Red Hat Product Errata RHSA-2026:27708 - Security Advisory Issued: 2026-06-22 Updated: 2026-06-22 RHSA-2026:27708 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064) kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168) kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898) kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166) Bug Fix(es) and Enhancement(s): [RHEL-9] Performance impact of CVE-2025-38085 [rhel-9.6.z] (JIRA:RHEL-161145) libceph: CEPH_CRYPTO_AES256KRB5 (--key-type aes256k) support [rhel-9.6.z] (JIRA:RHEL-168926) [ice] 3 of 4 ports "Failed to set LAN Tx queue context, error: -22" [rhel-9.6.z] (JIRA:RHEL-175439) Kernel panic while shutting down ice driver due to use-after-free [rhel-9.6.z] (JIRA:RHEL-177524) rbd: eliminate a race in lock_dwork draining on unmap [rhel-9.6.z] (JIRA:RHEL-183129) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2406747 - CVE-2025-40064 kernel: smc: Fix use-after-free in __pnet_find_base_ndev() BZ - 2414482 - CVE-2025-40168 kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() BZ - 2439852 - CVE-2026-23136 kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state BZ - 2467005 - CVE-2026-43116 kernel: netfilter: ctnetlink: ensure safe access to master conntrack BZ - 2467210 - CVE-2026-43158 kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks BZ - 2468091 - CVE-2026-43303 kernel: mm/page_alloc: clear page->private in free_pages_prepare() BZ - 2479492 - CVE-2026-46331 kernel: net/sched: act_pedit: extend the writable skb range per key BZ - 2479832 - CVE-2026-46323 kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs BZ - 2481486 - CVE-2026-46243 kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions BZ - 2482031 - CVE-2026-45898 kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list BZ - 2482608 - CVE-2026-46125 kernel: wifi: mac80211: remove station if connection prep fails BZ - 2482645 - CVE-2026-46166 kernel: wifi: mac80211: use safe list iteration in radar detect work CVEs CVE-2025-40064 CVE-2025-40168 CVE-2026-23136 CVE-2026-43116 CVE-2026-43158 CVE-2026-43303 CVE-2026-45898 CVE-2026-46125 CVE-2026-46166 CVE-2026-46243 CVE-2026-46323 CVE-2026-46331 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM kernel-5.14.0-570.123.1.el9_6.src.rpm SHA-256: 17c0ceeed9dfa73d629e3bcef7b1c3ce73c6ef794492a5e4cf167ad960208c59 x86_64 kernel-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: e7f0e9a046265c76a00c51eee0308ad90870f73d18a4e016ddb325e4d5480496 kernel-abi-stablelists-5.14.0-570.123.1.el9_6.noarch.rpm SHA-256: 58ac8d543439e6706f4eed6826c3982a1a73fcb69f0ce8643b13cb0a1e6b6de0 kernel-core-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 02b0575cee3fe853b9e3a0dda08ba9388eb0aa7b041b03eba9626626803076f6 kernel-debug-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: a962b4dc6dbc0538f384ef9bbfd9710c7d39990812123391e9de1296b31cbb4e kernel-debug-core-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: bf88dc82a1dc2aa2facd4e9d95b9ce3099875b05e3c16a0375cb51c596554083 kernel-debug-debuginfo-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 13b6f58140e937fa72745eb13df9f33139e948fdb2e873862d1919b5bd259df6 kernel-debug-debuginfo-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 13b6f58140e937fa72745eb13df9f33139e948fdb2e873862d1919b5bd259df6 kernel-debug-debuginfo-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 13b6f58140e937fa72745eb13df9f33139e948fdb2e873862d1919b5bd259df6 kernel-debug-debuginfo-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 13b6f58140e937fa72745eb13df9f33139e948fdb2e873862d1919b5bd259df6 kernel-debug-devel-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 3e88949b825ceea3f3f77463f9cfe74d861347d6a652e18c4d79ac04ca28eee4 kernel-debug-devel-matched-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 80c9de5cb42181a1c9f0720b26272513f3430452c6057ca19735c97aa5bfb282 kernel-debug-modules-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: fbd16f3ce391ef73512342e4e4f5b3aa431b9014cb565f330937133f7b1a0326 kernel-debug-modules-core-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: be282ee9ff4f5202be95b3bc3e0be25d865ae56ee223664a2cc211f446dc83e8 kernel-debug-modules-extra-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 5c8fd5d2020e2ac85d40d73cc899c3945f39d3bbd25dc330a16c25a73bdec50f kernel-debug-uki-virt-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 984980c303dccf0cec0c645fded0f16e215f77955afedfca034c310a875145e3 kernel-debuginfo-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 69369acae3eae84dcde45d50a23acd115f411582e3ea17895d0b419ca818eef4 kernel-debuginfo-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 69369acae3eae84dcde45d50a23acd115f411582e3ea17895d0b419ca818eef4 kernel-debuginfo-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 69369acae3eae84dcde45d50a23acd115f411582e3ea17895d0b419ca818eef4 kernel-debuginfo-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 69369acae3eae84dcde45d50a23acd115f411582e3ea17895d0b419ca818eef4 kernel-debuginfo-common-x86_64-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 3d6d9c57a0242c4375d99d96c7cb82f7d84328fe531c84ccef821c8e7fcbc319 kernel-debuginfo-common-x86_64-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 3d6d9c57a0242c4375d99d96c7cb82f7d84328fe531c84ccef821c8e7fcbc319 kernel-debuginfo-common-x86_64-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 3d6d9c57a0242c4375d99d96c7cb82f7d84328fe531c84ccef821c8e7fcbc319 kernel-debuginfo-common-x86_64-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 3d6d9c57a0242c4375d99d96c7cb82f7d84328fe531c84ccef821c8e7fcbc319 kernel-devel-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: a16feb71bddf5104775be4c4dc3f302c6e65326bf333f91de0677a55e966749a kernel-devel-matched-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 608bed169cc96afb951f16858d0acc39d4a001d8ab1474bf04a418699000b2da kernel-doc-5.14.0-570.123.1.el9_6.noarch.rpm SHA-256: daaf9c8c77068b5ecdd06215db2aaee67f2abf4932a783509527779b8a36ed51 kernel-headers-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 56d05e4d6de1722b9e94476ad494a3baabd9d778898a83d39e1e012ef455e87f kernel-modules-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: d2744066ad4c4102ed4cfb45b1f944ab4ff8e842e324c89d794df0fbe3c90750 kernel-modules-core-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: 8ad64126b35ae9a04719e0cdafef76e0df037ef69d687ee55faad7ca1b4adcf9 kernel-modules-extra-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: dffa96d55919efa5d3b25a49d1157ce330452cdeb834dd2168dfffa9af39ede8 kernel-rt-5.14.0-570.123.1.el9_6.x86_64.rpm SHA-256: cc1bdc5fc329f1e10a3937f19bc157cffbc8ed630220bc51b3e18d8b73e0b0c4 kernel-rt-5.14.0-570.123.1.el9_6.x86_64.rpm SH