This Red Hat security update addresses two high-severity kernel vulnerabilities (CVE-2026-46331, CVSS 7.8, and CVE-2026-46243, CVSS 7.1) affecting the Linux kernel's net/sched and SMB client subsystems, which could be exploited for privilege escalation or other impacts. The vulnerabilities affect a wide range of kernel versions, specifically from 2.6.24.1 through 5.10.257, 5.11 through 5.15.208, 5.16 through 6.1.174, 6.2 through 6.6.141, and 6.7 through 6.12.91. The fix is provided via kernel live patches (kpatch) for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, targeting the specific kernel version 5.14.0-284.
Red Hat Product Errata RHSA-2026:33221 - Security Advisory Issued: 2026-06-29 Updated: 2026-06-29 RHSA-2026:33221 - Security Advisory Overview Updated Packages Synopsis Important: kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-284.117.1.el9_2. Security Fix(es): kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Fixes BZ - 2479492 - CVE-2026-46331 kernel: net/sched: act_pedit: extend the writable skb range per key BZ - 2481486 - CVE-2026-46243 kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions CVEs CVE-2026-46243 CVE-2026-46331 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM kpatch-patch-5_14_0-284_117_1-1-15.el9_2.src.rpm SHA-256: 7b2a06bb4bfd1b08ef6b1538a775433e9f802ddd3fa30e31dcbe52b783d06901 kpatch-patch-5_14_0-284_134_1-1-9.el9_2.src.rpm SHA-256: 569f8012dfc6105f79b8feec19749f0e6024b33967e6c9e2143f89c3c9b8558f kpatch-patch-5_14_0-284_148_1-1-7.el9_2.src.rpm SHA-256: 829716bb2160f38e50c23a456537f640ac406555712a29669c45e9c47cbf24a2 kpatch-patch-5_14_0-284_158_1-1-5.el9_2.src.rpm SHA-256: ff8549e02edb2d50c299bb4a0e8c9c7310223f19e5ce08fe2ed76ed1f72cb78f kpatch-patch-5_14_0-284_172_1-1-2.el9_2.src.rpm SHA-256: 116f798abe3ae7615790c174135b9400b612862afd1d58f0d756b8f4946e7569 x86_64 kpatch-patch-5_14_0-284_117_1-1-15.el9_2.x86_64.rpm SHA-256: c825a0794b7eba93d743d068a14ee3db79de5440489f4de5e4fba4965a5d92df kpatch-patch-5_14_0-284_117_1-debuginfo-1-15.el9_2.x86_64.rpm SHA-256: c583a345b16a9a2bfbb73eede70bf88b915f70c8a21fc29b5327901ea8d41d6d kpatch-patch-5_14_0-284_117_1-debugsource-1-15.el9_2.x86_64.rpm SHA-256: d7cdf7fa113a0dfdbf21614832f0f2e64338fe9218c07e59a306d06198ea7c14 kpatch-patch-5_14_0-284_134_1-1-9.el9_2.x86_64.rpm SHA-256: 48fc902c5af4f52146dc3f8e487294228d5997d41f07174f40441013047249c6 kpatch-patch-5_14_0-284_134_1-debuginfo-1-9.el9_2.x86_64.rpm SHA-256: 4c55803707be7d2e51b04073a0e6f4c409b164793e5d5627ae3bab6735cf35ed kpatch-patch-5_14_0-284_134_1-debugsource-1-9.el9_2.x86_64.rpm SHA-256: 8dd777ba906a5f7bcd3a724d8a3839c8ed6d5174fe70d5b8d7f1fe8d7edc3f79 kpatch-patch-5_14_0-284_148_1-1-7.el9_2.x86_64.rpm SHA-256: 82eceaf4f4285d5b057ac491d5cdaa9d8a200b33fd27b6441ed1117bb1363fec kpatch-patch-5_14_0-284_148_1-debuginfo-1-7.el9_2.x86_64.rpm SHA-256: d49771779b250a2d5bf2a40d6340483fadc57909b010e72a0c5a9aa55e5ff514 kpatch-patch-5_14_0-284_148_1-debugsource-1-7.el9_2.x86_64.rpm SHA-256: 47deccca8c23aaed361079ff58d2f61c7cbd0b4331be013960a4d06ef649a723 kpatch-patch-5_14_0-284_158_1-1-5.el9_2.x86_64.rpm SHA-256: 2675013f4df57dd9fe7ab5f8069b47079cfe27eae29fb34223e1cf3f62402a1b kpatch-patch-5_14_0-284_158_1-debuginfo-1-5.el9_2.x86_64.rpm SHA-256: a5993aec15f21233fab96d69373599bdaa60a50b4f8ac9a56c0f2e4aa3424488 kpatch-patch-5_14_0-284_158_1-debugsource-1-5.el9_2.x86_64.rpm SHA-256: c30921ca5a8f2f44b52ff9b4769c4fa6d5d5059ec10316997cbfaa80ca086748 kpatch-patch-5_14_0-284_172_1-1-2.el9_2.x86_64.rpm SHA-256: ef1674543ec1641ad89b70ffc7f0c2f1764294a39adfc56cf87db563bd5c0639 kpatch-patch-5_14_0-284_172_1-debuginfo-1-2.el9_2.x86_64.rpm SHA-256: 81761d6822553bdf3d330e5a0037b4f5de9e7ff2b65174545b1e5a28292d462f kpatch-patch-5_14_0-284_172_1-debugsource-1-2.el9_2.x86_64.rpm SHA-256: faa2214be866861e74650f3a0110a38f53a3875c972b855427c32bba26c1fb5c Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM kpatch-patch-5_14_0-284_117_1-1-15.el9_2.src.rpm SHA-256: 7b2a06bb4bfd1b08ef6b1538a775433e9f802ddd3fa30e31dcbe52b783d06901 kpatch-patch-5_14_0-284_134_1-1-9.el9_2.src.rpm SHA-256: 569f8012dfc6105f79b8feec19749f0e6024b33967e6c9e2143f89c3c9b8558f kpatch-patch-5_14_0-284_148_1-1-7.el9_2.src.rpm SHA-256: 829716bb2160f38e50c23a456537f640ac406555712a29669c45e9c47cbf24a2 kpatch-patch-5_14_0-284_158_1-1-5.el9_2.src.rpm SHA-256: ff8549e02edb2d50c299bb4a0e8c9c7310223f19e5ce08fe2ed76ed1f72cb78f kpatch-patch-5_14_0-284_172_1-1-2.el9_2.src.rpm SHA-256: 116f798abe3ae7615790c174135b9400b612862afd1d58f0d756b8f4946e7569 ppc64le kpatch-patch-5_14_0-284_117_1-1-15.el9_2.ppc64le.rpm SHA-256: 4ca0cad9038cd4a882e7a67ed4a5a0a5ef31c47dcfba9426123f0dfcbbd77a69 kpatch-patch-5_14_0-284_117_1-debuginfo-1-15.el9_2.ppc64le.rpm SHA-256: c8d7e26ac016f0396aa8d3b0760b77bf703edc63bcc636097a2931a37f7a40b4 kpatch-patch-5_14_0-284_117_1-debugsource-1-15.el9_2.ppc64le.rpm SHA-256: f17d7a122590a19e5997687e5b1b0d4771141b46f7ac551118092b76489f232f kpatch-patch-5_14_0-284_134_1-1-9.el9_2.ppc64le.rpm SHA-256: 06f67689ada8f0e43d6a33d9b18e27724c259db6773e55af8418aad7c2069d7b kpatch-patch-5_14_0-284_134_1-debuginfo-1-9.el9_2.ppc64le.rpm SHA-256: 2f21f9509d4292929398c199d992dd37101aa06462079b16388a3d1073ae4161 kpatch-patch-5_14_0-284_134_1-debugsource-1-9.el9_2.ppc64le.rpm SHA-256: a84803b9e9dced9f2c556ac08c4815ee8ab9fd647568a9ae438f0aee912adbdd kpatch-patch-5_14_0-284_148_1-1-7.el9_2.ppc64le.rpm SHA-256: 6dcfa3e5d7bf8c9d979eb03dc67c7f33d1a1f944d428fe0286157c839153fb9a kpatch-patch-5_14_0-284_148_1-debuginfo-1-7.el9_2.ppc64le.rpm SHA-256: 108acc6a67e8b87f6354402436731f114e7222315b541bfdc1027571be8ba0a6 kpatch-patch-5_14_0-284_148_1-debugsource-1-7.el9_2.ppc64le.rpm SHA-256: 9f9f5d97a84c46da49ac0531044362d7e5c516dd09e4a61fe1728b9200a26eb9 kpatch-patch-5_14_0-284_158_1-1-5.el9_2.ppc64le.rpm SHA-256: 6e60d746b23c62dd22c2e60cb5d6aa03a8d6f163ce22f4ced2f7b2011fe58219 kpatch-patch-5_14_0-284_158_1-debuginfo-1-5.el9_2.ppc64le.rpm SHA-256: aa6d7c09b58197f69e9156b1677ac3afc69bcb45c64c5fa4f8b43c3af30e71b7 kpatch-patch-5_14_0-284_158_1-debugsource-1-5.el9_2.ppc64le.rpm SHA-256: 5f1ce42b2039966c9024175ef22684f6c113b6d6d9fc79c919c706892a9f13ee kpatch-patch-5_14_0-284_172_1-1-2.el9_2.ppc64le.rpm SHA-256: 7d39695892c79d2acd6ef3723074d6f9de1bbebd047e829fcd05aeb589ecc092 kpatch-patch-5_14_0-284_172_1-debuginfo-1-2.el9_2.ppc64le.rpm SHA-256: 71e6b5bf5469104e129fd65573bd4a3f34462df2d90477b137795bd3d8a18a6c kpatch-patch-5_14_0-284_172_1-debugsource-1-2.el9_2.ppc64le.rpm SHA-256: ed999cd928bcecc804abeaf46c83d6acce4346d3977dbed7de32c17cb04d6a86 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM kpatch-patch-5_14_0-284_117_1-1-15.el9_2.src.rpm SHA-256: 7b2a06bb4bfd1b08ef6b1538a775433e9f802ddd3fa30e31dcbe52b783d06901 kpatch-patch-5_14_0-284_134_1-1-9.el9_2.src.rpm SHA-256: 569f8012dfc6105f79b8feec19749f0e6024b33967e6c9e2143f89c3c9b8558f kpatch-patch-5_14_0-284_148_1-1-7.el9_2.src.rpm SHA-256: 829716bb2160f38e50c23a456537f640ac406555712a29669c45e9c47cbf24a2 kpatch-patch-5_14_0-284_158_1-1-5.el9_2.src.rpm SHA-256: ff8549e02edb2d50c299bb4a0e8c9c7310223f19e5ce08fe2ed76ed1f72cb78f kpatch-patch-5_14_0-284_172_1-1-2.el9_2.src.rpm SHA-256: 116f798abe3ae7615790c174135b9400b612862afd1d58f0d756b8f4946e7569 x86_64 kpatch-patch-5_14_0-284_117_1-1-15.el9_2.x86_64.rpm SHA-256: c825a0794b7eba93d743d068a14ee3db79de5440489f4de5e4fba4965a5d92df kpatch-patch-5_14_0-284_117_1-debuginfo-1-15.el9_2.x86_64.rpm SHA-256: c583a345b16a9a2bfbb73eede70bf88b915f70c8a21fc29b5327901ea8d41d6d kpatch-patch-5_14_0-284_117_1-debugsource-1-15.el9_2.x86_64.rpm SHA-256: d7cdf7fa113a0dfdbf21614832f0f2e64338fe9218c07e59a306d06198ea7c14 kpatch-patch-5_14_0-284_134_1-1-9.el9_2.x86_64.rpm SHA-256: 48fc902c5af4f52146dc3f8e487294228d5997d41f07174f40441013047249c6 kpatch-patch-5_14_0-284_134_1-debuginfo-1-9.el9_2.x86_64.rpm SHA-256: 4c55803707be7d2e51b04073a0e6f4c409b164793e5d5627ae3bab6735cf35ed kpatch-patch-5_14_0-284_134_1-debugsource-1-9.el9_2.x86_64.rpm SHA-256: 8dd777ba906a5f7bcd3a724d8a3839c8ed6d5174fe70d5b8d7f1fe8d7edc3f79 kpatch-patch-5_14_0-284_148_1-1-7.el9_2.x86_64.rpm SHA-256: 82eceaf4f4285d5b057ac491d5cdaa9d8a200b33fd27b6441ed1117bb1363fec kpatch-patch-5_14_0-284_148_1-debuginfo-1-7.el9_2.x86_64.rpm SHA-256: d49771779b250a2d5bf2a40d6340483fadc57909b010e72a0c5a9aa55e5ff514 kpatch-patch-5_14_0-284_148_1-debugsource-1-7.el9_2.x86_64.rpm SHA-256: 47deccca8c23aaed361079ff58d2f61c7cbd0b4331be013960a4d06ef649a723 kpatch-patch-5_14_0-284_158_1-1-5.el9_2.x86_64.rpm SHA-256: 2675013f4df57dd9fe7ab5f8069b47079cfe27eae29fb34223e1cf3f62402a1b kpatch-patch-5_14_0-284_158_1-debuginfo-1-5.el9_2.x86_64.rpm SHA-256: a5993aec15f21233fab96d69373599bdaa60a50b4f8ac9a56c0f2e4aa3424488 kpatc