This Red Hat security advisory addresses multiple Important-severity kernel vulnerabilities, including a critical double-free flaw in tipc_buf_append() (CVE-2026-52993, CVSS 9.8) and a high-severity out-of-bounds write in dm log (CVE-2026-53059, CVSS 7.8). The affected kernel versions are broad, spanning from 4.15 through 6.12.91 across multiple mainline branches. The fixed versions are 5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, and 7.0.10, with Red Hat providing the patched kernel packages for RHEL 8.10 Extended Update Support.
Red Hat Product Errata RHSA-2026:45115 - Security Advisory Issued: 2026-07-24 Updated: 2026-07-24 RHSA-2026:45115 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the kernel package is now available for Red Hat Enterprise Linux 8.10 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026) kernel: xfrm single-frag length not properly limited kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2406712 - CVE-2025-40026 kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O BZ - 2492277 - CVE-2026-53059 kernel: dm log: fix out-of-bounds write due to region_count overflow BZ - 2492437 - CVE-2026-52993 kernel: tipc: fix double-free in tipc_buf_append() CVEs CVE-2025-40026 CVE-2026-52993 CVE-2026-53059 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kernel-4.18.0-553.147.1.el8_10.src.rpm SHA-256: 8bd74b672158f3c1425b320814356eedc43fd3349c920deedb99e5373e9cf730 x86_64 bpftool-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 95339cf536772022612b97637ff2aea3102ba6ac5977d9dbff754be84b813709 bpftool-debuginfo-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 873f2dada21def8efc1e5238270dafb2776856b4ac09d9a234375c13389c619c kernel-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 0f63ead1ff78f6a4af9738eebfa9d7ca82d8806e6effb48925943313b17c69f8 kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch.rpm SHA-256: a31d7d59dbd7bc6c1cec3bac558cc57ddd61d077b15f3a793cddaa48f8f6d5a2 kernel-core-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 7e1573f5c047036aacf1696cc88e3e60508e3e0cafa16724bb44215630f6d761 kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 764d5e44178b6138aa9cbf712b7797022d03a39bbd26149fa50022278213091c kernel-debug-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 1c742c510b68cffb12cd1570ee63fb1492e342f5b30777079aa82dcf40f1754f kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: b98ede9338502746510ccae0ba48774e4fe583b514bd1aa429340c4f9bce44a0 kernel-debug-debuginfo-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 0a21722e959eded18e801bde13f2999e9817d46d2f6c201629439a7b5eacf3ba kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 5393d531bda905824b63b1f9944148532e00b67115c99883b415d94aa004c084 kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 5b7dbb346e284e87211570a8bf32e0bd7673297027f2598d38e9a786525e4dc3 kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 907bda2f6295b3249dc52ca1495ae3809a7ff0f1d58f3efe5fb0679ee0cc97ba kernel-debuginfo-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: fcc905c77e0906c5f73fa38e4635cedae9eb84ea823c0e9a473afb8d17291cd7 kernel-debuginfo-common-x86_64-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: ce73baa76aecd974629c5aad3e94e076b5f941aad9718f03514c61cd3a6008d5 kernel-devel-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: d405cfd2eac979aec876893e7c543f3e9779f5eac978046c407f68d6e76e07cc kernel-doc-4.18.0-553.147.1.el8_10.noarch.rpm SHA-256: 256d3600ea7b290ba4c0bba5960e7ede6e7f7b44a282cc4efe834f12f6748e9a kernel-headers-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 2ac1b3f7bfcf0ca22901c7a724a2daae9d776b5bedfde94c9d5b63dc61689c22 kernel-modules-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: cf895dc29b5fbeda3467652ba39de55218969bebc605cc54dcfdf028c0a395b7 kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 5960fd73a8175de50f2b1e9b23af39826860324ff650e962f927b769e286e0bb kernel-tools-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 09110f53b3b55f71261492cba1b56b01e4b4b9ecf7a8749c245366e0acf3baec kernel-tools-debuginfo-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 4dd118239a9759c02e669a1f2a9facbe2c7524e6dd7c3fac1ea9084f78ee3fec kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 2f2a72859a559a5d5f1478e7dc6e13b23009911aebe3ffa159bad8479597b25d perf-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 30fc2106f4cb3cfa27ce9f89535156e3d64b232e616f04277ff89ba8dd5c4f0e perf-debuginfo-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: 65540cc65024543381f8f85463b343ba76e1b7ac19fde337a4e75f05702537b0 python3-perf-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: ee6b46cc1c3c5782204fe50b7eb12fde807e43b2d37b7fca61ab2644c5fdc27a python3-perf-debuginfo-4.18.0-553.147.1.el8_10.x86_64.rpm SHA-256: bcc7c0effdf1f254ed7e05af54d552a4c8ad9c028a06cd5b65b13a0bee1a3800 Red Hat Enterprise Linux for IBM z Systems 8 SRPM kernel-4.18.0-553.147.1.el8_10.src.rpm SHA-256: 8bd74b672158f3c1425b320814356eedc43fd3349c920deedb99e5373e9cf730 s390x bpftool-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 03b18a78746a8dbcc079701d1ead38244c99da519f38eec75d8166bdc2f642f0 bpftool-debuginfo-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 3a0b6d97e028e7910b114701f4bec5c195cd47d36c1f2bfeb2aa91d720d76a63 kernel-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 549608ec5c8d71fbab578ea4d48cfe01d2d767a2703ab37d9ce48153372dc526 kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch.rpm SHA-256: a31d7d59dbd7bc6c1cec3bac558cc57ddd61d077b15f3a793cddaa48f8f6d5a2 kernel-core-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 4637a70e74662754ed7bb3d2c5cfbe5aa208db1d28ad05bdb9e4f43a2d8deb23 kernel-cross-headers-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: f955c062a6a30e86ad6e98d76331d49596c1ea96497e7f15c0383c4ff7acfe85 kernel-debug-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 9cb5c9aea404722d8bec5b9c2f2ff124e055f47eebf2e31be1e7feeb535131d3 kernel-debug-core-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 1a5582d30f73d41bb869a5c05d2d900f707305f4bc64c5dc319be1d51857ef9f kernel-debug-debuginfo-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 1421d836794582c8a41cbfc65c769d3e3e6584ab147eac860b836638e96c916a kernel-debug-devel-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 097fb448738039118d9b0ce2de588f3acb86657ddc6131970c2760cd3f2d1dfb kernel-debug-modules-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: e6802645dde73a0224351488e2c98709a631ed6e4a19a6c3c6dabfd8b41b0934 kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: a15e5b8c325c00b49d34adcd94fd36f6a1e515349433de8a89d77ef94f0b0f24 kernel-debuginfo-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 3cfd4ea7f82169edc1c8d07649944ffd06804b82654c5e4191f8c689b38414ac kernel-debuginfo-common-s390x-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: c6b172b2776702657f039afc35b94e90e5c36c29477f67fb5e857ef9e2501ac8 kernel-devel-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 948609e3fc7eafe32d929d32ede736713d393cef144ab0c48fb22599ba86342a kernel-doc-4.18.0-553.147.1.el8_10.noarch.rpm SHA-256: 256d3600ea7b290ba4c0bba5960e7ede6e7f7b44a282cc4efe834f12f6748e9a kernel-headers-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: ae51313b906b6fd8717a0fe994856e3773343bf45b46370e9cd424a23b7eed28 kernel-modules-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: a193cc9a793fe57b573f74c9285b1153cc8ca578b4707429b3ebe3c0d4f10ee2 kernel-modules-extra-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: bd5575704d871ea8297b247c510102bcc2636522c30dcf58fd16556ae8dbd841 kernel-tools-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 6e42670e205568984a76aec63a6e6af56ddd4cb735cee635ed2e460e3cf90781 kernel-tools-debuginfo-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: cc8c4d3fc94584b03e48781315947337a1befd0457febb75eb1d04621f3c470e kernel-zfcpdump-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 7551238456c991a01e5907c8bd7653f211708ae9ab91b0f934695cbbec9278ed kernel-zfcpdump-core-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: d4988a8f3add43991d4ac8f5a47f60e272e607b97a78381ac0816c10e5fd76f1 kernel-zfcpdump-debuginfo-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: e081acff4ee819a3e115be8083b8f9729b4e14b7f3f1894d9a9bad00b6bcebe7 kernel-zfcpdump-devel-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 2a95a2b28ee349b64a897c9fce894d8bd37285d293c65036710a80d764c8abcc kernel-zfcpdump-modules-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 3573903b3ad60e3431363fbdc4373b3eccd71781beceac984886621fe6915911 kernel-zfcpdump-modules-extra-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 16ec39e8a7cc6d77bf677885f464cca6bd914faa0a9c52495a578be6fd259627 perf-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: e10bfca15183d77e712ae785bac0e3e21503cdefbd14edaabe96946f3bb8c937 perf-debuginfo-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 4fd97993983a1cfd2d2a3163286064bd8c4c37c07cb6b5f1652666d3db808f3c python3-perf-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: 97106717b4ce04cb8c0dba41ba5222db0da1600fe6f3868c2e109ec678fdb0b7 python3-perf-debuginfo-4.18.0-553.147.1.el8_10.s390x.rpm SHA-256: a4e2