Red Hat Product Errata RHSA-2026:24343 - Security Advisory Issued: 2026-06-08 Updated: 2026-06-08 RHSA-2026:24343 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2424881 - CVE-2025-68366 kernel: nbd: defer config unlock in nbd_genl_connect BZ - 2448745 - CVE-2026-23270 kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation BZ - 2451218 - CVE-2026-23392 kernel: netfilter: nf_tables: release flowtable after rcu grace period on error BZ - 2461521 - CVE-2026-31607 kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() BZ - 2461759 - CVE-2026-31685 kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets BZ - 2464351 - CVE-2026-43037 kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() BZ - 2464397 - CVE-2026-43038 kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() BZ - 2464476 - CVE-2026-31709 kernel: smb: client: validate the whole DACL before rewriting it in cifsacl BZ - 2467014 - CVE-2026-43110 kernel: wifi: brcmfmac: validate bsscfg indices in IF events CVEs CVE-2025-68366 CVE-2026-23270 CVE-2026-23392 CVE-2026-31607 CVE-2026-31685 CVE-2026-31709 CVE-2026-43037 CVE-2026-43038 CVE-2026-43110 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM kernel-6.12.0-55.77.1.el10_0.src.rpm SHA-256: 2fe468f8aaff690bca21b34698365a2bf81851bef54afb1e9e344ccbd7ecb838 x86_64 kernel-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 6daba3f15069b04d6876cb74b7aef4d0bd873b430311fa73576871128fa85296 kernel-abi-stablelists-6.12.0-55.77.1.el10_0.noarch.rpm SHA-256: 99cb4b58cfd828566dc9dbffd84abc6635ef1822e03dbc30fc274c7ac26e03e0 kernel-core-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 7e62d751e050739f28286a6f1a2c0f4420203c63b8782ebe37dbc4490779d317 kernel-debug-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 031692cefc88eedd3e0a485812ccca4abccc50d173fcb8400552442b9fe53454 kernel-debug-core-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 5bd90f69a9d803f25634522adafe33c9a9454b2e127370ab03edfb6a35d0e9ac kernel-debug-debuginfo-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 8deba927e9a331c2bf52571f5a169a1bc060efd4bb96a9aa032d8c650016d7ff kernel-debug-debuginfo-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 8deba927e9a331c2bf52571f5a169a1bc060efd4bb96a9aa032d8c650016d7ff kernel-debug-debuginfo-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 8deba927e9a331c2bf52571f5a169a1bc060efd4bb96a9aa032d8c650016d7ff kernel-debug-debuginfo-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 8deba927e9a331c2bf52571f5a169a1bc060efd4bb96a9aa032d8c650016d7ff kernel-debug-devel-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 9ef70eb95b997751a5c80f2d0fbb8c774883b43a5088b9f21c110ba3c644f485 kernel-debug-devel-matched-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: b243d1c1082161e20494b22d15c450228dc6afc463de811df7c833d5f0ca969d kernel-debug-modules-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 037ab4c814f6cdf0976929a201b5d8f9657ff704c5458f618f3d17adb322df6a kernel-debug-modules-core-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 0ad0a633d534306b84b49f701cb5125bf4361ea1905ce422c27f323bf0454212 kernel-debug-modules-extra-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 55eb347835c3c2e33befa626aef314cfe170b71ec4c171a320efdac4a1577d61 kernel-debug-uki-virt-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 05a02f97bf9233674b534513325d8300aaf1a8fe17d39f46ceec30e5c1d889d0 kernel-debuginfo-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: c73884a3de3f23978abb5f8fddf07a70fb82d50e9807151267ec055acb31a6a0 kernel-debuginfo-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: c73884a3de3f23978abb5f8fddf07a70fb82d50e9807151267ec055acb31a6a0 kernel-debuginfo-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: c73884a3de3f23978abb5f8fddf07a70fb82d50e9807151267ec055acb31a6a0 kernel-debuginfo-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: c73884a3de3f23978abb5f8fddf07a70fb82d50e9807151267ec055acb31a6a0 kernel-debuginfo-common-x86_64-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 2bbcd74181b2392377e1812eadda5fefe79011dac98196a718dca617a27c018f kernel-debuginfo-common-x86_64-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 2bbcd74181b2392377e1812eadda5fefe79011dac98196a718dca617a27c018f kernel-debuginfo-common-x86_64-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 2bbcd74181b2392377e1812eadda5fefe79011dac98196a718dca617a27c018f kernel-debuginfo-common-x86_64-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 2bbcd74181b2392377e1812eadda5fefe79011dac98196a718dca617a27c018f kernel-devel-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 91989ccdf310b23a4521fca998aa194caef622d827276f0e651e7d008c064bfe kernel-devel-matched-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 591211b6e63616f99aafad11f78fc1270a65c3eaddce10c217889571287a33bd kernel-doc-6.12.0-55.77.1.el10_0.noarch.rpm SHA-256: 9376f564e5600d7033f7d7e7e4e8dc44b6c49570ef503ae0a9e1bc908b74495f kernel-headers-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: c65d49a1d2caae4765c8d6e6f65febfc618d69d782b6996b987fea5f2d0d5d6d kernel-modules-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 6c54b00484acc1951e64e97e7e8929620e090bab143a4dbfd794efbf48c237db kernel-modules-core-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 8b3dbc4b728633888cfcae240bcd2de02703cf8f22f6c6369ed8aab017fa7aa5 kernel-modules-extra-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 79bf607d97464371b8f937201fa8df979156ac092bb7dcd106fea6ad0cac0ff4 kernel-rt-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 2ae0f3eb2739d0eb46fd1dd7417734e868afd99cdb479db6d5ed3d0656da9bb4 kernel-rt-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 2ae0f3eb2739d0eb46fd1dd7417734e868afd99cdb479db6d5ed3d0656da9bb4 kernel-rt-core-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: d67e3f00d8dd014729298194bd13ce40539907e80e20ec4020ad2003a7650eee kernel-rt-core-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: d67e3f00d8dd014729298194bd13ce40539907e80e20ec4020ad2003a7650eee kernel-rt-debug-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: fcde3431ca134a8415885b8ce161dacd380ae68830c86b69b132106d3466990e kernel-rt-debug-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: fcde3431ca134a8415885b8ce161dacd380ae68830c86b69b132106d3466990e kernel-rt-debug-core-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 532048c193dcab5c263a169d50bbc1862eb95e7437c18c343ad221bab0c40b81 kernel-rt-debug-core-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 532048c193dcab5c263a169d50bbc1862eb95e7437c18c343ad221bab0c40b81 kernel-rt-debug-debuginfo-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: bdd3090c3d32b92d9ee7b09babc0d201c67fa25499c449dcf2a885a84a2b53db kernel-rt-debug-debuginfo-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: bdd3090c3d32b92d9ee7b09babc0d201c67fa25499c449dcf2a885a84a2b53db kernel-rt-debug-debuginfo-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: bdd3090c3d32b92d9ee7b09babc0d201c67fa25499c449dcf2a885a84a2b53db kernel-rt-debug-debuginfo-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: bdd3090c3d32b92d9ee7b09babc0d201c67fa25499c449dcf2a885a84a2b53db kernel-rt-debug-devel-6.12.0-55.77.1.el10_0.x86_64.rpm SHA-256: 90d45921acc0e1c0cf2bd9993d7915ba2599ddf63ebd01d72bdad0d6a7c9e7da kernel-rt-debug-devel-6.12.0-55.77.1.el10_0.x86_64.rp