This Red Hat security update provides live kernel patches for RHEL 8 to address three vulnerabilities: a KVM shadow page table flaw (CVE-2026-23401, CVSS 5.5 MEDIUM) allowing privilege escalation or DoS, a critical heap overflow in the NFSv4.0 LOCK replay cache (CVE-2026-31402, CVSS 9.8 CRITICAL), and a use-after-free in the bonding driver (CVE-2026-31419, CVSS 7.8 HIGH) leading to denial of service. The vulnerabilities affect a wide range of mainline Linux kernel versions, with fixes available in upstream versions like 5.15.203, 6.1.168, and 6.12.80, respectively. Administrators should apply the provided kpatch-patch modules for the 4.18.0-553 kernel stream on affected RHEL 8 systems.
Red Hat Product Errata RHSA-2026:36530 - Security Advisory Issued: 2026-07-08 Updated: 2026-07-08 RHSA-2026:36530 - Security Advisory Overview Updated Packages Synopsis Important: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-4.18.0-553.53.1.el8_10. Security Fix(es): kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Fixes BZ - 2453803 - CVE-2026-23401 kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling BZ - 2454844 - CVE-2026-31402 kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache BZ - 2457829 - CVE-2026-31419 kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service CVEs CVE-2026-23401 CVE-2026-31402 CVE-2026-31419 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kpatch-patch-4_18_0-553_109_1-1-6.el8_10.src.rpm SHA-256: 4b9531a971a4bb0e6f08d1849c769078aa4209074987be81f22f26575dc7dfc3 kpatch-patch-4_18_0-553_125_1-1-3.el8_10.src.rpm SHA-256: 97fcb9abe578ece83e3145ff6a547ae790acee315da8e5f68b3f072ec5d7001c kpatch-patch-4_18_0-553_53_1-1-13.el8_10.src.rpm SHA-256: 4837b41aa8c8c1580f40b56fe15cecdfab98f96eed9d482fd3107a01220a7f1c kpatch-patch-4_18_0-553_72_1-1-10.el8_10.src.rpm SHA-256: 174785e9b5b2676a7005992fa02b468422b743683ee50605c567de8b707d75ee kpatch-patch-4_18_0-553_85_1-1-8.el8_10.src.rpm SHA-256: 2542de0b02b95581b496aa8da1a9bbb91a4ef6cf14b3be2d6088dc192cacb7e5 x86_64 kpatch-patch-4_18_0-553_109_1-1-6.el8_10.x86_64.rpm SHA-256: 3736d3a73a573f43effd0bbc100f12cef1d68af5226285cb59cc54bd3351ffb5 kpatch-patch-4_18_0-553_109_1-debuginfo-1-6.el8_10.x86_64.rpm SHA-256: c2b3a6fc83c006d160c491a27a8be4bc210cb0b130e06a10178a6af6804e5534 kpatch-patch-4_18_0-553_109_1-debugsource-1-6.el8_10.x86_64.rpm SHA-256: 80c385b8abc5ce517b794960dd36ad5119373c2d894e6864a8b6ed7a278c3103 kpatch-patch-4_18_0-553_125_1-1-3.el8_10.x86_64.rpm SHA-256: 8c6132266b4bec2369bd0e498d991b19f42438422a8b4b28164774c1f78373d1 kpatch-patch-4_18_0-553_125_1-debuginfo-1-3.el8_10.x86_64.rpm SHA-256: 71244818ceb4ae2e03c3ad21f5f7bcf75c8166995756a1affe3054f9dcd0b398 kpatch-patch-4_18_0-553_125_1-debugsource-1-3.el8_10.x86_64.rpm SHA-256: 4349890323bcaf4290c18e4be379a7d7eaeaf7c3a9db467e428f53e6ed781d70 kpatch-patch-4_18_0-553_53_1-1-13.el8_10.x86_64.rpm SHA-256: ed6f4aeeb55406631a42bde6d43ea6ce9b9a6b979fa5afff41bb52192cc53453 kpatch-patch-4_18_0-553_53_1-debuginfo-1-13.el8_10.x86_64.rpm SHA-256: 71edae14a55cf7cca4bf671fc703670a3654efd0b694d3699f9b4d6b4e612068 kpatch-patch-4_18_0-553_53_1-debugsource-1-13.el8_10.x86_64.rpm SHA-256: 7c8157fa84149f3f3a3be1aff0299656b99734829bee826319999fecbef76633 kpatch-patch-4_18_0-553_72_1-1-10.el8_10.x86_64.rpm SHA-256: eb2f2ba1a3133153a76a8e66b5b84d58c5a22e18602b0b5e01dd3d4ff71ed17f kpatch-patch-4_18_0-553_72_1-debuginfo-1-10.el8_10.x86_64.rpm SHA-256: ccb66dab006e4e028fd6ad4ecb4cfb9bd8fc8093b20e68bf0f9db8cfe455a48f kpatch-patch-4_18_0-553_72_1-debugsource-1-10.el8_10.x86_64.rpm SHA-256: 504ac325d4b56ea564cb78384b44c240236915a507dd9ed88d7488fec74296ce kpatch-patch-4_18_0-553_85_1-1-8.el8_10.x86_64.rpm SHA-256: 64c7c439f96f5407074f3ac702ae36aa9a0e4874e4f3412d5733f3b4fa009a3e kpatch-patch-4_18_0-553_85_1-debuginfo-1-8.el8_10.x86_64.rpm SHA-256: 34c03d10fb71b88877df595a372cf7d948d9cbebae37b195306518ce9c23a2a4 kpatch-patch-4_18_0-553_85_1-debugsource-1-8.el8_10.x86_64.rpm SHA-256: 368349dca93cd9d1e333c8aa1bbd8bc759279fcb6d789d100c0372a8ace320ef Red Hat Enterprise Linux for Power, little endian 8 SRPM kpatch-patch-4_18_0-553_109_1-1-6.el8_10.src.rpm SHA-256: 4b9531a971a4bb0e6f08d1849c769078aa4209074987be81f22f26575dc7dfc3 kpatch-patch-4_18_0-553_125_1-1-3.el8_10.src.rpm SHA-256: 97fcb9abe578ece83e3145ff6a547ae790acee315da8e5f68b3f072ec5d7001c kpatch-patch-4_18_0-553_53_1-1-13.el8_10.src.rpm SHA-256: 4837b41aa8c8c1580f40b56fe15cecdfab98f96eed9d482fd3107a01220a7f1c kpatch-patch-4_18_0-553_72_1-1-10.el8_10.src.rpm SHA-256: 174785e9b5b2676a7005992fa02b468422b743683ee50605c567de8b707d75ee kpatch-patch-4_18_0-553_85_1-1-8.el8_10.src.rpm SHA-256: 2542de0b02b95581b496aa8da1a9bbb91a4ef6cf14b3be2d6088dc192cacb7e5 ppc64le kpatch-patch-4_18_0-553_109_1-1-6.el8_10.ppc64le.rpm SHA-256: 239c6863142fb86763c3338e9f14b42bccf67f7f90ef60030fa6e7b1e51b454f kpatch-patch-4_18_0-553_109_1-debuginfo-1-6.el8_10.ppc64le.rpm SHA-256: d632afbd27771cfda4b3ab6d1eeeff5b15d9c956b363beaf608336f50704fcfc kpatch-patch-4_18_0-553_109_1-debugsource-1-6.el8_10.ppc64le.rpm SHA-256: 9917cdb1a7d58c240a6404ac495ca2453605e117e482e0ab3e6febb547e95c59 kpatch-patch-4_18_0-553_125_1-1-3.el8_10.ppc64le.rpm SHA-256: 1e2640baac009b44dec8dd12ff133060c33b9030ff80f7eed513b3bd2c11f067 kpatch-patch-4_18_0-553_125_1-debuginfo-1-3.el8_10.ppc64le.rpm SHA-256: 22f8eace38b823179d69e3af3f51d50ca707017e8883e175ce6796623d1e5a19 kpatch-patch-4_18_0-553_125_1-debugsource-1-3.el8_10.ppc64le.rpm SHA-256: ac3fecf7de30d29601a6c219dd7fc198136bf1adaf349961a7275f885254fd43 kpatch-patch-4_18_0-553_53_1-1-13.el8_10.ppc64le.rpm SHA-256: d33493c34bfb8d940b1f07a466474fa6917d3b777d798ea72c77aec89f42e1f8 kpatch-patch-4_18_0-553_53_1-debuginfo-1-13.el8_10.ppc64le.rpm SHA-256: f414f394269b00434b4c320b79f41352196eb399d4433a47939294a94ead7e7d kpatch-patch-4_18_0-553_53_1-debugsource-1-13.el8_10.ppc64le.rpm SHA-256: 59668b6766552e4171150f14adf8c6f7c82588fcfe9c72779b61b176136789f2 kpatch-patch-4_18_0-553_72_1-1-10.el8_10.ppc64le.rpm SHA-256: 4f188fb8fbd0cb877c1a5c4e44c32ada04873c42e89119bbb42deaa5788204ca kpatch-patch-4_18_0-553_72_1-debuginfo-1-10.el8_10.ppc64le.rpm SHA-256: b6813344a62a6fb5fa1f7a813c0141e98578499fe61ae480c5656727d9d66066 kpatch-patch-4_18_0-553_72_1-debugsource-1-10.el8_10.ppc64le.rpm SHA-256: 4c20535289591e87adb78578f7a0fa4ca88d7b71009716342c8c8786e154ad84 kpatch-patch-4_18_0-553_85_1-1-8.el8_10.ppc64le.rpm SHA-256: 62537c676cc723101ada6532de35ca7548da1837adff9c907704cad4910b73dc kpatch-patch-4_18_0-553_85_1-debuginfo-1-8.el8_10.ppc64le.rpm SHA-256: 58be46eaf65812e22b92698b94bc98c8a8dc23a6fbbe2a06f9673cdd10f4ca50 kpatch-patch-4_18_0-553_85_1-debugsource-1-8.el8_10.ppc64le.rpm SHA-256: 5b8074f75a24a3e45fc310af8ea32d075c3e3e8fab7bedc6eb474b1d69664167 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM kpatch-patch-4_18_0-553_109_1-1-6.el8_10.src.rpm SHA-256: 4b9531a971a4bb0e6f08d1849c769078aa4209074987be81f22f26575dc7dfc3 kpatch-patch-4_18_0-553_125_1-1-3.el8_10.src.rpm SHA-256: 97fcb9abe578ece83e3145ff6a547ae790acee315da8e5f68b3f072ec5d7001c kpatch-patch-4_18_0-553_53_1-1-13.el8_10.src.rpm SHA-256: 4837b41aa8c8c1580f40b56fe15cecdfab98f96eed9d482fd3107a01220a7f1c kpatch-patch-4_18_0-553_72_1-1-10.el8_10.src.rpm SHA-256: 174785e9b5b2676a7005992fa02b468422b743683ee50605c567de8b707d75ee kpatch-patch-4_18_0-553_85_1-1-8.el8_10.src.rpm SHA-256: 2542de0b02b95581b496aa8da1a9bbb91a4ef6cf14b3be2d6088dc192cacb7e5 x86_64 kpatch-patch-4_18_0-553_109_1-1-6.el8_10.x86_64.rpm SHA-256: 3736d3a73a573f43effd0bbc100f12cef1d68af5226285cb59cc54bd3351ffb5 kpatch-patch-4_18_0-553_109_1-debuginfo-1-6.el8_10.x86_64.rpm SHA-256: c2b3a6fc83c006d160c491a27a8be4bc210cb0b130e06a10178a6af6804e5534 kpatch-patch-4_18_0-553_109_1-debugsource-1-6.el8_10.x86_64.rpm SHA-256: 80c385b8abc5ce517b794960dd36ad5119373c2d894e6864a8b6ed7a278c3103 kpatch-patch-4_18_0-553_125_1-1-3.el8_10.x86_64.rpm SHA-256: 8c6132266b4bec2369bd0e498d991b19f42438422a8b4b28164774c1f78373d1 kpatch-patch-4_18_0-553_125_1-debuginfo-1-3.el8_10.x86_64.rpm SHA-256: 71244818ceb4ae2e03c3ad21f5f7bcf75c8166995756a1affe3054f9dcd0b398 kpatch-patch-4_18_0-553_125_1-debugsource-1-3.el8_10.x86_64.rpm SHA-256: 4349890323bcaf4290c18e4be379a7d7eaeaf7c3a9db467e428f53e6ed781d70 kpatch-patch-4_18_0-553_53_1-1-13.el8_10.x86_64.rpm SHA-256: ed6f4aeeb55406631a42bde6d43ea6ce9b9a6b979fa5afff41bb52192cc53453 kpatch-patch-4_18_0-553_53_1-debuginfo-1-13.el8_10.x86_64.rpm SHA-256: 71edae14a55cf7cca4bf671fc703670a3654efd0b694d3699f9b4d6b4e612068 kpatch-patch-4_18_0-553_53_1-debugsource-1-13.el8_10.x86_64.rpm SHA-256: 7c8157fa84149f3f3a3be1aff0299656b99734829bee826319999fecbef76633 kpatch-patch-4_18_0-553_72_1-1-10.el8_10.x86_64.rpm SHA-256: eb2f2ba1a3133153a76a8e66b5b84d58c5a22e18602b0b5e01dd3d4ff71ed17f kpatch-patch-4_18_0-5