Red Hat Product Errata RHSA-2026:35894 - Security Advisory Issued: 2026-07-06 Updated: 2026-07-06 RHSA-2026:35894 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64 Red Hat Enterprise Linux Server - AUS 8.6 x86_64 Fixes BZ - 2455334 - CVE-2026-31408 kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold BZ - 2461503 - CVE-2026-31669 kernel: mptcp: fix slab-use-after-free in __inet_lookup_established BZ - 2467215 - CVE-2026-43279 kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing BZ - 2467228 - CVE-2026-43198 kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() BZ - 2481922 - CVE-2026-45984 kernel: gfs2: Fix use-after-free in iomap inline data write path BZ - 2482532 - CVE-2026-46181 kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() CVEs CVE-2026-31408 CVE-2026-31669 CVE-2026-43198 CVE-2026-43279 CVE-2026-45984 CVE-2026-46181 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 SRPM kernel-4.18.0-372.199.1.el8_6.src.rpm SHA-256: a050313c927766797397be3081da6a0b826417682eb3ceae63af375a59da8535 x86_64 bpftool-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 5c5bda673edb47dbf073d1675a495296b245aa76e4a1b8508a366ca840cd4514 bpftool-debuginfo-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 07b86a80cefb8a40b75276f34fb1ac479821cd5c9e3cf668801e6b02d88b479a kernel-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 0593e60d876b749d3986dbadcbd98d9546c85de3d99a5f3e214ebf73bde5ad30 kernel-abi-stablelists-4.18.0-372.199.1.el8_6.noarch.rpm SHA-256: 952841cb9f90e2be991cfd480e844a96a1b51b1b10de7719d1a252d83e1bcbdd kernel-core-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 6b0e9629176679f6e89fd9aed851a5ddc07a9e07e03acba1bca19536fa0c9dc3 kernel-cross-headers-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 574c5016c4f91a68ba3c9ecca1ab0b5b66a98f20f6e13812899d9d17404e7de2 kernel-debug-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: cffa1cc105fb47d2ec15162299172aa17e67f22260bdb9e38631a0d3386f41d0 kernel-debug-core-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: de2b0f312d9d198035651b6f280e7cc4d79b6f5351e4a32c97174c7d2fdb7f1e kernel-debug-debuginfo-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 53aed4a55c46400b679a7cbb0acf8a50cf0822124605a4693cb83d6214de8e43 kernel-debug-devel-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 3d15d14b5ef36103488a38b831d876328bef19afa85f09b3814265ff05c815a3 kernel-debug-modules-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: cef5c939aee02df073f9621134abdf8cae19fd86f326904dbf5a9bf13a3ccb0b kernel-debug-modules-extra-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 3118a0d90b687f04e8d791d6375579739f2650bc42ca97a129fad2c1af40a741 kernel-debuginfo-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 693fa65cf44266c1b3fbe7cb653256bfd923547483a9774d7110d7f1dc5af6cd kernel-debuginfo-common-x86_64-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 5e898a03915de2531cd539ada9aa199de1997cdb5039400450ce23f9384f088d kernel-devel-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 02557e12faf7af97604edee2efdf0365d40e32423d99fd562c7e91e69a6377f8 kernel-doc-4.18.0-372.199.1.el8_6.noarch.rpm SHA-256: 3ef467379a887bd0c43aa9524af0291226ff2e66ec695528b9fb6638e0aee620 kernel-headers-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 83356696f14cf9d6c92b944d392a477c205bac0555c2226b3b290a9cf7326ae7 kernel-modules-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 7b21b573f8571d96bfe1e0c5d38c3e00ed4489953daebe36a2390e8524e4812a kernel-modules-extra-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: f2b43db732bf85075433bf78e4ad23001982ffc287904e0291f22942e3b67035 kernel-tools-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: c1125f20c41707e963c7149875de3fda8ff1f4dd174793435ebc1403f3018c6a kernel-tools-debuginfo-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 6e0bf63c9d33dd9a2e425af9c2db86cceed84bcea3f357dc9f11d136a94b7342 kernel-tools-libs-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 965e0562f1309b6c4a22efb38c489eeaeae68d1e95fbe499675812da5a2b3150 perf-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 31ff4503bb501d3cd832d897ca69e3227826b66dd77689a1299568b1a8bd9462 perf-debuginfo-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 5e7c2f459230b15239dd599c77994f0e0b4592716aa3cc859f8ce217d3701f75 python3-perf-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 50a6ce6c396aa04c23e0ed188d1f15b1fdfb0bcb971aa2c145ba6e46b8760949 python3-perf-debuginfo-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: b49d1f4b3cc5ba386955f2c96a59eda3fdc1af11f1d00f3cb021e59aac36f655 Red Hat Enterprise Linux Server - AUS 8.6 SRPM kernel-4.18.0-372.199.1.el8_6.src.rpm SHA-256: a050313c927766797397be3081da6a0b826417682eb3ceae63af375a59da8535 x86_64 bpftool-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 5c5bda673edb47dbf073d1675a495296b245aa76e4a1b8508a366ca840cd4514 bpftool-debuginfo-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 07b86a80cefb8a40b75276f34fb1ac479821cd5c9e3cf668801e6b02d88b479a kernel-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 0593e60d876b749d3986dbadcbd98d9546c85de3d99a5f3e214ebf73bde5ad30 kernel-abi-stablelists-4.18.0-372.199.1.el8_6.noarch.rpm SHA-256: 952841cb9f90e2be991cfd480e844a96a1b51b1b10de7719d1a252d83e1bcbdd kernel-core-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 6b0e9629176679f6e89fd9aed851a5ddc07a9e07e03acba1bca19536fa0c9dc3 kernel-cross-headers-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 574c5016c4f91a68ba3c9ecca1ab0b5b66a98f20f6e13812899d9d17404e7de2 kernel-debug-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: cffa1cc105fb47d2ec15162299172aa17e67f22260bdb9e38631a0d3386f41d0 kernel-debug-core-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: de2b0f312d9d198035651b6f280e7cc4d79b6f5351e4a32c97174c7d2fdb7f1e kernel-debug-debuginfo-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 53aed4a55c46400b679a7cbb0acf8a50cf0822124605a4693cb83d6214de8e43 kernel-debug-devel-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 3d15d14b5ef36103488a38b831d876328bef19afa85f09b3814265ff05c815a3 kernel-debug-modules-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: cef5c939aee02df073f9621134abdf8cae19fd86f326904dbf5a9bf13a3ccb0b kernel-debug-modules-extra-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 3118a0d90b687f04e8d791d6375579739f2650bc42ca97a129fad2c1af40a741 kernel-debuginfo-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 693fa65cf44266c1b3fbe7cb653256bfd923547483a9774d7110d7f1dc5af6cd kernel-debuginfo-common-x86_64-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 5e898a03915de2531cd539ada9aa199de1997cdb5039400450ce23f9384f088d kernel-devel-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 02557e12faf7af97604edee2efdf0365d40e32423d99fd562c7e91e69a6377f8 kernel-doc-4.18.0-372.199.1.el8_6.noarch.rpm SHA-256: 3ef467379a887bd0c43aa9524af0291226ff2e66ec695528b9fb6638e0aee620 kernel-headers-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 83356696f14cf9d6c92b944d392a477c205bac0555c2226b3b290a9cf7326ae7 kernel-modules-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 7b21b573f8571d96bfe1e0c5d38c3e00ed4489953daebe36a2390e8524e4812a kernel-modules-extra-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: f2b43db732bf85075433bf78e4ad23001982ffc287904e0291f22942e3b67035 kernel-tools-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: c1125f20c41707e963c7149875de3fda8ff1f4dd174793435ebc1403f3018c6a kernel-tools-debuginfo-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 6e0bf63c9d33dd9a2e425af9c2db86cceed84bcea3f357dc9f11d136a94b7342 kernel-tools-libs-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 965e0562f1309b6c4a22efb38c489eeaeae68d1e95fbe499675812da5a2b3150 perf-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 31ff4503bb501d3cd832d897ca69e3227826b66dd77689a1299568b1a8bd9462 perf-debuginfo-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 5e7c2f459230b15239dd599c77994f0e0b4592716aa3cc859f8ce217d3701f75 python3-perf-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: 50a6ce6c396aa04c23e0ed188d1f15b1fdfb0bcb971aa2c145ba6e46b8760949 python3-perf-debuginfo-4.18.0-372.199.1.el8_6.x86_64.rpm SHA-256: b49d1f4b3cc5ba386955f2c96a59eda3fdc1af11f1d00f3cb021e59aac36f655 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .