Red Hat Product Errata RHSA-2026:36956 - Security Advisory Issued: 2026-07-09 Updated: 2026-07-09 RHSA-2026:36956 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2429036 - CVE-2025-71066 kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change BZ - 2482564 - CVE-2026-46227 kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL BZ - 2482587 - CVE-2026-46113 kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN BZ - 2497033 - CVE-2026-53359 kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role CVEs CVE-2025-71066 CVE-2026-46113 CVE-2026-46227 CVE-2026-53359 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM kernel-6.12.0-211.32.1.el10_2.src.rpm SHA-256: 5b2f20c5f38127898998cd80ddafab7c3cf72b61eb76fd456b0ea30528ce4526 x86_64 kernel-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: b69ca54535b993e7613f23dffbfe8de24284e23e57557fc61abae4eafe3d26e7 kernel-abi-stablelists-6.12.0-211.32.1.el10_2.noarch.rpm SHA-256: b824fb2c0ad4f9275b13aab26133b92b2e57555242bc63177dd9203b964bc442 kernel-core-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 97d61f7d2bea004982288eab4ae5b88f6171a9cd9fcf93f3db99894e7003d7f3 kernel-debug-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: b96a4210cd370b3d629be4b9922b92f800961fb68f451b8575dc8e76bf69e185 kernel-debug-core-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 54a12e3816e810a4f5e9794cbb877e869adb28d46724fe84fe204db26d9af1d0 kernel-debug-debuginfo-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 00b1a0a125104412257ba0318f16eca970813b0e1a79b8be0aa61ad3d62ff1d0 kernel-debug-debuginfo-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 00b1a0a125104412257ba0318f16eca970813b0e1a79b8be0aa61ad3d62ff1d0 kernel-debug-debuginfo-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 00b1a0a125104412257ba0318f16eca970813b0e1a79b8be0aa61ad3d62ff1d0 kernel-debug-debuginfo-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 00b1a0a125104412257ba0318f16eca970813b0e1a79b8be0aa61ad3d62ff1d0 kernel-debug-devel-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 2144ad38dd574c9c428cafd576e5a4a254674862920147a5ff826e8c946f5e1f kernel-debug-devel-matched-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 930db9a882ce54bfaae033c5498b53479c445ca278ebf5039c7f0e7b6483b20d kernel-debug-modules-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: fdfbeee7f8e368488f46d3e2a4b0785e85d870013e2987e44fee6f6ecdb94f22 kernel-debug-modules-core-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 8e652f9276c9f923548d7fe367ef7485a5bca1cd195d93afcc5e6f6f7921d6c1 kernel-debug-modules-extra-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 8f311d9c8b38940de243d3c7b378f9c724d25d1caddd6cdaa132f343d8e0ad52 kernel-debug-uki-virt-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 61e3319ab02e7b556625d1555c504f0c9f53275575f3160fdf61e758ea57f794 kernel-debuginfo-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: ee6821b5e3a588f613e8bd8dfc8d8242b34d676e49c50ff2657d9b8f6d199765 kernel-debuginfo-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: ee6821b5e3a588f613e8bd8dfc8d8242b34d676e49c50ff2657d9b8f6d199765 kernel-debuginfo-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: ee6821b5e3a588f613e8bd8dfc8d8242b34d676e49c50ff2657d9b8f6d199765 kernel-debuginfo-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: ee6821b5e3a588f613e8bd8dfc8d8242b34d676e49c50ff2657d9b8f6d199765 kernel-debuginfo-common-x86_64-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: d00adf5c27ffa752f9dc37b03551d67a0d9368c690584933265039d10152c4a7 kernel-debuginfo-common-x86_64-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: d00adf5c27ffa752f9dc37b03551d67a0d9368c690584933265039d10152c4a7 kernel-debuginfo-common-x86_64-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: d00adf5c27ffa752f9dc37b03551d67a0d9368c690584933265039d10152c4a7 kernel-debuginfo-common-x86_64-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: d00adf5c27ffa752f9dc37b03551d67a0d9368c690584933265039d10152c4a7 kernel-devel-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: f01858a5a01e17c6acf916b51813195f43a08174be16cf502d2be111a2b04716 kernel-devel-matched-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 09aeccdd864f2a74b4a4eb7247aa19bf7502c9248b6c1518f3ccb3af99912c89 kernel-doc-6.12.0-211.32.1.el10_2.noarch.rpm SHA-256: 36532b235700df6e5f978d7c74a06850adde2233348139535c2ef547129bf369 kernel-headers-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 021b346fce7b2039a5bd1fc8fa077ecf3cbb5b723dd279734d003d02c18aa25b kernel-modules-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: fa6cb64e55de12649a202cdc3c5b162ba6ad616cf0a06715b6abfd654490f114 kernel-modules-core-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 7fad07ddf6231d287b2d7bef50b52ee3df5a2d2f3d542833f9f79bd5ca17a67d kernel-modules-extra-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 554eac35e76f7631eea9174f9d61330c256e22b35350cba78941d849304ac89d kernel-modules-extra-matched-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 0784b00934853b098455acff0603b6cca2cedcf35147ac5a487e74a86b249166 kernel-rt-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: d8ad36dca9d7820e3ed32cab609bf1a5ca6be6336d95eca26ad46313e67d8957 kernel-rt-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: d8ad36dca9d7820e3ed32cab609bf1a5ca6be6336d95eca26ad46313e67d8957 kernel-rt-core-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 9f43bad65e8ca32b86a98aec06501f6d661ed09c148bee3a8319fd016dda80f6 kernel-rt-core-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: 9f43bad65e8ca32b86a98aec06501f6d661ed09c148bee3a8319fd016dda80f6 kernel-rt-debug-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: a8d58ea2e94062248cddd78b608ad37ac8a6125f36e4f2c7719b40d2c52630e4 kernel-rt-debug-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: a8d58ea2e94062248cddd78b608ad37ac8a6125f36e4f2c7719b40d2c52630e4 kernel-rt-debug-core-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: cedf50f219f517b153ecc54a14a04016b927bad44f25b6fbe0b98f0e5329e2e0 kernel-rt-debug-core-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: cedf50f219f517b153ecc54a14a04016b927bad44f25b6fbe0b98f0e5329e2e0 kernel-rt-debug-debuginfo-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: a728b15d55487536763aa0de3ed6638ddeecee59ca4c739279ea864027c46e36 kernel-rt-debug-debuginfo-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: a728b15d55487536763aa0de3ed6638ddeecee59ca4c739279ea864027c46e36 kernel-rt-debug-debuginfo-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: a728b15d55487536763aa0de3ed6638ddeecee59ca4c739279ea864027c46e36 kernel-rt-debug-debuginfo-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: a728b15d55487536763aa0de3ed6638ddeecee59ca4c739279ea864027c46e36 kernel-rt-debug-devel-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: c904146e92b59e3ffb7f55c36479fc7f8c3f5e8e4cc817dea3a5bd23a11301fa kernel-rt-debug-devel-6.12.0-211.32.1.el10_2.x86_64.rpm SHA-256: c904146e92b59e3ffb7f55c36479fc7f8c3f5e8e4cc817dea3a5bd23a11301fa kernel-rt-debug-mo