Red Hat Product Errata RHSA-2026:25533 - Security Advisory Issued: 2026-06-12 Updated: 2026-06-12 RHSA-2026:25533 - Security Advisory Overview Updated Packages Synopsis Critical: kernel security update Type/Severity Security Advisory: Critical Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On and Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: nvme: avoid double free special payload (CVE-2024-41073) kernel: sctp: fix a potential overflow in sctp_ifwdtsn_skip (CVE-2023-53372) kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170) kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135) kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158) kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089) kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001) kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64 Red Hat Enterprise Linux Server - AUS 8.6 x86_64 Fixes BZ - 2301637 - CVE-2024-41073 kernel: nvme: avoid double free special payload BZ - 2396405 - CVE-2023-53372 kernel: sctp: fix a potential overflow in sctp_ifwdtsn_skip BZ - 2414506 - CVE-2025-40170 kernel: net: use dst_dev_rcu() in sk_setup_caps() BZ - 2414521 - CVE-2025-40135 kernel: ipv6: use RCU in ip6_xmit() BZ - 2414523 - CVE-2025-40158 kernel: ipv6: use RCU in ip6_output() BZ - 2424881 - CVE-2025-68366 kernel: nbd: defer config unlock in nbd_genl_connect BZ - 2424886 - CVE-2025-68724 kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id BZ - 2429104 - CVE-2025-71089 kernel: iommu: disable SVA when CONFIG_X86 is set BZ - 2432664 - CVE-2026-23001 kernel: macvlan: fix possible UAF in macvlan_forward_source() BZ - 2440630 - CVE-2026-23216 kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() BZ - 2461107 - CVE-2026-31532 kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() BZ - 2461759 - CVE-2026-31685 kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets BZ - 2464351 - CVE-2026-43037 kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() BZ - 2464397 - CVE-2026-43038 kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() BZ - 2467014 - CVE-2026-43110 kernel: wifi: brcmfmac: validate bsscfg indices in IF events BZ - 2467064 - CVE-2026-43190 kernel: netfilter: xt_tcpmss: check remaining length before reading optlen CVEs CVE-2023-53372 CVE-2024-41073 CVE-2025-40135 CVE-2025-40158 CVE-2025-40170 CVE-2025-68366 CVE-2025-68724 CVE-2025-71089 CVE-2026-23001 CVE-2026-23216 CVE-2026-31532 CVE-2026-31685 CVE-2026-43037 CVE-2026-43038 CVE-2026-43110 CVE-2026-43190 References https://access.redhat.com/security/updates/classification/#critical Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 SRPM kernel-4.18.0-372.195.1.el8_6.src.rpm SHA-256: 926aa318425742d6189c584751f5a5657cb5a92dc3f467ad13615c86fa705853 x86_64 bpftool-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: a09d603b4974af54f84071fb17bb87c8b20e5fe85a0708722aa5c4742f56473e bpftool-debuginfo-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: efebde9dbfecfeba205acbc05c3ecd5c71aae2f47f7572a50c0ed64d34f8d0ad kernel-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 514fb90c896a0bde38de382e72c1b76fc9cdada1dfb372083c2094ea9be67d76 kernel-abi-stablelists-4.18.0-372.195.1.el8_6.noarch.rpm SHA-256: 6ae3afe68f1688a92800f012da087caa07e523ca5f1c0e23c165ac830d96ec14 kernel-core-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: eeac85d93bea6ecc056efe05bf25d8e85ac37bbfe0fd2b23331274101993cee3 kernel-cross-headers-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 7cc4901101c13427decaaf160cce10a45caf31e62dac1fc584b0e33836f25d84 kernel-debug-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 1574a2c5e5371293c1b1da430a0db364ca3349ef51343edc10ffe6c4ef19e9a0 kernel-debug-core-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 0acafca1fac053a8a8fda80580e02165bff01ac3056e46908bb570c0742ead64 kernel-debug-debuginfo-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 5820bc8de7e876efac3527a8a31de19637dc3769bfb3a4bbadb033337e9377c4 kernel-debug-devel-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 3769018eef8123ebe078026797a977584964895afe8369fd416806843422318d kernel-debug-modules-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 022bb276cf162698ef0acb2dff58d9a41386d421b1261e5498430cb5c41acd9c kernel-debug-modules-extra-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 9d6b39e6f695b0361749704ab20067b942fe6a226d915def31c23769540dab2a kernel-debuginfo-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 970aaa787819a35298f422e5f1dda372bb417c0643076d1a2dd5e0e1ba072499 kernel-debuginfo-common-x86_64-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 9d419f698195badb4a59fc76704b054d8e4b3a620ee6e5637ee4ff4c31528bc4 kernel-devel-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: a812834b3d9ffb761390fd64b7e3957b7d79cf5c5bd7192ed3842b4005fc032a kernel-doc-4.18.0-372.195.1.el8_6.noarch.rpm SHA-256: 81ab472aaa38711f2b7d95ba064da5b11cf109a961273471a02728ef65b735ea kernel-headers-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 063116a5ca62a2ebe808def73887bcdfd1784c7152214af7c07dcf553974a5ba kernel-modules-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 6793a8246fcd484d49ea4664ee106bc1356752c8bb33cdb0483a2c2bd5785213 kernel-modules-extra-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 8fdeb6fea7aa12d56aa3f6c9d4b0351f44d4103c1eaf01ec538b3d36f9878a9a kernel-tools-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 73eb648caf328a9a72d29086809e804408e725201b3a82cd5476b23ee155ddf6 kernel-tools-debuginfo-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: cf0e4871e6d7116ee86008957a7dc3aa854685353f8cdd357c49b3c5210eb5e6 kernel-tools-libs-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: a1b4c72484f5954ef11c673a778f710b279c5ddcbbe02e9ad6e552bf5a2f5083 perf-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: ae5bb143d3afdb6345628135f2e29bd6d2fa33289529ff1c607f2aa2ee28135d perf-debuginfo-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: a1dad95130c2251ca6f208a29e88431be94e5e4c0a23bbb3337cc00ed12e0d76 python3-perf-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 724d73370346d7394c4cb3848417552ac130030d034ffea2f456cb9ac7e5ffb3 python3-perf-debuginfo-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: bd623e8cb25cd1900267f372ec5a56874a0aecf392e535f569f62e66c204e0a9 Red Hat Enterprise Linux Server - AUS 8.6 SRPM kernel-4.18.0-372.195.1.el8_6.src.rpm SHA-256: 926aa318425742d6189c584751f5a5657cb5a92dc3f467ad13615c86fa705853 x86_64 bpftool-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: a09d603b4974af54f84071fb17bb87c8b20e5fe85a0708722aa5c4742f56473e bpftool-debuginfo-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: efebde9dbfecfeba205acbc05c3ecd5c71aae2f47f7572a50c0ed64d34f8d0ad kernel-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 514fb90c896a0bde38de382e72c1b76fc9cdada1dfb372083c2094ea9be67d76 kernel-abi-stablelists-4.18.0-372.195.1.el8_6.noarch.rpm SHA-256: 6ae3afe68f1688a92800f012da087caa07e523ca5f1c0e23c165ac830d96ec14 kernel-core-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: eeac85d93bea6ecc056efe05bf25d8e85ac37bbfe0fd2b23331274101993cee3 kernel-cross-headers-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 7cc4901101c13427decaaf160cce10a45caf31e62dac1fc584b0e33836f25d84 kernel-debug-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 1574a2c5e5371293c1b1da430a0db364ca3349ef51343edc10ffe6c4ef19e9a0 kernel-debug-core-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 0acafca1fac053a8a8fda80580e02165bff01ac3056e46908bb570c0742ead64 kernel-debug-debuginfo-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 5820bc8de7e876efac3527a8a31de19637dc3769bfb3a4bbadb033337e9377c4 kernel-debug-devel-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 3769018eef8123ebe078026797a977584964895afe8369fd416806843422318d kernel-debug-modules-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 022bb276cf162698ef0acb2dff58d9a41386d421b1261e5498430cb5c41acd9c kernel-debug-modules-extra-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 9d6b39e6f695b0361749704ab20067b942fe6a226d915def31c23769540dab2a kernel-debuginfo-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 970aaa787819a35298f422e5f1dda372bb417c0643076d1a2dd5e0e1ba072499 kernel-debuginfo-common-x86_64-4.18.0-372.195.1.el8_6.x86_64.rpm SHA-256: 9d419f698195badb4a59fc76704b054d8e4b3a620ee6e5637ee4ff4c31528bc4 kernel-devel-4.18.0-372.195.1.el8_6.x86_