This Red Hat kernel security update addresses multiple vulnerabilities, including a critical slab-use-after-free in MPTCP (CVE-2026-31669, CVSS 9.8) and several high-severity flaws in RDMA, ALSA, netfilter, and other subsystems. The vulnerabilities affect a wide range of Linux kernel versions, with specific affected ranges provided per CVE in the NVD data, such as kernel versions 5.12.1 through 5.15.202 for CVE-2026-43279. The fix is delivered via updated kernel packages for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, and a system reboot is required for the update to take effect.
Red Hat Product Errata RHSA-2026:34095 - Security Advisory Issued: 2026-07-01 Updated: 2026-07-01 RHSA-2026:34095 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125) kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) Bug Fix(es) and Enhancement(s): [rhel-9] WARNING: possible recursive locking detected - vmd_enable_domain+0x757/0x910 (JIRA:RHEL-174467) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2461503 - CVE-2026-31669 kernel: mptcp: fix slab-use-after-free in __inet_lookup_established BZ - 2467144 - CVE-2026-43128 kernel: RDMA/umem: Fix double dma_buf_unpin in failure path BZ - 2467215 - CVE-2026-43279 kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing BZ - 2467234 - CVE-2026-43125 kernel: dlm: validate length in dlm_search_rsb_tree BZ - 2468124 - CVE-2026-43329 kernel: netfilter: flowtable: strictly check for maximum number of actions BZ - 2480457 - CVE-2026-43501 kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows BZ - 2481980 - CVE-2026-46090 kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop BZ - 2482532 - CVE-2026-46181 kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() BZ - 2482634 - CVE-2026-46173 kernel: exit: prevent preemption of oopsing TASK_DEAD task CVEs CVE-2026-31669 CVE-2026-43125 CVE-2026-43128 CVE-2026-43279 CVE-2026-43329 CVE-2026-43501 CVE-2026-46090 CVE-2026-46173 CVE-2026-46181 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM kernel-5.14.0-284.178.1.el9_2.src.rpm SHA-256: 6a204afc004a8689e0b544d8244ceedf26ec8abb1be82e7b8f8f0191b0d2979c x86_64 bpftool-7.0.0-284.178.1.el9_2.x86_64.rpm SHA-256: 680a5477169349819442566aae9eb310e1fde4c9a8c7beac8c8c5894e465d794 bpftool-debuginfo-7.0.0-284.178.1.el9_2.x86_64.rpm SHA-256: a75aea2ce21d3c72ea8b75149afab2f01950198792cf10028c88e4aacee9c078 bpftool-debuginfo-7.0.0-284.178.1.el9_2.x86_64.rpm SHA-256: a75aea2ce21d3c72ea8b75149afab2f01950198792cf10028c88e4aacee9c078 kernel-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: e619c4a8cb650fc7c20d6d1f52c167fed4a4518f224755241c058ca7a500dd1a kernel-abi-stablelists-5.14.0-284.178.1.el9_2.noarch.rpm SHA-256: 36f329508b909084001216c4c0502b57c52f97a4fb0d3e8ded15d718391a4530 kernel-core-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: f79fc67d24cb008bf5a54e566fc12248829c89b95e83e5e7bd9ac60705e0a09d kernel-debug-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 59d9cbebeb0432566d4ea64aad0a3c4299df68f8e62e8aff4afc18224a902a00 kernel-debug-core-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 6e677dae504b15cffe3008ce859d6db217c906f340b1fb3351a601986636346e kernel-debug-debuginfo-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: bdd5796814e78e88238fa698e6939002cacda16200bffc1e0249cd4dc8cbbcdf kernel-debug-debuginfo-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: bdd5796814e78e88238fa698e6939002cacda16200bffc1e0249cd4dc8cbbcdf kernel-debug-devel-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 2d13c4036460e9472478caacb4f8c302c0965443e48eb1bbabe1f56dd568e13a kernel-debug-devel-matched-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 76859ce3807c382df0162d12a4db918d1b000393ca919d84260d30994a4907f3 kernel-debug-modules-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 729f8d9a1de843c691a71b1850961164de84509339ab5fc045b64a78504c2958 kernel-debug-modules-core-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 0f029ffa45fbcd1924860b8719c0df69a116da2204cc099d81a21ad22f135efa kernel-debug-modules-extra-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 8cc9316babf98a3720a3f2b04b15d365ea4c5d19bc3c5581bc6249085b82e028 kernel-debug-uki-virt-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 5165532bcf97d408f42b1e3b4083452f515c4a9d222052811d77f7e0d82e8716 kernel-debuginfo-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 4196b3251942f9252a974031e3648841339110899696bf793dcf930ae79cb1e2 kernel-debuginfo-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 4196b3251942f9252a974031e3648841339110899696bf793dcf930ae79cb1e2 kernel-debuginfo-common-x86_64-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 712c7d740fe67ddcd474ab53c311d85f81855cdd210785079c31493010dad788 kernel-debuginfo-common-x86_64-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 712c7d740fe67ddcd474ab53c311d85f81855cdd210785079c31493010dad788 kernel-devel-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: c268e36f525d7a8619896e83fb42d3b6fb7a3510897b3be03eb699291b3de1be kernel-devel-matched-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 4599824f98c67b0b7846be29f83a90a6629744ebf9ff1788cbc4382eb98f5123 kernel-doc-5.14.0-284.178.1.el9_2.noarch.rpm SHA-256: c887907ecbfee25270b781e1e3aff4b2b8e72e1b68d4d6fbd3d52c3fb5593345 kernel-headers-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 0a0ea816707a3fc36512e2ee8a1eb185268dc23b51ebe7c7da849037ec89ce1b kernel-modules-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 1fe4febdfc1df228a70dc82ca74e590b6d306b8869542e6aa0a5d3481e542108 kernel-modules-core-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 2ce9b6651129b2d6ad4ab3d0fa489df62b965f43616e9ac2d439db692a17036d kernel-modules-extra-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: fc3a8214369bf3ec9d2b0ce919ab87f78574c7a51bce56913485dc884316211c kernel-tools-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 68f477447771762da1176db7e9da3898223fbc4209594d17890810e78deb4b92 kernel-tools-debuginfo-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 9909848f22d83214ceb58dbe01378e5b8b413a832ae0fcd95add313e69242c5c kernel-tools-debuginfo-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 9909848f22d83214ceb58dbe01378e5b8b413a832ae0fcd95add313e69242c5c kernel-tools-libs-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 2bda41ce190843b5b0b2806746f26690d74010b64b9a0e4cac721768b27821ff kernel-uki-virt-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 6bb28430d10a65f0342e8e3b12f1b53c8c7b6e7e0bea94c7a006c2b37039eacb perf-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 04e9aabf9e01b4cf1fbd8304b1a195116988a22f09070924a3ea32b2e499db32 perf-debuginfo-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 252084adfdd46812156d26e0cecc1f5f8fa63547515a3906a1117fbc39f3df06 perf-debuginfo-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 252084adfdd46812156d26e0cecc1f5f8fa63547515a3906a1117fbc39f3df06 python3-perf-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 5012c2c9f292841008a816ceae3b7a2c50318194ad577aaa96474b16a2da857e python3-perf-debuginfo-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 244f94660c03a615258900a654057c6fbea595fa0ce77214e508f8233aa44c36 python3-perf-debuginfo-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 244f94660c03a615258900a654057c6fbea595fa0ce77214e508f8233aa44c36 rtla-5.14.0-284.178.1.el9_2.x86_64.rpm SHA-256: 15bc7b9bca4d96726123ef42a244f2bbab1a7edf0b338d1c4b84ebcbcece77d2 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM kernel-5.14.0-284.178.1.el9_2.src.rpm SHA-256: 6a204afc004a8689e0b544d8244ceedf26ec8abb1be82e7b8f8f0191b0d2979c ppc64le bpftool-7.0.0-284.178.1.el9_2.ppc64le.rpm SHA-256: f839c3abdb4bd3d19cdfb7da953e918356c7c9ea49e11f223159d24675616ad4 bpftool-debuginfo-7.0.0-284.178.1.el9_2.ppc64le.rpm SHA-256: 04480334d176cf034f314882af5395afc026ecd506a5aaa0c01246fae8bd57b3 bpftool-debuginfo-7.0.0-284.178.1.el9_2.ppc64le.rpm SHA-256: 04480334d176cf034f314882af5395afc026ecd506a5aaa0c01246fae8bd57b3 kernel-5.14.0-284.178.1.el9_2.ppc64le.rpm SHA-256: 59fbf968aac94013263e4ea2c19d6bb8e930538f37213ab19ee1b0da8b77b598 kernel-abi-stablelists-5.14.0-284.178.1.el9_2.noarch.rpm SHA-256: 36f329508b909084001216c4c0502b57c52f97a4fb0d3e8ded15d718391a4530 kernel-core-5.14.0-284.178.1.el9_2.ppc64le.rpm SHA-256: 6462f9f2d4