Red Hat Product Errata RHSA-2026:48386 - Security Advisory Issued: 2026-07-30 Updated: 2026-07-30 RHSA-2026:48386 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026) kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2406712 - CVE-2025-40026 kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O BZ - 2464092 - CVE-2026-31787 kernel: xen/privcmd: fix double free via VMA splitting BZ - 2492094 - CVE-2026-52923 kernel: ipc: limit next_id allocation to the valid ID range CVEs CVE-2025-40026 CVE-2026-31787 CVE-2026-52923 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM kernel-5.14.0-427.141.1.el9_4.src.rpm SHA-256: 181dcab27648891b6f201671ab701c8dbdcd039664fa45c256a689859e1e6db1 x86_64 bpftool-7.3.0-427.141.1.el9_4.x86_64.rpm SHA-256: f400aeb2741d7aa1b0695062215485bbf165fd1fdd18e2bcd01f34255dfdf0c0 bpftool-debuginfo-7.3.0-427.141.1.el9_4.x86_64.rpm SHA-256: 9d5390ffc1dd45c6e51ac396a9d4328235fc4f3ae99a8f69ec253cc904eee9da bpftool-debuginfo-7.3.0-427.141.1.el9_4.x86_64.rpm SHA-256: 9d5390ffc1dd45c6e51ac396a9d4328235fc4f3ae99a8f69ec253cc904eee9da kernel-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: cb64606e2c5375cd6c6e47c9a08080f03020a536580c046a42eff113350a50d1 kernel-abi-stablelists-5.14.0-427.141.1.el9_4.noarch.rpm SHA-256: 46bbf4581d13b1fefbb36151b10290cfae71574e53ffc3cf63530aec42e68e2a kernel-core-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 748228b9e4204c65adb8e2d61bce75a30dd2602e1610f6cc18404ebf7ce20766 kernel-debug-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: bd8076c1a5951d28108394f6b0b70ba8b6c5d14df3144e86a84b36319e8624d7 kernel-debug-core-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 410b368807c79cfce5f241fad2b4df7feac8f971a80a9792718345f7c3b06b37 kernel-debug-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 69154499e819fc3e6b70be1c7250b503bdb965c1b0ee3e7bb85f19a9dc818776 kernel-debug-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 69154499e819fc3e6b70be1c7250b503bdb965c1b0ee3e7bb85f19a9dc818776 kernel-debug-devel-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 26290d5b9bc21bd80f35add1d7fac41074d26f35b4b2c393f65115b9bee04c04 kernel-debug-devel-matched-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: c60585eae1e9c30606fb63311a6b557e9f397ec8484c7e29e7e47d95add4bfc3 kernel-debug-modules-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 9e9caf106c36c37b33e5d87b06201b7aac79b5273d63eba0b541b94908f6d455 kernel-debug-modules-core-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: f2e4cd147ce32849c9e5acd29aa56691c13b1e81149bebc26c8d25b86fcd69e4 kernel-debug-modules-extra-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: f7f6ff2bca2d56992a444b1f9e8036476be8fb5e190e33395a4f1cfeebfce17a kernel-debug-uki-virt-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 9eb8ab1c7b67d1fb3d854b89128520c46f4f2727610b7b6eb656dc0a41ac0d1f kernel-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 75e698d6c27effbedf1b77b10c69c319a35d0bf26060f5b50f5b7c9c0f6a85e2 kernel-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 75e698d6c27effbedf1b77b10c69c319a35d0bf26060f5b50f5b7c9c0f6a85e2 kernel-debuginfo-common-x86_64-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: f111eb148bb05bb6baef1d46673eb6d63ffb16328fcf7e3ba7961f237fd3d7e0 kernel-debuginfo-common-x86_64-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: f111eb148bb05bb6baef1d46673eb6d63ffb16328fcf7e3ba7961f237fd3d7e0 kernel-devel-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 9f2a40441e570238b202aef8fc417ce7e27a97db75e41b2ea6870ad41d65a9a1 kernel-devel-matched-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: aba9b31b9301a20cba6cfd84139206225a7bf746c42bca2dc3c8e2f756e8bfd9 kernel-doc-5.14.0-427.141.1.el9_4.noarch.rpm SHA-256: e8f5fc49bfbbdb8915451b3372ee8c5f31a6e8e0516ff966be8d1c7f12581332 kernel-headers-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 8c8ba1ad0a04026e8ec16c2b548ba68ccc13ff616665954db1ace1f0a62d7155 kernel-modules-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: f580f169b24bbeb20b73181f14543112558e697ac633f4f02d99ca8ddde1ce2f kernel-modules-core-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: dcf530ada4341130303ad2d58dc5003e5287f3d04cbb7ea29ae3369bcd840276 kernel-modules-extra-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 609ccb860a97ae4e64e856e1503398322fd5b33c83efd67318ed1e22205a4e5c kernel-rt-debug-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 7473c23350fb197a368c10aa834921bdc3db89ae5cbb15f1908de6102c9558ac kernel-rt-debug-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 7473c23350fb197a368c10aa834921bdc3db89ae5cbb15f1908de6102c9558ac kernel-rt-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 1c88630f95469efbfdb6a69959e530167894a5796e0a7fcb8d30772ca6cd9b9f kernel-tools-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 2ed8ad9af6cf8051d2d8568a41643aaa8f379f5593ded2adc3b1934b781ad463 kernel-tools-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 708b53d1fedce5571c5fc6c6e0d422130c0ed307a1fb8ea981dad6eb72cbfacd kernel-tools-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 708b53d1fedce5571c5fc6c6e0d422130c0ed307a1fb8ea981dad6eb72cbfacd kernel-tools-libs-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 0deac5f27f71aed3712034b7313eb8a9a70502318f27e52352513e46ec26943c kernel-uki-virt-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 89fab2a42794590a2b00a829e8edb6a99d6859014153fc003703a90fb21680c5 libperf-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 13b9d8706f2f789498ecd2025b802f0fe12a5b6f6598d3b72e5b5cd69aea4848 libperf-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 13b9d8706f2f789498ecd2025b802f0fe12a5b6f6598d3b72e5b5cd69aea4848 perf-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: d95b17a7929a1aa9504ad9cf9c7b9595cd4c89610ae552a152de237afd16e067 perf-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 561a412054b198b364e600998ce1f71478c3ab265675312b33bac69c76556231 perf-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 561a412054b198b364e600998ce1f71478c3ab265675312b33bac69c76556231 python3-perf-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: f9a5bd883c2ccc28b69cf9158110d7d1c5d0989a50215e96e689fd4003e520e8 python3-perf-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 6f4341645fd59ceb2e7ddc67bc7e9e8a5ccecc1a63a6ef58e0240d966fdb2ead python3-perf-debuginfo-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 6f4341645fd59ceb2e7ddc67bc7e9e8a5ccecc1a63a6ef58e0240d966fdb2ead rtla-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: b09aebe71f93ffc95686ab8b774346b8f8861778b46b8741c4f13e4a61a93015 rv-5.14.0-427.141.1.el9_4.x86_64.rpm SHA-256: 45e45d7f3bf649a1c08bd06cf75593c1040066392d088334ad9c974b7f6be560 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM kernel-5.14.0-427.141.1.el9_4.src.rpm SHA-256: 181dcab27648891b6f201671ab701c8dbdcd039664fa45c256a689859e1e6db1 ppc64le bpftool-7.3.0-427.141.1.el9_4.ppc64le.rpm SHA-256: 3a3a77f2a4f799da8aacb9a893ea1b6aa7a0fc101766b74873c0aafcab418517 bpftool-debuginfo-7.3.0-427.141.1.el9_4.ppc64le.rpm SHA-256: 7ebe7f696ad3e2c1bd38cb47b3f5de6feb8ea48f4142e0db092f2347c575e124 bpftool-debuginfo-7.3.0-427.141.1.el9_4.ppc64le.rpm SHA-256: 7ebe7f696ad3e2c1bd38cb47b3f5de6feb8ea48f4142e0db092f2347c575e124 kernel-5.14.0-427.141.1.el9_4.ppc64le.rpm SHA-256: a09f23a1176b486ed9801c65d7812d5c57ae9e1f59ce71ea9d5006bfe3236639 kernel-abi-stablelists-5.14.0-427.141.1.el9_4.noarch.rpm SHA-256: 46bbf4581d13b1fefbb3