Red Hat Product Errata RHSA-2026:52649 - Security Advisory Issued: 2026-08-10 Updated: 2026-08-10 RHSA-2026:52649 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2464092 - CVE-2026-31787 kernel: xen/privcmd: fix double free via VMA splitting BZ - 2467015 - CVE-2026-43112 kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath BZ - 2482025 - CVE-2026-46054 kernel: selinux: fix overlayfs mmap() and mprotect() access checks BZ - 2486958 - CVE-2025-10263 kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources BZ - 2492094 - CVE-2026-52923 kernel: ipc: limit next_id allocation to the valid ID range BZ - 2492277 - CVE-2026-53059 kernel: dm log: fix out-of-bounds write due to region_count overflow CVEs CVE-2025-10263 CVE-2026-31787 CVE-2026-43112 CVE-2026-46054 CVE-2026-52923 CVE-2026-53059 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM kernel-4.18.0-477.158.1.el8_8.src.rpm SHA-256: 524c92e14d6e682bc71d4000d19f6459f0e2fbd9c5a0bd7bc3168403d75a004a x86_64 bpftool-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 2cbfa65919f35cc524d3e5c85dbc3542bd35981dca8dfd8e16727cb619b19848 bpftool-debuginfo-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: d6f273ff68ec89dec50623635047f7b099c3215d6442759a8c4e441366238d81 kernel-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: c9f6502c6a7920f8533156d8c942a7f97462bdbd7cf1082261a42849e0a888b4 kernel-abi-stablelists-4.18.0-477.158.1.el8_8.noarch.rpm SHA-256: 466f59f6814869c0b1fb4b6497ef3f2ffb8d4fe82c33fd12c2d5733cb97bb678 kernel-core-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 3febacc1d39ed278f28dad334703122a813dd74e6986d7f858cb82b37bfa8d4e kernel-cross-headers-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: c9126203c7354b0e13e281402374a8ee633796837f1df5c0da949f0db70cdcb3 kernel-debug-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: a3a907a7f74e19a990a357879246e2c7d340dbc2a2e234d5c3f7d8a53ddf4a24 kernel-debug-core-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 8377a46dfef0a80d01d259d11dd6d8462f36b2e4d11c5b549c58f5735868498d kernel-debug-debuginfo-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: f017661fb02f48569a298562e0be29ee801657135e95f8144e36a3aa3907e295 kernel-debug-devel-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 67437841b89705fd7e9c426a9aa36474b1dc1b4cfb5ae0e9d0db0eb1699e33b3 kernel-debug-modules-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: ada69235e1ebfdc7bddbcf1f9f0df785da30bad035016f2cb597fd487a9c5f67 kernel-debug-modules-extra-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: f4ed2b3021aad0f6082cf6731687f32633df10068a4f5f4fc45f9f91943fd554 kernel-debuginfo-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 7ad30568c86799e21993a1d5a08ce55b4087f8b5868d76ef6e8b8b2c77e0f015 kernel-debuginfo-common-x86_64-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: ca858599c081a4853edd0c9f28418b3ccebd62821fd3ee884f5c691df4acc0c4 kernel-devel-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 547e5234b4d276a391d45386a0d01d2dd14c7be097fb122fe03cf7a821d644f0 kernel-doc-4.18.0-477.158.1.el8_8.noarch.rpm SHA-256: 4f8c19394833ed4e6d2a4a4ea90b5a8c0a17d40dd918c1f5b6667f918f6df2d9 kernel-headers-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: ab24e25be3270174c230893b1d973988dde3b5888f723539e159386c59d035ab kernel-modules-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: e3e36d51d31ed28997da4505d74a2e2bf5a40a81d829452c3589434da3823899 kernel-modules-extra-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 50efba9cf066ae0b2cb2322ee62dc4076059f38dabc8f683be59a71521051aa7 kernel-tools-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: f0790cbd02672d694ab085924a3e6fed5e40a851a2dbe0b7c4087b1622afa5cf kernel-tools-debuginfo-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 373ccfa0f07957f9e9a7ffd5300e49613b857b8a7309f7bd2895911acb5e342d kernel-tools-libs-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 8b73d853f03d675623b34cefdf488d12dee5493cc6b3f0700e59c25e2494a139 perf-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: dd3c58f079632bf137da333b5e3895441893f74c5cd956317f38e014a6892bc7 perf-debuginfo-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: ba2cbeed6e1e99804d19492e6eac7243d07f8d375f210c10f3b9a7f07d61ed4a python3-perf-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 169120d40e43843747459d410b17ff96a8bac76efe68f759133d1811378612b0 python3-perf-debuginfo-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 332ba73d68ea708fe1be2b832e79eaa4f129f13bd0c0b75b6b6049804b68b952 Red Hat Enterprise Linux Server - TUS 8.8 SRPM kernel-4.18.0-477.158.1.el8_8.src.rpm SHA-256: 524c92e14d6e682bc71d4000d19f6459f0e2fbd9c5a0bd7bc3168403d75a004a x86_64 bpftool-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 2cbfa65919f35cc524d3e5c85dbc3542bd35981dca8dfd8e16727cb619b19848 bpftool-debuginfo-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: d6f273ff68ec89dec50623635047f7b099c3215d6442759a8c4e441366238d81 kernel-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: c9f6502c6a7920f8533156d8c942a7f97462bdbd7cf1082261a42849e0a888b4 kernel-abi-stablelists-4.18.0-477.158.1.el8_8.noarch.rpm SHA-256: 466f59f6814869c0b1fb4b6497ef3f2ffb8d4fe82c33fd12c2d5733cb97bb678 kernel-core-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 3febacc1d39ed278f28dad334703122a813dd74e6986d7f858cb82b37bfa8d4e kernel-cross-headers-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: c9126203c7354b0e13e281402374a8ee633796837f1df5c0da949f0db70cdcb3 kernel-debug-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: a3a907a7f74e19a990a357879246e2c7d340dbc2a2e234d5c3f7d8a53ddf4a24 kernel-debug-core-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 8377a46dfef0a80d01d259d11dd6d8462f36b2e4d11c5b549c58f5735868498d kernel-debug-debuginfo-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: f017661fb02f48569a298562e0be29ee801657135e95f8144e36a3aa3907e295 kernel-debug-devel-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 67437841b89705fd7e9c426a9aa36474b1dc1b4cfb5ae0e9d0db0eb1699e33b3 kernel-debug-modules-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: ada69235e1ebfdc7bddbcf1f9f0df785da30bad035016f2cb597fd487a9c5f67 kernel-debug-modules-extra-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: f4ed2b3021aad0f6082cf6731687f32633df10068a4f5f4fc45f9f91943fd554 kernel-debuginfo-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 7ad30568c86799e21993a1d5a08ce55b4087f8b5868d76ef6e8b8b2c77e0f015 kernel-debuginfo-common-x86_64-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: ca858599c081a4853edd0c9f28418b3ccebd62821fd3ee884f5c691df4acc0c4 kernel-devel-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 547e5234b4d276a391d45386a0d01d2dd14c7be097fb122fe03cf7a821d644f0 kernel-doc-4.18.0-477.158.1.el8_8.noarch.rpm SHA-256: 4f8c19394833ed4e6d2a4a4ea90b5a8c0a17d40dd918c1f5b6667f918f6df2d9 kernel-headers-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: ab24e25be3270174c230893b1d973988dde3b5888f723539e159386c59d035ab kernel-modules-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: e3e36d51d31ed28997da4505d74a2e2bf5a40a81d829452c3589434da3823899 kernel-modules-extra-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 50efba9cf066ae0b2cb2322ee62dc4076059f38dabc8f683be59a71521051aa7 kernel-tools-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: f0790cbd02672d694ab085924a3e6fed5e40a851a2dbe0b7c4087b1622afa5cf kernel-tools-debuginfo-4.18.0-477.158.1.el8_8.x86_64.rpm SHA-256: 373ccfa0f07957f9e9a7ffd5300e49613b857b8a7309f7bd28959