Red Hat Product Errata RHSA-2026:26515 - Security Advisory Issued: 2026-06-17 Updated: 2026-06-17 RHSA-2026:26515 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170) kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135) kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158) kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089) kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2414506 - CVE-2025-40170 kernel: net: use dst_dev_rcu() in sk_setup_caps() BZ - 2414521 - CVE-2025-40135 kernel: ipv6: use RCU in ip6_xmit() BZ - 2414523 - CVE-2025-40158 kernel: ipv6: use RCU in ip6_output() BZ - 2424881 - CVE-2025-68366 kernel: nbd: defer config unlock in nbd_genl_connect BZ - 2424886 - CVE-2025-68724 kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id BZ - 2429104 - CVE-2025-71089 kernel: iommu: disable SVA when CONFIG_X86 is set BZ - 2429602 - CVE-2025-71116 kernel: libceph: make decode_pool() more resilient against corrupted osdmaps BZ - 2432389 - CVE-2026-22984 kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() BZ - 2432400 - CVE-2026-22990 kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() BZ - 2440630 - CVE-2026-23216 kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() BZ - 2451218 - CVE-2026-23392 kernel: netfilter: nf_tables: release flowtable after rcu grace period on error BZ - 2454810 - CVE-2026-23455 kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() BZ - 2461759 - CVE-2026-31685 kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets BZ - 2467005 - CVE-2026-43116 kernel: netfilter: ctnetlink: ensure safe access to master conntrack BZ - 2467064 - CVE-2026-43190 kernel: netfilter: xt_tcpmss: check remaining length before reading optlen BZ - 2467210 - CVE-2026-43158 kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks BZ - 2468091 - CVE-2026-43303 kernel: mm/page_alloc: clear page->private in free_pages_prepare() BZ - 2481486 - CVE-2026-46243 kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions BZ - 2482564 - CVE-2026-46227 kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL BZ - 2482608 - CVE-2026-46125 kernel: wifi: mac80211: remove station if connection prep fails CVEs CVE-2025-40135 CVE-2025-40158 CVE-2025-40170 CVE-2025-68366 CVE-2025-68724 CVE-2025-71089 CVE-2025-71116 CVE-2026-22984 CVE-2026-22990 CVE-2026-23216 CVE-2026-23392 CVE-2026-23455 CVE-2026-31685 CVE-2026-43116 CVE-2026-43158 CVE-2026-43190 CVE-2026-43303 CVE-2026-46125 CVE-2026-46227 CVE-2026-46243 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM kernel-5.14.0-284.176.1.el9_2.src.rpm SHA-256: d1335c4ec6de23055a11a41286dc76a567257cb2325626f4117c80b9d4805770 x86_64 bpftool-7.0.0-284.176.1.el9_2.x86_64.rpm SHA-256: 057586e363edb3e150e5b2f5fb82ec5988d6a05a61d1ef49dfd9b90759ccfad4 bpftool-debuginfo-7.0.0-284.176.1.el9_2.x86_64.rpm SHA-256: e563a705d1f956197c76c6304f9bcc422fb5d740fab0dd417c53e71a78294780 bpftool-debuginfo-7.0.0-284.176.1.el9_2.x86_64.rpm SHA-256: e563a705d1f956197c76c6304f9bcc422fb5d740fab0dd417c53e71a78294780 kernel-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: b0379a3e990e6264477696b937f0642f1a3c4534de6b430a644c2f90ad6ab1bd kernel-abi-stablelists-5.14.0-284.176.1.el9_2.noarch.rpm SHA-256: 6363e6ce64691a93cc4b81adf5b3108b6415f6b5e8e25bcc80ffdb800747ee63 kernel-core-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: b3d887f4b5d0b4b51ef6a0932eb4557f9cbbe3722adf13c284d70ca737a6dcf8 kernel-debug-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: fb16d528aa7ecce5f20670c05ddee0dc0716b9fe6cc1e5dbfcbed1d2d7f70c89 kernel-debug-core-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 9ddd1f11f80d8b179c7920c46a2483573d13a12d973d041cc5fb157dd11f29ce kernel-debug-debuginfo-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 26c4a8f6e06cf37677cecc1f0f03bfce024e05e7e2f9b37e0b18708c23b20f7c kernel-debug-debuginfo-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 26c4a8f6e06cf37677cecc1f0f03bfce024e05e7e2f9b37e0b18708c23b20f7c kernel-debug-devel-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: dfdd59d8bc3c23d652812ee33c9c1ffc70496bb093cc2ad849f89491d03a6cc6 kernel-debug-devel-matched-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: e288bb0f104fc8e22df409482d811f7a6b2552c5418252203e04eb07dbe1cff8 kernel-debug-modules-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: cf1b16c5e6a00872b9513f782c4d456a4f9558ceb929ee22041cb2c685edfcfc kernel-debug-modules-core-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 90a0b646218a8172b663ed2d48bdbbdaf6bac8da432ca6b2b5c1c32217296c08 kernel-debug-modules-extra-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: a8abe307644444e109163485f1da7dbb3abfd91bf34334bfd2580155b1f61470 kernel-debug-uki-virt-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: ef9f24d758b2af9f047b1cd292681a28f6a1cb9a33284fb8982d711e7ee51f5f kernel-debuginfo-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 312151033079c4567742937c35aa2859427bcf39c162bca1bdcc2f4f31b42893 kernel-debuginfo-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 312151033079c4567742937c35aa2859427bcf39c162bca1bdcc2f4f31b42893 kernel-debuginfo-common-x86_64-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 558c7198ee9b3822ef12ddab69eddf6b6d22041e9c28419d55d819506d0ad305 kernel-debuginfo-common-x86_64-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 558c7198ee9b3822ef12ddab69eddf6b6d22041e9c28419d55d819506d0ad305 kernel-devel-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 91e6d11deb12e4013728718d3f5d3793cce03ea7c6358155cb64cde09c804421 kernel-devel-matched-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 33e131bb559e82d1c28d5ff9cdf5f378c4c738af6b6f5e5eda8e5c0f4ac8d234 kernel-doc-5.14.0-284.176.1.el9_2.noarch.rpm SHA-256: b7b3368eb3a19fcbb37c67ea416eac328326435921f40405d3af7e6e9535f8d2 kernel-headers-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: d95fbbff9013c4b2f02ea3e10ae1b845378808f4ce45bf41a6a8eabc2fab2bd0 kernel-modules-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 18a08d8c5c754bb4a73bf560511d038263375bf848bab625ddea841a768e372b kernel-modules-core-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: e7f0f5484fff7e004942b5e8bab0d528f2482ae7e87589bffe6849e340f76c7b kernel-modules-extra-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: f88af6afa717ab5ce807d46a98ea018b6ed9f241d54d99ccd501446daae955af kernel-tools-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 1242a35abe49e1dcbbdb351ab21726a43187fbbccd944060788d306eef4eb761 kernel-tools-debuginfo-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 10af9362c3f112c11fa3b39e151beee1a9d61bef4ee67f3949a9d802503b970b kernel-tools-debuginfo-5.14.0-284.176.1.el9_2.x86_64.rpm SHA-256: 10af