This Red Hat kernel security update addresses multiple vulnerabilities, including a high-severity flaw in the AMD display driver (CVE-2026-31488, CVSS 7.8) and a medium-severity flaw in the traffic control action module (CVE-2026-31684, CVSS 5.5). The NVD data indicates affected Linux kernel versions include 5.18.1 through 6.12.79, 6.13 through 6.18.20, and 6.19 through 6.19.10 for CVE-2026-31488, with fixes provided in versions 6.12.80, 6.18.21, and 6.19.11. A system reboot is required after applying the update, which is rated Important and affects specific RHEL 8.8 Extended Life Cycle and Update Service channels.
Red Hat Product Errata RHSA-2026:47869 - Security Advisory Issued: 2026-07-29 Updated: 2026-07-29 RHSA-2026:47869 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026) kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2406712 - CVE-2025-40026 kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O BZ - 2460619 - CVE-2026-31488 kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation BZ - 2461757 - CVE-2026-31684 kernel: net: sched: act_csum: validate nested VLAN headers BZ - 2482523 - CVE-2026-46116 kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete BZ - 2482654 - CVE-2026-46135 kernel: nvmet-tcp: fix race between ICReq handling and queue teardown CVEs CVE-2025-40026 CVE-2026-31488 CVE-2026-31684 CVE-2026-46116 CVE-2026-46135 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM kernel-4.18.0-477.156.1.el8_8.src.rpm SHA-256: dd4ed574f9cce67218cd450326c11d6409956474cc7abf22172fcc7cca39b095 x86_64 bpftool-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 798f7aa66bf86a5fb08dba26c84e35c52469cf3267aafdc4ea9691a66527faa6 bpftool-debuginfo-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 8fb19b9647132307a33cb15161a629939c32c431d7b55f4c16bb125f4ab45ec9 kernel-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 3ce5fae4058bd92a7676aee8c5267bc3aa2b6ea6c95e0db7a5b9e816b749951b kernel-abi-stablelists-4.18.0-477.156.1.el8_8.noarch.rpm SHA-256: 24d5d44e6d05f114dfaef38f6f438aa8a926ff64a6c52e3e371e0153a43f8629 kernel-core-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: e7d9de31b6a491620297e32873bc47a343da1de77a2461a78adc4d1569949747 kernel-cross-headers-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 1692d587d776ee50485bc4fd53a8807d70cf2eec5d7666be5e2019ec79c93488 kernel-debug-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: a1d5dc9f56127d435a6d9884f80acd6ae2d6b6749d076d1cc3014b3681e77882 kernel-debug-core-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 23b78a92974d53fda55000000710406fd16863c087f368e478c697a1fe51dc67 kernel-debug-debuginfo-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: f6b5b6ac1ca536e148e08852960614dcbf7c8412c508e79a3f3cfaa931b05608 kernel-debug-devel-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: b48307852db105c38a8e83d41ca369baeb89be3caf5a464fd90a586a43f7679c kernel-debug-modules-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: bcf66ee7880abe4deef08bfa17d6f6541cd9daaa3ad206a341742e225adf63e5 kernel-debug-modules-extra-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: ae47bd3af4cd3cb6287964e6203bfdbacc313c749a5c9469de43a448b7246272 kernel-debuginfo-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: ea2ea1be0a8d71ba4e6da7c3bd11d28f1514b041c865001a0f8299a996358130 kernel-debuginfo-common-x86_64-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 1a6b99b2773571c5092a72902fd6ca685575eb3e8eacda588f253481e6ede157 kernel-devel-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 0e9729cdcd28030c611031e4f308fcc75a35732598c0a3aea2d6a1b5e14181df kernel-doc-4.18.0-477.156.1.el8_8.noarch.rpm SHA-256: 67bb0bff9e535460c2de27c6fd8d8e4607261f3ba9e4f8e7ad9a9d289426b007 kernel-headers-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 66a41fc8741a43383ea33871d9e6706259f9139496fd7c97c5bffa86cfb28804 kernel-modules-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 1d095954b3cea945127611a60a38119e593ad5ad5bf16e2dc8ab550ced52fb29 kernel-modules-extra-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 15ff3fd3f077075983826f8529aef66a87cc0197c82125ec52f636c75f27e49a kernel-tools-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 9a5096d2ae4bbd21a0737b8542537a0940a4143b28442eb7df5741dc9a88e448 kernel-tools-debuginfo-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 389c84814442e219e5d5bb906a6d4ab634ae01c403f176327909c117ae1b6dd7 kernel-tools-libs-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: ded0e3332bb6349d807dc62b263d3dcfca7bc60a6aa1daf21ee19843da48a31b perf-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: f52eb1d4829e193fc6b2cf6cee8c4e2554d81e3264d39b0ce68e1e07cbb13310 perf-debuginfo-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 059a60d0720ff85506d41d08d8bf1d9dab44b1169c4b60ce936c648d15907828 python3-perf-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: fa273276966c09605a24a9639cbbc035b21f9ec04dde0c7e5398567608ff8f4a python3-perf-debuginfo-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 400a85234c9d65fbaf6ebac6ce580e5fd42784653f1937f013e756aabea694f6 Red Hat Enterprise Linux Server - TUS 8.8 SRPM kernel-4.18.0-477.156.1.el8_8.src.rpm SHA-256: dd4ed574f9cce67218cd450326c11d6409956474cc7abf22172fcc7cca39b095 x86_64 bpftool-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 798f7aa66bf86a5fb08dba26c84e35c52469cf3267aafdc4ea9691a66527faa6 bpftool-debuginfo-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 8fb19b9647132307a33cb15161a629939c32c431d7b55f4c16bb125f4ab45ec9 kernel-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 3ce5fae4058bd92a7676aee8c5267bc3aa2b6ea6c95e0db7a5b9e816b749951b kernel-abi-stablelists-4.18.0-477.156.1.el8_8.noarch.rpm SHA-256: 24d5d44e6d05f114dfaef38f6f438aa8a926ff64a6c52e3e371e0153a43f8629 kernel-core-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: e7d9de31b6a491620297e32873bc47a343da1de77a2461a78adc4d1569949747 kernel-cross-headers-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 1692d587d776ee50485bc4fd53a8807d70cf2eec5d7666be5e2019ec79c93488 kernel-debug-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: a1d5dc9f56127d435a6d9884f80acd6ae2d6b6749d076d1cc3014b3681e77882 kernel-debug-core-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 23b78a92974d53fda55000000710406fd16863c087f368e478c697a1fe51dc67 kernel-debug-debuginfo-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: f6b5b6ac1ca536e148e08852960614dcbf7c8412c508e79a3f3cfaa931b05608 kernel-debug-devel-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: b48307852db105c38a8e83d41ca369baeb89be3caf5a464fd90a586a43f7679c kernel-debug-modules-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: bcf66ee7880abe4deef08bfa17d6f6541cd9daaa3ad206a341742e225adf63e5 kernel-debug-modules-extra-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: ae47bd3af4cd3cb6287964e6203bfdbacc313c749a5c9469de43a448b7246272 kernel-debuginfo-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: ea2ea1be0a8d71ba4e6da7c3bd11d28f1514b041c865001a0f8299a996358130 kernel-debuginfo-common-x86_64-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 1a6b99b2773571c5092a72902fd6ca685575eb3e8eacda588f253481e6ede157 kernel-devel-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 0e9729cdcd28030c611031e4f308fcc75a35732598c0a3aea2d6a1b5e14181df kernel-doc-4.18.0-477.156.1.el8_8.noarch.rpm SHA-256: 67bb0bff9e535460c2de27c6fd8d8e4607261f3ba9e4f8e7ad9a9d289426b007 kernel-headers-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 66a41fc8741a43383ea33871d9e6706259f9139496fd7c97c5bffa86cfb28804 kernel-modules-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 1d095954b3cea945127611a60a38119e593ad5ad5bf16e2dc8ab550ced52fb29 kernel-modules-extra-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 15ff3fd3f077075983826f8529aef66a87cc0197c82125ec52f636c75f27e49a kernel-tools-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 9a5096d2ae4bbd21a0737b8542537a0940a4143b28442eb7df5741dc9a88e448 kernel-tools-debuginfo-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: 389c84814442e219e5d5bb906a6d4ab634ae01c403f176327909c117ae1b6dd7 kernel-tools-libs-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: ded0e3332bb6349d807dc62b263d3dcfca7bc60a6aa1daf21ee19843da48a31b perf-4.18.0-477.156.1.el8_8.x86_64.rpm SHA-256: f52eb1d4829e193fc6b2cf6cee8c4e2554d81e32