This security update addresses three Linux kernel vulnerabilities: a high-severity (CVSS 7.8) dangling pointer issue in the CAN subsystem's `can_create()` function (CVE-2024-56603), a medium-severity (CVSS 5.5) reference counting flaw in the J1939 CAN protocol (CVE-2024-56645), and a high-severity (CVSS 7.1) issue where the SMB client could accept unauthorized userspace SPNEGO descriptions (CVE-2026-46243). The affected version ranges are extensive, spanning from kernel 2.6.24.1 up to versions before 5.10.258, 5.15.209, 6.1.175, 6.6.142, 6.12.92, 6.18.34, and 7.0.11, depending on the specific kernel branch. The fixed versions are provided per branch, for example, 5.10.258, 5.15.209, 6.1.175, 6.6.142, 6.12.92, 6.18.34, and 7.0.11 for CVE-2026-46243, with similar specific version targets for the other CVEs.
Red Hat Product Errata RHSA-2026:25908 - Security Advisory Issued: 2026-06-15 Updated: 2026-06-15 RHSA-2026:25908 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645) kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2334439 - CVE-2024-56603 kernel: net: af_can: do not leave a dangling sk pointer in can_create() BZ - 2334560 - CVE-2024-56645 kernel: can: j1939: j1939_session_new(): fix skb reference counting BZ - 2481486 - CVE-2026-46243 kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions CVEs CVE-2024-56603 CVE-2024-56645 CVE-2026-46243 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM kernel-6.12.0-55.79.1.el10_0.src.rpm SHA-256: cf98925ac83abd72ae8dece502c196a80cc6657abf54ffb542b7a826ffcbc647 x86_64 kernel-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 518509b12cd68acb65cf0313324212f26715bdb5deb65acecfb0a7b57b1435a6 kernel-abi-stablelists-6.12.0-55.79.1.el10_0.noarch.rpm SHA-256: a4c3a89b290412a72351e1e2c678372b8d6ae62a44b85d62ec744670dfefabd5 kernel-core-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 4288f89a3c5c00038aab33ce807037b3493bd99991a33f0bd5591b36a8cade20 kernel-debug-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 14b557acc140a72b9da2417376be743de8fa2b470ddb1ba379346c6ec2d6a77a kernel-debug-core-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: b646884157d9623d5dc61e6b72f5359df4d814f3a48778dd8a2accfafc4783de kernel-debug-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 25c7e76a692c2a5c4a09fe0e7426ed0097ad7fc4f2376a368a9eb50d9f7dbd61 kernel-debug-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 25c7e76a692c2a5c4a09fe0e7426ed0097ad7fc4f2376a368a9eb50d9f7dbd61 kernel-debug-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 25c7e76a692c2a5c4a09fe0e7426ed0097ad7fc4f2376a368a9eb50d9f7dbd61 kernel-debug-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 25c7e76a692c2a5c4a09fe0e7426ed0097ad7fc4f2376a368a9eb50d9f7dbd61 kernel-debug-devel-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: e0be80728470ca6d0f9a264a81723db4f9a4dd52c31d442915d97e44da12a548 kernel-debug-devel-matched-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 47d62471dc2f9e46ad049dc6c7b7adbd42852a2d8f35dca7dbf2dbdd9982decb kernel-debug-modules-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 86988f77c90131be2d617786b1b5128f1de8bd6f194e2426294f9887015f461b kernel-debug-modules-core-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 150cca8191f7a487c20e61e5ab0794aae0bdc8d19be4bb093185f133a4dd2094 kernel-debug-modules-extra-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 87ae2ff8954014273aa0796d6577a140162a60cf514581a5cfe0dd0e003b7815 kernel-debug-uki-virt-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 17553d9d3d6bec6c9736f53bff8c5b3e9047035db7fa898afa2b937ab24f933f kernel-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: d0611866b11d0899e2e731ffc5c65b94283c9b1928a2280d01e80263088bed8f kernel-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: d0611866b11d0899e2e731ffc5c65b94283c9b1928a2280d01e80263088bed8f kernel-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: d0611866b11d0899e2e731ffc5c65b94283c9b1928a2280d01e80263088bed8f kernel-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: d0611866b11d0899e2e731ffc5c65b94283c9b1928a2280d01e80263088bed8f kernel-debuginfo-common-x86_64-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: cf4357c942cfce5640a916700b5c9090e8fefa6389559be4bcb7a5ca2799b9ef kernel-debuginfo-common-x86_64-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: cf4357c942cfce5640a916700b5c9090e8fefa6389559be4bcb7a5ca2799b9ef kernel-debuginfo-common-x86_64-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: cf4357c942cfce5640a916700b5c9090e8fefa6389559be4bcb7a5ca2799b9ef kernel-debuginfo-common-x86_64-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: cf4357c942cfce5640a916700b5c9090e8fefa6389559be4bcb7a5ca2799b9ef kernel-devel-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: f1a26f2e1c52348c51ec4622e1cd58e19b9f540d2660ece3b456ccad5050e600 kernel-devel-matched-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 05f7d0be7c120694f2228ac64113431a246c59aa44e9876e02bbf4571112f811 kernel-doc-6.12.0-55.79.1.el10_0.noarch.rpm SHA-256: c8b3894c7ac851e40d1aa6f1205650d472d0a407e0d756c4574d780089c71847 kernel-headers-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 1535fe3f8eb250119c22bb97f16bb9c1d6cfabe3ad40605b3c372245ed79eb85 kernel-modules-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 80bb3c91867ef0270e7b6905b101e84b612df3541277453bb1724fc0c9fb9eaa kernel-modules-core-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 762f6bb2b2660741560020e8aa4997996dc010cb2093253e2645aafce98f442b kernel-modules-extra-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: c92e8b6c9b8e66f5eb53d8191abe22bc800b0cbe1aaaeb9b0f6209051c1a5fab kernel-rt-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 5602d939aa21403eea7c6d09b724483fdc64ce238bbe05c237069fa2b60e46e2 kernel-rt-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 5602d939aa21403eea7c6d09b724483fdc64ce238bbe05c237069fa2b60e46e2 kernel-rt-core-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 96d3f90b1e6d4bab2271d0b09ee180fc910f648305394e59478ab829214c96e2 kernel-rt-core-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 96d3f90b1e6d4bab2271d0b09ee180fc910f648305394e59478ab829214c96e2 kernel-rt-debug-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: e1aca846494df6ae4baafb02b1d6628f9f2fd43e005f14a9d0d477ffc0bcb28d kernel-rt-debug-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: e1aca846494df6ae4baafb02b1d6628f9f2fd43e005f14a9d0d477ffc0bcb28d kernel-rt-debug-core-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 71a16214f3fb5dff0791afe82f03f41ff4c453faa39453d022ae54ac90de4543 kernel-rt-debug-core-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 71a16214f3fb5dff0791afe82f03f41ff4c453faa39453d022ae54ac90de4543 kernel-rt-debug-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 9174efb97de66bd96de4d6086d257b0250c7e26cc07a6d964fbcd5110ed1ea33 kernel-rt-debug-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 9174efb97de66bd96de4d6086d257b0250c7e26cc07a6d964fbcd5110ed1ea33 kernel-rt-debug-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 9174efb97de66bd96de4d6086d257b0250c7e26cc07a6d964fbcd5110ed1ea33 kernel-rt-debug-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 9174efb97de66bd96de4d6086d257b0250c7e26cc07a6d964fbcd5110ed1ea33 kernel-rt-debug-devel-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 277ebd86577f5678e4e7369a0dd208225c5db02f5b8131bfc9d9d387909c7828 kernel-rt-debug-devel-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 277ebd86577f5678e4e7369a0dd208225c5db02f5b8131bfc9d9d387909c7828 kernel-rt-debug-kvm-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 6f81773fe89b319449da9f47986bbc4bcccb2359356501e1399844539714804a kernel-rt-debug-modules-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 630a88a8978bb7831f3efb1f043e5ab39e7a82de61fac8086bd68310536cb9a8 kernel-rt-debug-modules-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 630a88a8978bb7831f3efb1f043e5ab39e7a82de61fac8086bd68310536cb9a8 kernel-rt-debug-modules-core-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: a96577355dabe11e1c02a6216e10abcf423e6778e245c09bfd4fba1b66481073 kernel-rt-debug-modules-core-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: a96577355dabe11e1c02a6216e10abcf423e6778e245c09bfd4fba1b66481073 kernel-rt-debug-modules-extra-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: ce2b7325056a1cfc3954ca5e846fac59c9d8787edd1b1a40f19d313e91545eae kernel-rt-debug-modules-extra-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: ce2b7325056a1cfc3954ca5e846fac59c9d8787edd1b1a40f19d313e91545eae kernel-rt-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 1e28d1768623458273397992e0f0aa4148688fea520fd7a20108c8187adace1d kernel-rt-debuginfo-6.12.0-55.79.1.el10_0.x86_64.rpm SHA-256: 1e28d1768623458273397992e0f0aa4148688fea520f