This Important kernel update addresses two vulnerabilities, CVE-2026-43499 (CVSS 7.8 HIGH) and CVE-2026-53166, in the `rtmutex` and `futex` subsystems which could lead to denial of service or other impacts via NULL pointer dereferences. The vulnerabilities affect a wide range of Linux kernel versions, specifically from 2.6.39 up to but excluding 6.1.175, from 6.2 up to but excluding 6.6.140, from 6.7 up to but excluding 6.12.86, from 6.13 up to but excluding 6.18.27, and from 6.19 up to but excluding 7.0.4. The fixed versions are 6.1.175, 6.6.140, 6.12.86, 6.18.27, and 7.0.4, respectively, requiring a system reboot after applying the patch.
Red Hat Product Errata RHSA-2026:37728 - Security Advisory Issued: 2026-07-10 Updated: 2026-07-10 RHSA-2026:37728 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for NVIDIA for RHEL 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) Bug Fix(es) and Enhancement(s): [Exploits (KEV)] CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() [voyager-26.02] (JIRA:VOYAGER-1244) [Exploits (KEV)] CVE-2026-53166 kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock [voyager-26.02] (JIRA:VOYAGER-1250) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the NVIDIA for RHEL 10 Release Notes linked from the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for ARM 64 10 aarch64 Fixes BZ - 2480453 - CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() BZ - 2492805 - CVE-2026-53166 kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock VOYAGER-1244 - [Exploits (KEV)] CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() [voyager-26.02] VOYAGER-1250 - [Exploits (KEV)] CVE-2026-53166 kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock [voyager-26.02] CVEs CVE-2026-43499 CVE-2026-53166 References https://access.redhat.com/security/updates/classification/#important https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_for_nvidia/26.01/html/26.01_release_notes/index Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for ARM 64 10 SRPM kernel-6.12.0-231.16.el10nv.src.rpm SHA-256: c27b8e60bde5db160a95f87b80ddc656f858a9b4144e4f264d3aa95d9a129600 aarch64 kernel-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 41b5a4168e8f6ddbea66fb17c4be4d3402a54abcd515a53b9f58e42e99977a6a kernel-64k-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 69682cccecc66e4973da1ec42d3c282f28ab4ea2d445a7aed0feda228cc0262c kernel-64k-core-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: c451a771a2960be0dfd18e5cce0108992a55ee43b2afe33de956421daae5a56e kernel-64k-debug-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: b29beec5c1f6c3fdbb9199c37cf60121f92d4a04126e3aa5be85dea0d028db30 kernel-64k-debug-core-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 7a4f326998d9d8951f05fe0519993bc85d30e5fd768aaf89a4d466117e6f2de9 kernel-64k-debug-debuginfo-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 98701dd9f11ee240faffdade3282a5421a8ba5d025f08a76bf77d7fdedcb7476 kernel-64k-debug-modules-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 4af828016001b95c8d117357e5a78bee7c3f5a02eca4bbc0b436fa7f6dabc92a kernel-64k-debug-modules-core-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: ff9a6c2798cae9c3210960a9f4fea4cdf8da937936e0bb654fd9e6c211a3bbef kernel-64k-debug-modules-extra-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 671b93a1b83be135614cecfd115a5dcd812c33cca0a38368cadddb3fb585883e kernel-64k-debuginfo-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 87ecb047d59ecb395dd27e83f1f6ef5e408baf946254074d797b4d1138023afb kernel-64k-modules-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 63f82bb3a756d167560ec9f48af7b84e68cf218780fae389ffaa679274885294 kernel-64k-modules-core-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 6f8481a13ccf840cfc0f7a2cf1a49172f0ea912b48e0a65c526ff578f853961b kernel-64k-modules-extra-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: eb8ba928258da6fa433d8b91dc2b0aca9be6490f0874b994614414cf086319e7 kernel-abi-stablelists-6.12.0-231.16.el10nv.noarch.rpm SHA-256: efdb9bc2efdc588829712aea0cffea8276490e66d605df939563b647721f178c kernel-core-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 8ed119544d8637696e0ea145b77b657b0ae35e3cb58faf17dbe7502d240d4409 kernel-debug-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: d6630707f3a70506f95c1e495561971a4b87a2d7fbf674f5cdbb452c6e6d1899 kernel-debug-core-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 99e90d3de0972013e8c9ea0d1429bf18527c2c438b9002360fc42ab33d59bfd7 kernel-debug-debuginfo-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 93eab91885bc3b013bb4dc1489012487f33ac389e8a5f1bfb9cebeb182ca00bb kernel-debug-devel-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 491f1c93b7bec88fb161e730001eb933aac4f29c7c87b12a6f6350a9fd815eb5 kernel-debug-devel-matched-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: adb8741eadc0cadc613ebf1f697ea6a9af81586525c38cf29b5dc1e4715aca4a kernel-debug-modules-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 43404459dd57b3067fa4afa5a0218f5545daa7dec1c6418a296e0ef2f985fd4f kernel-debug-modules-core-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 83f806f22ece20aac0e5225124508d8a9c5581e5195bcdef3e36f7e359059748 kernel-debug-modules-extra-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: b4551f564513b592060089309e7d162c81e74e9e36a8f5e6fe85f168136ab0a3 kernel-debuginfo-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: a305d04ae5bdd48715f0ed795cfd8825c070ef548904c8e5bba4039109ab076d kernel-debuginfo-common-aarch64-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 33c86581784013909848483f5f3cf0f00bb3c1cf74cf7cd1eb242e23243a9423 kernel-devel-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 40539b45a123e8fd41dbdf7618b15e9c64cf972553c22065782fd4507de9a8f8 kernel-devel-matched-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 180ac77e5c9c66a83b2266424d7ad4d547ac944b5f7251d97fb07c76d49e8fee kernel-doc-6.12.0-231.16.el10nv.noarch.rpm SHA-256: 00a454bc5420955f6e161c79d48034f3734af1b7a82635516de8317da98aab82 kernel-headers-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 6a57a49552e7682ba4840ad3b6baf9a26ef4afaeede6ded8814e27a2ec296b08 kernel-modules-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 697cb3f11a6d4a33e8df4fd9b788366aa9d1bd3d37d6818cbb90ce31f5afb51c kernel-modules-core-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: f5815a2066011f2835cb8e876945a16f744794a001d71090a8a1d2ef4ab0c236 kernel-modules-extra-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: a222cf0b95f9c962304db9f875bb2267b97f569b212d2eaf97e67af35e10cbd4 kernel-modules-extra-matched-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: e499ba3b3e67017367d155b32ac7a0ae7666aed2be7bb6f1be12276db7277f90 kernel-tools-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: d323597ced8430f1850f8920b221513b5bec2f497d651ea71942f96a5251e9be kernel-tools-debuginfo-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 03d2c7c05907ce8ae3312a72aaa8e96fb5f98c55a2eecea1bccb75db6325f822 kernel-tools-libs-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: a84a361d8d27038ad638ee54d318868b33511b9cac4aa0b1a102853f62dfcc10 kernel-uki-virt-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: e3c0eb3a15cdfdf7520041b9323de4dd5b8f7de4ae3af6b552a2698baa7c49dc kernel-uki-virt-addons-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 70fdfd871059d421a5c85dc13d9865fb5a55ed889c796a31f6e4610ec4561be4 libperf-debuginfo-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 1ebab932dfdc6cf82efb3c9c8e8ac2a74cb138208d768294fbaae563c1c91a73 perf-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: c6898bdc53f41e5947c9d7d1313179d34a1b6bb0f96c0680bd34f9a9665a6cfe perf-debuginfo-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 47330fadf93830c8fe91f4eede57addf0de92d22a16009c14fe402f14864aa04 python3-perf-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 11cac633f899f1293760759369c48b27da632204009b9823f4ae90b3519550f0 python3-perf-debuginfo-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: a8c9cd66f7fb32a2419971bfd0bda7462607431b68504a08bf3db66c26aa1bbc rtla-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 755f69dffc82a8f3460fd3e4a1f939639066b36a28098f0555e0788e155b4844 rtla-debuginfo-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: 0000b411bb37271134996a4db6f7cbf609091ab0851e7c2c54e8d2e2964b8dbf rv-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: dc1c03b4345cce62bdcf3b3e5f868998509bfcec379552dd27b5b151120e084a rv-debuginfo-6.12.0-231.16.el10nv.aarch64.rpm SHA-256: d6548cda38875d4c5ac3b614193793fa8245f25e94604663e583581e08ee3512 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .