Red Hat Product Errata RHSA-2026:41062 - Security Advisory Issued: 2026-07-16 Updated: 2026-07-16 RHSA-2026:41062 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) kernel: XFS data corruption using reflink () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2480453 - CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() BZ - 2492805 - CVE-2026-53166 kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock BZ - 2498915 - kernel: XFS data corruption using reflink CVEs CVE-2026-43499 CVE-2026-53166 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM kernel-6.12.0-55.89.1.el10_0.src.rpm SHA-256: bcb757408c6ef31729d9bdf5a56fefc36885fdcb6fb9e0f42e66604a343aed30 x86_64 kernel-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: b489bd1ea0c7c17bf76d22d175d9e2e1edb4323f53c7175023cea6214f865abd kernel-abi-stablelists-6.12.0-55.89.1.el10_0.noarch.rpm SHA-256: 93fc22a49cd91604f84f28a2349458c69db1f465c5728584df2aba9432d430b8 kernel-core-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: b8b7df3c367dc4ff924d8e088ad37c0ae117710b7ee85ae50c12b378cb97d233 kernel-debug-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: e59ceadf05d09b7f4fad6b3d901a1b693efb5854281c7c1eb7cda256935e5d55 kernel-debug-core-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 8fa850542866cbc22e76399fa8caf4256c9f48d860a4e9ebd3b139b5dd2a1aee kernel-debug-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 51b88b11a6e4afefde5bab31974cb231cc6413326b94beb143f19a364816193b kernel-debug-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 51b88b11a6e4afefde5bab31974cb231cc6413326b94beb143f19a364816193b kernel-debug-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 51b88b11a6e4afefde5bab31974cb231cc6413326b94beb143f19a364816193b kernel-debug-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 51b88b11a6e4afefde5bab31974cb231cc6413326b94beb143f19a364816193b kernel-debug-devel-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: e21a8bcac27807c5103a84f94701f4e829455e7586d2ab8596a83934419c38bf kernel-debug-devel-matched-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 4d206f88c8a819ec8625d8216d8b37e6e50b01896b1945c07b0b1fbbec4c7cee kernel-debug-modules-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 83090bfca8ca25f0c0e6479ce10466add069dc1e96d01b4aa66640a80188ca74 kernel-debug-modules-core-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 8f4f5b5414378bb3ab3c888673456773cac633640112d4efa065bb0184dc3a67 kernel-debug-modules-extra-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 272de9c1c39f2851e5a6c8ca36242f5c723407c03ab3ab60062ca9e2842c597f kernel-debug-uki-virt-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 239b5c59e92904b286c9945644e22c4d175755953545d01857b033badcbc2501 kernel-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 65cd6059ca034bfb49af169c62cdb69b3887979bd0cb4380a73cce70c3fdfc21 kernel-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 65cd6059ca034bfb49af169c62cdb69b3887979bd0cb4380a73cce70c3fdfc21 kernel-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 65cd6059ca034bfb49af169c62cdb69b3887979bd0cb4380a73cce70c3fdfc21 kernel-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 65cd6059ca034bfb49af169c62cdb69b3887979bd0cb4380a73cce70c3fdfc21 kernel-debuginfo-common-x86_64-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 413cf5a110867af2db96f4bfbafa60f24b0bf6ef96ce4c708645cf23e30c7cae kernel-debuginfo-common-x86_64-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 413cf5a110867af2db96f4bfbafa60f24b0bf6ef96ce4c708645cf23e30c7cae kernel-debuginfo-common-x86_64-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 413cf5a110867af2db96f4bfbafa60f24b0bf6ef96ce4c708645cf23e30c7cae kernel-debuginfo-common-x86_64-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 413cf5a110867af2db96f4bfbafa60f24b0bf6ef96ce4c708645cf23e30c7cae kernel-devel-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 0ecd17c8e0f58da5a2e98750dc0e52de1dd22c60b9e2e20d5ab980264e65fb71 kernel-devel-matched-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: a3362a693b8a3aed3d8dfa87b2056b2dc1226e91b25a26c154cafcf5bf597a71 kernel-doc-6.12.0-55.89.1.el10_0.noarch.rpm SHA-256: cf3ac524598354b5d21f90b456426e90bf86c161275672ff9e070568c0fb3515 kernel-headers-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 06b3b05cf62a75cf41319caa4f3a5644b430ee23314dfec4e337c0d426aa4542 kernel-modules-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 8de01994675d25003651154888c2d1444f99ebc2015259a3946a48442fc20ec1 kernel-modules-core-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: e9d8593b37e5f4cbe15cc67619dc7f15776cf269d3e7b0672201f2f9d6b678f4 kernel-modules-extra-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: a31131b47c5366e3db5af785b759cf40fdc265528fe0b4f0748fde2906b245f8 kernel-rt-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: bf07caf26fc9b875d877a63fd06d5ad006244c5e434cb05f933e4df5d9236066 kernel-rt-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: bf07caf26fc9b875d877a63fd06d5ad006244c5e434cb05f933e4df5d9236066 kernel-rt-core-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: de77367d1a76ea785721d1bd40bd7d0a31b0a141c043c1a2918886a41d59893b kernel-rt-core-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: de77367d1a76ea785721d1bd40bd7d0a31b0a141c043c1a2918886a41d59893b kernel-rt-debug-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: de4375aa53f0a8a237368d7d921c8f51ea9676949ba78206e70eb24d4086db28 kernel-rt-debug-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: de4375aa53f0a8a237368d7d921c8f51ea9676949ba78206e70eb24d4086db28 kernel-rt-debug-core-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 39088232086e10b638b4c26b3b4c274d87a88f896dc1e949981c1735a70fdaa8 kernel-rt-debug-core-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 39088232086e10b638b4c26b3b4c274d87a88f896dc1e949981c1735a70fdaa8 kernel-rt-debug-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 5eb8833da4c259c523de7ded97f6824d1b10b8f1d784168b177973d388bed2e1 kernel-rt-debug-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 5eb8833da4c259c523de7ded97f6824d1b10b8f1d784168b177973d388bed2e1 kernel-rt-debug-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 5eb8833da4c259c523de7ded97f6824d1b10b8f1d784168b177973d388bed2e1 kernel-rt-debug-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 5eb8833da4c259c523de7ded97f6824d1b10b8f1d784168b177973d388bed2e1 kernel-rt-debug-devel-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: a270bfa76a798bfed69516444a70ee0fc2f6e7ab3e1f2256539e31d6af6f8eb8 kernel-rt-debug-devel-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: a270bfa76a798bfed69516444a70ee0fc2f6e7ab3e1f2256539e31d6af6f8eb8 kernel-rt-debug-kvm-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: d15d6f0c823999192c800370914a325322e2d78938aa8da550b06ec98101ad95 kernel-rt-debug-modules-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 948438394a288e7b45a4142c0a265adcec6ead1d80976a5759aaaa865217fd8d kernel-rt-debug-modules-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 948438394a288e7b45a4142c0a265adcec6ead1d80976a5759aaaa865217fd8d kernel-rt-debug-modules-core-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 4d251f0ea3f52de84320c8c8446e52c4effafee5b2a5e0d3b2f98326a115a5e9 kernel-rt-debug-modules-core-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 4d251f0ea3f52de84320c8c8446e52c4effafee5b2a5e0d3b2f98326a115a5e9 kernel-rt-debug-modules-extra-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: a38b1034f7ab758e0a102a8030a42be2f90df1f4192db7e6ad45267806f49347 kernel-rt-debug-modules-extra-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: a38b1034f7ab758e0a102a8030a42be2f90df1f4192db7e6ad45267806f49347 kernel-rt-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 6cf3aec8a5d393c84611c01531f1a2bc01dd1cc1300bc10b2cce4b91ebc52c93 kernel-rt-debuginfo-6.12.0-55.89.1.el10_0.x86_64.rpm SHA-256: 6cf3aec8a5d393c84611c01531f1a2bc01dd1cc1300bc10b2cce4b91ebc52c93 kernel-rt-debuginfo-6.12.0-55.89.1.el10_0.x86
This Important Red Hat kernel security update addresses two vulnerabilities: CVE-2026-43499, a race condition in the rtmutex subsystem (CVSS 7.8 High), and CVE-2026-53166, a NULL pointer dereference in the futex/requeue code that could lead to a self-deadlock. The affected kernel versions are broad, including Linux kernels from 2.6.39 up to but before 6.1.175, 6.2 to before 6.6.140, 6.7 to before 6.12.86, 6.13 to before 6.18.27, and 6.19 to before 7.0.4. The fixed versions are 6.1.175, 6.6.140, 6.12.86, 6.18.27, and 7.0.4, respectively, and a system reboot is required after applying the update.