Red Hat Product Errata RHSA-2026:27729 - Security Advisory Issued: 2026-06-22 Updated: 2026-06-22 RHSA-2026:27729 - Security Advisory Overview Updated Packages Synopsis Critical: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Critical Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) Bug Fix(es) and Enhancement(s): RHEL-124698 missed the last line of the backport (JIRA:RHEL-168608) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2448594 - CVE-2026-23243 kernel: Linux kernel: Denial of service and memory corruption in RDMA umad BZ - 2464351 - CVE-2026-43037 kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() BZ - 2467014 - CVE-2026-43110 kernel: wifi: brcmfmac: validate bsscfg indices in IF events BZ - 2467064 - CVE-2026-43190 kernel: netfilter: xt_tcpmss: check remaining length before reading optlen BZ - 2467210 - CVE-2026-43158 kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks BZ - 2481486 - CVE-2026-46243 kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions CVEs CVE-2026-23243 CVE-2026-43037 CVE-2026-43110 CVE-2026-43158 CVE-2026-43190 CVE-2026-46243 References https://access.redhat.com/security/updates/classification/#critical Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM kernel-3.10.0-1160.153.1.el7.src.rpm SHA-256: 716f76abf504e3d336f9719fbfae722fcf54c401a79d6ebb6c80299af354fe63 x86_64 bpftool-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: 5690f35466382ba6cecfa8ed0079f766dd8ca0712b5baf2962d32644319c6a72 bpftool-debuginfo-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: 8b6919e64b75fbf224bfcbd51d578eb5f9799833da007e05f21dcb363e226c90 bpftool-debuginfo-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: 8b6919e64b75fbf224bfcbd51d578eb5f9799833da007e05f21dcb363e226c90 kernel-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: 9ddccc15cb163949b5c7472d4c43fb4bfbed048bb4c587841fa2e0e861d6bab2 kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch.rpm SHA-256: 0a0d77656f2ee38857cb3aca541ae21206902094d7a86fe5cb0b10e0fd48cf1d kernel-debug-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: 7022c824213dedae4f4fa91d76a0c367e87829987c712adcc609fb289320c8fc kernel-debug-debuginfo-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: d74c329b157c2003780772e67d90342720c761499f1d39c810f0a76042233166 kernel-debug-debuginfo-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: d74c329b157c2003780772e67d90342720c761499f1d39c810f0a76042233166 kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: dd6567613f31154dea5a888d21fc597161d860117045fd7703570b20aa745c21 kernel-debuginfo-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: bfd73defdb8464a2fe6755db38eed2f988c4cf4597a7b554748bc89cfa185c76 kernel-debuginfo-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: bfd73defdb8464a2fe6755db38eed2f988c4cf4597a7b554748bc89cfa185c76 kernel-debuginfo-common-x86_64-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: ef46df6572e110bd52a73d412227c5a397d410068f8c5acd4edb933652d378e9 kernel-debuginfo-common-x86_64-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: ef46df6572e110bd52a73d412227c5a397d410068f8c5acd4edb933652d378e9 kernel-devel-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: afe3ad09fa1701fce6e0eb72e72f71ab0358156ddc7c0426ddcd05d18bc67d4a kernel-doc-3.10.0-1160.153.1.el7.noarch.rpm SHA-256: 88558ca0ddbbf7c1dedbe6354525d35ca28eddb0dda626b95003a2be1b72c9f0 kernel-headers-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: a5a9b6f656b646bb6779ec08df48cd68e53234e33182fd1b65ab21aa9890c532 kernel-tools-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: b90618a0a011e9a2d99a6d689fe9bcc22c7817f5e1c47a33c3c51159eaddf1fe kernel-tools-debuginfo-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: bb7ec69de03664b3c3cc062187da7326b50661a28278d314588ed9530696b48e kernel-tools-debuginfo-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: bb7ec69de03664b3c3cc062187da7326b50661a28278d314588ed9530696b48e kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: 8deaac0feb4bb9dbcbf483a69cacef3887dd181df1a163186bba93f4accaa04d kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: a0d479930fed80b9f396e611cfa31f5ded5b2264317daf7dd0d8c5c03fe0598e perf-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: 078611b95629496b089617715bc88e822e1755aa3948f9c6d904e35f3cfa66a3 perf-debuginfo-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: 82474122721829fb63636f783604203e10b36777dde542faedf272831ecfd5e8 perf-debuginfo-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: 82474122721829fb63636f783604203e10b36777dde542faedf272831ecfd5e8 python-perf-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: 9f8de5d596eb9984671ea66391ec0e0860364442cd2fcc7e9cb7b0ab56635c28 python-perf-debuginfo-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: 1437460a6da52aaf8b38623793c7476645880c4d07411c736db885e48a9c9d17 python-perf-debuginfo-3.10.0-1160.153.1.el7.x86_64.rpm SHA-256: 1437460a6da52aaf8b38623793c7476645880c4d07411c736db885e48a9c9d17 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM kernel-3.10.0-1160.153.1.el7.src.rpm SHA-256: 716f76abf504e3d336f9719fbfae722fcf54c401a79d6ebb6c80299af354fe63 s390x bpftool-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: ad7838477b0d9ba01a55b597594fb253abfd9d4c54f668b9d89b65648a7dbaf4 bpftool-debuginfo-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: bc14d10c30925f1c76fcea093fdf002d7f2a7eaad6496aa322c52be2cc7b4c74 kernel-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: 6ead52a1d66a8736ea90199ac069ec8fadd4f0ca89d32e02b49fc91326416bf4 kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch.rpm SHA-256: 0a0d77656f2ee38857cb3aca541ae21206902094d7a86fe5cb0b10e0fd48cf1d kernel-debug-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: 894d4a9d5373f0d99509738c7a93640efd32ae94ea315a8262c229ff95afba63 kernel-debug-debuginfo-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: 22fa5f5dab7095902bc8df916f4aca0687815cf2e9d2217570c9cb2aab15e521 kernel-debug-devel-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: fd1958fd3b7c7846a663e8d3627874d0f27459da469dec0dea62a0368399a176 kernel-debuginfo-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: eebf1c72fe84097aef0ea0eb55c72b0da1b78ff7aa4284f731d434006821e8c6 kernel-debuginfo-common-s390x-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: 19aa14d6f5a29eb5945045931de57f3f0d69b2695d3e00eb80162476eca22448 kernel-devel-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: 5485de71e738bf613ea1e6328084d3407aac289c8e41c2099ca65190684a7adf kernel-doc-3.10.0-1160.153.1.el7.noarch.rpm SHA-256: 88558ca0ddbbf7c1dedbe6354525d35ca28eddb0dda626b95003a2be1b72c9f0 kernel-headers-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: b82758a1f1ee3956b4a09ba95e70abee39acadf35ad7693c832400978c2c110a kernel-kdump-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: 832857d79a797e120fd10e3f81d7715c35c881edabd7a0924f2c8c8261d7bf3e kernel-kdump-debuginfo-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: 82dd613211752555f8395cf574234aca7ca5eea3e9ef3cc0f1092294694b4c1c kernel-kdump-devel-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: 5eead76e226eed3acafda38c5d37f62d4b2901a338fe0a8349fdd55fd205d20d perf-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: f7daddeb5e52df5706cc0d4e3f1ec8bcacb912b20e0d532b78e6b31975dceb5b perf-debuginfo-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: 690cf299b21ff25443ae936d6dbc78037e2ecb36aebc78bae51eb5228b0ba496 python-perf-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: 31c2677f12b48ce9cc9fbe606d47ade23f32adcb6603d8029e514c0a4f26872b python-perf-debuginfo-3.10.0-1160.153.1.el7.s390x.rpm SHA-256: db2e28b817bf2618e8e4396b83443166c7b5b4258d54c6d5b54b0b19dc7e8764 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM kernel-3.10.0-1160.153.1.el7.src.rpm SHA-256: 716f76abf504e3d336f9719fbfae722fcf54c401a79d6ebb6c80299af354fe63 ppc64 bpftool-3.10.0-1160.153.1.el7.ppc64.rpm SHA-256: 567a66431d5a385113f7561736f4f632ab3322498906bc7771a4ebda7db4a88c bpftool-debuginfo-3.10.0-1160.153.1.el7.ppc64.rpm SHA-256: b5911e7ce39983c9b9b9795f4a6944914f3da08aa581c8d651cf7743795d5946 bpftool-debuginfo-3.10.0-1160.153.1.el7.ppc64.rpm SHA-256: b5911e7ce39983c9b9b9795f4a6944914f3da08aa581c8d651cf7743795d5946 kernel-3.10.0-1160.153.1.el7.ppc64.rpm SHA-256: 05b329eb5a129b35bc60e93a21887112aaee8f98860659213d8a79f47bc2344c kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch.rpm SHA-256: 0a0d77656f2ee38857cb3aca541