A use-after-free vulnerability (CVE-2026-46323, CVSS 7.8 High) in the Linux kernel's net/gro subsystem allows exploitation via improper handling of zerocopy skbs. Affected versions include Linux kernel 6.0 through 6.1.175, 6.2 through 6.6.141, 6.7 through 6.12.91, 6.13 through 6.18.33, and 6.19 through 7.0.10. The fix requires upgrading to patched kernel versions 6.1.176, 6.6.142, 6.12.92, 6.18.34, or 7.0.11, followed by a system reboot.
Red Hat Product Errata RHSA-2026:44270 - Security Advisory Issued: 2026-07-23 Updated: 2026-07-23 RHSA-2026:44270 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2479832 - CVE-2026-46323 kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs CVEs CVE-2026-46323 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM kernel-6.12.0-211.38.1.el10_2.src.rpm SHA-256: 1ccaed60abc50070f34bf4200e85e577cdd1c4c337cec5e20815a9ed94e4cf5d x86_64 kernel-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 9ead56ad141c62bec4be6b3ad7af8985094cc612052d215233eedb6e6d3dcaf6 kernel-abi-stablelists-6.12.0-211.38.1.el10_2.noarch.rpm SHA-256: 00bb847637640c9d9673e52dcfe6fb53afe9236d8bb6aa8a531e72e70e2ad37e kernel-core-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 7d728c982e8881cfabc38ee6f06bf9403a57395265b02052e0db7edfea8c7970 kernel-debug-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 22f3b3cf5b3051763868e6f99d0996cfe1029825086ba20a899ace77eb9366f6 kernel-debug-core-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 7a8b64df2a846348d6e4e4672cccec9680507eaaa7f689fb8bc4cc432c959c73 kernel-debug-debuginfo-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 32f832151016f0a051ad851543efb60d752d143fd3c3681b00f210b1dc2a4bcf kernel-debug-debuginfo-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 32f832151016f0a051ad851543efb60d752d143fd3c3681b00f210b1dc2a4bcf kernel-debug-debuginfo-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 32f832151016f0a051ad851543efb60d752d143fd3c3681b00f210b1dc2a4bcf kernel-debug-debuginfo-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 32f832151016f0a051ad851543efb60d752d143fd3c3681b00f210b1dc2a4bcf kernel-debug-devel-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: cb2eba60280847d64c5442503c9fcbcb3549a8ee070b3de1d0cb571dc0d4816d kernel-debug-devel-matched-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: b39bfe54e28e0447fbcf67fb49f375978d05b5d6718837ba7647b9d9f36d8430 kernel-debug-modules-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: e59a41ae31998b79b32e97cdf8686657f585cdd40798822d10a565e39f0ddc47 kernel-debug-modules-core-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: b1183e69b364e7e293f74619f74237fdfba6d7d246a2daea1b15bfa9167e518e kernel-debug-modules-extra-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 0af51de5a777e35a0d4b139c9a7d1d5fbe0b7edd9852873f28b5dfe09f08e304 kernel-debug-uki-virt-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: fc9eaf0432c44edc5661c55347f2572c33c42c80895df2f44efc76e340ebd9ca kernel-debuginfo-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 9b64c03dea15cd76ef3e2dc51c139970c4d5fa67927cbd7b77236ff8f175c59c kernel-debuginfo-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 9b64c03dea15cd76ef3e2dc51c139970c4d5fa67927cbd7b77236ff8f175c59c kernel-debuginfo-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 9b64c03dea15cd76ef3e2dc51c139970c4d5fa67927cbd7b77236ff8f175c59c kernel-debuginfo-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 9b64c03dea15cd76ef3e2dc51c139970c4d5fa67927cbd7b77236ff8f175c59c kernel-debuginfo-common-x86_64-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: aa6b4eb7cd19ae99a41747b9a894d3ef588194571b4108aff8a6167edd9dfa4d kernel-debuginfo-common-x86_64-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: aa6b4eb7cd19ae99a41747b9a894d3ef588194571b4108aff8a6167edd9dfa4d kernel-debuginfo-common-x86_64-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: aa6b4eb7cd19ae99a41747b9a894d3ef588194571b4108aff8a6167edd9dfa4d kernel-debuginfo-common-x86_64-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: aa6b4eb7cd19ae99a41747b9a894d3ef588194571b4108aff8a6167edd9dfa4d kernel-devel-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: cd1e0b85e27f9690b4bb50cb2f30f25226852b75696fa7002c0f79bfde98184c kernel-devel-matched-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 75c9395c4fbd2253f94dbfca6460c4b38b98646a7bbae4babf192d03ce4ab40f kernel-doc-6.12.0-211.38.1.el10_2.noarch.rpm SHA-256: 0fe83c16fef4ccacf698b0f4b8fbfd797a586258141bb0d88c1fb3937348a2fe kernel-headers-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 089ab2df14897ecc0a79c821715d7258ce9b5ba0c4c56063a488dd93ab2866ce kernel-modules-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 1d0dbac83d58682b048b48ecc952be2d1221017c5e6923660427ea34ea447399 kernel-modules-core-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 3356d8d5011ee7f323c76a27d113200f2c72995a092060a36b0d75a4e9ea6e86 kernel-modules-extra-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 8089529024dd872c05412f00ce3258df517969fa0c05b853ca43d84f42c2e76a kernel-modules-extra-matched-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 287ed22fa55c0e6c43df198095542eee73539583b8dcc8a1e975b6bf2dbd2052 kernel-rt-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 88879a14d1e1608cb38f1648e99f3f8371d44f5aa62bc64b2bd92ca505877385 kernel-rt-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 88879a14d1e1608cb38f1648e99f3f8371d44f5aa62bc64b2bd92ca505877385 kernel-rt-core-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 64afe72195ff7fc6fe389f5a45bbf3bc55d11b83ded8a3edbc2afbaf85b1dcd7 kernel-rt-core-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 64afe72195ff7fc6fe389f5a45bbf3bc55d11b83ded8a3edbc2afbaf85b1dcd7 kernel-rt-debug-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 12a949b03106e1ac4abe130515bba0fd517367711d4bd5b782de27d44b7e01e1 kernel-rt-debug-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 12a949b03106e1ac4abe130515bba0fd517367711d4bd5b782de27d44b7e01e1 kernel-rt-debug-core-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: f4c103ed40156966e777d1ea25aa731e769f9aa1e5502e364662612f7aa3e233 kernel-rt-debug-core-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: f4c103ed40156966e777d1ea25aa731e769f9aa1e5502e364662612f7aa3e233 kernel-rt-debug-debuginfo-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 2bd6e866811f671c729a56a7e8fc3309cd5cb7ebb2d43e16b5e843c54b0cfeb7 kernel-rt-debug-debuginfo-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 2bd6e866811f671c729a56a7e8fc3309cd5cb7ebb2d43e16b5e843c54b0cfeb7 kernel-rt-debug-debuginfo-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 2bd6e866811f671c729a56a7e8fc3309cd5cb7ebb2d43e16b5e843c54b0cfeb7 kernel-rt-debug-debuginfo-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 2bd6e866811f671c729a56a7e8fc3309cd5cb7ebb2d43e16b5e843c54b0cfeb7 kernel-rt-debug-devel-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 3c4ae1eb04a48be35df9e58da135a7a2d7d1f68d5bc743293d890d4524b2b1bf kernel-rt-debug-devel-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 3c4ae1eb04a48be35df9e58da135a7a2d7d1f68d5bc743293d890d4524b2b1bf kernel-rt-debug-modules-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: f38818ddd30b851b473253ec565dac6baac4d8b8137c8baa21cd48136e352c2b kernel-rt-debug-modules-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: f38818ddd30b851b473253ec565dac6baac4d8b8137c8baa21cd48136e352c2b kernel-rt-debug-modules-core-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 748bdd2c45c0720c4cdd227d062909192b68d30dc51ddab73d18589190152f70 kernel-rt-debug-modules-core-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 748bdd2c45c0720c4cdd227d062909192b68d30dc51ddab73d18589190152f70 kernel-rt-debug-modules-extra-6.12.0-211.38.1.el10_2.x86_64.rpm SHA-256: 0136ab665d4d499baa0fc823e7b26e583d9db2810e38b88b4f3cf4ff951d712b