A use-after-free vulnerability (CVE-2026-53359, CVSS 8.8 HIGH) in the KVM subsystem of the Linux kernel allows for privilege escalation via shadow paging exploitation. The vulnerability affects Linux kernel versions 2.6.36 through 6.1.176, 6.2 through 6.6.143, 6.7 through 6.12.94, 6.13 through 6.18.37, and 6.19 through 7.1.2. Red Hat has released live patch modules for Red Hat Enterprise Linux 8 to address this issue without a full reboot.
Red Hat Product Errata RHSA-2026:44004 - Security Advisory Issued: 2026-07-22 Updated: 2026-07-22 RHSA-2026:44004 - Security Advisory Overview Updated Packages Synopsis Important: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-4.18.0-553.53.1.el8_10. Security Fix(es): kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Fixes BZ - 2497033 - CVE-2026-53359 kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role CVEs CVE-2026-53359 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kpatch-patch-4_18_0-553_109_1-1-7.el8_10.src.rpm SHA-256: 5ddaff973b7000783ec37a582a78a18b529b63e517fd628ee384a0ee003b4ff3 kpatch-patch-4_18_0-553_125_1-1-4.el8_10.src.rpm SHA-256: 72c4dceb1516b5aa76ff0e44540e5f59f8cd5c09053acd13c07fd63d85f98f9d kpatch-patch-4_18_0-553_53_1-1-14.el8_10.src.rpm SHA-256: 314ad3001fadd5cd60a38f79a38763965e604e39f424bc378e5ea1a0b6ceaf7b kpatch-patch-4_18_0-553_72_1-1-11.el8_10.src.rpm SHA-256: 402fcd742c655b466dbeb599f1399ed2e2a708e309b906189c53ad5294bcc349 kpatch-patch-4_18_0-553_85_1-1-9.el8_10.src.rpm SHA-256: a3c21bf79792778aadfc80a36ec610982a3970a5416d0a01c4c12d3941205f3c x86_64 kpatch-patch-4_18_0-553_109_1-1-7.el8_10.x86_64.rpm SHA-256: c62a2caf04e4ec1ef5d503a69f20d4fe0bb375c0f7fce7a99e917738062d22a7 kpatch-patch-4_18_0-553_109_1-debuginfo-1-7.el8_10.x86_64.rpm SHA-256: d63b59de5b8246c120caef564f53ff4931634ae3a5de965f310095d1e1e95077 kpatch-patch-4_18_0-553_109_1-debugsource-1-7.el8_10.x86_64.rpm SHA-256: 0cf1be987c58b8d8846cd498e4e0feaa6847c2c447828b22903189daf211bc84 kpatch-patch-4_18_0-553_125_1-1-4.el8_10.x86_64.rpm SHA-256: 8fce55a0e1f23a54204b197998d336a3d405f695163b4e8ec681c8391949de1f kpatch-patch-4_18_0-553_125_1-debuginfo-1-4.el8_10.x86_64.rpm SHA-256: ca5b5b04923a442eeac9249c6d75c7ca7bfbd8f8e2ff33e40b8f1e252ff1c2cb kpatch-patch-4_18_0-553_125_1-debugsource-1-4.el8_10.x86_64.rpm SHA-256: a30d89adbe26f41e38656155ad38907b111e22ed64f67440fea89e61e40fad12 kpatch-patch-4_18_0-553_53_1-1-14.el8_10.x86_64.rpm SHA-256: 1d0ae0fc27deff8e1659315b93d9fc31487d03ba37ec04f15a27fc6d4d82e31a kpatch-patch-4_18_0-553_53_1-debuginfo-1-14.el8_10.x86_64.rpm SHA-256: 0156f37c92b46c09276dc56cd9b4545d98ad528e0180432e5a3a0b975774c824 kpatch-patch-4_18_0-553_53_1-debugsource-1-14.el8_10.x86_64.rpm SHA-256: b8374d21e42ee1f123aef3c961c07b3bd773dd737fc38d6e1e8ea327a5214cd2 kpatch-patch-4_18_0-553_72_1-1-11.el8_10.x86_64.rpm SHA-256: bb4f5c298befc9caf71a4ffdacb0bb0c9b7eb4124bd41b8a51b3e6c0aca2b7bd kpatch-patch-4_18_0-553_72_1-debuginfo-1-11.el8_10.x86_64.rpm SHA-256: 3f92134e3ca0bc328d280392ae172fbe691840127ed8377c8c8e2851ac403981 kpatch-patch-4_18_0-553_72_1-debugsource-1-11.el8_10.x86_64.rpm SHA-256: acdf6a3b4721ce3d6fffb6a5c503f3c5f5de6018fcbda132ae384f412b3797e7 kpatch-patch-4_18_0-553_85_1-1-9.el8_10.x86_64.rpm SHA-256: 16814aeb4f4f7a712612d799d11094c3449f0c309c08af7cfffa443a532e39a8 kpatch-patch-4_18_0-553_85_1-debuginfo-1-9.el8_10.x86_64.rpm SHA-256: 34a48dafdae2f36d083643c27f9e183d73d9e159a6c6d9d7a462f4498cdc0123 kpatch-patch-4_18_0-553_85_1-debugsource-1-9.el8_10.x86_64.rpm SHA-256: 18ad701ef062197c3d2b3515506f7aa021badc3f955004d375cb0e05c8a75ccb Red Hat Enterprise Linux for Power, little endian 8 SRPM kpatch-patch-4_18_0-553_109_1-1-7.el8_10.src.rpm SHA-256: 5ddaff973b7000783ec37a582a78a18b529b63e517fd628ee384a0ee003b4ff3 kpatch-patch-4_18_0-553_125_1-1-4.el8_10.src.rpm SHA-256: 72c4dceb1516b5aa76ff0e44540e5f59f8cd5c09053acd13c07fd63d85f98f9d kpatch-patch-4_18_0-553_53_1-1-14.el8_10.src.rpm SHA-256: 314ad3001fadd5cd60a38f79a38763965e604e39f424bc378e5ea1a0b6ceaf7b kpatch-patch-4_18_0-553_72_1-1-11.el8_10.src.rpm SHA-256: 402fcd742c655b466dbeb599f1399ed2e2a708e309b906189c53ad5294bcc349 kpatch-patch-4_18_0-553_85_1-1-9.el8_10.src.rpm SHA-256: a3c21bf79792778aadfc80a36ec610982a3970a5416d0a01c4c12d3941205f3c ppc64le kpatch-patch-4_18_0-553_109_1-1-7.el8_10.ppc64le.rpm SHA-256: 3bd893cf64536e3e2451dff6542f29ef5a81c9652f6d188c069a903263db79a4 kpatch-patch-4_18_0-553_109_1-debuginfo-1-7.el8_10.ppc64le.rpm SHA-256: 15b82dcdb6ea9be9c2f345572b8d113dd9d24d2729e5f67d4f35d63dca88bf0e kpatch-patch-4_18_0-553_109_1-debugsource-1-7.el8_10.ppc64le.rpm SHA-256: 2721773a97e633eef2bc9ee67d103e7a9a8162a3b4ca3f4f7fc0b8d8a581dfdd kpatch-patch-4_18_0-553_125_1-1-4.el8_10.ppc64le.rpm SHA-256: ccbe6486f76ce277d4ef517b681e3b4a225c64491e46e86b81c25170febd23d5 kpatch-patch-4_18_0-553_125_1-debuginfo-1-4.el8_10.ppc64le.rpm SHA-256: 9a62c480adbd8b752c70d0663818c85207c1c8091ecf3c254ae5330eb3dab653 kpatch-patch-4_18_0-553_125_1-debugsource-1-4.el8_10.ppc64le.rpm SHA-256: 0208d323b28eb485b9809c8214f3fb8f8958f7d5ee976e0a0c56d1ce1974e0f3 kpatch-patch-4_18_0-553_53_1-1-14.el8_10.ppc64le.rpm SHA-256: 24f0f90c06a28d1925ef8b1a5d33ba76f15ae0171e442f2e8f5183dafb19e9db kpatch-patch-4_18_0-553_53_1-debuginfo-1-14.el8_10.ppc64le.rpm SHA-256: e9d61de8cf6e9773e71701d5e1436e783a93a81d8152d436ad63c78d0804c682 kpatch-patch-4_18_0-553_53_1-debugsource-1-14.el8_10.ppc64le.rpm SHA-256: d12cc585e52c0af438413a4fc262da369c8b34f1cd873980b9da057353d17bfb kpatch-patch-4_18_0-553_72_1-1-11.el8_10.ppc64le.rpm SHA-256: e5efa2e759b7e2af7612b32507fa3c4ede074e83b06cd209907895a773e807e6 kpatch-patch-4_18_0-553_72_1-debuginfo-1-11.el8_10.ppc64le.rpm SHA-256: 078ab63bbdf564f817abc13155d7bbe88e8fa72f84dffa0e9bd637e3855a9ad1 kpatch-patch-4_18_0-553_72_1-debugsource-1-11.el8_10.ppc64le.rpm SHA-256: 491f1c81f19594dcf74d3b6949fd3a9bcdbe313cf564d8a5008052959db73fd5 kpatch-patch-4_18_0-553_85_1-1-9.el8_10.ppc64le.rpm SHA-256: 424e8b09dcf4c6b7d7f8ce274cca18f84066f66022ff8cc8d0aa22bc6a2e7dea kpatch-patch-4_18_0-553_85_1-debuginfo-1-9.el8_10.ppc64le.rpm SHA-256: 31953b0066dcbc8037c726d8cc90e7d10d4e0f8b219b28633e9c46b7ae1443fd kpatch-patch-4_18_0-553_85_1-debugsource-1-9.el8_10.ppc64le.rpm SHA-256: dd38cd28f3a0ed6eeb9c0f9133e892bb7f913cd57a95f0725f2ff508542a1e9c Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM kpatch-patch-4_18_0-553_109_1-1-7.el8_10.src.rpm SHA-256: 5ddaff973b7000783ec37a582a78a18b529b63e517fd628ee384a0ee003b4ff3 kpatch-patch-4_18_0-553_125_1-1-4.el8_10.src.rpm SHA-256: 72c4dceb1516b5aa76ff0e44540e5f59f8cd5c09053acd13c07fd63d85f98f9d kpatch-patch-4_18_0-553_53_1-1-14.el8_10.src.rpm SHA-256: 314ad3001fadd5cd60a38f79a38763965e604e39f424bc378e5ea1a0b6ceaf7b kpatch-patch-4_18_0-553_72_1-1-11.el8_10.src.rpm SHA-256: 402fcd742c655b466dbeb599f1399ed2e2a708e309b906189c53ad5294bcc349 kpatch-patch-4_18_0-553_85_1-1-9.el8_10.src.rpm SHA-256: a3c21bf79792778aadfc80a36ec610982a3970a5416d0a01c4c12d3941205f3c x86_64 kpatch-patch-4_18_0-553_109_1-1-7.el8_10.x86_64.rpm SHA-256: c62a2caf04e4ec1ef5d503a69f20d4fe0bb375c0f7fce7a99e917738062d22a7 kpatch-patch-4_18_0-553_109_1-debuginfo-1-7.el8_10.x86_64.rpm SHA-256: d63b59de5b8246c120caef564f53ff4931634ae3a5de965f310095d1e1e95077 kpatch-patch-4_18_0-553_109_1-debugsource-1-7.el8_10.x86_64.rpm SHA-256: 0cf1be987c58b8d8846cd498e4e0feaa6847c2c447828b22903189daf211bc84 kpatch-patch-4_18_0-553_125_1-1-4.el8_10.x86_64.rpm SHA-256: 8fce55a0e1f23a54204b197998d336a3d405f695163b4e8ec681c8391949de1f kpatch-patch-4_18_0-553_125_1-debuginfo-1-4.el8_10.x86_64.rpm SHA-256: ca5b5b04923a442eeac9249c6d75c7ca7bfbd8f8e2ff33e40b8f1e252ff1c2cb kpatch-patch-4_18_0-553_125_1-debugsource-1-4.el8_10.x86_64.rpm SHA-256: a30d89adbe26f41e38656155ad38907b111e22ed64f67440fea89e61e40fad12 kpatch-patch-4_18_0-553_53_1-1-14.el8_10.x86_64.rpm SHA-256: 1d0ae0fc27deff8e1659315b93d9fc31487d03ba37ec04f15a27fc6d4d82e31a kpatch-patch-4_18_0-553_53_1-debuginfo-1-14.el8_10.x86_64.rpm SHA-256: 0156f37c92b46c09276dc56cd9b4545d98ad528e0180432e5a3a0b975774c824 kpatch-patch-4_18_0-553_53_1-debugsource-1-14.el8_10.x86_64.rpm SHA-256: b8374d21e42ee1f123aef3c961c07b3bd773dd737fc38d6e1e8ea327a5214cd2 kpatch-patch-4_18_0-553_72_1-1-11.el8_10.x86_64.rpm SHA-256: bb4f5c298befc9caf71a4ffdacb0bb0c9b7eb4124bd41b8a51b3e6c0aca2b7bd kpatch-patch-4_18_0-553_72_1-debuginfo-1-11.el8_10.x86_64.rpm SHA-256: 3f92134e3ca0bc328d280392ae172fbe691840127ed8377c8c8e2851ac403981 kpatch-patch-4_18_0-553_72_1-debugsource-1-11.el8_10.x86_64.rpm SHA-256: acdf6a3b4721ce3d6fffb6a5c503f3c5f5de6018fcbda132ae384f412b3797e7 kpatch-patch-4_18_0-553_85_1-1-9.el8_10.x86_64.rpm SHA-256: 16814aeb4f4f7a712612d799d11094c3449f0c309c08af7cfffa443a532e39a8 kpatch-patch-4_18_0-553_85_1-debuginfo-1-9.el8_10.x86_64.rpm SHA-256: 34a48dafdae2f36d083643c27f9e183d73d9e159a6c6d9d7