Red Hat Product Errata RHSA-2026:38491 - Security Advisory Issued: 2026-07-13 Updated: 2026-07-13 RHSA-2026:38491 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling (CVE-2026-22979) kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) Bug Fix(es) and Enhancement(s): Kernel panic very early during boot while reading a tracefs file (available_filter_functions) due to invalid module name pointer [9.8.z] (JIRA:RHEL-183236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2432402 - CVE-2026-22979 kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling BZ - 2480453 - CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() BZ - 2481989 - CVE-2026-46086 kernel: net: bridge: use a stable FDB dst snapshot in RCU readers BZ - 2492269 - CVE-2026-53016 kernel: crypto: ccp - copy IV using skcipher ivsize BZ - 2492805 - CVE-2026-53166 kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock CVEs CVE-2026-22979 CVE-2026-43499 CVE-2026-46086 CVE-2026-53016 CVE-2026-53166 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM kernel-5.14.0-687.25.1.el9_8.src.rpm SHA-256: e1713e76732fac603e5bddd9f139822880753c0c161648f223c3258a60a67ae1 x86_64 kernel-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 15a7893f6032ff3386d8185825cff74d2febdcbc9a79e5c4a8a4c2d29cf7072f kernel-abi-stablelists-5.14.0-687.25.1.el9_8.noarch.rpm SHA-256: aeef2fd5d7d7e5e38a4a7e995c20a0417169a41ccb12dcaebc9767633b0dcd12 kernel-core-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 51d9bee0ac72ed48c1d489eaac5915ce9ae102a8beae3bcf2706818ff7d195c3 kernel-debug-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: f26c42f937e35faa6aca1396bf1e5f8fd6c55ab400756ba71eb3d1a334686f69 kernel-debug-core-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: dc8f54aaf8cd6cbf88010cf0b4a83af4ae5d5e4b60a1efd8f5848d3ac40d80b3 kernel-debug-debuginfo-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 51fbc08c497b6e38daf2ad87fe7451f8da5d7e0e068382f17cfd8cebffa23acc kernel-debug-debuginfo-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 51fbc08c497b6e38daf2ad87fe7451f8da5d7e0e068382f17cfd8cebffa23acc kernel-debug-debuginfo-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 51fbc08c497b6e38daf2ad87fe7451f8da5d7e0e068382f17cfd8cebffa23acc kernel-debug-debuginfo-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 51fbc08c497b6e38daf2ad87fe7451f8da5d7e0e068382f17cfd8cebffa23acc kernel-debug-devel-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: faf12095743a7181c5323329de0db9e5a0a07d87997a9edc03b7f590c40399bc kernel-debug-devel-matched-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: d7c0e668ffcc3caeeeb1ee95673b21744e522cb5a1acacb4377ac3f97ac17f18 kernel-debug-modules-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 435260ac0fc7e1339335d181c9e064056f37436b561db0681a5d2f1e0dd93cf6 kernel-debug-modules-core-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 1b1c6c795bf2c0bbb415b3f4baa5725c0cbb9b09472805a1999d8608fbfdf899 kernel-debug-modules-extra-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: de3e1c54f469d1b8a01dc42d76f68227d22a5600c41770028ce7b4b47b7cd034 kernel-debug-uki-virt-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 1d2270f95cafe6d2bd702316c3c4c96b95ccd8e2e0eb4c1886dfe821fb48176d kernel-debuginfo-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 1194a2bc4b3d80718d487b1091badfaf6327c1bbb3b803b99c47e1099779a676 kernel-debuginfo-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 1194a2bc4b3d80718d487b1091badfaf6327c1bbb3b803b99c47e1099779a676 kernel-debuginfo-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 1194a2bc4b3d80718d487b1091badfaf6327c1bbb3b803b99c47e1099779a676 kernel-debuginfo-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 1194a2bc4b3d80718d487b1091badfaf6327c1bbb3b803b99c47e1099779a676 kernel-debuginfo-common-x86_64-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 06cc5dcae2ddbd7220ae22cab73e44a09318026f88bd089323ec960eb3738e87 kernel-debuginfo-common-x86_64-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 06cc5dcae2ddbd7220ae22cab73e44a09318026f88bd089323ec960eb3738e87 kernel-debuginfo-common-x86_64-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 06cc5dcae2ddbd7220ae22cab73e44a09318026f88bd089323ec960eb3738e87 kernel-debuginfo-common-x86_64-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 06cc5dcae2ddbd7220ae22cab73e44a09318026f88bd089323ec960eb3738e87 kernel-devel-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 5ce3bcf73e20b3b36ecfde015e8b81d0264be8c7c1b339db79c52b4a0fbadb55 kernel-devel-matched-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: a60127bfbd53441fb3ebfa275b82bcc8958761bfb41a5a2f33a597ecf773132a kernel-doc-5.14.0-687.25.1.el9_8.noarch.rpm SHA-256: eb31200ecb4b20e7ac466d6c445a931e71f9e4361489b2c0fc2667436d78319c kernel-headers-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 245c3f6d940b8a2f96882fbb9a756d25d7fb04270a6da88cb7461f6d6fa2518e kernel-modules-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: f41efe349b28b6a9d643978d7cc59267d368532c3daa8f183d74707e7bdfee1a kernel-modules-core-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 3f5a5eeaee338b6e0c1f57bb42048a2ce3fe5a330ba88ed9f4ca9ec5e1ff2094 kernel-modules-extra-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 950fe319808cb36f54809df2925ec285964948519fba5323add0d35f927f540f kernel-rt-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 5dda8358056bfa55f79c8dcffa856e5f459640dd152362280e87f3c11308f0a7 kernel-rt-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 5dda8358056bfa55f79c8dcffa856e5f459640dd152362280e87f3c11308f0a7 kernel-rt-core-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: cae0c441dc0f09c739b6324492f19255f0f958ab919f0ad12d958ac6664ac4b6 kernel-rt-core-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: cae0c441dc0f09c739b6324492f19255f0f958ab919f0ad12d958ac6664ac4b6 kernel-rt-debug-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 63da75c98dee2b9fa3017dcf1d877df0280f2199b2ee0f275a40ab72b04132a9 kernel-rt-debug-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 63da75c98dee2b9fa3017dcf1d877df0280f2199b2ee0f275a40ab72b04132a9 kernel-rt-debug-core-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: ad234edd404fdb821ae883d2e9fb2be05615d8fc12ba9989276724e2433f631c kernel-rt-debug-core-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: ad234edd404fdb821ae883d2e9fb2be05615d8fc12ba9989276724e2433f631c kernel-rt-debug-debuginfo-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: c484a20a71bf076a06044e531b4c902a36df41b557bd1c36595dbdd9c7265b8e kernel-rt-debug-debuginfo-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: c484a20a71bf076a06044e531b4c902a36df41b557bd1c36595dbdd9c7265b8e kernel-rt-debug-debuginfo-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: c484a20a71bf076a06044e531b4c902a36df41b557bd1c36595dbdd9c7265b8e kernel-rt-debug-debuginfo-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: c484a20a71bf076a06044e531b4c902a36df41b557bd1c36595dbdd9c7265b8e kernel-rt-debug-devel-5.14.0-687.25.1.el9_8.x86_64.rpm SHA-256: 525ff023fe9e66f4025e7146759df2e0fc777