Red Hat Product Errata RHSA-2026:25028 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-10 RHSA-2026:25028 - Security Advisory Overview Updated Packages Synopsis Moderate: kernel security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508) kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2460641 - CVE-2026-31508 kernel: net: openvswitch: Avoid releasing netdev before teardown completes BZ - 2467064 - CVE-2026-43190 kernel: netfilter: xt_tcpmss: check remaining length before reading optlen CVEs CVE-2026-31508 CVE-2026-43190 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM kernel-5.14.0-427.130.1.el9_4.src.rpm SHA-256: 874ba348c62e520404040f6800f8f117b46ad079ae6fec44a23236138eccb5af x86_64 bpftool-7.3.0-427.130.1.el9_4.x86_64.rpm SHA-256: 37387177d246ae95892b2107f40b9c7940875c7e560725b7e3181ba8dce5697b bpftool-debuginfo-7.3.0-427.130.1.el9_4.x86_64.rpm SHA-256: 2d5fd124df8f8c314fc5856afed29f9faebf4566c626e467a4a0833ac874ca4b bpftool-debuginfo-7.3.0-427.130.1.el9_4.x86_64.rpm SHA-256: 2d5fd124df8f8c314fc5856afed29f9faebf4566c626e467a4a0833ac874ca4b kernel-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 8e12de3d2c94b817b6e6cbd5a72d08eea039e900ba364f9ad8151aedb70762e5 kernel-abi-stablelists-5.14.0-427.130.1.el9_4.noarch.rpm SHA-256: 16a2c14e90f99f80135a83c6b8101ac12a0e29938b38c2c66ee69419695a4242 kernel-core-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 0af7c176b8f533ad45057d469b14386ebb4b84e594277150132379a9b0717b60 kernel-debug-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: f4b1b456f555fcd04bc1e21d0807607b8e381a0cc8130148ec3bb614790cfec6 kernel-debug-core-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 9904602103262ea4c1cb2e8572a2bda37b504d56f1259f30a2316796c2957692 kernel-debug-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: d91eb4a27aaf85758a6363bfbaa69c00b95d562e37b0e5b88b8aecef69ad77da kernel-debug-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: d91eb4a27aaf85758a6363bfbaa69c00b95d562e37b0e5b88b8aecef69ad77da kernel-debug-devel-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: a308ea9360806c0680c10d7e97b273d617d24c9366f26437baa0b434e11bfa99 kernel-debug-devel-matched-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 9ebddaf5e8ebe5364c9220859c3bfb1929a58fa3be72564e50fd263266f70557 kernel-debug-modules-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 6cd86d0250c3e624cee30e107bcf23dcc6eaffc9dbf3da8051bbb33ff88e1f6f kernel-debug-modules-core-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: f0906afeb8426a17e69f60f179b3b498b774b6fc992bb43b4cd522b26d42d39e kernel-debug-modules-extra-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: a33261f887689927117030ed359a37fcc1c6351643129d0bf11ae4d7de1e5540 kernel-debug-uki-virt-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: e93362ff00e1422e44fd68dbb101401761bf73444bf04ce28e72c09d47a69683 kernel-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: a0edb83bc1da168c7fbf32613781326c25df281b058f7e94406b2b869e3a9c46 kernel-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: a0edb83bc1da168c7fbf32613781326c25df281b058f7e94406b2b869e3a9c46 kernel-debuginfo-common-x86_64-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 210f80e5a3c318306203e070ec0bece5f4c2b3b55c3d51282125911a3f4e337a kernel-debuginfo-common-x86_64-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 210f80e5a3c318306203e070ec0bece5f4c2b3b55c3d51282125911a3f4e337a kernel-devel-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 03978a6c2613843999c82ec26975a474800ea126c075a3993ca539c440bc86f0 kernel-devel-matched-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: b98e93c8daae1c899fb067f3f9616b9713a2e310f60e170c13af82e936c8b1a8 kernel-doc-5.14.0-427.130.1.el9_4.noarch.rpm SHA-256: 85eda3dce03be6aebaa1f7ec3aa1c2cf4d090a11d351964d68ee763590945e68 kernel-headers-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: c3f5213a7a5d643d790ef8c6e2229b8c78b956f554116a4e9568b372e1f4e747 kernel-modules-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: ddbea7e31649740e543e9eec7bef9c77bf631a5ffdedeaf72e4e107fe7ef6b15 kernel-modules-core-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: f76f94b3eede86ab239bda471901560ad20e4fff38bc9c7b04848d7e224111d3 kernel-modules-extra-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 4422c6f10df0a1b0ef6cc872a770a105565732a6498d734d8d1cb615b55d6043 kernel-rt-debug-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: ad81f0e046f4f0cbc84be61cd93fe9637d420447d6702a4be64b280c9d1ce9fb kernel-rt-debug-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: ad81f0e046f4f0cbc84be61cd93fe9637d420447d6702a4be64b280c9d1ce9fb kernel-rt-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 9593fdcd2b1dfe697b2ee6f5866dcee1079406b170fd34d1639a19237971017b kernel-rt-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 9593fdcd2b1dfe697b2ee6f5866dcee1079406b170fd34d1639a19237971017b kernel-tools-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 4dd518b7e016c34c919942487222640e45944856c7b1010ccf7497d3efe03ad0 kernel-tools-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 9d90b22917179c93e470be5c98c9583a738990b329f235b1d6435e66ae5de524 kernel-tools-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 9d90b22917179c93e470be5c98c9583a738990b329f235b1d6435e66ae5de524 kernel-tools-libs-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 0888236689f4d600b4d0d34cd541e13708c08c100dd6ee0173a3d6934aa2549e kernel-uki-virt-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: d1f2bff3e9fc3abb876a0cd64174c5ff006a57dff445e5d7cb9a9a62a7691b7b libperf-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: bceb7844cd2cf5cf7999cbc941ee9888c505f6d0683da352eff50ec5aa8bbc01 libperf-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: bceb7844cd2cf5cf7999cbc941ee9888c505f6d0683da352eff50ec5aa8bbc01 perf-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 2047002a06174b5d874f1a297f5d13381d6014dff693ffbf1f82e2b4dbe6c9f7 perf-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 4ae4a3c78835893130c1dd332801a0140d94ab898f2e4f16e3f12e4b8b59fb30 perf-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 4ae4a3c78835893130c1dd332801a0140d94ab898f2e4f16e3f12e4b8b59fb30 python3-perf-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 196fc17d2806200bf6ca4ab78710033952cc95bd77c1cec48375f0614db27c08 python3-perf-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 1a8ec10f2ac45e6ec0b9239db32becc9876a254315ddea32415041e3de6873d1 python3-perf-debuginfo-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 1a8ec10f2ac45e6ec0b9239db32becc9876a254315ddea32415041e3de6873d1 rtla-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: ed93c9d526eb6c528724961c4484d7c5b1ea8c1a53ac28fb9dd301b805476918 rv-5.14.0-427.130.1.el9_4.x86_64.rpm SHA-256: 679d3a00cb95e2cb99f599dad1ade6ccd950832c502eaaebad09ee2ddbe47133 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM kernel-5.14.0-427.130.1.el9_4.src.rpm SHA-256: 874ba348c62e520404040f6800f8f117b46ad079ae6fec44a23236138eccb5af ppc64le bpftool-7.3.0-427.130.1.el9_4.ppc64le.rpm SHA-256: 89685a504652184312e09c9b93129941f6495bfc684f77f06b8de7b0e99a4457 bpftool-debuginfo-7.3.0-427.130.1.el9_4.ppc64le.rpm SHA-256: d67509d87a545dbbbcc80d10b6a5244566645e3d9f39491cf9b016c2ada4f88f bpftool-debuginfo-7.3.0-427.130.1.el9_4.ppc64le.rpm SHA-256: d67509d87a545dbbbcc80d10b6a5244566645e3d9f39491cf9b016c2ada4f88f kernel-5.14.0-427.130.1.el9_4.ppc64le.rpm SHA-256: 6903bdaed451f1e5cd8ef3f4fd5e86b0783dd9e522bb7e53ed058f1ac9de0070 kernel-abi-stablelists-5.14.0-427.130.1.el9_4.noarch.rpm SHA-256: 16a2c14e90f99f80135a83c6b8101ac12a0e29938b38c2c66ee69419695a4242 kernel-core-5.14.0-427.130.1.el9_4.ppc64le.rpm SHA-256: 855437e4322a393d3a414c690feb170ca35d44f227b3271a90e2f23f4d11e6ba kernel-debug-5.14.0-427.130.1.el9_4.ppc64le.rpm SHA-256: 30a31385d894a624233e3c0993700856f91e61d97535b594fb08e38220464ee5 kernel-debug-core-5.14.0-427.130.1.el9_4.ppc64le.rpm SHA-256: 425f38fd2a766f1cbf8be8b40bb0a71039539680216904cc784d744ac1f2b063 kernel-debug-debuginfo-5.14.0-427.130.1.el9_4.ppc64le.rpm SHA-256: b2c75394dc53f80d4894e0a79d3ef67fae598bbfaf02d296772fc847ae79edcc kernel-debug-debuginfo-5.14.0-427.130.1.el9_4.ppc64le.rpm SHA-256: b2c75394dc53f80d4894e0a79d3ef67fae598bbfaf02d296772fc847ae79edcc kernel-deb