Red Hat Product Errata RHSA-2026:44385 - Security Advisory Issued: 2026-07-23 Updated: 2026-07-23 RHSA-2026:44385 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (CVE-2024-46738) kernel: vt: prevent kernel-infoleak in con_font_get() (CVE-2024-50076) kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CVE-2025-39982) kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) Bug Fix(es) and Enhancement(s): "Send error in SessSetup" messages fill up the logs [rhel-9.6.z] (JIRA:RHEL-145508) Fix suspend/resume printk bug in C9s [rhel-9.6.z] (JIRA:RHEL-148301) RHEL9.4 - s390/pci: Fix __pcilg_mio_inuser() inline assembly [rhel-9.6.z] (JIRA:RHEL-161490) NVMe-FC: Panic during NVMe Controller Reset tests [rhel-9.6.z] (JIRA:RHEL-171743) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2313086 - CVE-2024-46738 kernel: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() BZ - 2322313 - CVE-2024-50076 kernel: vt: prevent kernel-infoleak in con_font_get() BZ - 2404100 - CVE-2025-39982 kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync BZ - 2460619 - CVE-2026-31488 kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation BZ - 2461480 - CVE-2026-31613 kernel: smb: client: fix OOB reads parsing symlink error response BZ - 2461757 - CVE-2026-31684 kernel: net: sched: act_csum: validate nested VLAN headers BZ - 2482523 - CVE-2026-46116 kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete BZ - 2482636 - CVE-2026-46209 kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() CVEs CVE-2024-46738 CVE-2024-50076 CVE-2025-39982 CVE-2026-31488 CVE-2026-31613 CVE-2026-31684 CVE-2026-46116 CVE-2026-46209 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM kernel-5.14.0-570.129.1.el9_6.src.rpm SHA-256: 150c75e25be3dfce349f803b5ec63affd9a2855d236e49c4749220f80dda13cf x86_64 kernel-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: d94319d698982541a537987f5507f5fce9aa4e7b8986925e083df53bc5666a16 kernel-abi-stablelists-5.14.0-570.129.1.el9_6.noarch.rpm SHA-256: c4e8a12b41020270936cdcd64e50d618937530af5a675e16734fce8ef9ad7db4 kernel-core-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 38847584928700c647ac0d5c1ce2f23e03f9110c48c88ad65c897aa6ea8793c7 kernel-debug-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: eb999a0f014a8ac0a240c4d5d112fb93284615b1822899a8dad5d12fa828c685 kernel-debug-core-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 3ffc5da7c8f1f2266f62d11f433b3b1a67eca64b6cb33322602b96015a307963 kernel-debug-debuginfo-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 5704b33e06417506ca41d4f706a5ab25d0b33cb03e06d3f1571e47490939e891 kernel-debug-debuginfo-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 5704b33e06417506ca41d4f706a5ab25d0b33cb03e06d3f1571e47490939e891 kernel-debug-debuginfo-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 5704b33e06417506ca41d4f706a5ab25d0b33cb03e06d3f1571e47490939e891 kernel-debug-debuginfo-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 5704b33e06417506ca41d4f706a5ab25d0b33cb03e06d3f1571e47490939e891 kernel-debug-devel-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 4ffb1c9dab2a356d375d3ef44ac56014685165007d6517488d17a6f5ce83568f kernel-debug-devel-matched-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: d0b5e32f08cabee3637c73f7ad824a2a85cddb86ca9490bde4552ccf6e8634d9 kernel-debug-modules-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 70b85cde65fca996aed0f1395a804d4e859373d47e11b6222afc08836e938f12 kernel-debug-modules-core-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: c1e35d34e62d7686851fa018d05418b619944f3d2325c07cde5d16fc006f44ed kernel-debug-modules-extra-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 32d07cc42430d5e1a16200c15265b9bdcfe4f2320a50f087ff35cd94ebeab225 kernel-debug-uki-virt-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: fec9b09423f34056d4f09f5775e9d3c2fecae2b68d592969af5b213bed15d35a kernel-debuginfo-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: aaf73a41d9fa0b97e704ae171015b48e429affb77bb585b8c8ffdb37f06c5156 kernel-debuginfo-common-x86_64-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: a1a81e2a4564f878c6310b3bab0b458ad89ed48f3a22c84035e42793a51ceab7 kernel-debuginfo-common-x86_64-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: a1a81e2a4564f878c6310b3bab0b458ad89ed48f3a22c84035e42793a51ceab7 kernel-debuginfo-common-x86_64-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: a1a81e2a4564f878c6310b3bab0b458ad89ed48f3a22c84035e42793a51ceab7 kernel-debuginfo-common-x86_64-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: a1a81e2a4564f878c6310b3bab0b458ad89ed48f3a22c84035e42793a51ceab7 kernel-devel-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: a042569f1851c0b5bd1cee36e1d1e3e7d73708f6e816ec8a37c5cbc3d04706f5 kernel-devel-matched-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 5a5b04e4ebc8d09b049601423e5b6d2c5ed248dc83f3c51314296adc12ff3584 kernel-doc-5.14.0-570.129.1.el9_6.noarch.rpm SHA-256: 0044223f8dccbf49daf78624bc3b131cc9939263e2547b73a013fe4d972be583 kernel-headers-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 8d52c97057460c36c7bb4a3bbd0535c45ee6facf5a9502b36486322134aaea40 kernel-modules-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: c711df8505ab1893ec1d966860a5bf090f56b4f56f276477d80d4858f722139f kernel-modules-core-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 79e65ac98f4c631fef23e297594111b12cd26a9dea3c80afc399978d57cee168 kernel-modules-extra-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 53c5c6c36b47ec3ada4668d792a20109231d39af91c331c01cfd5075c8614867 kernel-rt-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 6dca5137242e177e35a883776474726bc0c716b963824a8100f0895caa6c1dd4 kernel-rt-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 6dca5137242e177e35a883776474726bc0c716b963824a8100f0895caa6c1dd4 kernel-rt-core-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 39268e140b981c26f208e3f24b637a07b473e831be422e5a2970df43728665da kernel-rt-core-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 39268e140b981c26f208e3f24b637a07b473e831be422e5a2970df43728665da kernel-rt-debug-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 827d12e607540921efedb0e2d03723cef8edeb7a40999eb59e0807faa3300cfb kernel-rt-debug-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 827d12e607540921efedb0e2d03723cef8edeb7a40999eb59e0807faa3300cfb kernel-rt-debug-core-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 89be31785f8f0a6df12dae4423c661fb2c2dde07e7091f962289bc5b7927ced1 kernel-rt-debug-core-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: 89be31785f8f0a6df12dae4423c661fb2c2dde07e7091f962289bc5b7927ced1 kernel-rt-debug-devel-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: b9d674b274fce472152d91ef441e1a0ad3ef8d10bb4927ffe06c525c19804c31 kernel-rt-debug-devel-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: b9d674b274fce472152d91ef441e1a0ad3ef8d10bb4927ffe06c525c19804c31 kernel-rt-debug-kvm-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: a4c7b483a7efc0197f6bd2fa9b6ca95bda524279a24ccacddaa3294210471218 kernel-rt-debug-modules-5.14.0-570.129.1.el9_6.x86_64.rpm SHA-256: b653650bb0720cb6216d91f815cb335898f7eb128071c7c42737b1242a054503 kernel-rt-