This Red Hat security advisory addresses an Important kernel update fixing three vulnerabilities, including two KVM shadow paging use-after-free flaws (CVE-2026-46113, CVSS 8.8 HIGH) and an XFS data corruption issue. The KVM vulnerabilities affect Linux kernel versions from 2.6.20 up to but excluding 6.1.175, 6.2 to 6.6.140, 6.7 to 6.12.88, 6.13 to 6.18.30, and 6.19 to 7.0.7, with fixes provided in kernel versions 6.1.175, 6.6.140, 6.12.88, 6.18.30, and 7.0.7 respectively. Affected Red Hat Enterprise Linux 8.8 systems must apply the provided kernel package updates and reboot.
Red Hat Product Errata RHSA-2026:41229 - Security Advisory Issued: 2026-07-17 Updated: 2026-07-17 RHSA-2026:41229 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) kernel: XFS data corruption using reflink () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2482587 - CVE-2026-46113 kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN BZ - 2497033 - CVE-2026-53359 kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role BZ - 2498915 - kernel: XFS data corruption using reflink CVEs CVE-2026-46113 CVE-2026-53359 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM kernel-4.18.0-477.154.1.el8_8.src.rpm SHA-256: 75b97baf168cde54f192dd4b545cd5ffada7cf8f0af228801935701007b06f4f x86_64 bpftool-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 52a8d536a7aafc69e37ca342b5d68a87d221e1964bf4b17683a85bd119820e97 bpftool-debuginfo-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 833a1d0c9b33dfeff5edac1ebd8c9aa582da730923f9aa6978a92a8be1a1bde8 kernel-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 1cc4bf024d1c846778f7164a55c7b1c29ecbd85862958526eee93017cb880d8a kernel-abi-stablelists-4.18.0-477.154.1.el8_8.noarch.rpm SHA-256: 30221294ecd1835be51f2259c30485aa15c0fbe4b79de5f090a5cdb4251370ba kernel-core-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 62d3a8c68f5abd0952b7cbdb645f985ea5858a17d04d77f83a9bf020d45d7dab kernel-cross-headers-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 4d8f33dc078676aaa4eccf0a1bb81b840a42d43f97c84b73295b4c10121498c1 kernel-debug-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: aaa74a361b9c94223362ca6751d3fedacb2ce3ad3b53f7f3745ed58be0dbcaf5 kernel-debug-core-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: a9218eb8104f1998ed85ac9f53dd18bcaca2e77730a5934349a346e77f8d76ed kernel-debug-debuginfo-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: a95d0920f92ddda4a4a3380b240a4469a76b1d1c73c00985db16179311c5d505 kernel-debug-devel-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 164c3afd08bab7b5359c4815675717e99f24c585d0382bb1ed59dc423bb97daa kernel-debug-modules-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 5baa8d27b3d31ec743eaf34e3ab704d6d7297eb9c13727b63dcc4244b59803d1 kernel-debug-modules-extra-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: cd1548b9e010371ffb1c7414df7c9244d14edf291f50d75e562475e66dbc0bc7 kernel-debuginfo-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 9ffb6b2d54f159474e99674b4966ebe2b1dbbffbc05691557c3274e3619c13ae kernel-debuginfo-common-x86_64-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 4285222950d6dddbe97519d31605c103d7baf5dae11c5073f08920870f3d40c1 kernel-devel-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: ef0e4a4f33a5acd780d215a5443e7451d768cf60a91b6ba7cc471c101ee584de kernel-doc-4.18.0-477.154.1.el8_8.noarch.rpm SHA-256: 4d5ced5482b8dc46e8164087efd1a2d728a0787df4abb137be02e0799db24c9f kernel-headers-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 8e35c20ca0d16e962d5fb38268ef3d58d41b9b55fa078b44189fa7ac0e7376ac kernel-modules-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 11470d448b87b6668bb48dc0fe7aeb9b5158bd85b3d41c1df0aa194f38f4e9d5 kernel-modules-extra-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 28f6f0d1adcd07c429ed2b3be50cef6897b45eaa4da3dcc8ce584e984abfdb87 kernel-tools-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: db7d1468a1d914ea0f609f9f609993f3a2f3cbd0ef332ffdc18bc2c647fd4d08 kernel-tools-debuginfo-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 25c211d78bc18393aae79a1efcb32a523dfc1f141438e12fc3a4b89a0d60b53d kernel-tools-libs-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 72a38dcb464e07749dbf0b3bd94557b412cc3f4ad0d21bd065981374a70a1e8e perf-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: a1c8387f99c775c4ae9669910367afbe883a2d3f1627ee34d8f115b615606fc6 perf-debuginfo-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: b5b1bc15c8caf9be4883bd7f22dc107b1226943124e666e88273e83cd6be23f7 python3-perf-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 74a3ce7e14f39ed47cf7a7da77e75683f29dfbedda7f2b5559d47e46e13d79a3 python3-perf-debuginfo-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 3ec361ef5b69a8896f14c914292bd2dce68a86bc9cc6899cb50a0099db7bfab6 Red Hat Enterprise Linux Server - TUS 8.8 SRPM kernel-4.18.0-477.154.1.el8_8.src.rpm SHA-256: 75b97baf168cde54f192dd4b545cd5ffada7cf8f0af228801935701007b06f4f x86_64 bpftool-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 52a8d536a7aafc69e37ca342b5d68a87d221e1964bf4b17683a85bd119820e97 bpftool-debuginfo-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 833a1d0c9b33dfeff5edac1ebd8c9aa582da730923f9aa6978a92a8be1a1bde8 kernel-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 1cc4bf024d1c846778f7164a55c7b1c29ecbd85862958526eee93017cb880d8a kernel-abi-stablelists-4.18.0-477.154.1.el8_8.noarch.rpm SHA-256: 30221294ecd1835be51f2259c30485aa15c0fbe4b79de5f090a5cdb4251370ba kernel-core-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 62d3a8c68f5abd0952b7cbdb645f985ea5858a17d04d77f83a9bf020d45d7dab kernel-cross-headers-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 4d8f33dc078676aaa4eccf0a1bb81b840a42d43f97c84b73295b4c10121498c1 kernel-debug-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: aaa74a361b9c94223362ca6751d3fedacb2ce3ad3b53f7f3745ed58be0dbcaf5 kernel-debug-core-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: a9218eb8104f1998ed85ac9f53dd18bcaca2e77730a5934349a346e77f8d76ed kernel-debug-debuginfo-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: a95d0920f92ddda4a4a3380b240a4469a76b1d1c73c00985db16179311c5d505 kernel-debug-devel-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 164c3afd08bab7b5359c4815675717e99f24c585d0382bb1ed59dc423bb97daa kernel-debug-modules-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 5baa8d27b3d31ec743eaf34e3ab704d6d7297eb9c13727b63dcc4244b59803d1 kernel-debug-modules-extra-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: cd1548b9e010371ffb1c7414df7c9244d14edf291f50d75e562475e66dbc0bc7 kernel-debuginfo-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 9ffb6b2d54f159474e99674b4966ebe2b1dbbffbc05691557c3274e3619c13ae kernel-debuginfo-common-x86_64-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 4285222950d6dddbe97519d31605c103d7baf5dae11c5073f08920870f3d40c1 kernel-devel-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: ef0e4a4f33a5acd780d215a5443e7451d768cf60a91b6ba7cc471c101ee584de kernel-doc-4.18.0-477.154.1.el8_8.noarch.rpm SHA-256: 4d5ced5482b8dc46e8164087efd1a2d728a0787df4abb137be02e0799db24c9f kernel-headers-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 8e35c20ca0d16e962d5fb38268ef3d58d41b9b55fa078b44189fa7ac0e7376ac kernel-modules-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 11470d448b87b6668bb48dc0fe7aeb9b5158bd85b3d41c1df0aa194f38f4e9d5 kernel-modules-extra-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 28f6f0d1adcd07c429ed2b3be50cef6897b45eaa4da3dcc8ce584e984abfdb87 kernel-tools-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: db7d1468a1d914ea0f609f9f609993f3a2f3cbd0ef332ffdc18bc2c647fd4d08 kernel-tools-debuginfo-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 25c211d78bc18393aae79a1efcb32a523dfc1f141438e12fc3a4b89a0d60b53d kernel-tools-libs-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 72a38dcb464e07749dbf0b3bd94557b412cc3f4ad0d21bd065981374a70a1e8e perf-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: a1c8387f99c775c4ae9669910367afbe883a2d3f1627ee34d8f115b615606fc6 perf-debuginfo-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: b5b1bc15c8caf9be4883bd7f22dc107b1226943124e666e88273e83cd6be23f7 python3-perf-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 74a3ce7e14f39ed47cf7a7da77e75683f29dfbedda7f2b5559d47e46e13d79a3 python3-perf-debuginfo-4.18.0-477.154.1.el8_8.x86_64.rpm SHA-256: 3ec361ef5b69a8896f14c914292bd2dce68a86bc9cc6899cb50a0099db7bfab6 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM kernel-4.18.0-477.154.1.el8_8.src.rpm SHA-256: 75b97baf168cde54f192dd4b545cd5ffada7cf8f0af228801935701007b06f4f ppc64le bpftool-4.18.0-477.154.1.el8_8.ppc64le.rpm SHA-256: 6dd042269df1f6588a15d902bbe06abca13d325aa1cae7d374c38c2a1552290c bpftool-debuginfo-4.18.0-477.154.1.el8_8.ppc64le.rpm SHA-256: 90ef141b0e603dfed533059dd1ecf67a20d0bf26ce1b86b3a33882e04a9a881b kernel-4.18.0-477.154.1.el8_8.ppc64le.rpm SHA-256: 769f49d92fd6a9dfeae77f34e5365a75a60fb8b801ec2ba0e142814cc46e2bf9 kernel-abi-stablelists-4.18.0-477.154.1.el8_8.noarch.rpm SHA-256: 30221294ecd1835be51f2259c30485aa15c0fbe4b79de5f090a5cdb4251370ba kernel-core-4.18.0-477.154.1.el8_8.ppc64le.rpm SHA-256: 47c64b6181cc0f