Red Hat Product Errata RHSA-2026:36767 - Security Advisory Issued: 2026-07-08 Updated: 2026-07-08 RHSA-2026:36767 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (CVE-2024-27398) kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125) kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125) kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) Bug Fix(es) and Enhancement(s): Kernel panic while shutting down ice driver due to use-after-free [rhel-9.4.z] (JIRA:RHEL-177523) crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [rhel-9.4.z] (JIRA:RHEL-182538) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2280464 - CVE-2024-27398 kernel: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout BZ - 2323937 - CVE-2024-50125 kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout BZ - 2422699 - CVE-2025-68183 kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr BZ - 2455334 - CVE-2026-31408 kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold BZ - 2464369 - CVE-2026-43027 kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup BZ - 2467215 - CVE-2026-43279 kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing BZ - 2467234 - CVE-2026-43125 kernel: dlm: validate length in dlm_search_rsb_tree BZ - 2481922 - CVE-2026-45984 kernel: gfs2: Fix use-after-free in iomap inline data write path BZ - 2482563 - CVE-2026-46152 kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result BZ - 2482588 - CVE-2026-46189 kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path CVEs CVE-2024-27398 CVE-2024-50125 CVE-2025-68183 CVE-2026-31408 CVE-2026-43027 CVE-2026-43125 CVE-2026-43279 CVE-2026-45984 CVE-2026-46152 CVE-2026-46189 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM kernel-5.14.0-427.136.1.el9_4.src.rpm SHA-256: b130800de3adab50c59191936afa2aba32ca61797f50527ac237f67227079e22 x86_64 bpftool-7.3.0-427.136.1.el9_4.x86_64.rpm SHA-256: 85a33ac95cdc871b77ad3041ce223ec5179d6ee91012035de557bf1af1b91b2e bpftool-debuginfo-7.3.0-427.136.1.el9_4.x86_64.rpm SHA-256: 8e95ce2b6439d72feca887be771ce4725867098e42360d1a979415ed2c4f46c3 bpftool-debuginfo-7.3.0-427.136.1.el9_4.x86_64.rpm SHA-256: 8e95ce2b6439d72feca887be771ce4725867098e42360d1a979415ed2c4f46c3 kernel-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: ae4c384c18cdb1775463d80ffea4acb4edfbdd54f2281aa61f1cd19e3822c881 kernel-abi-stablelists-5.14.0-427.136.1.el9_4.noarch.rpm SHA-256: 64ded7ea7cb25c760f64f65e503e8a4dc7b062d3a611e391e762e840ec0a9ba2 kernel-core-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 874a077c6adeaa4293daa99948c35fa2e7b54ca35af7725fe60e0e697b9cef47 kernel-debug-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 87d1af3b135a1a8bd6d25b36ab31a1c09ebb2d41e7a727e213a6f800ae4e70c2 kernel-debug-core-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: f7877b5e92424717871d55b2028eadbb082f9726f808d147384c95e1e8e0dd4b kernel-debug-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 1a0b03eb5f9562fd6e84f1985e7675186db0a50aa4d6cb661158f065a6a4f5db kernel-debug-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 1a0b03eb5f9562fd6e84f1985e7675186db0a50aa4d6cb661158f065a6a4f5db kernel-debug-devel-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 811012d4455db22a62cd7bbb8a1a0bc7562492161714ab6fec66f34fab7fd0ff kernel-debug-devel-matched-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 92c33e9b4ca707a4fb3825c21d9ac11c9aa2b8f0f00f63eef2fb888f5b25743a kernel-debug-modules-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 477a5c77121f685edfc276a01387d664759d23a3414ed0993152563a7a335a40 kernel-debug-modules-core-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 0dad786520b1421657903bb20bea2cb8029b57546fd9af1cfd6ab2f9de75a43b kernel-debug-modules-extra-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 4b06d6cbecad4661aa628cc280b3655a0f2814f5cb82c60afbcc0cb4e5e09a48 kernel-debug-uki-virt-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 07ab463d4aee4b409559a041faf12e33e7124e8ae398d4722611b20750432fe4 kernel-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 5a4c147e455778e2850420f74f02a5c132ad175fe9fb0cc88aa859a2b86d14b5 kernel-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 5a4c147e455778e2850420f74f02a5c132ad175fe9fb0cc88aa859a2b86d14b5 kernel-debuginfo-common-x86_64-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 5991df0f5b1e981d2d7110b840f347fd6ea255c817934275af54f80f1fc94d48 kernel-debuginfo-common-x86_64-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 5991df0f5b1e981d2d7110b840f347fd6ea255c817934275af54f80f1fc94d48 kernel-devel-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: e7ea72ca652b2285eb12a56119dfd0877f977a34bab801b59383860469f4b969 kernel-devel-matched-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: b03eb662f5a65417c725638a61457734b2e248e655b8d740e81ccf80e2a5a55a kernel-doc-5.14.0-427.136.1.el9_4.noarch.rpm SHA-256: e5df580ad5eefd7c8f55b6e0a47d50f0048b749d2cb2bf37da8d032a461510e1 kernel-headers-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: d8ee8f762fa0c4066e7dd006187f4331fcdc11bae22b58b4253516452facd514 kernel-modules-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: bbb444b25e68cf013027f27b71fa226665a8790737428ca66debde3742f35118 kernel-modules-core-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: d48b435707511d752ddadbd37af79b29e0aaea4ce5abdb64ddfa2f6827736e0f kernel-modules-extra-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 97aaaf8605594d26d64a7ff5534510e17f03a95dead4e210a72350a5a4eab983 kernel-rt-debug-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 37ceeb3164cf395fbb66303ba633f668bafe5e95f1a77410f60162f743f90822 kernel-rt-debug-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 37ceeb3164cf395fbb66303ba633f668bafe5e95f1a77410f60162f743f90822 kernel-rt-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: e02f360eac93787ea08093ba31bb02590091b4c24c92680c76d57eb3d4073ecc kernel-rt-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: e02f360eac93787ea08093ba31bb02590091b4c24c92680c76d57eb3d4073ecc kernel-tools-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 4ba953b324816d09fe37c79bf5d922e4ea8838ab8b2ac5ba30857c808531943b kernel-tools-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: dbee2c8ea42dfe9f4ec7096b1ca1808197b853d51c09467f99ca96cd1b763959 kernel-tools-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: dbee2c8ea42dfe9f4ec7096b1ca1808197b853d51c09467f99ca96cd1b763959 kernel-tools-libs-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 4598a76e08d9b416b68e3cfeeda67c236ff19a82d1fcf05a00258d3bd86e725a kernel-uki-virt-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 8631dda694cece1cdf93c4399dda012549e31eec730efcbaabe7f5ee665ce744 libperf-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 17edee88d4dab21e3ec477f92fe78eb81c66119a067d7ea0237e03ed3dba1020 libperf-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 17edee88d4dab21e3ec477f92fe78eb81c66119a067d7ea0237e03ed3dba1020 perf-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: e2c1e4a86c48d03f8d9f9e89a5795396cccc694b74dabeed71a9d81f34019126 perf-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 6975297f303d9358cc7d372ed81d0b9f53eb6b091ecfd7b80ea9aade07c0feb0 perf-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 6975297f303d9358cc7d372ed81d0b9f53eb6b091ecfd7b80ea9aade07c0feb0 python3-perf-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 9953240684acf30afd037bf02a1f0fb9a68e9c610f65a7031a164d783824aded python3-perf-debuginfo-5.14.0-427.136.1.el9_4.x86_64.rpm SHA-256: 094592c4ff62ca53f3f232ec0b6a38866c14