This Red Hat kernel security update addresses two Important-rated vulnerabilities: CVE-2026-43499 (CVSS 7.8 High) in the rtmutex subsystem and CVE-2026-53166 in the futex/requeue code, both involving potential NULL pointer dereferences in the `remove_waiter()` function. The NVD data indicates CVE-2026-43499 affects Linux kernel versions from 2.6.39 up to but excluding 6.1.175, 6.2 up to 6.6.140, 6.7 up to 6.12.86, 6.13 up to 6.18.27, and 6.19 up to 7.0.4, with fixes available in versions 6.1.175, 6.6.140, 6.12.86, 6.18.27, and 7.0.4 respectively. A system reboot is required after applying the update.
Red Hat Product Errata RHSA-2026:41063 - Security Advisory Issued: 2026-07-16 Updated: 2026-07-16 RHSA-2026:41063 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) kernel: XFS data corruption using reflink () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2480453 - CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() BZ - 2492805 - CVE-2026-53166 kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock BZ - 2498915 - kernel: XFS data corruption using reflink CVEs CVE-2026-43499 CVE-2026-53166 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM kernel-5.14.0-427.138.1.el9_4.src.rpm SHA-256: 7fa75dbafea55ea95d22dfe281dc6fb74a12c4ed4fe10fc0d030ab359f7fbf1a x86_64 bpftool-7.3.0-427.138.1.el9_4.x86_64.rpm SHA-256: be8279fe27d9e5dcab5bce3c49b0c3789a070e63bd5436a9a8a23f6693012380 bpftool-debuginfo-7.3.0-427.138.1.el9_4.x86_64.rpm SHA-256: 596d43facde2254884cd26791606673b84b6ee4b66c9aeccc6502aaa3f4d06f8 bpftool-debuginfo-7.3.0-427.138.1.el9_4.x86_64.rpm SHA-256: 596d43facde2254884cd26791606673b84b6ee4b66c9aeccc6502aaa3f4d06f8 kernel-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: e129b5c0a2c767f762d5952e2d486ee9f2325fe1e4b55e594fb5a7aa9370deb6 kernel-abi-stablelists-5.14.0-427.138.1.el9_4.noarch.rpm SHA-256: e481ce3a1f513c23a2e2520302dd5a08802213fc061bb2fbdad6b2548e96dd3a kernel-core-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: b4846c4c70a36804ab7cd2bfa0b25317be7ef586204e813d79c1fe3e43d14eb0 kernel-debug-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 2d85d98395a72fc069141463b80e6133d253a082d473211969dbebf137d7a808 kernel-debug-core-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 7b4f1589f5f6b3ce2377bdf3bf70baf90a8b8554b41ab822f0f8d250e45d4a32 kernel-debug-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 45504c6526ee1d145c5b07cc51947190bf589dcd695c589e12edb637669e00aa kernel-debug-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 45504c6526ee1d145c5b07cc51947190bf589dcd695c589e12edb637669e00aa kernel-debug-devel-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 4e1f7039ec06b036f108579816dff8187bdeb594952e9a0aac4e5f8f9e615259 kernel-debug-devel-matched-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 5841d05932ee30a5d94a2756987f0c22efd698d105fb408b11297c5ab8f7bd6d kernel-debug-modules-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 83f8b4e828693e3c39d3e836606e7ae514b5206dcaa18916acdbbdf70f66c467 kernel-debug-modules-core-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: a86ad184c9d98caafc4d8531ff3c5587834b6ff7a851a8d59ad7a8b3d2f6a83a kernel-debug-modules-extra-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 54cdf3eba2f3956efb82acd504ba18cd3b9240eb0d8129773c99a9268418bc14 kernel-debug-uki-virt-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 6770b87370202f5e11819e09a01e2fc73e71b33331a5f145a420f620f451edb7 kernel-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: d2035dff00dc6eb960643d68c74c00f75df129dda7979a38013418d96581021d kernel-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: d2035dff00dc6eb960643d68c74c00f75df129dda7979a38013418d96581021d kernel-debuginfo-common-x86_64-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: b93efa33fa686d30ff2f631904a1f019cd97ec809b6c0ec1333132de5ab0a1a9 kernel-debuginfo-common-x86_64-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: b93efa33fa686d30ff2f631904a1f019cd97ec809b6c0ec1333132de5ab0a1a9 kernel-devel-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 151746c5b2b0fe58047669af2c9db93e1a7df51de4dc65e2aea3ec967c9b3ef9 kernel-devel-matched-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 4e965e81e5146ffe5dbd732edd689e5da82e4c1bc5cdf593bde785529a943f68 kernel-doc-5.14.0-427.138.1.el9_4.noarch.rpm SHA-256: 7119e78dec785ae5325c8eef7fa4d7243d764f1f7c20bfd392ad0041cbde0b7c kernel-headers-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 4f6a801e1d2f6e67436d5c9c3d5c59bcf085be2056774f81c9352987040270c4 kernel-modules-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: dd6901442d5fafd7e3be694ec95fa7d78d5cbbce3975e80893d3f0e10079c7ab kernel-modules-core-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 98dec165de25777a82771ad4b295521c9b95981e83d6eb579a03442ecbc1ea0f kernel-modules-extra-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: fae3aaee325b0686ead897613fe59954c595aaeddbd3a7f265c2e5ab8cd1b486 kernel-rt-debug-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 11f539c8f4bba6803a0aba5871bca277fe7963de7709cef0eb2da64dc19ef666 kernel-rt-debug-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 11f539c8f4bba6803a0aba5871bca277fe7963de7709cef0eb2da64dc19ef666 kernel-rt-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 72f336d67edb6fea689ca38fc831a7c0e83d2f5191de098260f208364dd67bd7 kernel-rt-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 72f336d67edb6fea689ca38fc831a7c0e83d2f5191de098260f208364dd67bd7 kernel-tools-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: bd0fefcbb1f49dc1d6483ce5d3b4afb82cbc3cdc1a28321848179d61b863c49e kernel-tools-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: f0dbffa4b78714c40f4d288362203f719588de6d37301b2ed35ab5691cfacf57 kernel-tools-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: f0dbffa4b78714c40f4d288362203f719588de6d37301b2ed35ab5691cfacf57 kernel-tools-libs-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 8e6827cbc1c68c556fa5881385c8eaec5be6b24ea2c997aa746e2f28a6c601a4 kernel-uki-virt-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: edc663f89f23e9d7dc2c223c9e20df2b476564297a34e9a3fde5ab2425f868b8 libperf-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: ebc6302c2c477de0fe12d8006fe23203d4c71db3f0490de722d21f433213d7d1 libperf-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: ebc6302c2c477de0fe12d8006fe23203d4c71db3f0490de722d21f433213d7d1 perf-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: dee8878856c90d5d18970e87fa62ff4d59ee9e32a9e5c7c8144e6bc58523b283 perf-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 474bcd93bd21a8dc3b2362e3ed601fa8ae96b6c03d01bf296fd809529b9861c3 perf-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 474bcd93bd21a8dc3b2362e3ed601fa8ae96b6c03d01bf296fd809529b9861c3 python3-perf-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 08b6d12f40bb1132587b47fe452a971ed170eaca20c79637103e2a8894eb7fb7 python3-perf-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 0d0adf7f629b42c0f22c9579768b3b197f2c5e1cbf486ee6ae23d7a627bbc6fa python3-perf-debuginfo-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: 0d0adf7f629b42c0f22c9579768b3b197f2c5e1cbf486ee6ae23d7a627bbc6fa rtla-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: d116e5d879c38f492bf68a732bb14978d4673e01b33b91638b9e765b1d82bf61 rv-5.14.0-427.138.1.el9_4.x86_64.rpm SHA-256: f94e4985716fb6308e7b111ecd7c490d3a1652dec89a57853009188c0c17f3dc Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM kernel-5.14.0-427.138.1.el9_4.src.rpm SHA-256: 7fa75dbafea55ea95d22dfe281dc6fb74a12c4ed4fe10fc0d030ab359f7fbf1a ppc64le bpftool-7.3.0-427.138.1.el9_4.ppc64le.rpm SHA-256: d02b461d88a74cebf4ede97b5bc1dca6cc4460fac08386e71eec62f0fcf4114f bpftool-debuginfo-7.3.0-427.138.1.el9_4.ppc64le.rpm SHA-256: f2f8068f3b930e2b3a2980e15dab5ba98d7c47df9763527e7cf2b3fcfe6c3ac4 bpftool-debuginfo-7.3.0-427.138.1.el9_4.ppc64le.rpm SHA-256: f2f8068f3b930e2b3a2980e15dab5ba98d7c47df9763527e7cf2b3fcfe6c3ac4 kernel-5.14.0-427.138.1.el9_4.ppc64le.rpm SHA-256: beb441aa9c9e1cb977a5bc7498f890b6dea4ecae7105c619e9fd1ba102d88c4d kernel-abi-stablelists-5.14.0-427.138.1.el9_4.noarch.rpm SHA-256: e481ce3a1f513c23a2e2520302dd5a08802213fc061bb2fbdad6b2548e96dd3a kernel-core-5.14.0-427.138.1.el9_4.ppc64le.rpm SHA-256: 04f6002e66655a52f808b65003dafb3581e4462af27fc7c35f90670036cb2f73 kernel-debug-5.14.0-427.138.1.el9_4.ppc64le.rpm SHA-256: 03f336dadac4b60b963967838390e49af4c2cb47dd7b04fadcf9a4c644e63b92 kernel-debug-core-5.14.0-427.138.1.el9_4.ppc64le.rpm SHA-256: 5d0d58c0b8da348e7a6347af1fe9e493bf4d1fcc35d7681a2a1c61034aa5fd26 kernel-debug-debuginfo-5.14.0-427.138.1.el9_4.ppc64le.rpm SHA-256: 9bb9828006af9bec8072327e1380a5d2b6bd35ff1433a2c7702890b1f58932ae kernel-d