Red Hat Product Errata RHSA-2026:35896 - Security Advisory Issued: 2026-07-06 Updated: 2026-07-06 RHSA-2026:35896 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852) kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64 Red Hat Enterprise Linux Server - AUS 8.4 x86_64 Fixes BZ - 2429602 - CVE-2025-71116 kernel: libceph: make decode_pool() more resilient against corrupted osdmaps BZ - 2432389 - CVE-2026-22984 kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() BZ - 2432400 - CVE-2026-22990 kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() BZ - 2454810 - CVE-2026-23455 kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() BZ - 2455334 - CVE-2026-31408 kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold BZ - 2461503 - CVE-2026-31669 kernel: mptcp: fix slab-use-after-free in __inet_lookup_established BZ - 2467228 - CVE-2026-43198 kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() BZ - 2468124 - CVE-2026-43329 kernel: netfilter: flowtable: strictly check for maximum number of actions BZ - 2481980 - CVE-2026-46090 kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop BZ - 2482166 - CVE-2026-45852 kernel: RDMA/rxe: Fix double free in rxe_srq_from_init BZ - 2482532 - CVE-2026-46181 kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() CVEs CVE-2025-71116 CVE-2026-22984 CVE-2026-22990 CVE-2026-23455 CVE-2026-31408 CVE-2026-31669 CVE-2026-43198 CVE-2026-43329 CVE-2026-45852 CVE-2026-46090 CVE-2026-46181 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 SRPM kernel-4.18.0-305.197.1.el8_4.src.rpm SHA-256: c2bff24129225f8b5100086851116be1a4c9afe39f584aa000f7e14626de529c x86_64 bpftool-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 621315611a259d5e7a499ea2cfab063b17d0b1b843e837885df7933eb7876f98 bpftool-debuginfo-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: c36b2940fd2a5c02aa65c7f37108789fd011d5240ab4ca5a500690eacc5f2301 kernel-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: a4427c025e85efb1d811e51bd07c5315064850b7b8adf7fda7eaa76c4168eb0c kernel-abi-stablelists-4.18.0-305.197.1.el8_4.noarch.rpm SHA-256: 8541c9782173ac0f2e182657a9246bec20f39d415b641c3c4e96eedf7a09bebf kernel-core-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 695f8f5344c8f5cb48f7f585121f90c6fafb5dc5bf9d970c42f8be84d3797936 kernel-cross-headers-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: bd179f0bc0500c75ad56b34ed764a410dde2099c727515a4bb4f94432ac765b3 kernel-debug-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: eca2b322d910947220056c3b6b68fd5eb7edb5fb232bf07bb7dda4dabc078219 kernel-debug-core-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 705254b6c67aec172a86cb7d29036aafa8cc78966105f411d10bfa994656db23 kernel-debug-debuginfo-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 7c2fc4d38ea1c32832b3a6285f7e4b8b24569a24d3b9df66ddca868d5e1e8770 kernel-debug-devel-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: be4e3dbc879149f2b5ce7163c5d6b496325416f23d787387bb602ec9992895f0 kernel-debug-modules-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 553e9bfda66c3d7e06e4e6af2a85a367b41a5ddcd36750ab3fab22cae19effd7 kernel-debug-modules-extra-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: bc4144b7e53915bded11a58db1ed5730707eb6cdb3af549b613e0054319d66e2 kernel-debuginfo-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: e190640c5c3fd822d3c5f6e71ce76d84fd9d0739f022c587cbd37823322e2ab0 kernel-debuginfo-common-x86_64-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 7d58f56bbfa60dcea2b01cf6df2839712b65681e91c6165f2c9613d6ff41dedb kernel-devel-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: ad96f262381429d6a3fe0863c80a63596e6229d0df680f5d8ad92ebd6bc61ca0 kernel-doc-4.18.0-305.197.1.el8_4.noarch.rpm SHA-256: 9b4473966f67901637a88b5104af9a406574826d2d52596569236bb775f0d1ee kernel-headers-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 0a1f0e239197f8efc10c002723943a2cef5ab662912fd1784f50b4bcc92ef56f kernel-modules-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 82e71ad1e2a38d1b3be4a473e10abc8c9819a9f8777ddb4609cd4511e1230807 kernel-modules-extra-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 9eb1ea1e3d5124a197744c5e6c8b7d64d39d912ba6d97be3b52e3961f872792b kernel-tools-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: f0c9191a77a0f6d3a84a569262dbeaff3572045accaf3baebb93dbd5cf3198b6 kernel-tools-debuginfo-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 119af92304d78a3fa4ce8838a5908a12e5f9f8f6dfe1aeae3451752c73335ba6 kernel-tools-libs-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 7dffa6c8e56046c2d4d2f9ecda3bca4608cf99d40bbc4ad82785a9c690b63309 perf-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 250ec84d2d363172559ddf7ed7107f878cf3609adf1e209b88f3afc56e384c5d perf-debuginfo-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 9050eca3603b083919e5e0378624fde4d8915773f7349f54680d5571f3f383c6 python3-perf-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: b01f7a9f890976e5e88326885d851b4b3f8f2e4fe0e6aae323fb07c9d4eb5e1e python3-perf-debuginfo-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 4d154bd27c767d24ac49a66e89bd9aa3614853ed7e7786f9b079ecaf523f0093 Red Hat Enterprise Linux Server - AUS 8.4 SRPM kernel-4.18.0-305.197.1.el8_4.src.rpm SHA-256: c2bff24129225f8b5100086851116be1a4c9afe39f584aa000f7e14626de529c x86_64 bpftool-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 621315611a259d5e7a499ea2cfab063b17d0b1b843e837885df7933eb7876f98 bpftool-debuginfo-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: c36b2940fd2a5c02aa65c7f37108789fd011d5240ab4ca5a500690eacc5f2301 kernel-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: a4427c025e85efb1d811e51bd07c5315064850b7b8adf7fda7eaa76c4168eb0c kernel-abi-stablelists-4.18.0-305.197.1.el8_4.noarch.rpm SHA-256: 8541c9782173ac0f2e182657a9246bec20f39d415b641c3c4e96eedf7a09bebf kernel-core-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 695f8f5344c8f5cb48f7f585121f90c6fafb5dc5bf9d970c42f8be84d3797936 kernel-cross-headers-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: bd179f0bc0500c75ad56b34ed764a410dde2099c727515a4bb4f94432ac765b3 kernel-debug-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: eca2b322d910947220056c3b6b68fd5eb7edb5fb232bf07bb7dda4dabc078219 kernel-debug-core-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 705254b6c67aec172a86cb7d29036aafa8cc78966105f411d10bfa994656db23 kernel-debug-debuginfo-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 7c2fc4d38ea1c32832b3a6285f7e4b8b24569a24d3b9df66ddca868d5e1e8770 kernel-debug-devel-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: be4e3dbc879149f2b5ce7163c5d6b496325416f23d787387bb602ec9992895f0 kernel-debug-modules-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 553e9bfda66c3d7e06e4e6af2a85a367b41a5ddcd36750ab3fab22cae19effd7 kernel-debug-modules-extra-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: bc4144b7e53915bded11a58db1ed5730707eb6cdb3af549b613e0054319d66e2 kernel-debuginfo-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: e190640c5c3fd822d3c5f6e71ce76d84fd9d0739f022c587cbd37823322e2ab0 kernel-debuginfo-common-x86_64-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 7d58f56bbfa60dcea2b01cf6df2839712b65681e91c6165f2c9613d6ff41dedb kernel-devel-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: ad96f262381429d6a3fe0863c80a63596e6229d0df680f5d8ad92ebd6bc61ca0 kernel-doc-4.18.0-305.197.1.el8_4.noarch.rpm SHA-256: 9b4473966f67901637a88b5104af9a406574826d2d52596569236bb775f0d1ee kernel-headers-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 0a1f0e239197f8efc10c002723943a2cef5ab662912fd1784f50b4bcc92ef56f kernel-modules-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 82e71ad1e2a38d1b3be4a473e10abc8c9819a9f8777ddb4609cd4511e1230807 kernel-modules-extra-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: 9eb1ea1e3d5124a197744c5e6c8b7d64d39d912ba6d97be3b52e3961f872792b kernel-tools-4.18.0-305.197.1.el8_4.x86_64.rpm SHA-256: f0c9191a77a0f6d3a84a56926