This Red Hat security advisory addresses multiple Important-severity kernel vulnerabilities affecting various subsystems, including filesystem notification (CVE-2025-40237), SCSI error handling (CVE-2026-23110, CVSS 4.7), network routing (CVE-2026-31692, CVSS 5.5), and others. The provided NVD data specifies that CVE-2026-23110 affects Linux kernel versions 5.5 through 5.10.248, 5.11 through 6.1.161, 6.2 through 6.6.121, and 6.7 through 6.12.67, with fixes available in versions 5.10.249, 6.1.162, 6.6.122, 6.12.68, and 6.18.8. Red Hat Enterprise Linux 10 users should apply the provided kernel package update via the referenced solution article.
Red Hat Product Errata RHSA-2026:45114 - Security Advisory Issued: 2026-07-24 Updated: 2026-07-24 RHSA-2026:45114 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the kernel package is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237) kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2418829 - CVE-2025-40237 kernel: fs/notify: call exportfs_encode_fid with s_umount BZ - 2436755 - CVE-2026-23110 kernel: scsi: core: Wake up the error handler when final completions race against each other BZ - 2464093 - CVE-2026-31692 kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns BZ - 2481972 - CVE-2026-46099 kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels BZ - 2492277 - CVE-2026-53059 kernel: dm log: fix out-of-bounds write due to region_count overflow BZ - 2492413 - CVE-2026-52973 kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc CVEs CVE-2025-40237 CVE-2026-23110 CVE-2026-31692 CVE-2026-46099 CVE-2026-52973 CVE-2026-53059 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM kernel-6.12.0-211.39.1.el10_2.src.rpm SHA-256: 668dfb632c088b78aed8b400f651b08b84812987213a6e60a8e54e718dc42989 x86_64 kernel-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 6cf4c26f1bd9b334928b53a023bb8532809a3dfc23f8dabb2320d9c2dd0f6d80 kernel-abi-stablelists-6.12.0-211.39.1.el10_2.noarch.rpm SHA-256: 4991165ce987292ad081f49ae0e4bbc82849b58c3ce7a267bd03741c2c549b79 kernel-core-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 4a022f15d8add4d8fd6f52ed6792d96c44240856a04e07917945109f4ad00923 kernel-debug-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: aed54b3a24c5e2ad871cb598db6ce50b1b054fa06b4a88159b5fc37b02b815d9 kernel-debug-core-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 73fc684f5240725d1ee5ceb78a72806e3274d420a9c8baf1c6d2707487466437 kernel-debug-debuginfo-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 988c2de06b3a39764a58508737d786a80a822fda39535b97e37b572459b29043 kernel-debug-debuginfo-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 988c2de06b3a39764a58508737d786a80a822fda39535b97e37b572459b29043 kernel-debug-debuginfo-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 988c2de06b3a39764a58508737d786a80a822fda39535b97e37b572459b29043 kernel-debug-debuginfo-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 988c2de06b3a39764a58508737d786a80a822fda39535b97e37b572459b29043 kernel-debug-devel-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 828a3c55b7b564cd70014352900213dafff482496e8646b3b68a7d8df7b2a955 kernel-debug-devel-matched-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 4acd40881264eebb56fc6e4f8c0f7e9c3d8dea4d7fac4b272f55bf18ee4f6068 kernel-debug-modules-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: e054035b012b65599779d88f9bfa43ea30bfc9f9eec6146c4bd576f37d4efb54 kernel-debug-modules-core-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 0da967efb95d9dcce7863e16ec828181b7ea43758491a84f799e20a0e764ffce kernel-debug-modules-extra-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: b0de222b2df98078bae0df22cf706939eeaaead0d9ac48da261a5deb82ab4d6e kernel-debug-uki-virt-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 55207ff9e2994df68563eecc585fefd14ce306dccc29b1afc2c6d63538346ab7 kernel-debuginfo-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: b2142f0e7a9df2d223b136dae8ea306dfecc265ba1864b157e56c317657d5b8a kernel-debuginfo-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: b2142f0e7a9df2d223b136dae8ea306dfecc265ba1864b157e56c317657d5b8a kernel-debuginfo-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: b2142f0e7a9df2d223b136dae8ea306dfecc265ba1864b157e56c317657d5b8a kernel-debuginfo-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: b2142f0e7a9df2d223b136dae8ea306dfecc265ba1864b157e56c317657d5b8a kernel-debuginfo-common-x86_64-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: ef801c4ed8f1902cb8d79c6d0fadbb1877f085875bcab27d1d2d97745013b177 kernel-debuginfo-common-x86_64-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: ef801c4ed8f1902cb8d79c6d0fadbb1877f085875bcab27d1d2d97745013b177 kernel-debuginfo-common-x86_64-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: ef801c4ed8f1902cb8d79c6d0fadbb1877f085875bcab27d1d2d97745013b177 kernel-debuginfo-common-x86_64-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: ef801c4ed8f1902cb8d79c6d0fadbb1877f085875bcab27d1d2d97745013b177 kernel-devel-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 39df9c00b4f2f417931ec0d09f4dfe67e826bed43c129b4d10f194237686ae47 kernel-devel-matched-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: f639e18cffd8880063b15edd6502d5d042c185979507debdf17b74bef73bf5ef kernel-doc-6.12.0-211.39.1.el10_2.noarch.rpm SHA-256: 3a868c0a094202bf2250b690954fc065b851f12312736e0c006b482551a747d4 kernel-headers-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: b6d7290438889f8ec88274ed6f4df2dc3fb43dff5854fb9cd7fc7f73c2e0a592 kernel-modules-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: e0c261ba71a4e408bb40de7e34283a9443bbb8f04741ede71bd4d6cc1e252076 kernel-modules-core-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: ef2a7619b893e9cb2d855c8ecacc5fbc5c75cd5da84dfc87c1cfd2ca5f09370d kernel-modules-extra-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 2d19d72c03537993afa1be4ee0edcd154f9c595553137e5e5827238ee87bc31e kernel-modules-extra-matched-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 47484e79ed94c0a9cb616d7ef37eb27cdb32de84ce35cc1f61ad050d27351b0a kernel-rt-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: b748b9f6acd302fbed565174a10b847486405a4abb6f1a90bfd7836417b800b2 kernel-rt-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: b748b9f6acd302fbed565174a10b847486405a4abb6f1a90bfd7836417b800b2 kernel-rt-core-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 3cb0bd735448abd0379221f2432b6c0d337fae41dee5ba91eac54af81ba7109c kernel-rt-core-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 3cb0bd735448abd0379221f2432b6c0d337fae41dee5ba91eac54af81ba7109c kernel-rt-debug-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 2ccc1a2394844e2c5e2fea481806d9b364d137dd92c4e5b6bdf00f7a0ec158a6 kernel-rt-debug-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 2ccc1a2394844e2c5e2fea481806d9b364d137dd92c4e5b6bdf00f7a0ec158a6 kernel-rt-debug-core-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 95ea566793870df883c1e2544037d36725c898afb3b4f849b5bea93b2bf0acb8 kernel-rt-debug-core-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 95ea566793870df883c1e2544037d36725c898afb3b4f849b5bea93b2bf0acb8 kernel-rt-debug-debuginfo-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: c8242344cf07a487cafe2c1e64d71965e7ab8d2cc9219123225484f9ee193040 kernel-rt-debug-debuginfo-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: c8242344cf07a487cafe2c1e64d71965e7ab8d2cc9219123225484f9ee193040 kernel-rt-debug-debuginfo-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: c8242344cf07a487cafe2c1e64d71965e7ab8d2cc9219123225484f9ee193040 kernel-rt-debug-debuginfo-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: c8242344cf07a487cafe2c1e64d71965e7ab8d2cc9219123225484f9ee193040 kernel-rt-debug-devel-6.12.0-211.39.1.el10_2.x86_64.rpm SHA-256: 84b28a00bf408bf1ae867d0336f232467acf7053af26ba3f5480a84d295e1843 kernel-rt-debug-devel-6.12.0-211.39.1.el10_2.x86_