Red Hat Product Errata RHSA-2026:36645 - Security Advisory Issued: 2026-07-08 Updated: 2026-07-08 RHSA-2026:36645 - Security Advisory Overview Updated Packages Synopsis Important: kernel update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite (CVE-2026-53266) Bug Fix(es) and Enhancement(s): kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite [rhel-9.8.z] (JIRA:RHEL-182344) [RHEL 9] Bonding reports unknown speed/duplex for tg3 interface [rhel-9.8.z] (JIRA:RHEL-182768) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2467019 - CVE-2026-43074 kernel: eventpoll: defer struct eventpoll free to RCU grace period BZ - 2483519 - CVE-2026-46242 kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF BZ - 2485368 - CVE-2026-53266 kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite CVEs CVE-2026-43074 CVE-2026-46242 CVE-2026-53266 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM kernel-5.14.0-687.23.1.el9_8.src.rpm SHA-256: 4104bc4bac1ce9a526c2a66a0582dc939b20925175effc5e91d9cc1dd5aa37c7 x86_64 kernel-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 8748634936e27a957278e21b9584baaf5102dbe47b7a958d82af1a83699b95f2 kernel-abi-stablelists-5.14.0-687.23.1.el9_8.noarch.rpm SHA-256: 037c0f874b15651bdaa9597faa42f805c49706db3699fe5d31ef2d2ddc7aff2c kernel-core-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 6d79a8dd91460ca15ddb25f27583c7c41e24cc9dc74fe153543b9e48f0a4d963 kernel-debug-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 8900897d8aa5a247d75b05cf10d343bbb504ae4880419634f74046365b61e5a1 kernel-debug-core-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 17911f7df7ccd20c14b7224df3f8bebac3f9f18c844a65e9c1012014196a2dfe kernel-debug-debuginfo-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 3dd11661ea4693ce1bdde5a353d90efe3831a34975bbba6b225f219f8eddc527 kernel-debug-debuginfo-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 3dd11661ea4693ce1bdde5a353d90efe3831a34975bbba6b225f219f8eddc527 kernel-debug-debuginfo-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 3dd11661ea4693ce1bdde5a353d90efe3831a34975bbba6b225f219f8eddc527 kernel-debug-debuginfo-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 3dd11661ea4693ce1bdde5a353d90efe3831a34975bbba6b225f219f8eddc527 kernel-debug-devel-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: fd2d6a671c308efce0d00e737ad3acefe28cd39ffa0fb6d825d06fb4f99599f3 kernel-debug-devel-matched-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 2d385ad95998e67c3031c11db3db0bdfc73488953bd17233d07fe7b079ec4dad kernel-debug-modules-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: af49857d3a2af1cb90d7685fd36c7ade8d610379058e797593287d8c7b28ab59 kernel-debug-modules-core-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 74fee9828d4c71dc83d4a8a4c45b5bed6ae3496ac90de0db913a6ad9a123119a kernel-debug-modules-extra-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: eae6832d6f4acd29330e39ed15334acaa808e6f88fd103799a7ae2eb29f38e1f kernel-debug-uki-virt-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: b7813d8ac4d437d018b05acebbf3bd088c33183d962072f69b22f9c15734a269 kernel-debuginfo-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 87116aed2bb8d8c7335fc03682fb4507b5562ce1a1e4e2081a0cb51933074340 kernel-debuginfo-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 87116aed2bb8d8c7335fc03682fb4507b5562ce1a1e4e2081a0cb51933074340 kernel-debuginfo-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 87116aed2bb8d8c7335fc03682fb4507b5562ce1a1e4e2081a0cb51933074340 kernel-debuginfo-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 87116aed2bb8d8c7335fc03682fb4507b5562ce1a1e4e2081a0cb51933074340 kernel-debuginfo-common-x86_64-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 3dc726474104dcad34360b18d9fe1344eb1089ba705edf8839c44c1bb77e6de6 kernel-debuginfo-common-x86_64-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 3dc726474104dcad34360b18d9fe1344eb1089ba705edf8839c44c1bb77e6de6 kernel-debuginfo-common-x86_64-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 3dc726474104dcad34360b18d9fe1344eb1089ba705edf8839c44c1bb77e6de6 kernel-debuginfo-common-x86_64-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 3dc726474104dcad34360b18d9fe1344eb1089ba705edf8839c44c1bb77e6de6 kernel-devel-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 47e834a4939772d186c26cb114642475b4a64637b6be5353328b616cf8eb8676 kernel-devel-matched-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 2d1817d22de97bb41cd89bfeacc196817c0120776806f1a465b24825bfd8be7c kernel-doc-5.14.0-687.23.1.el9_8.noarch.rpm SHA-256: 0528ec1b92a7349ad52ebed17c8480e8ab00480c3b3bc86d5431da6348340346 kernel-headers-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 1861444d417af370a6fdd8d0ff28c3bbd6b6f4ebe5764edd5d3d21aebbc2bd6a kernel-modules-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 5f0f99701b3919acfb93331bcb642243b0de0c57ed03ea471eb9c5edb9215140 kernel-modules-core-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 22842debf79da277ea187bbf4d066a622d20f299d571c4e1d0fd797ac4efa5a6 kernel-modules-extra-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: d2d40693de7475ff3552a9fa54a497e68f7e41e317767b328cb676f56deb41cd kernel-rt-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: c4f676b75c21e0a939859d4e9b42c115a7bcc82ce4a997606f89adb6dceb2d2e kernel-rt-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: c4f676b75c21e0a939859d4e9b42c115a7bcc82ce4a997606f89adb6dceb2d2e kernel-rt-core-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 80af071bb3fa7c9cab35ceacab788da7bad847f9eebf12c59f4e1a402a61ca45 kernel-rt-core-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 80af071bb3fa7c9cab35ceacab788da7bad847f9eebf12c59f4e1a402a61ca45 kernel-rt-debug-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: fd44d492bcd0adafe0c3f0ccf9e8db53ee990ddeb05c6bcae87a3dd9ee616b19 kernel-rt-debug-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: fd44d492bcd0adafe0c3f0ccf9e8db53ee990ddeb05c6bcae87a3dd9ee616b19 kernel-rt-debug-core-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 0c49c56d79bb40aace4b4d69360ffeddb386e9c06d8e54c07ea39fc3f74adf06 kernel-rt-debug-core-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 0c49c56d79bb40aace4b4d69360ffeddb386e9c06d8e54c07ea39fc3f74adf06 kernel-rt-debug-debuginfo-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: d6d7c0b4800843a3bb51b4ecbd9eed32ce82de3677f287888f71b7e01104389f kernel-rt-debug-debuginfo-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: d6d7c0b4800843a3bb51b4ecbd9eed32ce82de3677f287888f71b7e01104389f kernel-rt-debug-debuginfo-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: d6d7c0b4800843a3bb51b4ecbd9eed32ce82de3677f287888f71b7e01104389f kernel-rt-debug-debuginfo-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: d6d7c0b4800843a3bb51b4ecbd9eed32ce82de3677f287888f71b7e01104389f kernel-rt-debug-devel-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: dac000053b2baeba57ec9928a22e377c93ba1ba2a155c9575d56980de6d0c2eb kernel-rt-debug-devel-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: dac000053b2baeba57ec9928a22e377c93ba1ba2a155c9575d56980de6d0c2eb kernel-rt-debug-modules-5.14.0-687.23.1.el9_8.x86_64.rpm SHA-256: 76326c9fca4e9d59d7d99582b9aabed3486559021408f4d94f0953730b63bec1 ker