This Red Hat kernel security update addresses four vulnerabilities, including a critical (CVSS 9.8) flaw in the dlm subsystem (CVE-2026-43125) where missing length validation could lead to exploitation, and a critical (CVSS 9.1) netfilter issue (CVE-2026-23455) allowing exploitation via malformed H.323 traffic. The affected version ranges are extensive; for example, CVE-2026-23455 affects Linux kernels from 2.6.17 through versions prior to 5.10.253, 5.15.203, 6.1.167, 6.6.130, 6.12.78, 6.18.20, and 6.19.10. The fixed versions are specified per CVE, such as upgrading to kernel 5.10.253, 6.12.75, or 6.18.16 for the respective flaws, and a system reboot is required after applying the update.
Red Hat Product Errata RHSA-2026:35844 - Security Advisory Issued: 2026-07-06 Updated: 2026-07-06 RHSA-2026:35844 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125) kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2454810 - CVE-2026-23455 kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() BZ - 2467234 - CVE-2026-43125 kernel: dlm: validate length in dlm_search_rsb_tree BZ - 2481980 - CVE-2026-46090 kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop BZ - 2482166 - CVE-2026-45852 kernel: RDMA/rxe: Fix double free in rxe_srq_from_init CVEs CVE-2026-23455 CVE-2026-43125 CVE-2026-45852 CVE-2026-46090 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM kernel-3.10.0-1160.154.1.el7.src.rpm SHA-256: e9e7f9ebea8ffff64310151ed855d9ae8b9ffc20351c3e3830a5b0cabeba14e6 x86_64 bpftool-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: fe62740e47c122d3630752c7a6c393941556a30b1f7299619903b41b29433878 bpftool-debuginfo-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 9f7b8ccfdffc17eb48abdedcf18b43048001abf1f0c0079077cf56e42403662a bpftool-debuginfo-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 9f7b8ccfdffc17eb48abdedcf18b43048001abf1f0c0079077cf56e42403662a kernel-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: a0592e719acccca2297c57b8214913f2954d0339808a9ffda89ff573f684f9de kernel-abi-whitelists-3.10.0-1160.154.1.el7.noarch.rpm SHA-256: 101c1f1109d4a6613567fafd27448a7f2192a8d27b030e2e1e4e77e1496faa33 kernel-debug-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: f639cb521e25271796a34440ab36daf57c1b760ff21170fdfe0fb7c92df174bd kernel-debug-debuginfo-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: f4f0eba467bda7de37ccca89192da9b5e4ea4ee15f000c2ef6b9e46814088316 kernel-debug-debuginfo-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: f4f0eba467bda7de37ccca89192da9b5e4ea4ee15f000c2ef6b9e46814088316 kernel-debug-devel-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: b219fd44ff16308f7fd9c46ceb6fbd95fe5bffbf0b09cf765d61c4f38eea4242 kernel-debuginfo-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 6505d4c6bfda71970e8ca69107e558fe225e4156eac6ebe4548aed8e6eed2e1b kernel-debuginfo-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 6505d4c6bfda71970e8ca69107e558fe225e4156eac6ebe4548aed8e6eed2e1b kernel-debuginfo-common-x86_64-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: cfbed1a8f2e1d955352e13b76c6dac29490edfd4c25957e92936e902d0a93c3e kernel-debuginfo-common-x86_64-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: cfbed1a8f2e1d955352e13b76c6dac29490edfd4c25957e92936e902d0a93c3e kernel-devel-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: c9de6b89a13b683ebb5c56a8862b1abc388a3f5fda5dae526b80e9f7679f5dde kernel-doc-3.10.0-1160.154.1.el7.noarch.rpm SHA-256: 9c129e14f2b59c032f5dfedd7da813c36a547dc544ea63aef74a6c5b95268468 kernel-headers-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 0ac4d8d4da04f66e38261c0dbc71e0e4a1468431fa9c0d1c8f395e2a36a17419 kernel-tools-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 79ef8656a116f6b28b3268ab9331a497f9f1632d95127cd0c7cef5836e1d1da6 kernel-tools-debuginfo-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: d144535e4f0523eb78fff5b79b1a2dfb91595e531b4586a31c105708da64b53b kernel-tools-debuginfo-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: d144535e4f0523eb78fff5b79b1a2dfb91595e531b4586a31c105708da64b53b kernel-tools-libs-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 2ede46fc9598c64a2f4d5a2315ebf7bb4ce6eb423c4aaea44a4af52749c6fe24 kernel-tools-libs-devel-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 431ef76a1fbee61fba9bbf2031992c6d7abb8eb4b820f32c502b79295dd53041 perf-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 8e977bbdf918dfdb1f47b8dd8722cc000f0c466546dbfbf428d370b3b76e1161 perf-debuginfo-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 28c65addba95839454f23cdeb1c74b32bb12a849f1f382855ba56fb5d2223e70 perf-debuginfo-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 28c65addba95839454f23cdeb1c74b32bb12a849f1f382855ba56fb5d2223e70 python-perf-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 39d77c9e77ca6d556e430b24d578e7b59b97d357063b07d68837e9014bea622c python-perf-debuginfo-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 7a1393c93c5e832eb1d164a847f1b33c0d9e279c74f7ba0ab3180dfc809fd59f python-perf-debuginfo-3.10.0-1160.154.1.el7.x86_64.rpm SHA-256: 7a1393c93c5e832eb1d164a847f1b33c0d9e279c74f7ba0ab3180dfc809fd59f Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM kernel-3.10.0-1160.154.1.el7.src.rpm SHA-256: e9e7f9ebea8ffff64310151ed855d9ae8b9ffc20351c3e3830a5b0cabeba14e6 s390x bpftool-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 076d24cf872fb0ac16719e806267d7ed6f562b627e173691690b0d63850ce133 bpftool-debuginfo-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: ff0a4e3151e188f9924860dfd8f623f7f46538113817f52ca98fa8119efde2a0 kernel-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: aa66923eac1511ac9b85c467b31fd06906885110982db6b7c6353fab530fa5d5 kernel-abi-whitelists-3.10.0-1160.154.1.el7.noarch.rpm SHA-256: 101c1f1109d4a6613567fafd27448a7f2192a8d27b030e2e1e4e77e1496faa33 kernel-debug-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 23bbf8fa74483d06564843d8f40061fdcea428726d8af6de7c368c745f55b08d kernel-debug-debuginfo-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 7ef1e8540501b8c28f22921e42f8d99922f2c67b574af68cadf09192d91ea906 kernel-debug-devel-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 8cc022249797117caa03aa203e629c99fd55efdf2e4a4bc62398c9d038708add kernel-debuginfo-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 56a0e9b1bd45367daa5ef01ba58c83d0a128fc3acf5f3a4cb85794f20b0d0c5d kernel-debuginfo-common-s390x-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 3e7d5a302bdb4857a6e71db3c9c65ed96c2d8a7aa04f335862decad1ca23bb05 kernel-devel-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 87ed33e615898f1029a69be10b164fa4378550312f14b3f164163e8497ca9d3c kernel-doc-3.10.0-1160.154.1.el7.noarch.rpm SHA-256: 9c129e14f2b59c032f5dfedd7da813c36a547dc544ea63aef74a6c5b95268468 kernel-headers-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: cbfbc49c744748c77bae4727cf0850436a295b7700fc34b763a87533d80260b0 kernel-kdump-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 153df57cd03dd1acd7174456064609121a06f087bb20a59f3f9f4877f5076ac9 kernel-kdump-debuginfo-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 205b16dca43e78fa80b0bd463f171ebab474f3a3a2ff364cb24378d5a5a4f44f kernel-kdump-devel-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 41590f40b592a48413ce2bbdca55ff012775fec316da71466b6c43b82f74c526 perf-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: eacf7a6a656a566288e0eda7b7ed345f505e3cec987784222402e1eca9738213 perf-debuginfo-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 45d345b5ed09974053c1657a47f8480ab88c9b8ee56821d5c04f8536e16fa887 python-perf-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 56e59ed396cc7ff61ffaff472f1c3f94cb4bafab9c4bd2c48e7fcdced952484f python-perf-debuginfo-3.10.0-1160.154.1.el7.s390x.rpm SHA-256: 04e4a370f2b4749a0ebf86a79718d47746c1dc8b8492a312ccfd5d54b1117e70 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM kernel-3.10.0-1160.154.1.el7.src.rpm SHA-256: e9e7f9ebea8ffff64310151ed855d9ae8b9ffc20351c3e3830a5b0cabeba14e6 ppc64 bpftool-3.10.0-1160.154.1.el7.ppc64.rpm SHA-256: 1a582e8e51488143843594fcd29e320a215bc908db265b4ebfe09313f5f10068 bpftool-debuginfo-3.10.0-1160.154.1.el7.ppc64.rpm SHA-256: c03670232cccbca1253fe2a72c898e7d7d7b9d4e80e9e63f0d9a8227acdb41f2 bpftool-debuginfo-3.10.0-1160.154.1.el7.ppc64.rpm SHA-256: c03670232cccbca1253fe2a72c898e7d7d7b9d4e80e9e63f0d9a8227acdb41f2 kernel-3.10.0-1160.154.1.el7.ppc64.rpm SHA-256: 86c1a0f3bf70ad2dafa61f6716a74720d17d76c739e140ece60b0277499b7e34 kernel-abi-whitelists-3.10.0-1160.154.1.el7.noarch.rpm SHA-256: 101c1f1109d4a6613567fafd27448a7f2192a8d27b030e2e1e4e77e1496faa33 kernel-bootwrapper-3.10.0-1160.154.1.el7.ppc64.rpm SHA-256: b6601de8768e3a690828b0310e53b16129bf3b742d58bcc6c551d5423056fb14 kernel-debug-3.10.0-1160.154.1.el7.ppc64.rpm SHA-256: a7032b3b90be9c4cd84f9272535f655665ca39abfd0547a5163efa7560fe7c91 kernel-debug-debuginfo-3.10.0-1160.154.1.el7.ppc64.rpm SHA-256: dbf880e96b5792958e25bb7cb0343a4dfd59b315fb7f3ffacc2708e5c49d2726 kernel-debug-debuginfo-3.10.0-1160.154.1.el7.ppc64.rpm SHA-256: dbf880e96b5792958e25bb7cb0343a4dfd59b315fb7f3ffacc2708e5c49d2726 kernel-debug-devel-3.10.0-11