Red Hat Product Errata RHSA-2026:49214 - Security Advisory Issued: 2026-07-31 Updated: 2026-07-31 RHSA-2026:49214 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) kernel: fanotify: fix false positive on permission events (CVE-2026-46150) kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CVE-2026-64530) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2464093 - CVE-2026-31692 kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns BZ - 2467005 - CVE-2026-43116 kernel: netfilter: ctnetlink: ensure safe access to master conntrack BZ - 2482612 - CVE-2026-46150 kernel: fanotify: fix false positive on permission events BZ - 2504052 - CVE-2026-64530 kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle BZ - 2507345 - kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle CVEs CVE-2026-31692 CVE-2026-43116 CVE-2026-46150 CVE-2026-64530 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kernel-4.18.0-553.150.1.el8_10.src.rpm SHA-256: bb1b9fd46997c2e1e7c27a3392cab3ad72dae7320b0b451d8db5f2dd85f51153 x86_64 bpftool-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 96f7f386e5cb9bb6739ed5a200cbd2b6c69edbbf452d30e54af69315acb816cf bpftool-debuginfo-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: d2ba8764fdf966861526d597a9a748be48429ade8f9a94f31cfe6dcd17f9f424 kernel-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: d1c7f0c0cccf0da2bd145f58820a6178b22b669a7c99c5beaddbf3dad7557a7a kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch.rpm SHA-256: 328ee800fac5ed8b9d00b5534c650f9576c2ac788ba926eb8f8c9652b9734806 kernel-core-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 513c946ae48e3cf6b5397e7dc6551b4e779f545117487522c56e7905d777bbd9 kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 5056050d63dcf22b12c1ded23f8f8acf5e50b25be82a0d080161f904787bd4af kernel-debug-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 3522f25ed8fdf1b0a3e5568ccda293f4b1fc8015d02c05e133338b47c46b68a2 kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 7c8a4f9060fb26a541be0aa929082f2d93622a4c1436a9704b85ec67d8f5d485 kernel-debug-debuginfo-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 8bdd6fef9ffe22cce170d4a764022605f3315f0a8ddcd6880970ff04a4cab59e kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 2f9b167c5c34b8f3999762beafc9427785b7bbf57e2238561d38cc3aa3ec2ca2 kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 41adc0f58b798231e1d53a9172028df110f2dcb422ddc268b029675d73dd4d2f kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: c71c1eef1abd9ded06c9ceb9a92a0701da2a1e8888a7b95cfe0965f84ae8ba9d kernel-debuginfo-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 607a0b717139542d98c57f5149e44477133a635d17324f71e823e563b07145f3 kernel-debuginfo-common-x86_64-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 6d34b45909444997bc0670a763c8994bc91fffa1aab61e43b78e2eaf32fa4cc4 kernel-devel-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: d257a569fde19a1692cd0384caaf3118b7342ff0a58f80ec76cdff940c93da94 kernel-doc-4.18.0-553.150.1.el8_10.noarch.rpm SHA-256: 75c9942760a57e0cf37267034db9e80dcc4ffeaa3ddc3a984704dd828494434b kernel-headers-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: fa37560d022ca4f73316e4dbc6121ee903d0243235ebc85e25dc9981be50995c kernel-modules-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 541203c70d6eefe250d673c602b521140361a34be98576a821857e56d71906eb kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 531b3e79ba64a9ed1fcac70de3e40b248c9503799bd42e359908fc3114d08cad kernel-tools-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 3acd70b7ec55769774a88c3a26f30fc8d0a9beae4a908a8d1a9f8c7868d4e6f8 kernel-tools-debuginfo-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: cc8a5bc156662ffde109a3507cc1717bdf873fc44144462eb990918da4d30452 kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 44048a3f8f8eccb655a20080c3bf2d6c04b2b8c1c5395f00d58986561383f517 perf-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 8f8c3e4622987e67cac92a3d367fb98f95e05ece90fe7029e5e600228da5060e perf-debuginfo-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: f875185ddfea0ce5c8770d9a72bd0e508b18046ccde8f34fff744a872249f096 python3-perf-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: 775866e227844789b2835c75e4837804b3b7dd3c02357753e45cb95f410f853e python3-perf-debuginfo-4.18.0-553.150.1.el8_10.x86_64.rpm SHA-256: db5dd7ab23258fc22096395330b8863641da294051a39415645b66894e8eea2e Red Hat Enterprise Linux for IBM z Systems 8 SRPM kernel-4.18.0-553.150.1.el8_10.src.rpm SHA-256: bb1b9fd46997c2e1e7c27a3392cab3ad72dae7320b0b451d8db5f2dd85f51153 s390x bpftool-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: 53ab754433daeaa4e377fda225dc25bed61b97f3823b8db1f51d4a3216d133d1 bpftool-debuginfo-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: 5001a0d598c702fae750ce468a9add19acfcde639ebfc55fc558758ad3fe7033 kernel-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: 8de74daf11bf8b65b7d288795f19e2cb94ddab505cd0cb9fa9feeb1c795f555b kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch.rpm SHA-256: 328ee800fac5ed8b9d00b5534c650f9576c2ac788ba926eb8f8c9652b9734806 kernel-core-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: 0b83bb04fd37c5ac14a1352b195066368d03216331d6c080a34559fe67f37dce kernel-cross-headers-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: bcbb8ab4bf807769b6944ef5821c04571e4c7baeb78fa91e3743fa9016e8c323 kernel-debug-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: 9812e65fa0bdbd9c676878a29466f62aee6d01a9cd3a6e094f2d0eee037abbf6 kernel-debug-core-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: a73cebf27dbe69398472b077e83282de85caaf3643a93e1195ca7c523ef6cf97 kernel-debug-debuginfo-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: 97b36ccfb9c4e1e055d09e3b5b048b7c2b69fdb893375faa0dfb68ff499ea94f kernel-debug-devel-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: b0c4d144321cbc3264a1f78959b3dacd14e1d359cbd6bc3cd73e66ccbb606078 kernel-debug-modules-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: 243d49507331e06c3dea013377c17e01d56fab501bba09b02780f5df8b621468 kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: 8e7e3f1c26dd1c9891c45517267ff6a850e67bc3ea241bf72e48092242ff93c2 kernel-debuginfo-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: 8406aca748bd6e533c09ae07a1c144598ac79cf3032a9b20c253b6d9229f675a kernel-debuginfo-common-s390x-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: c41af8276e9768a4527a45af326eab743a67bcda5b60fdfeeb711e3c31e500f2 kernel-devel-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: b7335002d4fa010ca6ed0a0054424d9a02eac691d7f77d8b8ec2da68dbd301df kernel-doc-4.18.0-553.150.1.el8_10.noarch.rpm SHA-256: 75c9942760a57e0cf37267034db9e80dcc4ffeaa3ddc3a984704dd828494434b kernel-headers-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: abe02e3895f914aac735fa311eac24503331265f9ad2c78d1bab93d879d9f6e0 kernel-modules-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: f3fa850d82fa26c8ca9e25aaaf842f5194c22372829c19c3a55ba0ee239afd0e kernel-modules-extra-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: 487be1facb847fdf5e98bfc2f3af51aa39a30f46dc80d64101c6503d52c4dfbf kernel-tools-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: 51b563e66ca21f40d04c88198d4484fc68f87ef54bc29de957aa008b975e29f3 kernel-tools-debuginfo-4.18.0-553.150.1.el8_10.s390x.rpm SHA-256: c2c9401cb112e07d8d8ec8e210caddb5f1ae7db38eb33efab2ab7ab794a