Red Hat Product Errata RHSA-2026:42552 - Security Advisory Issued: 2026-07-21 Updated: 2026-07-21 RHSA-2026:42552 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) Bug Fix(es) and Enhancement(s): [rhel-8] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected - at: vmd_pci_write+0x85/0xe0 - deadlock (JIRA:RHEL-174916) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2482576 - CVE-2026-46117 kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() BZ - 2492458 - CVE-2026-53071 kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp CVEs CVE-2026-46117 CVE-2026-53071 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kernel-4.18.0-553.146.1.el8_10.src.rpm SHA-256: a4a69445686a3271cc5a100dbfdc636f568f78f7d941150bca74590ebee24d0d x86_64 bpftool-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 7b4ea6e49d1cd71d969e5b7de5bcf6a3fbc3ed3c0975c9ebc47fcd8d1248fa01 bpftool-debuginfo-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 916865e1afd93ab7134ee66312585ec9d144521225ff6491520628d971893abc kernel-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: db4dd4a049b249e39f4123ad439d9ade2d9a291f6e289356aaaa3caa1e7d35f9 kernel-abi-stablelists-4.18.0-553.146.1.el8_10.noarch.rpm SHA-256: a0ea481a7de4e6b45ce77a2192714858f836aa30688f8a011b911f30b88d6ecc kernel-core-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 89e517a0daa616c350e99c2e617972cf6340ea63411e344e7f5a25543576cb3a kernel-cross-headers-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: b4b96b3bda1afa9079d952c6235e8276e956304f78d8cfdc629e611bfc999780 kernel-debug-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 42b7b7fb36dedf4a9df147802d3acc8365edacc9adb6b8565513719c2f93b88a kernel-debug-core-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 9f503de194de42ba8acf9c0e362c76d847f64260c8c66cf90c4140ea2d598d08 kernel-debug-debuginfo-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: d6f6a6c2f06d238fa12c0eeef335b880bb908a045f4f8a0dc9358294cdf9849c kernel-debug-devel-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 4b9aa230dce1c2151d6affc209d23023e7988225fd0df978d8bc4bd04baea3f6 kernel-debug-modules-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: ee342a6e8564f70a099c8b80de433f22ea4bf9a12e88c1a7b00e0df434198956 kernel-debug-modules-extra-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: c9d27fe427a47145863f34a532ab75a5db36f55135ad292e4368eb9cb49b37a1 kernel-debuginfo-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 14670f04603138b08958dd1b1c01b1ff16cdfa740594fa144e684abbdba1064a kernel-debuginfo-common-x86_64-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 3ba34c49cda257a4b71528471ea60a047a2acac382948a3f5607e340a85a68b2 kernel-devel-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 92606ec6a17329330b6842c56d14e954621bfb2aa791dffeb0de26d9353fc952 kernel-doc-4.18.0-553.146.1.el8_10.noarch.rpm SHA-256: 1d77f4a985eea4cc5012970222fecffa412391e3bbb38c4b72dff786bdb36d87 kernel-headers-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: e3c5e8456209cd5b871fc3e2789655a8c7be5035e2ad499838f5d1b1cd0394f4 kernel-modules-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 31f9d142f75760c817793c506652819bdf7512031ea520ccc526ef4825c13865 kernel-modules-extra-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: f46ea664c8ed7864a3b8bd692ab1c42dde08f1d632e43ced8cec972a2b43c290 kernel-tools-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 94409778d0855761a1af0b998072530ef924a4159128893e41362531e2464edf kernel-tools-debuginfo-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 375a17aa0099038a1c33222f21200fb6467392a2f7bbd6158b5bfbbc2ba152ff kernel-tools-libs-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 33c879028a5b6e7d689c8a6422d536efd73e72b06bac9ad33267f5cc99d419ae perf-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: a2bb6af826688c86c52ba79354f75d25b0e2b55739c176301a38d746f1b1eb57 perf-debuginfo-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: 16cb4fc37c06e7cb755e586cbb12a198967381270eae56426bbe55adf5a6cd5d python3-perf-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: bedfe0fe1c88bf1667effd05c572884da0120236bae35e727eda4de536942972 python3-perf-debuginfo-4.18.0-553.146.1.el8_10.x86_64.rpm SHA-256: ae4a1ec16937d0aa01175ff5858680e25d080f7a5256ffb3cd9970afa1312fa5 Red Hat Enterprise Linux for IBM z Systems 8 SRPM kernel-4.18.0-553.146.1.el8_10.src.rpm SHA-256: a4a69445686a3271cc5a100dbfdc636f568f78f7d941150bca74590ebee24d0d s390x bpftool-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: e3ea8a13dabce10122c35cfad5417a11db2584392837cc037646fe9ca5d4ba2a bpftool-debuginfo-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 9652a0d45aaf06993ff2bf4dca412e96df8feded40fd3c5b3954f830c73549cf kernel-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: d013e7e34eb893d85cd3ff98949217518742ca2968b4b08d4b75b2785074f93a kernel-abi-stablelists-4.18.0-553.146.1.el8_10.noarch.rpm SHA-256: a0ea481a7de4e6b45ce77a2192714858f836aa30688f8a011b911f30b88d6ecc kernel-core-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 63511383f0e5de8f36c36c0d280aa1f762e680afcc64e7b083d6bcf61638ebf9 kernel-cross-headers-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 80fda35c54e99f4f0b3763e5290d91267a1927745ae2b2a10cd032e907789e19 kernel-debug-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: f7b64a23dcf0f6c1f6e49fa7f181ed3c4a30179233653a9adb13ef9f82308216 kernel-debug-core-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 094f0f15284489e4429ba0a50782cdb5fe688a9731b430e2851a7181fa94a395 kernel-debug-debuginfo-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: ab4347ed6918c601eebfc6fba0556646ea80dba03f5a22c4682cbba56778474d kernel-debug-devel-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: db1e2c960d08793c3e0460f292156a36c72ae5e857171c69bda5a8e45be4f5fd kernel-debug-modules-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: ea3ca111abcd510cbfeafc9c4eab62fe566aac38f1c0a3f890bfa071e9798400 kernel-debug-modules-extra-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 164c08b6293210f2fcae8308cf7cdd686dd90264ae06c66ba3acdf78b830a6f2 kernel-debuginfo-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 883cbded68c56ce1f1fa802dde9f5de22e7943f92b1435de206be9c37970d58b kernel-debuginfo-common-s390x-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: e497ec047d7229aac8d43ed72d6f24fd7cc0a1112752f5c7757a578f96f72468 kernel-devel-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: c8810b337cc334dd75bd349a6ebf25cca77adc5291f31a25ac096b8412f7a8d5 kernel-doc-4.18.0-553.146.1.el8_10.noarch.rpm SHA-256: 1d77f4a985eea4cc5012970222fecffa412391e3bbb38c4b72dff786bdb36d87 kernel-headers-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 982949adad193c5b2d032c1644edd27f661693e539e320238bc182013318a84f kernel-modules-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 8ea794f5acaa6c0e5ce9e779d5caae88b91a21ce4f0bfbedfe77f7ed0fbb321b kernel-modules-extra-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 3a445fa3ed756559d24a35d458c762ee7a05ccad7bd52fa67dcadc67b9179c97 kernel-tools-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 97bf0c53f4410874f3db1f59382603f86ce40478bdf040a2a532c64d70ff805a kernel-tools-debuginfo-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 42cd8eb17718380b4e935dfa0481969c9ec756a82a584e107f194d92e6f37c91 kernel-zfcpdump-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: c39423ae64472c98a9127f556a0d7cae7b83a8b5c4a3555b4b7564bb579753fc kernel-zfcpdump-core-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: c4f95ffa9e981644ca3e08ab4f33407bdc3891f3dcb0e8bcfe3933ba96b3846b kernel-zfcpdump-debuginfo-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 5a164444d8a77e016ab28e569da73a4931f34bd1912ab9d2182cc5841aaf7634 kernel-zfcpdump-devel-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: c1b9b461b58dfc7dc765cf5d1ce1f8f6d2fa9320c629485c10ac3b1b8eb3fbe0 kernel-zfcpdump-modules-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: 5c4b43acfa85471484109d8200116064444f684bcfc983ef4c4a7cc8c8e34cd1 kernel-zfcpdump-modules-extra-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: ea98e4e2233173956ca5cd354f563a405c2a809d93ecac4fdb52c38e931b575a perf-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: bed9f870b8ee4fe98083c69c19e72d361637aeec0b7a8487498b577a8ad6d226 perf-debuginfo-4.18.0-553.146.1.el8_10.s390x.rpm SHA-256: b219d3465435562fec85322974526285c298b44cc20ba7e638ff7e87841c92
This Red Hat kernel update addresses two high-severity vulnerabilities: CVE-2026-46117 (CVSS 7.8), a user-triggerable WARN_ON() in the RDMA mana driver, and CVE-2026-53071 (CVSS 8.8), a missing lock in the Bluetooth L2CAP implementation. The NVD data indicates CVE-2026-46117 affects Linux kernel versions 6.8 through 6.12.90, 6.13 through 6.18.29, and 6.19 through 7.0.6, with fixes provided in kernel versions 6.12.91, 6.18.30, and 7.0.7. The advisory mandates a system reboot after applying the update.