Red Hat Product Errata RHSA-2026:43307 - Security Advisory Issued: 2026-07-22 Updated: 2026-07-22 RHSA-2026:43307 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113) kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) kernel: fanotify: fix false positive on permission events (CVE-2026-46150) kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215) kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) Bug Fix(es) and Enhancement(s): [RHEL9] tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [rhel-9.8.z] (JIRA:RHEL-183980) [RHEL-9.8.z]: mlx5: include bug fixes (JIRA:RHEL-188121) dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [rhel-9.8.z] (JIRA:RHEL-212061) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2429611 - CVE-2025-71113 kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc BZ - 2436755 - CVE-2026-23110 kernel: scsi: core: Wake up the error handler when final completions race against each other BZ - 2481972 - CVE-2026-46099 kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels BZ - 2482612 - CVE-2026-46150 kernel: fanotify: fix false positive on permission events BZ - 2482615 - CVE-2026-46215 kernel: drm: Set old handle to NULL before prime swap in change_handle BZ - 2492458 - CVE-2026-53071 kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp CVEs CVE-2025-71113 CVE-2026-23110 CVE-2026-46150 CVE-2026-46215 CVE-2026-53071 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM kernel-5.14.0-687.29.1.el9_8.src.rpm SHA-256: eb49c7d77925c7b0d189064a153e9902c33852f814664eca25a9f5c5f7e71c11 x86_64 kernel-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: b8e6e9f6ebc8d042ad26c7b5668e6df838333ea30d506259363eae078d72a3a5 kernel-abi-stablelists-5.14.0-687.29.1.el9_8.noarch.rpm SHA-256: b735089c067fb7e5dd220257af1584886269aacf9cca0e0c5d36cfa5ab9559be kernel-core-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 1e49339e43428c0de836ca578f599f72a45fa5fb5bfa99033be2168a2284be95 kernel-debug-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 0b7bc90377877e945abeb82f8cf3b04cd7996731cf56c7dc9ca0458a2beed44f kernel-debug-core-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: cecb90cee359276bf2e76efebe77ffd85c8b9097b29aa5874161173d15f640ed kernel-debug-debuginfo-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: d84ace11a210c3a5144ccc3b496f803a20e2a2cb63c3c3510d5bcac0727d6b4f kernel-debug-debuginfo-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: d84ace11a210c3a5144ccc3b496f803a20e2a2cb63c3c3510d5bcac0727d6b4f kernel-debug-debuginfo-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: d84ace11a210c3a5144ccc3b496f803a20e2a2cb63c3c3510d5bcac0727d6b4f kernel-debug-debuginfo-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: d84ace11a210c3a5144ccc3b496f803a20e2a2cb63c3c3510d5bcac0727d6b4f kernel-debug-devel-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 89253ff321171b1f9efaa5a08fdbad92b8b82db4f11779779ac7679ec31677f5 kernel-debug-devel-matched-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: c73819dec1a5b9baaf7c52b0253c787718e33440821ce543bd868726176c6218 kernel-debug-modules-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 87f5627424aed23c86945cc7fb433b3c1e40b9b323c9895eeb681455b6110aaf kernel-debug-modules-core-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 36c7ee26b3a4fb6df9a4a49bf4e095add53d61b6507881b60491bffb4164893d kernel-debug-modules-extra-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: c9838b92ed5b233c6e53d4649e95994b0a25f69044f9cd8ae06bea7f0b4650f8 kernel-debug-uki-virt-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: e5fca24fb41b3b0a93721b8ebcff0d1880edb87b0c342d5d8fd4933cf6b06055 kernel-debuginfo-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 3d06fe08ee77dba9ad79b85e527ed1ac78f4fe62e56d1b56ebf5290dccb4478b kernel-debuginfo-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 3d06fe08ee77dba9ad79b85e527ed1ac78f4fe62e56d1b56ebf5290dccb4478b kernel-debuginfo-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 3d06fe08ee77dba9ad79b85e527ed1ac78f4fe62e56d1b56ebf5290dccb4478b kernel-debuginfo-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 3d06fe08ee77dba9ad79b85e527ed1ac78f4fe62e56d1b56ebf5290dccb4478b kernel-debuginfo-common-x86_64-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 5c6a5ca235d99f1d22cc8bc9da9bac498ab4d35f85191ede6f08cbcb5e29814d kernel-debuginfo-common-x86_64-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 5c6a5ca235d99f1d22cc8bc9da9bac498ab4d35f85191ede6f08cbcb5e29814d kernel-debuginfo-common-x86_64-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 5c6a5ca235d99f1d22cc8bc9da9bac498ab4d35f85191ede6f08cbcb5e29814d kernel-debuginfo-common-x86_64-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 5c6a5ca235d99f1d22cc8bc9da9bac498ab4d35f85191ede6f08cbcb5e29814d kernel-devel-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 48f3f131aa5a43588217592504e800dcc2dc91505dfea038969856b076e4a644 kernel-devel-matched-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: d18f367f35b92ef3071a8dfc2d48c6c04ea3502f105886056b687d3a0943ba7b kernel-doc-5.14.0-687.29.1.el9_8.noarch.rpm SHA-256: 5ec375dcc89e665a5d8a2be01f81aaad7034274255fca2490c7afb3bc82f8894 kernel-headers-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 023287346c8cfd9ca6faf762ac386074d75fc00c682c18a557ce231926106b04 kernel-modules-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 35e70ccdc1202c6ca17a268d7a2a7ad732cfdc74084ee9903eb93977726275d6 kernel-modules-core-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 7b61cb0e365deeee8aead7265277420ab92546f5fe31862e00d9de00981dfa35 kernel-modules-extra-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 5dc490dcd2a699a16c848d08873588de902cf02f07dc8da065003cfa1df51e87 kernel-rt-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: e7027b9056eda3aa4161cb2d22b265f6e9ea75f26a5a0e9bb23894b181c07d83 kernel-rt-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: e7027b9056eda3aa4161cb2d22b265f6e9ea75f26a5a0e9bb23894b181c07d83 kernel-rt-core-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 1805c0a4c9e111b36c04204f8fa272628bfcf5e337ec46a1411a43cea1da0835 kernel-rt-core-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 1805c0a4c9e111b36c04204f8fa272628bfcf5e337ec46a1411a43cea1da0835 kernel-rt-debug-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 453d0bbdf59366fb56d19b1088a160d15027a1d29047c182d2490d582cd8c9f1 kernel-rt-debug-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 453d0bbdf59366fb56d19b1088a160d15027a1d29047c182d2490d582cd8c9f1 kernel-rt-debug-core-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 7dbe2afdbba1a0710848354503bbdb9f005790c659713431ca63eafc13a2c783 kernel-rt-debug-core-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 7dbe2afdbba1a0710848354503bbdb9f005790c659713431ca63eafc13a2c783 kernel-rt-debug-debuginfo-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 8a6cbccb4144239b80b833278d3cfa0e6a92c1c878e0afc1bed954f10f57171b kernel-rt-debug-debuginfo-5.14.0-687.29.1.el9_8.x86_64.rpm SHA-256: 8a6cbccb4144239b80b833278d3cfa0e6a92c1c878e0afc1bed954f10f57171b kernel-rt-debug-debuginfo-5.14.0