This Red Hat security advisory addresses three high-severity kernel vulnerabilities: an out-of-bounds read in the SMB client when parsing symlink error responses (CVE-2026-31613, CVSS 8.1), a buffer overflow in the Xen hypervisor driver (CVE-2026-31786, CVSS 7.8), and an issue where the SMB client could be made to accept userspace cifs.spnego descriptions (CVE-2026-46243, CVSS 7.1). The underlying kernel vulnerabilities affect a wide range of Linux kernel versions, including from 6.1 to before 6.18.24 for CVE-2026-31613 and from 4.13 to before specific versions like 5.10.254 for CVE-2026-31786. Red Hat has provided patched kernel packages for Red Hat Enterprise Linux 9, and a system reboot is required after applying the update.
Red Hat Product Errata RHSA-2026:24381 - Security Advisory Issued: 2026-06-08 Updated: 2026-06-08 RHSA-2026:24381 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2461480 - CVE-2026-31613 kernel: smb: client: fix OOB reads parsing symlink error response BZ - 2464096 - CVE-2026-31786 kernel: Buffer overflow in drivers/xen/sys-hypervisor.c BZ - 2481486 - CVE-2026-46243 kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions CVEs CVE-2026-31613 CVE-2026-31786 CVE-2026-46243 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM kernel-5.14.0-687.13.1.el9_8.src.rpm SHA-256: 0da8bc0749705957091f829cb3c6ff2441bb0596a30fdcdec0732714ca1caae3 x86_64 kernel-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 91deaf1db4c3398328d9c4012f7a3779f832c5d15fcc4919b03d7f2ed3ddc10d kernel-abi-stablelists-5.14.0-687.13.1.el9_8.noarch.rpm SHA-256: 61b5d5d26b0cb2ee0039860fdbc899981c316b6694da6180926d7153fa9c7b12 kernel-core-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 7a0fb844a77f22717a254c8c5d4ec1dcb4aaff66b5ef5424242f6aa38bc8b468 kernel-debug-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 23f7da041d2b2db67395bb8cc1190738620ba5a6fe44345aebfd37fb05f35fc7 kernel-debug-core-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: a0771ef46c1eafedc37f744a9365fc86cab7721b04d6d63fe6d2ca83b1a81cfe kernel-debug-debuginfo-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: c91c09da6eb5ea64b1e0399d63fd6d12d9292a0e6854e7b9503dbc598fbe5f89 kernel-debug-debuginfo-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: c91c09da6eb5ea64b1e0399d63fd6d12d9292a0e6854e7b9503dbc598fbe5f89 kernel-debug-debuginfo-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: c91c09da6eb5ea64b1e0399d63fd6d12d9292a0e6854e7b9503dbc598fbe5f89 kernel-debug-debuginfo-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: c91c09da6eb5ea64b1e0399d63fd6d12d9292a0e6854e7b9503dbc598fbe5f89 kernel-debug-devel-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 0a356f81df497c1733ff573669f952a410f597e2314621992fccb653a1d30696 kernel-debug-devel-matched-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: dd38d5260592fbf32796648ec87eaeb120604a88fc3d08e8f2ed1d11bfa93876 kernel-debug-modules-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: cc3d570dff95069d496440abde04b784fea57d32e7e7332f308368a0bc7be25f kernel-debug-modules-core-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: a623360c277b819a5a5f9e44497aaec1b751851ff9d7bfeb28830ad58c160f61 kernel-debug-modules-extra-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 4e6fd920716f1316696603e2d7cc14d96bf988c34bfb0f7dc2a80ef19dcef73d kernel-debug-uki-virt-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 9f290b47f889bfc662e8962e421552e73b582ef1f6ea7ab2ad515e8c923470b6 kernel-debuginfo-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 3291be63dabc812f78644f3d49f33493684ffbd9571e444ef557dcf41e51dc23 kernel-debuginfo-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 3291be63dabc812f78644f3d49f33493684ffbd9571e444ef557dcf41e51dc23 kernel-debuginfo-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 3291be63dabc812f78644f3d49f33493684ffbd9571e444ef557dcf41e51dc23 kernel-debuginfo-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 3291be63dabc812f78644f3d49f33493684ffbd9571e444ef557dcf41e51dc23 kernel-debuginfo-common-x86_64-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: b4eb28f243f9ed55a190d7c3bcd8a872f6a6059fb6ca8f8c6ca0ff42be61670e kernel-debuginfo-common-x86_64-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: b4eb28f243f9ed55a190d7c3bcd8a872f6a6059fb6ca8f8c6ca0ff42be61670e kernel-debuginfo-common-x86_64-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: b4eb28f243f9ed55a190d7c3bcd8a872f6a6059fb6ca8f8c6ca0ff42be61670e kernel-debuginfo-common-x86_64-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: b4eb28f243f9ed55a190d7c3bcd8a872f6a6059fb6ca8f8c6ca0ff42be61670e kernel-devel-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: fa6399bc9d10c431868bab48c43ffcc4a15681d0277771875929180b907d2a82 kernel-devel-matched-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 8b038592561a72e8bfdf45b635a64749c14ac840ae97aa30036598b1176ed404 kernel-doc-5.14.0-687.13.1.el9_8.noarch.rpm SHA-256: bf33a9f0310ab17ac320194312ed9892d04e3e9e2f38099375907ac33eafe238 kernel-headers-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: c7224ef803935181904270e1796e88c360de838f5470985cb5127cdc22fe575d kernel-modules-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 697f82ba4d9d02c5a9a93756039000d3b269b3a79f110e04a47c6b151deb006d kernel-modules-core-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 8d1c6d36eea51cd2993bb7e832d61f486ee40289caada6ad013ce13c6c9ec91d kernel-modules-extra-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 9f3f2e03d79817041541b1dc19643cc7e61686bf21b64156708dcb8e6d6347ba kernel-rt-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 4b03cea4b99b4009c2efa0bc8b300beb6d2491441870000236afbfc5466e2442 kernel-rt-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 4b03cea4b99b4009c2efa0bc8b300beb6d2491441870000236afbfc5466e2442 kernel-rt-core-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: a49ef6c9b73babd1700727498e42f07a7f7bb078ae5adeab3da5c0bc86c49cd5 kernel-rt-core-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: a49ef6c9b73babd1700727498e42f07a7f7bb078ae5adeab3da5c0bc86c49cd5 kernel-rt-debug-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 91ac1be97d0e1ba22f45e920ed67b7338b204a7b118fa668213f0ab6ee43e4a4 kernel-rt-debug-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 91ac1be97d0e1ba22f45e920ed67b7338b204a7b118fa668213f0ab6ee43e4a4 kernel-rt-debug-core-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: e439a207e5bc11b9eea3c0a317e4746beeef6bbc331fe6b28a2f79fad590ddc9 kernel-rt-debug-core-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: e439a207e5bc11b9eea3c0a317e4746beeef6bbc331fe6b28a2f79fad590ddc9 kernel-rt-debug-debuginfo-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: af5115152b318eff1bd40717e934e90c2f59ecbf03bc4f8e8b7b2f44aa6467ee kernel-rt-debug-debuginfo-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: af5115152b318eff1bd40717e934e90c2f59ecbf03bc4f8e8b7b2f44aa6467ee kernel-rt-debug-debuginfo-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: af5115152b318eff1bd40717e934e90c2f59ecbf03bc4f8e8b7b2f44aa6467ee kernel-rt-debug-debuginfo-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: af5115152b318eff1bd40717e934e90c2f59ecbf03bc4f8e8b7b2f44aa6467ee kernel-rt-debug-devel-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 230cb8d7c36134a18ee16ad6a79f5fafd42ffab19191e2c27670cc4ac97ea519 kernel-rt-debug-devel-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 230cb8d7c36134a18ee16ad6a79f5fafd42ffab19191e2c27670cc4ac97ea519 kernel-rt-debug-modules-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: c1fdf5fddcf35df0840138bde2dcb53e906c1d5e972ab6b924b55bf808f7bc8d kernel-rt-debug-modules-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: c1fdf5fddcf35df0840138bde2dcb53e906c1d5e972ab6b924b55bf808f7bc8d kernel-rt-debug-modules-core-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 132a109942f57e23d54c617e7f768e96c51806d174f2682f3bad547ef694a488 kernel-rt-debug-modules-core-5.14.0-687.13.1.el9_8.x86_64.rpm SHA-256: 132a109942f57e23d54c617e7f768e96c51806d174f2682f