Red Hat Product Errata RHSA-2026:49031 - Security Advisory Issued: 2026-07-31 Updated: 2026-07-31 RHSA-2026:49031 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026) kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) Bug Fix(es) and Enhancement(s): [RFE] Requesting FOU and GUE/GRE support in RHEL 9 [rhel-9.6.z] (JIRA:RHEL-144986) dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [rhel-9.6.z] (JIRA:RHEL-212060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2406712 - CVE-2025-40026 kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O BZ - 2486958 - CVE-2025-10263 kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources BZ - 2492094 - CVE-2026-52923 kernel: ipc: limit next_id allocation to the valid ID range CVEs CVE-2025-10263 CVE-2025-40026 CVE-2026-52923 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM kernel-5.14.0-570.131.1.el9_6.src.rpm SHA-256: 1669992c679883d2e86fa2ad5d230f8ef2831b5f6887b77eebc2162cb1badf37 x86_64 kernel-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: ac66ddbddb5cdcc76da5cf393dc237f7f33584815f0c84fe6a15fc4f2e4cfadc kernel-abi-stablelists-5.14.0-570.131.1.el9_6.noarch.rpm SHA-256: 410bb763ffe11cf6c382e1f2b168a46dc9688e1532a56c679f57fd4e704dc980 kernel-core-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 448991f84990c2c6fbde83ba4a2b0319a624b4bd6e2175718392fe31239e913b kernel-debug-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: b1f78a2b02be87a9f15514827cc421d3a1f288f3b656eba09aab06a6c2088d61 kernel-debug-core-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 47544260dcdf86dd21cd50253755008addb9f06f0cf42906235ee0cd4375c9fa kernel-debug-debuginfo-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 2d255a7a907a93355ecadca5b02ee0036fa99b1fcf5b7b149c22f054eccfba7b kernel-debug-debuginfo-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 2d255a7a907a93355ecadca5b02ee0036fa99b1fcf5b7b149c22f054eccfba7b kernel-debug-debuginfo-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 2d255a7a907a93355ecadca5b02ee0036fa99b1fcf5b7b149c22f054eccfba7b kernel-debug-debuginfo-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 2d255a7a907a93355ecadca5b02ee0036fa99b1fcf5b7b149c22f054eccfba7b kernel-debug-devel-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: ddc6e8bf96e3f8ea3eb0d2bbfc3f276f873f9614f1a9d2c1998fe70f73ee8e23 kernel-debug-devel-matched-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: a2bd9a384b1fe00075a687bbef18912118f89af45d30d631bd54dff942217784 kernel-debug-modules-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 7bb686a1fe98ba0de48daf82b417b56588298036960643b594049240c8520054 kernel-debug-modules-core-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: c3db29bf244b2b11ee777e7049deadf6bf894e788d95e2945db5049a14c99fe5 kernel-debug-modules-extra-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: d5efbcefb614a5284209b1b32639710d7436479d66d951c7e693030f9bb57d5a kernel-debug-uki-virt-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: b0568dd033ebda92edb3f30b9cbed5bc69a2b6f004f8d6c87c5a02742ef6a981 kernel-debuginfo-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 50530d0d023356aa18b44644ac18ccc32fcdf91ca7472b4d2f808fead3278711 kernel-debuginfo-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 50530d0d023356aa18b44644ac18ccc32fcdf91ca7472b4d2f808fead3278711 kernel-debuginfo-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 50530d0d023356aa18b44644ac18ccc32fcdf91ca7472b4d2f808fead3278711 kernel-debuginfo-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 50530d0d023356aa18b44644ac18ccc32fcdf91ca7472b4d2f808fead3278711 kernel-debuginfo-common-x86_64-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: a04e52b78f930fe8112e578acb19f2b35727ebb397c2b8517bf8703ed73ecced kernel-debuginfo-common-x86_64-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: a04e52b78f930fe8112e578acb19f2b35727ebb397c2b8517bf8703ed73ecced kernel-debuginfo-common-x86_64-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: a04e52b78f930fe8112e578acb19f2b35727ebb397c2b8517bf8703ed73ecced kernel-debuginfo-common-x86_64-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: a04e52b78f930fe8112e578acb19f2b35727ebb397c2b8517bf8703ed73ecced kernel-devel-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: d3f3698274dd9c0aa912346aa64cbdd07482ca98de1718d4f8cf46e29c2b6831 kernel-devel-matched-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 11a64797c999fa3dd2f3a192a23c7fe9bd3f40fb7c02ca55cfa430eedf4965d1 kernel-doc-5.14.0-570.131.1.el9_6.noarch.rpm SHA-256: 379eb928dc330a12991aa03ed57825273f39b0d5591bf5eb54cc606da8cc9b9d kernel-headers-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: c2937a2b8eada8937b8e7728aff7e1654e8f73f6a0ffde868789763fe96191dd kernel-modules-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: ca00fa05ac827c501a7c7378641e23d9d47dec2b15210df187b85789fd155001 kernel-modules-core-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 0bae3f2da0e23273676f55902b4cb128c8dbeb20934327f0cddbddc53252ff35 kernel-modules-extra-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 2a3c8e1cbcfe599a5bb3a869d9d7be5dc1418e35bfd7f9db0ac1df94e183f722 kernel-rt-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: e32e403b5ce6b096585ef70d8f5c477b8dd4c5da0171f8e0a46dd59b9761ddab kernel-rt-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: e32e403b5ce6b096585ef70d8f5c477b8dd4c5da0171f8e0a46dd59b9761ddab kernel-rt-core-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: d5d67f3113aacfe63629f50b60ef67b540cd47b8acfb50a87ad0489d8e971eb8 kernel-rt-core-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: d5d67f3113aacfe63629f50b60ef67b540cd47b8acfb50a87ad0489d8e971eb8 kernel-rt-debug-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 22bf039863d8ca9fcf83ef2a838a17aac0a0cafe08dd3352964a22f86ee44b39 kernel-rt-debug-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 22bf039863d8ca9fcf83ef2a838a17aac0a0cafe08dd3352964a22f86ee44b39 kernel-rt-debug-core-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 29d8b14a32ca6bbf0f8b9aa59b9272b18d0ef8cf52bec4de24d62a97f9d33088 kernel-rt-debug-core-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: 29d8b14a32ca6bbf0f8b9aa59b9272b18d0ef8cf52bec4de24d62a97f9d33088 kernel-rt-debug-debuginfo-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: b086ead674130e1c8d03b2755ab0184d3b5e40451780c3b1affe6d4722531f56 kernel-rt-debug-debuginfo-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: b086ead674130e1c8d03b2755ab0184d3b5e40451780c3b1affe6d4722531f56 kernel-rt-debug-debuginfo-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: b086ead674130e1c8d03b2755ab0184d3b5e40451780c3b1affe6d4722531f56 kernel-rt-debug-debuginfo-5.14.0-570.131.1.el9_6.x86_64.rpm SHA-256: b086ead674130e1c8d03b2755ab0184d3b5e40451780c3b1affe6d4722531f56 kernel-rt-debug-devel-5.14.0-570.131.1.el9_