This Important Red Hat kernel security update addresses three vulnerabilities: CVE-2026-46086 (CVSS 5.5), a flaw in the bridge networking subsystem's FDB handling; CVE-2026-46116 (CVSS 7.8), an issue in the xfrm framework's state deletion; and a separate XFS data corruption bug. Based on authoritative NVD data, CVE-2026-46086 affects Linux kernel versions from 3.14.1 through 5.10.258, 5.11 through 5.15.209, 5.16 through 6.1.175, 6.2 through 6.6.139, and 6.7 through 6.12.85, with fixes available in versions 5.10.259, 5.15.210, 6.1.176, 6.6.140, 6.12.86, 6.18.27, and 7.0.4. CVE-2026-46116 affects versions from 2.6.19 through 5.15.209, 5.16 through 6.1.175, 6.2 through 6.6.139, and 6.7 through 6.12.87, with fixes in versions 5.15.210, 6.1.176, 6.6.140, 6.12.88, 6.18.30, and 7.0.7. A system reboot is required after applying the update.
Red Hat Product Errata RHSA-2026:39179 - Security Advisory Issued: 2026-07-14 Updated: 2026-07-14 RHSA-2026:39179 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) kernel: XFS data corruption using reflink () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2481989 - CVE-2026-46086 kernel: net: bridge: use a stable FDB dst snapshot in RCU readers BZ - 2482523 - CVE-2026-46116 kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete BZ - 2498915 - kernel: XFS data corruption using reflink CVEs CVE-2026-46086 CVE-2026-46116 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kernel-4.18.0-553.144.1.el8_10.src.rpm SHA-256: 1811e9323564c6e7ac4acf6dd1832e1b85422ef40a1015903662f29189d22c14 x86_64 bpftool-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: af767082cc72b4f54d42a7ef7f46af2009b77e7daa37c8e768ed7c335b1610c8 bpftool-debuginfo-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 30cdfb60bbcc734acc23fba8726ee3a5973fd4d5aa5f3fcbc56d1618b054cdfa kernel-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 64ab2cb28a7c88555f16228680374590a62faaaa71efd07880cb8e9a585b85fb kernel-abi-stablelists-4.18.0-553.144.1.el8_10.noarch.rpm SHA-256: be0e9fbb3c74ab590105b7e5b2ea0698452c397bc7f641f8b0437e12e1221397 kernel-core-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 0f7a3370eca85cce02794378a0f28e8892026d72298d88761e2afef395dd629d kernel-cross-headers-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: a079aedd9cfb9691cedab9d59c1aa93c1ad1ce2e51c65f37e034954f3d317021 kernel-debug-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 3d88ee2e0a68426014fd0994a64840b9c4d4eb4d326d3cc430fc941e9c659b15 kernel-debug-core-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 43aac6e24e8ac7595b2e56af87a2ba79b41d39b1273ba958346a55d4c0955e57 kernel-debug-debuginfo-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 86eb8da3d5c29b10d3627fd618680c0d45b1d0f62d2dfdfd3c9363a14df72b4f kernel-debug-devel-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: f79392267c7456828d2ce52f0af47c2a484e895ff20dd693c4a0f7ebc4ce9d84 kernel-debug-modules-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 040939ffb90d8a8ff1e1ef3c5a322e94067bb088d200b462a38832a392937ad5 kernel-debug-modules-extra-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 85237701adc00cb4a479b11664e680d5950a4f89175565e876622a789df9d154 kernel-debuginfo-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 3482d586514e7f2c6e9278bd411e54ed1ff123cd033e1748d7c3b55d5ba7b43c kernel-debuginfo-common-x86_64-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 7748ea2c23f7c28d58afbf86e994b04158a9d7f4ef23784f765cfc9a2d53d30e kernel-devel-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 4d098d7520fa30c8d6887c45e405a4d955fcc27abbcc0975f8895167300f2ff3 kernel-doc-4.18.0-553.144.1.el8_10.noarch.rpm SHA-256: ff3ed7562cbf9bb84b2b3523c443639eca8b96bfe5374e36bc504dd3bc315f08 kernel-headers-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 3a303903ca2804b3c23bee4c64d4fe83c9a49bb1ce99b396a804dde84eafec5e kernel-modules-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: ec9d1a6a85a9cbb702f2e83ee54fd758541bc4fc8f51721bf0f133e47e296540 kernel-modules-extra-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 30f4e5175096972964b110613ad0f8e979d201e303f003d1a8731d865bccc3aa kernel-tools-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 6be584770c83e93a4975588ec78f83d393caeee9d5866c70e81f25e3665dba7e kernel-tools-debuginfo-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 9c95bbf65813a146a22fe73508028be7a810042169745e3afba23e16b53b4d78 kernel-tools-libs-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 804e49afd3247a066d7f5bcda3d06ea21c21b463e9b556971157cc43de266b7e perf-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 0a33804664db210e107d395e056f496bac2afa5cf3695bf57d26bd9ce77850a2 perf-debuginfo-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 3db8d4dba031fa21f7dd56f09a02f726ad8fb9f31d6638fbe521f662a3117e32 python3-perf-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: d8e25b1bcefe8ccfd938fa4a115890fe35ff05c288b21572b73775ca8a960268 python3-perf-debuginfo-4.18.0-553.144.1.el8_10.x86_64.rpm SHA-256: 1f1a9b6409db4b016131dc6731d717b88cfbbf89e4cb90382e020abc102907ba Red Hat Enterprise Linux for IBM z Systems 8 SRPM kernel-4.18.0-553.144.1.el8_10.src.rpm SHA-256: 1811e9323564c6e7ac4acf6dd1832e1b85422ef40a1015903662f29189d22c14 s390x bpftool-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 76b6064fb52b2958f0e2bfb484fefe4041b934b9a52f716b936b896bfa59d83b bpftool-debuginfo-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: dffe5edc1ceab82180ce294bb105999d9fb140c370b1e14ce1c41092bdc64e91 kernel-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: d534c4f521611527c1b92b4cd6b294ccb215368dcd966e8a4ce2ace2e14123ba kernel-abi-stablelists-4.18.0-553.144.1.el8_10.noarch.rpm SHA-256: be0e9fbb3c74ab590105b7e5b2ea0698452c397bc7f641f8b0437e12e1221397 kernel-core-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 6c1b1a205a46c9685d6f34a290b828866e31efa45e36c1b180f6ba552d8c1a8e kernel-cross-headers-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: ff83069f3721ceb4f90e060fc1fb17b497f4b2ae61f6c740455f352df47fe353 kernel-debug-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: b1b04d5d94464a02508b0f15303d220224b0545d373ac264777e54e70286fd06 kernel-debug-core-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: ff686479869010e0c5deac2d8fabe0c66797afcbc334d096bbded151dd19ad70 kernel-debug-debuginfo-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: d8612d246169d5cdc593c6af570e7755d92b61ebd36114c04fbf812ade009411 kernel-debug-devel-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: a67181adac4eee8fc4741ad18c296a28c762a5a7f88b15f26b5dcd03ceadf223 kernel-debug-modules-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 51bf538f05a59d9e7285f9edb5e9e358470d77bf6252550ce4fcd34ddcfb6c5d kernel-debug-modules-extra-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 50793dc3db8b37725d374b8d6d223c8c02836b99c7b9f7661200962fd6ffc224 kernel-debuginfo-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 73dc0d7aa3943aac13daf2e8cd15b7dde7500828c021e6fca57f9f2ec2b1b14f kernel-debuginfo-common-s390x-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 188912d7177a2ba509dbc69531a53f7152adc06b36e2fc0521a95d8eddefebc8 kernel-devel-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 72dc844e2234f0aad6e8880fa817c5f23efde192a238f26d76ab9d15d8d6f6f1 kernel-doc-4.18.0-553.144.1.el8_10.noarch.rpm SHA-256: ff3ed7562cbf9bb84b2b3523c443639eca8b96bfe5374e36bc504dd3bc315f08 kernel-headers-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: bbc5d23d8d4fe72831ac0dd97693e0c4513949de66bd0f6c2383477327e52af4 kernel-modules-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: a4d4352cea94d10a6888c829a006d17e7a79e32a9e2cfeb49abd5775e14f7da3 kernel-modules-extra-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: f31589e51b4a76209d5b0a2bb971735c13b22cbebd8e8f188221b2376acc8f99 kernel-tools-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 7fdce02de4920b9f0c1d84163ee91a53a215dc0736ceb5b3a8ae01178f001865 kernel-tools-debuginfo-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: fd45e762fde45b58d8c23b94454bfe4c8c9d8c509e78313dc347bcff877658eb kernel-zfcpdump-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: d4ef4a1e5498b57a88f9fb654e3d4129e73fd1573359aaa09fe6d8e81002fd3c kernel-zfcpdump-core-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 82c6f86a0390be7e432b4471d47ae0a83d10866b8c00711f9325d78759d0ab86 kernel-zfcpdump-debuginfo-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 59ee407da6e0b977db5c8f6a1b7fd496add056b7203c4bd871459b6d0ddf0dab kernel-zfcpdump-devel-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 01f282308cc64a051ead65f07c429a4ae4b7a498eccbd6b11ddf22ec91a6f520 kernel-zfcpdump-modules-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 27ee018bded391293c8deed3b956537666f5f9157cb74526991c2e0994ca0b4f kernel-zfcpdump-modules-extra-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: a740b57d9cbe4ae3b5f98b21154bc08022ef0c01533309a1a19b1686e150a8e2 perf-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 6ab140f7d6a3b8d4f9ed196ac25bd50b3a1897a3073944d710200ec974fa327e perf-debuginfo-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: de37804981017740ca04d3855fcdd47e9549b4b718334ab56324f748b8b12426 python3-perf-4.18.0-553.144.1.el8_10.s390x.rpm SHA-256: 929a8d3feb3559d1a509453ef3f63d490c0aaadd5a99ee768dcceac9