This Red Hat security advisory addresses three Important-severity kernel vulnerabilities: two use-after-free flaws in the eventpoll subsystem (CVE-2026-43074 and CVE-2026-46242) and one use-after-free in KVM shadow paging for x86 (CVE-2026-53359), all with CVSS scores of 7.8 (High). Based on authoritative NVD data, affected Linux kernel versions include 6.4.1 to 6.6.135, 6.7 to 6.12.82, 6.13 to 6.18.23, and 6.19 to 6.19.13, among other specific ranges. The fixed versions are provided per CVE, such as 6.6.136, 6.12.83, 6.18.24, and 6.19.14 for CVE-2026-43074; Red Hat customers must apply the provided kernel update and reboot their systems.
Red Hat Product Errata RHSA-2026:37729 - Security Advisory Issued: 2026-07-10 Updated: 2026-07-10 RHSA-2026:37729 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2467019 - CVE-2026-43074 kernel: eventpoll: defer struct eventpoll free to RCU grace period BZ - 2483519 - CVE-2026-46242 kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF BZ - 2497033 - CVE-2026-53359 kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role CVEs CVE-2026-43074 CVE-2026-46242 CVE-2026-53359 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM kernel-5.14.0-427.137.1.el9_4.src.rpm SHA-256: 1bba750ab2d9fa9ddaf6d66e7f4f1f07680d373d0f294111775eb92c2e7378d9 x86_64 bpftool-7.3.0-427.137.1.el9_4.x86_64.rpm SHA-256: 6e98cfe023ade6b0cbdf175611d0ad5f030168f70226f4bfc87d666614c20d02 bpftool-debuginfo-7.3.0-427.137.1.el9_4.x86_64.rpm SHA-256: 451f2718cb3e3f4d5180f66b551a3776df5cbc9bd7f733d48a4ef24d3b7c925e bpftool-debuginfo-7.3.0-427.137.1.el9_4.x86_64.rpm SHA-256: 451f2718cb3e3f4d5180f66b551a3776df5cbc9bd7f733d48a4ef24d3b7c925e kernel-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: f4744d8d58ebdba3827a6e47cb01e2f189ee5743e9f2956d65d2080726e8824d kernel-abi-stablelists-5.14.0-427.137.1.el9_4.noarch.rpm SHA-256: b1de6dc37cfe945dd9847bde9201ea383fe02f735690d07d9abcb2d1977c3522 kernel-core-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 30e437ed8840ffe5402c5ff9171ca9b3071a64fa80f35f2010f5c7c563480fea kernel-debug-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: ca5f83bb81fd783074589bf3fbb6dc9ec27501d33bf29fba28865cc19eea74c1 kernel-debug-core-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 96db019fefdd23920aedb2b47f8e6d9a9c4dd712dae17090357cd542782ced12 kernel-debug-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 3063fe40e628ed797264142c71e9eb4caf774fce0fdf44380e42b8357b0ed086 kernel-debug-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 3063fe40e628ed797264142c71e9eb4caf774fce0fdf44380e42b8357b0ed086 kernel-debug-devel-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: ac26051dc7c33ee7025fd74c073dfff1b0ca24739d5e4b7f7b2657dd54f08cf1 kernel-debug-devel-matched-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: e5da4ec63cb0fd16f5c2583aa0490527d90602778e2e69e0440d1d30db8c03f8 kernel-debug-modules-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 1b9cd42ebd245124010873e2a1c741583314d446670a3a398e9049a0c9f04784 kernel-debug-modules-core-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: d01834527c08aba4a7e5b3b1e0ac696652f97cca5ae5b2b8d10418c3d0f1e674 kernel-debug-modules-extra-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: a1047b170c3d5a3081d49d8bfecf24ccbb61ed28d2aaf4fabac53145170ffcbd kernel-debug-uki-virt-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 8a2c66ac0cc4fcaae59d99d46959a63b530f5a3e711d23b12c8a6dbabcc84885 kernel-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 1954ec2c9879ec2b37acebbd8b94d43aae7c567edab17616c7c399d5864b649c kernel-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 1954ec2c9879ec2b37acebbd8b94d43aae7c567edab17616c7c399d5864b649c kernel-debuginfo-common-x86_64-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: bf588ceb6fdfc1068a1e4d3e2f95c9c35a849f6b3562b32f4f1383afa34047d3 kernel-debuginfo-common-x86_64-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: bf588ceb6fdfc1068a1e4d3e2f95c9c35a849f6b3562b32f4f1383afa34047d3 kernel-devel-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 4e2c40d776ec15f693348df8badc7619c8f2e5c0d9a33def87eb6d13157b15f0 kernel-devel-matched-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: f6729782816c9a8b0886ff5118e3b86d15f9c71fca3e3e2b6d29f90fdfdddd19 kernel-doc-5.14.0-427.137.1.el9_4.noarch.rpm SHA-256: 4e8f9b4e71e611e14c1e263e13fbf946826712b9d1553147147d9570006656b3 kernel-headers-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: f38a546eaa9581cf5731f7ae8f6c3ff8676ff9f678de93f9983cd9103e0fa6e0 kernel-modules-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 8d21fd8eeef7f4eb1762f7e30154fe2e5cdee02d1f8f68def38cb7f3da94b27c kernel-modules-core-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 511207183cdedff5fe7b9f674c555abd573825dd86352e55dc0d1bf168c436b8 kernel-modules-extra-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 9aed30a8f84916f424bb37be6993d7cb64fbbdc57f87fd93039d0250e30234b6 kernel-rt-debug-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: de1c1d162a47623ea04d95e101b06d0230256b73579a8c7c5cd3807f53129e2c kernel-rt-debug-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: de1c1d162a47623ea04d95e101b06d0230256b73579a8c7c5cd3807f53129e2c kernel-rt-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 80d94832bbc56025b62e0062652f2ea6708141285f06e4dce82100f8547d99a8 kernel-rt-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 80d94832bbc56025b62e0062652f2ea6708141285f06e4dce82100f8547d99a8 kernel-tools-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: d111d1649c351a2409a836fad6035a1ff5778fa3d9d22850f0fd44e7a9544eb8 kernel-tools-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 1b282a21deeea31a487665d437fe9f92c05e27cc418034cd50114ad9990c1ea1 kernel-tools-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 1b282a21deeea31a487665d437fe9f92c05e27cc418034cd50114ad9990c1ea1 kernel-tools-libs-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 3a9f927ba5f8b0660bd4a9d4c14ffdcc159c07807bc1e66cf59d874c13ec2c76 kernel-uki-virt-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: decc3011e4ebdff6f49fc7407744725964e157b9044aa16a1721420d0547441b libperf-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: e208983d945130298aacc8423e617453d0cf332a450a03ef8ede166650c3a2ef libperf-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: e208983d945130298aacc8423e617453d0cf332a450a03ef8ede166650c3a2ef perf-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 9ec72deff348046e86a28bab2c4d32739fd2fff8d133d8f88edc335e2874f3a9 perf-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: eaafcdc09ca073d893b79f91016d7a3d70ce72363cb46d7f6541e677a0707367 perf-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: eaafcdc09ca073d893b79f91016d7a3d70ce72363cb46d7f6541e677a0707367 python3-perf-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 4e79767b26b1ec2c2048c11c19eecd51eac80d6235642b655470e7c7d3eee3e3 python3-perf-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 207c442ddd0312e4f628e82f486c417afbc5b0c4cd9fdd4b699dabc10ab078fc python3-perf-debuginfo-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 207c442ddd0312e4f628e82f486c417afbc5b0c4cd9fdd4b699dabc10ab078fc rtla-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: c5cb9dfa49093ee1292ff861c9fe2e05f4025973df143864c395679cf6637ebf rv-5.14.0-427.137.1.el9_4.x86_64.rpm SHA-256: 32d72f3b7b680b0ccf345cbd7530ba8186ec7b3b1aa4d45834b7913bdc60d49e Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM kernel-5.14.0-427.137.1.el9_4.src.rpm SHA-256: 1bba750ab2d9fa9ddaf6d66e7f4f1f07680d373d0f294111775eb92c2e7378d9 ppc64le bpftool-7.3.0-427.137.1.el9_4.ppc64le.rpm SHA-256: 723a1fa601b0ff95163b6e6c3383bd2497cec2243fd797090c1ee5915456b81d bpftool-debuginfo-7.3.0-427.137.1.el9_4.ppc64le.rpm SHA-256: 2bd44d2b78680f2bd90eb0f24a1ba3595b2c933825aaff81d640a88c434de678 bpftool-debuginfo-7.3.0-427.137.1.el9_4.ppc64le.rpm SHA-256: 2bd44d2b78680f2bd90eb0f24a1ba3595b2c933825aaff81d640a88c434de678 kernel-5.14.0-427.137.1.el9_4.ppc64le.rpm SHA-256: 7bb485436cfdcebdc425ffac16894481b66110f388f6b6fb0010f0f581b2e26e kernel-abi-stablelists-5.14.0-427.137.1.el9_4.noarch.rpm SHA-256: b1de6dc37cfe945dd9847bde9201ea383fe02f735690d07d9abcb2d1977c3522 kernel-core-5.14.0-427.137.1.el9_4.ppc64le.rpm SHA-256: ebbc8814501759c4c16ffcfaf1c7d5d234d20e07c80d76f3c0cd029e770bd7b0 kernel-debug-5.14.0-427.137.1.el9_4.ppc64le.rpm SHA-256: d15f3605fc72a4a0fc3cf19bb6ccc5e4b2fc7c2e8ef51e98bb7182cc34bb24f6 kernel-debug-core-5.14.0-427.137.1.el9_4.ppc64le.rpm SHA-256: 433ef741983140f89aea7b65ab7c39d5c470ff2db8f7e3e1a6115876b1122406 kernel-debug-debuginfo-5.14.0-427.137.1.el9_4.ppc64le.rpm SHA-256: 55b5fe39839f643152fd8b2