Red Hat Product Errata RHSA-2026:34094 - Security Advisory Issued: 2026-07-01 Updated: 2026-07-01 RHSA-2026:34094 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648) kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691) kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191) kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125) kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414) kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852) kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176) kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244) Bug Fix(es) and Enhancement(s): iavf: during POD churn vlan filters may not be added for a vlan interface, spoofchk drops subsequent packets [rhel-9.6.z] (JIRA:RHEL-172991) [rhel-9] WARNING: possible recursive locking detected - vmd_enable_domain+0x757/0x910 [rhel-9.6.z] (JIRA:RHEL-174469) RHEL9.4 - s390/mm: Add missing secure storage access fixups [rhel-9.6.z] (JIRA:RHEL-183316) drm/mgag200: 300 ms busy loop [rhel-9.6.z] (JIRA:RHEL-150177) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2338814 - CVE-2025-21648 kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX BZ - 2344687 - CVE-2025-21691 kernel: cachestat: fix page cache statistics permission checking BZ - 2439947 - CVE-2026-23191 kernel: ALSA: aloop: Fix racy access at PCM trigger BZ - 2461503 - CVE-2026-31669 kernel: mptcp: fix slab-use-after-free in __inet_lookup_established BZ - 2464369 - CVE-2026-43027 kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup BZ - 2467144 - CVE-2026-43128 kernel: RDMA/umem: Fix double dma_buf_unpin in failure path BZ - 2467228 - CVE-2026-43198 kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() BZ - 2467234 - CVE-2026-43125 kernel: dlm: validate length in dlm_search_rsb_tree BZ - 2468124 - CVE-2026-43329 kernel: netfilter: flowtable: strictly check for maximum number of actions BZ - 2468155 - CVE-2026-43414 kernel: scsi: qla2xxx: Completely fix fcport double free BZ - 2480457 - CVE-2026-43501 kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows BZ - 2481980 - CVE-2026-46090 kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop BZ - 2482166 - CVE-2026-45852 kernel: RDMA/rxe: Fix double free in rxe_srq_from_init BZ - 2482532 - CVE-2026-46181 kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() BZ - 2482564 - CVE-2026-46227 kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL BZ - 2482594 - CVE-2026-46176 kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() BZ - 2482634 - CVE-2026-46173 kernel: exit: prevent preemption of oopsing TASK_DEAD task BZ - 2484451 - CVE-2026-46244 kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync CVEs CVE-2025-21648 CVE-2025-21691 CVE-2026-23191 CVE-2026-31669 CVE-2026-43027 CVE-2026-43125 CVE-2026-43128 CVE-2026-43198 CVE-2026-43329 CVE-2026-43414 CVE-2026-43501 CVE-2026-45852 CVE-2026-46090 CVE-2026-46173 CVE-2026-46176 CVE-2026-46181 CVE-2026-46227 CVE-2026-46244 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM kernel-5.14.0-570.125.1.el9_6.src.rpm SHA-256: 99381c0397f9e1581d0b8c222e174e2f52b3d97aed0a0591059fd61ec0183c74 x86_64 kernel-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: 9a063bd10bae921920ab9592f5de0fdfef30014c2da75f74a93dee12b52a0025 kernel-abi-stablelists-5.14.0-570.125.1.el9_6.noarch.rpm SHA-256: a6f17409dbe1c06b8853f6e5f03c479bd3b6e06af134793e8fb527cd482daa15 kernel-core-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: b942f1f410a7ac72ec50fa004fe2ff0eaefb0586ce28b386e1b3aa7a91789bac kernel-debug-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: 0865541782cd864a251c2d99281ec160dd45a1355a8f7961318fb1cf113a6912 kernel-debug-core-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: 38d35f90f7bfe638cc17aceea1adaf752b090b84868264d00209eaebdf47c53c kernel-debug-debuginfo-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: ffc990f74bea7ab745f10d1cc9001aebd932fd6282c6b48afea832559913451a kernel-debug-debuginfo-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: ffc990f74bea7ab745f10d1cc9001aebd932fd6282c6b48afea832559913451a kernel-debug-debuginfo-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: ffc990f74bea7ab745f10d1cc9001aebd932fd6282c6b48afea832559913451a kernel-debug-debuginfo-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: ffc990f74bea7ab745f10d1cc9001aebd932fd6282c6b48afea832559913451a kernel-debug-devel-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: 34d40487d52324322a996a960df3c7ea6e51b97cf4d10f17fbd44a91e9270e85 kernel-debug-devel-matched-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: 0a259115ccae4d6589f2e3a99acee970ed305585f7ee784d523107e8b4c371e5 kernel-debug-modules-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: 168f057188751f93d1dcd1ee9c0287580d73a8e799a6b82c7cf9115d05b9a39e kernel-debug-modules-core-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: cad3c8c92c4ec1ab4d4688ba1ccd5ed50024b6a92c50d1eceb7d91b7483aea67 kernel-debug-modules-extra-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: fcd3626e50e1c7f81fdf0adf7fadfceff6041a985cdaefe57fcfb8f06aaa6a1a kernel-debug-uki-virt-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: ab905a69a7da7d562efdbb4d3985b6d8c88e0e5924038ccaa655c5529244dd0e kernel-debuginfo-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: 4cd8a0a37d61520c04cfb60a028b7b08354aeab6f1fbf9a33ffba1751fba9def kernel-debuginfo-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: 4cd8a0a37d61520c04cfb60a028b7b08354aeab6f1fbf9a33ffba1751fba9def kernel-debuginfo-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: 4cd8a0a37d61520c04cfb60a028b7b08354aeab6f1fbf9a33ffba1751fba9def kernel-debuginfo-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: 4cd8a0a37d61520c04cfb60a028b7b08354aeab6f1fbf9a33ffba1751fba9def kernel-debuginfo-common-x86_64-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: d709ce66e44925f933a8eaca1f0e086e5e4e6c7c40e7474a677bca6d1afcef56 kernel-debuginfo-common-x86_64-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: d709ce66e44925f933a8eaca1f0e086e5e4e6c7c40e7474a677bca6d1afcef56 kernel-debuginfo-common-x86_64-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: d709ce66e44925f933a8eaca1f0e086e5e4e6c7c40e7474a677bca6d1afcef56 kernel-debuginfo-common-x86_64-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: d709ce66e44925f933a8eaca1f0e086e5e4e6c7c40e7474a677bca6d1afcef56 kernel-devel-5.14.0-570.125.1.el9_6.x86_64.rpm SHA-256: d89f376ba2777f4f304dfff2dbbfe211713e98de681b8c21cbfa158461abeb0c kernel-devel-matched-