt-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 14ba5559f5b5a446a2861fb6c686bcc1bd8f47936be70ee3ac49d4e311601236 kernel-tools-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 8a843b5408ea57ec7bd2290e74769ee3202d9e507792e832b812acace0c0c4b2 kernel-tools-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: b1ac4eedc074184d184d9b1db7130e2fab6ec11249f4c5a5096ac14e8397081a kernel-tools-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: b1ac4eedc074184d184d9b1db7130e2fab6ec11249f4c5a5096ac14e8397081a kernel-tools-libs-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: cc41f0b622afde1a08bebb8d8ec886bd176055a9592f996f2b5dec8130682631 kernel-uki-virt-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 015e36adca7da42f5558e39943a39765790089d15a5b95c57a69c11d4187cdc2 libperf-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 6d6b0b5aa4724f606564fe6488d587c67ee9df2a90f52fdb715bf4a6d65cfb66 libperf-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 6d6b0b5aa4724f606564fe6488d587c67ee9df2a90f52fdb715bf4a6d65cfb66 perf-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 8af75023e1f190095512e3c6cf03b080fd7b0f35a6c997fb31cee89c6696bfc1 perf-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 73bb201c7bbbe1e448d06a63c36ab007dc7f931bd795dd94b6695b7d97d7da05 perf-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 73bb201c7bbbe1e448d06a63c36ab007dc7f931bd795dd94b6695b7d97d7da05 python3-perf-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: 1114041c5c9b88de87c0e0bd033b51e8f2ee925f8292e2014d9c646050f7a546 python3-perf-debuginfo-5.14.0-427.129.1.el9_4.x86_64.rpm SHA-256: c5bd920295a6c8d02b87a903043095524489d6b3023f40c93a2d37dfbd76e626 pyth