This Red Hat kernel update addresses multiple critical vulnerabilities, including CVE-2026-53006 (CVSS 9.8), a use-after-free flaw in the IPv6 ICMP handler allowing remote code execution, and CVE-2026-52993 (CVSS 9.8), a double-free in the TIPC subsystem. Affected kernel versions are extensive, covering major branches from 4.4 up to specific fixed versions like 5.10.258, 5.15.209, and 6.1.175, as detailed in the NVD data. The advisory requires a system reboot after applying the update via the Red Hat package manager.
Red Hat Product Errata RHSA-2026:47017 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47017 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281) Bug Fix(es) and Enhancement(s): rxrpc: Address CVE-2026-43500 [rhel-10.2.z] (JIRA:RHEL-178254) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2481989 - CVE-2026-46086 kernel: net: bridge: use a stable FDB dst snapshot in RCU readers BZ - 2492363 - CVE-2026-53006 kernel: ipv6: fix possible UAF in icmpv6_rcv() BZ - 2492437 - CVE-2026-52993 kernel: tipc: fix double-free in tipc_buf_append() BZ - 2493728 - CVE-2026-53281 kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption CVEs CVE-2026-46086 CVE-2026-52993 CVE-2026-53006 CVE-2026-53281 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM kernel-6.12.0-211.40.1.el10_2.src.rpm SHA-256: 4e03219ae9b54bdcf624eecb32c335dc00253a043726352ff582a65f98ce16cf x86_64 kernel-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: bb8d532f9e56fe4f0aaf506c826d9147bb03aea6f78066700575ec53bbacca51 kernel-abi-stablelists-6.12.0-211.40.1.el10_2.noarch.rpm SHA-256: c71452155ff6f8ebd5110cef94e495f8f88287cf527cbbb76e1106ff849a62d8 kernel-core-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 6fdc6734477a74d918a44baebb303ca49ecb25eb997eee21ebc2d17700b3f008 kernel-debug-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 417f977bc27fbaf646e2b36508206fe60cba95ed651bea3c7da47333c9d43c6c kernel-debug-core-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 3c790353827155e818addabf038fbea0ba43bf79e3bb254d99f087dd8588814c kernel-debug-debuginfo-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 0c432b682940200d94eee781e74530e37a34ecd8431b5476ba263faf07136026 kernel-debug-debuginfo-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 0c432b682940200d94eee781e74530e37a34ecd8431b5476ba263faf07136026 kernel-debug-debuginfo-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 0c432b682940200d94eee781e74530e37a34ecd8431b5476ba263faf07136026 kernel-debug-debuginfo-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 0c432b682940200d94eee781e74530e37a34ecd8431b5476ba263faf07136026 kernel-debug-devel-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 0a1ec20fa69f26eda3b708f389d0acc29dcfa41f0764f41598b1d8e420348be9 kernel-debug-devel-matched-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: c5e1df5eac7d883fe24ba2c0c6182dd6fdc38e1efefe6cd16f30b426ea80eaec kernel-debug-modules-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 86c18178bf52754ad4e65fdf15072cfc0b3438e3c359f1d9b092a1d851d6c960 kernel-debug-modules-core-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 13946ecee1124e33c38a72311f7b27f7dcf25e00d9142ea97a6ca637faf719e7 kernel-debug-modules-extra-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 22eeaf62db99defb55597a0a61b4df93cb5437c904df43cff6138e7a8ce03b91 kernel-debug-uki-virt-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 5fe3f6b9e2f5f62bb9d405022c55d96b9634b62c13ab809f8c31a619c12c79fc kernel-debuginfo-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 9e28ecded989cc45c530f04f73ab919533e595aa42f99fc3b385b0daa88d6e68 kernel-debuginfo-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 9e28ecded989cc45c530f04f73ab919533e595aa42f99fc3b385b0daa88d6e68 kernel-debuginfo-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 9e28ecded989cc45c530f04f73ab919533e595aa42f99fc3b385b0daa88d6e68 kernel-debuginfo-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 9e28ecded989cc45c530f04f73ab919533e595aa42f99fc3b385b0daa88d6e68 kernel-debuginfo-common-x86_64-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: a4edf86affba2887f19596186804b99f64c27c75221bafec60bc7478c61fa589 kernel-debuginfo-common-x86_64-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: a4edf86affba2887f19596186804b99f64c27c75221bafec60bc7478c61fa589 kernel-debuginfo-common-x86_64-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: a4edf86affba2887f19596186804b99f64c27c75221bafec60bc7478c61fa589 kernel-debuginfo-common-x86_64-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: a4edf86affba2887f19596186804b99f64c27c75221bafec60bc7478c61fa589 kernel-devel-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: c59f8186ee0e9370fe3da41f92d7877d87a646d63ee96748fdfc3481cc44ee7a kernel-devel-matched-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 35ddaa6a55e7f4ad8fbe0fd6c92f0ba18971f59d6d4f4918bda894bb6d996296 kernel-doc-6.12.0-211.40.1.el10_2.noarch.rpm SHA-256: a51ae52a200ddd3e8e2bd6f604aa4aebc7bdc9a958aef3e32033a749313e7982 kernel-headers-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 8f077be00b72a9dbea34376ed6349e4ea71334efe7ffc3fe664486dc51dc14b4 kernel-modules-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 55868e0dd7eaafea40c7ccf387132391aae62445c1e8f1e8e2af7ebe93bd879e kernel-modules-core-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: cc1c71a7cd3480350b7f6f963e9ec41a2504be9f4120f20d701c0db84287d4d0 kernel-modules-extra-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: e74c2c274351e447dda028872c458df3325e0d8f4311935024e5c4f0d992db9d kernel-modules-extra-matched-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 1be491e27a096a23e272fb2b7899a331f5c8e55c786802a5315d1c87d83ab433 kernel-rt-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 9a9e78421ce072511e62c170520345672214958fbb71f926173a6d9c75ed37ab kernel-rt-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 9a9e78421ce072511e62c170520345672214958fbb71f926173a6d9c75ed37ab kernel-rt-core-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 46f3e14f4dfa4489435942f380ac13616e835f90d61b6e947b26ca54af1ae99d kernel-rt-core-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 46f3e14f4dfa4489435942f380ac13616e835f90d61b6e947b26ca54af1ae99d kernel-rt-debug-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: ae5d2ca2b0d77c92a9483bb2448d047a4c2c1933ac83b8e36a469183f4325952 kernel-rt-debug-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: ae5d2ca2b0d77c92a9483bb2448d047a4c2c1933ac83b8e36a469183f4325952 kernel-rt-debug-core-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 7aef7dbc2eff9c91cd4934f932ba3bcf3fd833eea30f1433db09aba2df987d77 kernel-rt-debug-core-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 7aef7dbc2eff9c91cd4934f932ba3bcf3fd833eea30f1433db09aba2df987d77 kernel-rt-debug-debuginfo-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: c1c760ba0dd973873146fd5227c9c4af09b0f3708175ea908fec406ac4f24f9e kernel-rt-debug-debuginfo-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: c1c760ba0dd973873146fd5227c9c4af09b0f3708175ea908fec406ac4f24f9e kernel-rt-debug-debuginfo-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: c1c760ba0dd973873146fd5227c9c4af09b0f3708175ea908fec406ac4f24f9e kernel-rt-debug-debuginfo-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: c1c760ba0dd973873146fd5227c9c4af09b0f3708175ea908fec406ac4f24f9e kernel-rt-debug-devel-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 26b748d6d6de80d1a03e888c1821cb3111531f881cb4cfa2c6b75549a5236b86 kernel-rt-debug-devel-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: 26b748d6d6de80d1a03e888c1821cb3111531f881cb4cfa2c6b75549a5236b86 kernel-rt-debug-modules-6.12.0-211.40.1.el10_2.x86_64.rpm SHA-256: a530a8