Red Hat Product Errata RHSA-2026:40760 - Security Advisory Issued: 2026-07-16 Updated: 2026-07-16 RHSA-2026:40760 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2422699 - CVE-2025-68183 kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr BZ - 2455334 - CVE-2026-31408 kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold BZ - 2461480 - CVE-2026-31613 kernel: smb: client: fix OOB reads parsing symlink error response BZ - 2464369 - CVE-2026-43027 kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup BZ - 2480453 - CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() BZ - 2482588 - CVE-2026-46189 kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path BZ - 2482636 - CVE-2026-46209 kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() BZ - 2492805 - CVE-2026-53166 kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock CVEs CVE-2025-68183 CVE-2026-31408 CVE-2026-31613 CVE-2026-43027 CVE-2026-43499 CVE-2026-46189 CVE-2026-46209 CVE-2026-53166 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM kernel-4.18.0-477.152.1.el8_8.src.rpm SHA-256: 0aaa77a54dd2c667fc60f1c0075a0bbfe6fea35318c721d7ca4226f57ab71cc4 x86_64 bpftool-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 0bba1c07c2b83b989fd86a91d4f000b2d2fab5ba81209c7a91404dc9b48a8b28 bpftool-debuginfo-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: aab9e64243ed3a601364c4772520f9568206348dee46f35cb0eda9846142d41c kernel-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: c15f62c9691fc76c8fa1d9b038a046a6e6fcad6603380738ebc510c23a8b7a37 kernel-abi-stablelists-4.18.0-477.152.1.el8_8.noarch.rpm SHA-256: 9c8a02c68adf063bba8b7e9fe7b61c5797cbe1ae225f553a550f6c8f01ede01d kernel-core-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: ac372c3bfac61491e73873179181d37aeb97072b15796c3a368bc7f6df875b99 kernel-cross-headers-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 85f853c8e9c7afd7c344ff9dab9dd4361ccca373bbfc2d6055831d10114c3958 kernel-debug-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: f8abbee2fd23b2349ab4c46b6a807f65d9cc18db94d7dcbabb540cc6349c5784 kernel-debug-core-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: ba45c9373b252013088d6bddd9af1ab6093f80db8cc6cd4635b8437c668ca5cb kernel-debug-debuginfo-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: aa11e54d2a06785f09cb9c3a7ad079f3a3c25f24b3e9f5f7498a2368d999942f kernel-debug-devel-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 0977ec0b7f4829161cd38b3c0e8072bd57e10b5ac9400018e85e3933ceb62cbf kernel-debug-modules-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 7d0ae96e3a422c384c4882274408d6c21bcdb4c1cfc6673b43a73763be3120cc kernel-debug-modules-extra-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 7436d3dae4d771604eccdb4bc2854e397a90949b7965405af7cb7d765d5a76cd kernel-debuginfo-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: fd3a9c76365d86ab35bac5eaac31106e0ae619792d633bcf48ad809e960258ff kernel-debuginfo-common-x86_64-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 9bae9bd60a865e40c3fad38659e74a1775492b93e1dd9bdb84d0b9553bda3a37 kernel-devel-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 00a55bb4c974b269a5abf933646f35093be458b78accbd2b008a2ec57f90c980 kernel-doc-4.18.0-477.152.1.el8_8.noarch.rpm SHA-256: 52db40be38bad481a34f54b36d98cbc7a71ef69944c652a6fe81605a7343fc28 kernel-headers-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 5f0d1ffad5d8b82bae40846f66fa42750e32c2b8f845342f10e1f8133d7ed4b5 kernel-modules-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 3cd9b6be3dcf7837b13654943a2b2a1afcd902be2bc780c95008f95b6dc51c25 kernel-modules-extra-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: e7bd696d31fdae04bec237b4e2030746860d1b3de010963b5f029ca519402f1c kernel-tools-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 96f1e74667546f88df8ada20ccf76ab09aef9caabfc869392c5bb9982e75315e kernel-tools-debuginfo-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 629f328d2bfa6c0a4c86e2d4ec2d7ef141d8e93337868cf2aac2c6d3ec212805 kernel-tools-libs-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 1ed3637c9751b3685089de889a1170b9658036e264cae56f4f17671862cf803f perf-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: c5d7bfa41528ff12126e14b48ab5e7112b75b4b05ca3042c6a97d13da50a6a10 perf-debuginfo-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 73cdbb9649ba7fc92eab16ba72811051d5f8c8f49a96c44d2948dc308c379ab1 python3-perf-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: ed176f4df24a6706b572310ae6ad01b9e8b589009366aabbd1256397de690812 python3-perf-debuginfo-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: f14e54df8aa75eb737cf64ba135a653e81107363bd58d1a2ac7f23b6aa14a287 Red Hat Enterprise Linux Server - TUS 8.8 SRPM kernel-4.18.0-477.152.1.el8_8.src.rpm SHA-256: 0aaa77a54dd2c667fc60f1c0075a0bbfe6fea35318c721d7ca4226f57ab71cc4 x86_64 bpftool-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 0bba1c07c2b83b989fd86a91d4f000b2d2fab5ba81209c7a91404dc9b48a8b28 bpftool-debuginfo-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: aab9e64243ed3a601364c4772520f9568206348dee46f35cb0eda9846142d41c kernel-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: c15f62c9691fc76c8fa1d9b038a046a6e6fcad6603380738ebc510c23a8b7a37 kernel-abi-stablelists-4.18.0-477.152.1.el8_8.noarch.rpm SHA-256: 9c8a02c68adf063bba8b7e9fe7b61c5797cbe1ae225f553a550f6c8f01ede01d kernel-core-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: ac372c3bfac61491e73873179181d37aeb97072b15796c3a368bc7f6df875b99 kernel-cross-headers-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 85f853c8e9c7afd7c344ff9dab9dd4361ccca373bbfc2d6055831d10114c3958 kernel-debug-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: f8abbee2fd23b2349ab4c46b6a807f65d9cc18db94d7dcbabb540cc6349c5784 kernel-debug-core-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: ba45c9373b252013088d6bddd9af1ab6093f80db8cc6cd4635b8437c668ca5cb kernel-debug-debuginfo-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: aa11e54d2a06785f09cb9c3a7ad079f3a3c25f24b3e9f5f7498a2368d999942f kernel-debug-devel-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 0977ec0b7f4829161cd38b3c0e8072bd57e10b5ac9400018e85e3933ceb62cbf kernel-debug-modules-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 7d0ae96e3a422c384c4882274408d6c21bcdb4c1cfc6673b43a73763be3120cc kernel-debug-modules-extra-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 7436d3dae4d771604eccdb4bc2854e397a90949b7965405af7cb7d765d5a76cd kernel-debuginfo-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: fd3a9c76365d86ab35bac5eaac31106e0ae619792d633bcf48ad809e960258ff kernel-debuginfo-common-x86_64-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 9bae9bd60a865e40c3fad38659e74a1775492b93e1dd9bdb84d0b9553bda3a37 kernel-devel-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 00a55bb4c974b269a5abf933646f35093be458b78accbd2b008a2ec57f90c980 kernel-doc-4.18.0-477.152.1.el8_8.noarch.rpm SHA-256: 52db40be38bad481a34f54b36d98cbc7a71ef69944c652a6fe81605a7343fc28 kernel-headers-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 5f0d1ffad5d8b82bae40846f66fa42750e32c2b8f845342f10e1f8133d7ed4b5 kernel-modules-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 3cd9b6be3dcf7837b13654943a2b2a1afcd902be2bc780c95008f95b6dc51c25 kernel-modules-extra-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: e7bd696d31fdae04bec237b4e2030746860d1b3de010963b5f029ca519402f1c kernel-tools-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 96f1e74667546f88df8ada20ccf76ab09aef9caabfc869392c5bb9982e75315e kernel-tools-debuginfo-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 629f328d2bfa6c0a4c86e2d4ec2d7ef141d8e93337868cf2aac2c6d3ec212805 kernel-tools-libs-4.18.0-477.152.1.el8_8.x86_64.rpm SHA-256: 1ed3637c9751b3685089de889a1170b9658036e264cae56f4f17671862cf803f p