This Red Hat security advisory addresses multiple Important-severity kernel vulnerabilities, including CVE-2026-43198 (CVSS 9.8 CRITICAL), a race condition in TCP IPv6 connection handling, CVE-2026-43450 (CVSS 7.1 HIGH), an out-of-bounds read in netfilter, and CVE-2026-46227 (CVSS 7.8 HIGH), an issue in SCTP. The affected version ranges are extensive; for example, CVE-2026-43198 affects Linux kernel versions from 2.6.12.1 up to, but excluding, 6.18.16, and from 6.19 up to, but excluding, 6.19.6. The fixed versions are specified per CVE, such as upgrading to kernel 6.18.16 or 6.19.6 for CVE-2026-43198, and a system reboot is required after applying the update.
Red Hat Product Errata RHSA-2026:36349 - Security Advisory Issued: 2026-07-07 Updated: 2026-07-07 RHSA-2026:36349 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450) kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259) kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) Bug Fix(es) and Enhancement(s): kernel panic at trailing_symlink while the task wdavdaemon runs even after 4c4f7c19b3c7 (JIRA:RHEL-152759) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2467228 - CVE-2026-43198 kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() BZ - 2468228 - CVE-2026-43450 kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() BZ - 2482564 - CVE-2026-46227 kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL BZ - 2482636 - CVE-2026-46209 kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() BZ - 2484477 - CVE-2026-46259 kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() BZ - 2486958 - CVE-2025-10263 kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources CVEs CVE-2025-10263 CVE-2026-43198 CVE-2026-43450 CVE-2026-46209 CVE-2026-46227 CVE-2026-46259 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kernel-4.18.0-553.140.1.el8_10.src.rpm SHA-256: 51399bfda71854af2e006672ccbd5aebe9db46c60ea6c16e79caf34eca5ac68c x86_64 bpftool-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: d21740da7043888bfc0e54b9a28632abfbd0807c9f81239d3cab98fcbdd13199 bpftool-debuginfo-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: f65eff61e901dfd8ec9109ad9ec967d2b5e2cef0c43e0d3f90f89e2e003fa2ed kernel-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: a4644893e44a011fb54681b027ed02a03999829b21f12fa75c5c996e727a368c kernel-abi-stablelists-4.18.0-553.140.1.el8_10.noarch.rpm SHA-256: ec4be70da77b0389685171997476c3db0f310d86dacb249cdf8f078d2098a706 kernel-core-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: 1bb984f978a201e27e57b964ad9246e7752269ff8345c21e763654c0eb304118 kernel-cross-headers-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: ef35a9892ebc5ff3de3167f252ef911a6c7b50da1909a3655ae96965b925a722 kernel-debug-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: f501bb6edecc473d7dc6f9121e01990f43a0365f8020c1f3bb26d639db2ed14f kernel-debug-core-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: 22013ffd3fd3ab78fa059efed84b0888299e2115d325883b7585751da7389fef kernel-debug-debuginfo-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: 436b0545ad0d685493697f9d05bdf586d33f3762496b981679e13bd324c57fc4 kernel-debug-devel-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: ac1a136a68cd3995a7acf8301e90596c45421b09d43de9d2a4a7b24837a354e3 kernel-debug-modules-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: fe6dd401ab03ca8adae158865b278e0ba86a3252f9538a51a99611a2c8bf214c kernel-debug-modules-extra-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: 960b420319a81af12ccbd77d17ebea9402391f5ab0525761c60b8eb0220ed750 kernel-debuginfo-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: d9feec599eae72a4784450841fcba656d15f889cb1b4b88877d06a0dc02bc2aa kernel-debuginfo-common-x86_64-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: a2ad376384510f2671f4a05ee1dcf8231e712a9440385167ff07e18d5f08ee94 kernel-devel-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: fc545b79cf644840a1bc05f48e83a8cda34652651b80ce13d02e8441b8fc312b kernel-doc-4.18.0-553.140.1.el8_10.noarch.rpm SHA-256: f29b73445ac5b662ee1be364b59aa1e2308d7af7d39f4e81a85bce2439544bd8 kernel-headers-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: 8a8ce02094bdc4dadaf526df3d4fdd6d961cd4835f1e3547d1552b1bde8859ed kernel-modules-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: d7807b157326ea0ae1c666caeaa3469d69dc5b3788ccffbf424ce6b029fa1aa9 kernel-modules-extra-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: e0b7c9b878e51f427713530bb7d671ed3395904d64ac0ed636fb917733cb5c34 kernel-tools-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: 41eacaa25edcef55db90653017bae8854d821a9864bda66c1bba207f775cb849 kernel-tools-debuginfo-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: cf60161182a43acebb15e7b030bb677e13d0ea44f6cfa91b53a5e8c8184d0fdc kernel-tools-libs-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: 4404c56841ce6599a7eb48de19e3f9e468d6965d87ac5f2f290cb46eb78a91d6 perf-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: d15869d2662845653545d05b9c22f1866f810389345a0406f3f2261f7d2c9816 perf-debuginfo-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: 2f24a1dd3ab0f215bcaa2a1434d6267cec3b4cf25c4852dd943065f020c1a7ad python3-perf-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: c7356518a613a96f4d8739e1bcc8ad055e5cd3fb563b9da3bee1718b47dc53e9 python3-perf-debuginfo-4.18.0-553.140.1.el8_10.x86_64.rpm SHA-256: bc352c4e51d7f5bc664b73ae0905346c936f1be23481d6e6cb2e21366ba0c5b4 Red Hat Enterprise Linux for IBM z Systems 8 SRPM kernel-4.18.0-553.140.1.el8_10.src.rpm SHA-256: 51399bfda71854af2e006672ccbd5aebe9db46c60ea6c16e79caf34eca5ac68c s390x bpftool-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 5d34237434f3db841eff57099bde23defe500a5b04a64fdc859b1d03071afcd1 bpftool-debuginfo-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 07bfd2f0fde34ea1a65af63dc763c4eac11cbe30326a93c25bee16c9b64f12a6 kernel-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: a9328f41315c99a11a3226a23f2c7fe12ef3a8124908d52c003cf45a02107f13 kernel-abi-stablelists-4.18.0-553.140.1.el8_10.noarch.rpm SHA-256: ec4be70da77b0389685171997476c3db0f310d86dacb249cdf8f078d2098a706 kernel-core-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: d720003ac6fbb84f260cdf9ed72fa75df2bd5d96c990a76304d750a840577d27 kernel-cross-headers-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 37651610331eb142fcbaf08a5c05056f8b721ef162b83bcedf90396f7e618b84 kernel-debug-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 20cd966e1572e3c8c26aed69370300d4d4f412add8d102b147f501661fac7a7f kernel-debug-core-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 3bd341b4e08c2e4ddee0a3593941f6cc016532545b4083f7cc539b2f340fe725 kernel-debug-debuginfo-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 46e2885a84a248285304942d8ae64acda1e219c82bbd5d81a7f2230e9d6e556e kernel-debug-devel-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 2b1d80e47370773413552226bb8051da5b6723ad5b666875aed1d9e8343ae150 kernel-debug-modules-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: d32b849ff0e23a60e80d69c39ff97793c18e9e903395aedc39b7ab019e0c63a0 kernel-debug-modules-extra-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 427d1dc53f27c3bcba82c57d18c473279d96da61db761dcabcc49db71bcc1293 kernel-debuginfo-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 1a5e31110383685981c84ea3f5d0b42763be6411caf988233d50cb621161b9bd kernel-debuginfo-common-s390x-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 0515ba2ef72c9c1de9962096edee6426085744ab55295f529a30f9b26264a4c1 kernel-devel-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: cc4ba1bc3abe9dcc65c998ae24e7f6fcec3f46339a696c2ff9d566fc828841b0 kernel-doc-4.18.0-553.140.1.el8_10.noarch.rpm SHA-256: f29b73445ac5b662ee1be364b59aa1e2308d7af7d39f4e81a85bce2439544bd8 kernel-headers-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: ca393727eb91fa85435e158ddd33f55cbe76eb78801df354a8d305d324c24e02 kernel-modules-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 2b17f5e30ca79c9fe2a6149ed0e0678d1812c12e98b54ae6bc64fe9fbe3148e7 kernel-modules-extra-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 9b49631e0d28aa795087921e8c57175aca74bb9e8df7edb4285e6894994c00ee kernel-tools-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: efdc885295b2ef1ae7146056540d3851600ac52c3437a3d6cbc704160827284d kernel-tools-debuginfo-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: b70548d3d0187bda5b6b8119e18cd5d0aa4f2a81f9288a9f1248833874a0340e kernel-zfcpdump-4.18.0-553.140.1.el8_10.s390x.rpm SHA-256: 36a