Red Hat Product Errata RHSA-2026:25218 - Security Advisory Issued: 2026-06-11 Updated: 2026-06-11 RHSA-2026:25218 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170) kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135) kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158) kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089) kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508) kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2414506 - CVE-2025-40170 kernel: net: use dst_dev_rcu() in sk_setup_caps() BZ - 2414521 - CVE-2025-40135 kernel: ipv6: use RCU in ip6_xmit() BZ - 2414523 - CVE-2025-40158 kernel: ipv6: use RCU in ip6_output() BZ - 2424886 - CVE-2025-68724 kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id BZ - 2429104 - CVE-2025-71089 kernel: iommu: disable SVA when CONFIG_X86 is set BZ - 2429602 - CVE-2025-71116 kernel: libceph: make decode_pool() more resilient against corrupted osdmaps BZ - 2432389 - CVE-2026-22984 kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() BZ - 2432400 - CVE-2026-22990 kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() BZ - 2440630 - CVE-2026-23216 kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() BZ - 2454810 - CVE-2026-23455 kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() BZ - 2460641 - CVE-2026-31508 kernel: net: openvswitch: Avoid releasing netdev before teardown completes BZ - 2467014 - CVE-2026-43110 kernel: wifi: brcmfmac: validate bsscfg indices in IF events BZ - 2467064 - CVE-2026-43190 kernel: netfilter: xt_tcpmss: check remaining length before reading optlen CVEs CVE-2025-40135 CVE-2025-40158 CVE-2025-40170 CVE-2025-68724 CVE-2025-71089 CVE-2025-71116 CVE-2026-22984 CVE-2026-22990 CVE-2026-23216 CVE-2026-23455 CVE-2026-31508 CVE-2026-43110 CVE-2026-43190 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM kernel-5.14.0-570.120.1.el9_6.src.rpm SHA-256: ce72b80045997a1687dd009964e21d554c3474dd0e2635f0e1ea3e46962b0d33 x86_64 kernel-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 9bf7722354d151f942ec4289feaf00814cea95baadbb19d07c0d6072d49a9337 kernel-abi-stablelists-5.14.0-570.120.1.el9_6.noarch.rpm SHA-256: c3dcfebc4b0024fbd62b3cac7e2c64424f6b7056c1369adaadfd1f018e06d93e kernel-core-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: e0897a0baf509ca45ee832fd1382158beb81f7202bf6239dd7163815b11f1961 kernel-debug-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: e58fc929244e0853b7460da482e953848ba4def6c294fb5082d0ff751aedb340 kernel-debug-core-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 635a817c2ec27c0e6b7fc1ea5fe4a2aaa7d09d73c26c0196dfa2090f2af10f88 kernel-debug-debuginfo-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 525250c3706c1deb7e593c02a2623edadcbd8b08bb1dd97a954c41a0cfce2a1c kernel-debug-debuginfo-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 525250c3706c1deb7e593c02a2623edadcbd8b08bb1dd97a954c41a0cfce2a1c kernel-debug-debuginfo-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 525250c3706c1deb7e593c02a2623edadcbd8b08bb1dd97a954c41a0cfce2a1c kernel-debug-debuginfo-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 525250c3706c1deb7e593c02a2623edadcbd8b08bb1dd97a954c41a0cfce2a1c kernel-debug-devel-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 3a3d3ab6067275258b9ec66d87fa8bb54ca538cf8fa94681bdb3d680ed434038 kernel-debug-devel-matched-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 5fd1957c75aa3ee00f2c69abf86a4bcead76f8ceee8c15497c78a91a86e6c485 kernel-debug-modules-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 19543dee40c7393afacee56c3127706c81659defaa27f63dc8ef06dc3c7ed36c kernel-debug-modules-core-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 74486899b6e2dacf7b222e1d14a17adbbe05717d2b11fd37c861976c5ef0562f kernel-debug-modules-extra-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 88e9d9d34eb055c06671d21785daba0b0fce4c52bae56f2612b43b36bd5a3297 kernel-debug-uki-virt-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 2804eb8e7a6d92fdb49cc0a0a0a4a715e3a5bca53d0490bfc1cf7ae485a43c58 kernel-debuginfo-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: c566b24015a3e59a7a993c682d72c053320a99c347a46ed60f35192c706e1614 kernel-debuginfo-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: c566b24015a3e59a7a993c682d72c053320a99c347a46ed60f35192c706e1614 kernel-debuginfo-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: c566b24015a3e59a7a993c682d72c053320a99c347a46ed60f35192c706e1614 kernel-debuginfo-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: c566b24015a3e59a7a993c682d72c053320a99c347a46ed60f35192c706e1614 kernel-debuginfo-common-x86_64-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 591ed2327817c3273e62efcf652f02fa1ec7f4960d6c2ad59f89bcf2f6e9c33b kernel-debuginfo-common-x86_64-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 591ed2327817c3273e62efcf652f02fa1ec7f4960d6c2ad59f89bcf2f6e9c33b kernel-debuginfo-common-x86_64-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 591ed2327817c3273e62efcf652f02fa1ec7f4960d6c2ad59f89bcf2f6e9c33b kernel-debuginfo-common-x86_64-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 591ed2327817c3273e62efcf652f02fa1ec7f4960d6c2ad59f89bcf2f6e9c33b kernel-devel-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 68bbbea431ecf43e4f1b4ea29bf1d0079e1329ace26528ee2734ab9a553e7551 kernel-devel-matched-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 28ab555147ca8b68abfe7b4e9a0c28bcdd32c230a9ab54ec290b2f9139653ac6 kernel-doc-5.14.0-570.120.1.el9_6.noarch.rpm SHA-256: 41b1f49999c4c4582f3ab9140496628112d150ef76f18b57f8244bf812758267 kernel-headers-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: e763896341565b66dadaa9c8f3263ce1b63534d7b3882cc0fc2b40c51a9bbb1d kernel-modules-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: ff7135df729e9ac8db35ef4f61fc762c7f8b4bba37f636528bbb1b378700e54b kernel-modules-core-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: f032152e0b4ab07b147fb697260763f8e6416e4f0be4f77f49ceb4b57188a911 kernel-modules-extra-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 086b625cda7af6bb29b1e62e4706133c1ac782ae30ad7453abc5a6c52ab597fc kernel-rt-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 87268718f90478e26c89a0e40bdeec6bcc457015cfe9528c161c10be63c0c6f1 kernel-rt-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 87268718f90478e26c89a0e40bdeec6bcc457015cfe9528c161c10be63c0c6f1 kernel-rt-core-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 8bc5f49731ee183e7db838ff7c2114c10ab2f6684683fc94c309afd26bc70b90 kernel-rt-core-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 8bc5f49731ee183e7db838ff7c2114c10ab2f6684683fc94c309afd26bc70b90 kernel-rt-debug-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-256: 4e3b8d426196fe6631d9d2a969c361214f2bc0eee6278d1d46bfc97d9a8a8d85 kernel-rt-debug-5.14.0-570.120.1.el9_6.x86_64.rpm SHA-2