Red Hat Product Errata RHSA-2026:40425 - Security Advisory Issued: 2026-07-15 Updated: 2026-07-15 RHSA-2026:40425 - Security Advisory Overview Updated Packages Synopsis Important: kernel update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) kernel: xfs: resample the data fork mapping after cycling ILOCK For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2480453 - CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() BZ - 2492805 - CVE-2026-53166 kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock BZ - 2498915 - kernel: XFS data corruption using reflink CVEs CVE-2026-43499 CVE-2026-53166 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM kernel-5.14.0-570.128.1.el9_6.src.rpm SHA-256: 6c7ee9a1ee4297d9b2e6da1fdd4e2ff234a471b676ead5880307597d8fa3842f x86_64 kernel-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: f51a5993a241cf219dc38958411b653aa193b6d04080acc1d5a34b682ec50040 kernel-abi-stablelists-5.14.0-570.128.1.el9_6.noarch.rpm SHA-256: 2e49e9979337a01076c7a06081d08b1a47b313452142022be806b2ad930a8fff kernel-core-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: b72097e153409855a9f8aaafd23b36957424b7e59ec7855feec3966bc01d8036 kernel-debug-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 65baa22514481d8eae2f2f279529d9413b0ae21b91d8d5dd5f448da428c39b7b kernel-debug-core-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: ff2478aab9b3f0084de146deb03c5e46f672594a65216d5b3b3f81c7f238bdb2 kernel-debug-debuginfo-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: e0c7ca76e1a04e872e41736057a2bc68b7cd7b86894f337607fb3c7261d53787 kernel-debug-debuginfo-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: e0c7ca76e1a04e872e41736057a2bc68b7cd7b86894f337607fb3c7261d53787 kernel-debug-debuginfo-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: e0c7ca76e1a04e872e41736057a2bc68b7cd7b86894f337607fb3c7261d53787 kernel-debug-debuginfo-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: e0c7ca76e1a04e872e41736057a2bc68b7cd7b86894f337607fb3c7261d53787 kernel-debug-devel-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 6532b8e77b495476824c8f2a965665b6f14ffef838cae9b6a8054ecc873182e9 kernel-debug-devel-matched-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 0eeadc0181b6451b643da53651742558eb8c4fc58cef6028da1c730350255d87 kernel-debug-modules-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: fe86bb55b00c2530862581c9b04f5a8fb637b56c456debd1be5dc0f0c1343ab0 kernel-debug-modules-core-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 3780f973b428654ed479a691f11d8bb26b21900ad08f0e50cd2dacfe8011a7fd kernel-debug-modules-extra-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 08bb3dc4e186e013c59ea2ed83ec88ecfba6288a3168799326fbb71c590a85e5 kernel-debug-uki-virt-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 98227746b54c827704899ac2b58b49ffad5e6b22d3b5e9b3bde375e8ce92daca kernel-debuginfo-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: dea5c27d6b7fbd2e0b365f9f859831e0c04e417e43ab9efc7d65f81a14da3b7e kernel-debuginfo-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: dea5c27d6b7fbd2e0b365f9f859831e0c04e417e43ab9efc7d65f81a14da3b7e kernel-debuginfo-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: dea5c27d6b7fbd2e0b365f9f859831e0c04e417e43ab9efc7d65f81a14da3b7e kernel-debuginfo-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: dea5c27d6b7fbd2e0b365f9f859831e0c04e417e43ab9efc7d65f81a14da3b7e kernel-debuginfo-common-x86_64-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 3e8c4dba1e98bf25d83cbc3ae880bf5bbbd6ec41e2f37863e1f5391db37102b9 kernel-debuginfo-common-x86_64-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 3e8c4dba1e98bf25d83cbc3ae880bf5bbbd6ec41e2f37863e1f5391db37102b9 kernel-debuginfo-common-x86_64-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 3e8c4dba1e98bf25d83cbc3ae880bf5bbbd6ec41e2f37863e1f5391db37102b9 kernel-debuginfo-common-x86_64-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 3e8c4dba1e98bf25d83cbc3ae880bf5bbbd6ec41e2f37863e1f5391db37102b9 kernel-devel-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: c43aba8bf498482dc77d47e046eb421b5ffa87dc03d65decf6078a8d4ded1c85 kernel-devel-matched-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 25a3ba27209cd69a4baeb9a07c176033bbe4500a62046621c9974754e12cf3ec kernel-doc-5.14.0-570.128.1.el9_6.noarch.rpm SHA-256: ae5f922a4d618f8b9e1e4c89d5c4394fa4aba10416769d145be1d1613939b8eb kernel-headers-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 208a87f523a34654b04f54b28784123b60f6f2bddac3954e5126364a5df76323 kernel-modules-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 5c1204273d9f1dffe5cdce23fc87e78fb4f61a2b81d23b767954278092cc7fac kernel-modules-core-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: c452fb57b541943835cac0a9c01d52da77314c150596cdc1a75eeaa66ad513b7 kernel-modules-extra-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 46cf365c9b54cab84df40eed740b0708050a062793c966d042adf06a9afb9019 kernel-rt-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 46d356d8319ddad70f3b9000af62f7492777c4d738a5db7cbac86291ecdac3c7 kernel-rt-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 46d356d8319ddad70f3b9000af62f7492777c4d738a5db7cbac86291ecdac3c7 kernel-rt-core-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: b5b563095df1d44bf2be80eb502f3cf81589647a556d85d08ea9de189a6b6d62 kernel-rt-core-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: b5b563095df1d44bf2be80eb502f3cf81589647a556d85d08ea9de189a6b6d62 kernel-rt-debug-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: f4181b3f75a449bbdfb7532f9e10adbce380b521245878f1bc1c22a699719b24 kernel-rt-debug-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: f4181b3f75a449bbdfb7532f9e10adbce380b521245878f1bc1c22a699719b24 kernel-rt-debug-core-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 647d182ba3418a7fd82f4aa5b0c771cc37af175f9d0f34c919d0b10161acd34a kernel-rt-debug-core-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 647d182ba3418a7fd82f4aa5b0c771cc37af175f9d0f34c919d0b10161acd34a kernel-rt-debug-debuginfo-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 6fedd077e84c917801edb0910deb2e35f07889f113d572ad63684946478bf6bb kernel-rt-debug-debuginfo-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 6fedd077e84c917801edb0910deb2e35f07889f113d572ad63684946478bf6bb kernel-rt-debug-debuginfo-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 6fedd077e84c917801edb0910deb2e35f07889f113d572ad63684946478bf6bb kernel-rt-debug-debuginfo-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 6fedd077e84c917801edb0910deb2e35f07889f113d572ad63684946478bf6bb kernel-rt-debug-devel-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 3e1378b328ac57826be15420fd4eb73002e2d686c48da100d03df525567efe36 kernel-rt-debug-devel-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 3e1378b328ac57826be15420fd4eb73002e2d686c48da100d03df525567efe36 kernel-rt-debug-kvm-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: d2d1ff0ec98687f6dec6e3f1643ed69d67bcbf3064da323cff3aa2d09350a77b kernel-rt-debug-modules-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: c407ba09d9d32271d15ab4310e9f3b8f79bccbd5339b89b3772e2468f51649a8 kernel-rt-debug-modules-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: c407ba09d9d32271d15ab4310e9f3b8f79bccbd5339b89b3772e2468f51649a8 kernel-rt-debug-modules-core-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 93a756d4ce108fc4d0ae266fd6194dd1cd6639306ab627a9e3e225d5ba7006c9 kernel-rt-debug-modules-core-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: 93a756d4ce108fc4d0ae266fd6194dd1cd6639306ab627a9e3e225d5ba7006c9 kernel-rt-debug-modules-extra-5.14.0-570.128.1.el9_6.x86_64.rpm SHA-256: ec73be193f93b0270ffd2de4305e7ca7d2e4fc7a53d86bd4fabefe1288dfac86 kernel-rt-debug-m