This Important Red Hat kernel update addresses four vulnerabilities, including a critical Arm processor flaw (CVE-2025-10263, CVSS 9.1) allowing privilege escalation via writes to higher-level resources and three high-severity issues (CVE-2026-31787, CVE-2026-52923, CVE-2026-53059, CVSS 7.8) involving double-free, out-of-bounds write, and IPC ID range flaws. Affected Linux kernel versions are extensive, with specific fixed versions provided per CVE; for example, CVE-2026-31787 is fixed in versions 5.10.254, 5.15.204, 6.1.170, 6.6.137, 6.12.85, 6.18.26, and 7.0.3. A system reboot is required after applying the update.
Red Hat Product Errata RHSA-2026:47248 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47248 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.4 x86_64 Red Hat Enterprise Linux Server - AUS 8.4 x86_64 Fixes BZ - 2464092 - CVE-2026-31787 kernel: xen/privcmd: fix double free via VMA splitting BZ - 2486958 - CVE-2025-10263 kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources BZ - 2492094 - CVE-2026-52923 kernel: ipc: limit next_id allocation to the valid ID range BZ - 2492277 - CVE-2026-53059 kernel: dm log: fix out-of-bounds write due to region_count overflow CVEs CVE-2025-10263 CVE-2026-31787 CVE-2026-52923 CVE-2026-53059 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.4 SRPM kernel-4.18.0-305.200.1.el8_4.src.rpm SHA-256: 626288e928e27ca016990ea3735be16aa4183dee37e7f1864226e7e0dbe5184b x86_64 bpftool-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 9af582b4e7e78c61b1189ba065bdb3c057f7c0dbf9d3ad3a5f483eac921123b2 bpftool-debuginfo-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 49e2537d9cec9dfa6f6820ba4c7ed34c2a47703a690c85e18b200d469295dc10 kernel-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 1c82f12c42a2da574a7055bba1cca6518b71f873c61594f1af01bb7bc15db735 kernel-abi-stablelists-4.18.0-305.200.1.el8_4.noarch.rpm SHA-256: ca25ba33c9432f32922609ec90ed75312f98b1eb87f7b6e50c7402934e450a44 kernel-core-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: fe74adc48682ecf1d5c9164339a588e55d94f4d02c881c8a08aed4c1ada1b1e8 kernel-cross-headers-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 2c44b31616cc9f11c600f883530f4a56996edfb3f11be9ae999a7b102b1d83db kernel-debug-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: a2f1960f7cb6cb127d53b401fc31c2e089fccfa7f4a83c7e366c8475c3b3f824 kernel-debug-core-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: b9c01bdb8bdfd9d9689a026cd976368daf07946279ac33ac5412604102bd1a43 kernel-debug-debuginfo-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 23a405fb9a61bd9588ca94a5b24a27ef090e975c2747874f882f8d463c48e561 kernel-debug-devel-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 107707b9c7721884890616e7809a1448c17e2c283a82a2987b16596e9a643ca7 kernel-debug-modules-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 3afbc6e2f834f9b978c964bbb9c479fcfe74d8fc8cc3d290845906291581354c kernel-debug-modules-extra-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 72303feb5a0eae643e6b9372294345bddecb3a2093cd817cb5c062c14cc4266b kernel-debuginfo-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: bd7889c9bc5efea4caca965a0d5f18a1d139b9c9a1aebffde5365f818d710862 kernel-debuginfo-common-x86_64-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 4a7c8dbf9768e8d4202c082bd952a09f1f7c6ec8ea1267dbbb700123f361737c kernel-devel-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 831b656f4936795ef0d58771f6164f697db6d37d84dce01a242447b5fa082bd4 kernel-doc-4.18.0-305.200.1.el8_4.noarch.rpm SHA-256: 2ce8f8bbc05c3d18014f181cdb64474bac5bc5ad7f858efc0a8432def39cfd6d kernel-headers-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: c3b522cbce03ab09918324879153e28471e4232d21b3e3398f2f38e4f2be274e kernel-modules-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 3922a8e161f0c023ef3edc5c5378b8c09ca71449009175345edb42684154b839 kernel-modules-extra-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: bcdab0a3af8e3bef8a11a3fdd9bc415cc42ac244292bad2cf3306404210d06a2 kernel-tools-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 11ea06eabdf253c484dcc8671b44cfd39e9015cfda6c228b8feeb2b68713a574 kernel-tools-debuginfo-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: b60b0a665bb72a3591b3f2d9b51674e7785864c857a6074405da34b413689764 kernel-tools-libs-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 338e7e755e98a5e4ccd28535cb8fda7ae4bd7f8d83266818da1e2e5c3b9c84a8 perf-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 96994931f9038829353445c1bfe0c9dd0862d92a8190f32e323a02a5f48825c7 perf-debuginfo-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 10144745bb29719ecc43c097c17773ae017bbcb3c0ffc7cfa211446b4db5215d python3-perf-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 71669a1aec206203bef393552e0dff99c16a158f21959fad9b2c8e1d634c7bda python3-perf-debuginfo-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: b056ab7dd11c274e1b42ff299542a882f08d29e0a06d9891d7a8073d9a9ddd61 Red Hat Enterprise Linux Server - AUS 8.4 SRPM kernel-4.18.0-305.200.1.el8_4.src.rpm SHA-256: 626288e928e27ca016990ea3735be16aa4183dee37e7f1864226e7e0dbe5184b x86_64 bpftool-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 9af582b4e7e78c61b1189ba065bdb3c057f7c0dbf9d3ad3a5f483eac921123b2 bpftool-debuginfo-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 49e2537d9cec9dfa6f6820ba4c7ed34c2a47703a690c85e18b200d469295dc10 kernel-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 1c82f12c42a2da574a7055bba1cca6518b71f873c61594f1af01bb7bc15db735 kernel-abi-stablelists-4.18.0-305.200.1.el8_4.noarch.rpm SHA-256: ca25ba33c9432f32922609ec90ed75312f98b1eb87f7b6e50c7402934e450a44 kernel-core-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: fe74adc48682ecf1d5c9164339a588e55d94f4d02c881c8a08aed4c1ada1b1e8 kernel-cross-headers-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 2c44b31616cc9f11c600f883530f4a56996edfb3f11be9ae999a7b102b1d83db kernel-debug-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: a2f1960f7cb6cb127d53b401fc31c2e089fccfa7f4a83c7e366c8475c3b3f824 kernel-debug-core-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: b9c01bdb8bdfd9d9689a026cd976368daf07946279ac33ac5412604102bd1a43 kernel-debug-debuginfo-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 23a405fb9a61bd9588ca94a5b24a27ef090e975c2747874f882f8d463c48e561 kernel-debug-devel-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 107707b9c7721884890616e7809a1448c17e2c283a82a2987b16596e9a643ca7 kernel-debug-modules-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 3afbc6e2f834f9b978c964bbb9c479fcfe74d8fc8cc3d290845906291581354c kernel-debug-modules-extra-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 72303feb5a0eae643e6b9372294345bddecb3a2093cd817cb5c062c14cc4266b kernel-debuginfo-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: bd7889c9bc5efea4caca965a0d5f18a1d139b9c9a1aebffde5365f818d710862 kernel-debuginfo-common-x86_64-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 4a7c8dbf9768e8d4202c082bd952a09f1f7c6ec8ea1267dbbb700123f361737c kernel-devel-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 831b656f4936795ef0d58771f6164f697db6d37d84dce01a242447b5fa082bd4 kernel-doc-4.18.0-305.200.1.el8_4.noarch.rpm SHA-256: 2ce8f8bbc05c3d18014f181cdb64474bac5bc5ad7f858efc0a8432def39cfd6d kernel-headers-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: c3b522cbce03ab09918324879153e28471e4232d21b3e3398f2f38e4f2be274e kernel-modules-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 3922a8e161f0c023ef3edc5c5378b8c09ca71449009175345edb42684154b839 kernel-modules-extra-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: bcdab0a3af8e3bef8a11a3fdd9bc415cc42ac244292bad2cf3306404210d06a2 kernel-tools-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 11ea06eabdf253c484dcc8671b44cfd39e9015cfda6c228b8feeb2b68713a574 kernel-tools-debuginfo-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: b60b0a665bb72a3591b3f2d9b51674e7785864c857a6074405da34b413689764 kernel-tools-libs-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 338e7e755e98a5e4ccd28535cb8fda7ae4bd7f8d83266818da1e2e5c3b9c84a8 perf-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 96994931f9038829353445c1bfe0c9dd0862d92a8190f32e323a02a5f48825c7 perf-debuginfo-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 10144745bb29719ecc43c097c17773ae017bbcb3c0ffc7cfa211446b4db5215d python3-perf-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: 71669a1aec206203bef393552e0dff99c16a158f21959fad9b2c8e1d634c7bda python3-perf-debuginfo-4.18.0-305.200.1.el8_4.x86_64.rpm SHA-256: b