Red Hat Product Errata RHSA-2026:25121 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-10 RHSA-2026:25121 - Security Advisory Overview Updated Packages Synopsis Critical: kernel security update Type/Severity Security Advisory: Critical Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858) kernel: smc: Fix use-after-free in tcp_write_timer_handler() (CVE-2023-53781) kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125) kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852) kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2351619 - CVE-2025-21858 kernel: geneve: Fix use-after-free in geneve_find_dev(). BZ - 2420279 - CVE-2023-53781 kernel: smc: Fix use-after-free in tcp_write_timer_handler() BZ - 2424881 - CVE-2025-68366 kernel: nbd: defer config unlock in nbd_genl_connect BZ - 2432389 - CVE-2026-22984 kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() BZ - 2432400 - CVE-2026-22990 kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() BZ - 2451218 - CVE-2026-23392 kernel: netfilter: nf_tables: release flowtable after rcu grace period on error BZ - 2461471 - CVE-2026-31581 kernel: ALSA: 6fire: fix use-after-free on disconnect BZ - 2461480 - CVE-2026-31613 kernel: smb: client: fix OOB reads parsing symlink error response BZ - 2464351 - CVE-2026-43037 kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() BZ - 2464397 - CVE-2026-43038 kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() BZ - 2467234 - CVE-2026-43125 kernel: dlm: validate length in dlm_search_rsb_tree BZ - 2482166 - CVE-2026-45852 kernel: RDMA/rxe: Fix double free in rxe_srq_from_init BZ - 2482532 - CVE-2026-46181 kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() CVEs CVE-2023-53781 CVE-2025-21858 CVE-2025-68366 CVE-2026-22984 CVE-2026-22990 CVE-2026-23392 CVE-2026-31581 CVE-2026-31613 CVE-2026-43037 CVE-2026-43038 CVE-2026-43125 CVE-2026-45852 CVE-2026-46181 References https://access.redhat.com/security/updates/classification/#critical Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kernel-4.18.0-553.132.1.el8_10.src.rpm SHA-256: a6722ad7a97dcf3551d2e4e2e125fd51f7435dde1e64c683e719fbc9397c27f0 x86_64 bpftool-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 7df343cc9049f5107a4503a00a31577eedd327e1fdbda87f885cb5074221579b bpftool-debuginfo-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 95f0996f95d2e69c462122f87aa45c9db7e588274b96827d37035c5ed66fc087 kernel-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: a8fd15b9f30541fc7600ea492538a04a6a5c87ba969a7a9baab80f389c8910ff kernel-abi-stablelists-4.18.0-553.132.1.el8_10.noarch.rpm SHA-256: fb72d0638cc95cd709225a62cbc48d7822c5ca082350ebb5c2787ee0470fde52 kernel-core-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 0d0e4491961bd646bce233327bc4cc0d9291afa1b1643ce19499cb84e058dd6b kernel-cross-headers-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 6cacbd01c15421bf90eea4e02f0e30e1b39316e18584db422d31af34d8a797f4 kernel-debug-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 68ef824ad064d8671359179cab87cf699456bc2197878b75f969d0b3a564ec47 kernel-debug-core-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: a8212f70a7ee20599e5b6161b47827fb629c54972984c5df94a7a49ecb914c5e kernel-debug-debuginfo-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 96c0fc17c3e3385c8a2db8ee73fcedeae2f32314fc056347cec59ac9c9be524c kernel-debug-devel-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 5aa87225e4de4685e24588937538aa8b5c22ee036fba5833c13ca0e9a0708b15 kernel-debug-modules-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 79194965b0326df878b0483a99919cd9c6fbbe9066df3b80bbe2236bdad31759 kernel-debug-modules-extra-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 448967afc12ff6d83f7c08b57267ad5db8552168785977c4b6d9667c28b74e83 kernel-debuginfo-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 3778277ed69879dc544661749ba4f6aac8805b2e35fae10bab9416d760f27dbd kernel-debuginfo-common-x86_64-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: aee266ceba77eaaae48331f7d97ee590ad761b3912be991604383d25ba928ecb kernel-devel-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 1f3d355958b519121480346daf0070a15eb7624718628931f8ede4f575738df8 kernel-doc-4.18.0-553.132.1.el8_10.noarch.rpm SHA-256: b0c9ecb33987e9b49c4cba19e2b5e61f00dec42aea6202d8d4166355b3faffc6 kernel-headers-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 1f0b2ebd68656dfe83554bcc21dfcac98562e9a0b58fd9fb540a3a8634e49381 kernel-modules-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 339f3b7ee653b6c7c7a190ff1ed2d7a15974117c3297d2d51a9442efec4b9e2d kernel-modules-extra-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: d4c36f7bc4c8a17b7a60457f837e1e0fb5a9af769b17ea3bfca3972577726915 kernel-tools-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: b850773e8201c4a7ced9f6a33296d3db61a8d8a65da96539f8714b0c7c1a2607 kernel-tools-debuginfo-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: a934afa59bdd7ff64eef664b6612100ef607e2b0cc0e6f2484723eef2bae5bbf kernel-tools-libs-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: df80822264c627f4f16d0871975443b75df8b6580dac4a5deb1ae14ea1c51810 perf-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 35aa26543622c5deea3f988b4c11a9629ac9f1a83e7b70d0ee7a4f146a5595af perf-debuginfo-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: d3103a06d5729e46258798d99605a055728859d4520b8c732f3e6fabb1fb2697 python3-perf-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 393a7033d28cc489cb93c0ae6568721f0f57b1ddcc9a488b7524354da09e6ebb python3-perf-debuginfo-4.18.0-553.132.1.el8_10.x86_64.rpm SHA-256: 373c3361d05cb71539ec6f529eb9ad0093ae91c497e76fcbe18657699f5aa50d Red Hat Enterprise Linux for IBM z Systems 8 SRPM kernel-4.18.0-553.132.1.el8_10.src.rpm SHA-256: a6722ad7a97dcf3551d2e4e2e125fd51f7435dde1e64c683e719fbc9397c27f0 s390x bpftool-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: 9cbd8e061943b5462ac5c3b975b2b5a64aeab99b613ba440adec92eb17ab9185 bpftool-debuginfo-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: 200112a1038d2f287743bf52aab20f07eccf0335f6dea7fdde1d1752ca9a052e kernel-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: 7332879156ad1dd87676ded1fb3d00776ccf39fef3b6e8a7c3adff693f260cb6 kernel-abi-stablelists-4.18.0-553.132.1.el8_10.noarch.rpm SHA-256: fb72d0638cc95cd709225a62cbc48d7822c5ca082350ebb5c2787ee0470fde52 kernel-core-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: 1a0607a4a81d72e2aea21b8f08bd52ae3ad7ff1f9a8fd598942c2e3ca9d7bd77 kernel-cross-headers-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: 8ebadc873455794322eef88827266a565b993cf4c9c4f5cba995eb24903964f9 kernel-debug-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: eb88458afc99779ea0ad926f2810aa3f002a05b00c0350fa0f41478d34d6bf8c kernel-debug-core-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: 9f4ccdebe4915c2a184020941b906a8bc7e3a99be668bcc253fa513af81779c5 kernel-debug-debuginfo-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: eead8d3f03c87f9cbda6f61e484d130007ff2c67bd0bdc4dbf07286ecadfe9cf kernel-debug-devel-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: f6717898d51c3762374e0bf70bbdd7246346897ebf4b634ea399a8193631d2b6 kernel-debug-modules-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: c7644517369eef0400836942dc41aa2b91d24ed3ced9749e4ef50c7b4836f9d2 kernel-debug-modules-extra-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: 3588f87e674a2d76a767b5c8ba4fb3e1002372254ac83fd8aae76fb6b11e01aa kernel-debuginfo-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: d4c39cf2a2bb476e3a230035bff3268027e700279125dc56951b08df103be5ff kernel-debuginfo-common-s390x-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: b36f5af9c3fc266583f38ad52b2b827c90abc1a599bc65ae67b5277980d6739a kernel-devel-4.18.0-553.132.1.el8_10.s390x.rpm SHA-256: 1c14c11d9c84c17f1f6568d3674dd80