Red Hat Product Errata RHSA-2026:56573 - Security Advisory Issued: 2026-08-19 Updated: 2026-08-19 RHSA-2026:56573 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411) kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518) Bug Fix(es) and Enhancement(s): RHEL9.4 - s390/pci: Fix __pcilg_mio_inuser() inline assembly [rhel-9.4.z] (JIRA:RHEL-161489) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2456521 - CVE-2026-31411 kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() BZ - 2467015 - CVE-2026-43112 kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath BZ - 2477784 - CVE-2025-54518 kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVEs CVE-2025-54518 CVE-2026-31411 CVE-2026-43112 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM kernel-5.14.0-427.145.1.el9_4.src.rpm SHA-256: b5247b70832cab8ef57bfc6c7df06ac07705f1225bf822665f21ad9a35512cbb x86_64 bpftool-7.3.0-427.145.1.el9_4.x86_64.rpm SHA-256: c3dc4d181fbfeed312a988928251a580da22d96997ffea58bc6415e688aab052 bpftool-debuginfo-7.3.0-427.145.1.el9_4.x86_64.rpm SHA-256: facd5ae442027ce461647a5fc270dbd879250ccaae6189d4c863f2a1ee0722cd bpftool-debuginfo-7.3.0-427.145.1.el9_4.x86_64.rpm SHA-256: facd5ae442027ce461647a5fc270dbd879250ccaae6189d4c863f2a1ee0722cd kernel-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: ba5bef6a74d79302b7b515d471004db2acee0ce163e3dc29260b11ec1109e22e kernel-abi-stablelists-5.14.0-427.145.1.el9_4.noarch.rpm SHA-256: 5db8435b34e2993dec29a7983ac8a05bb06e6b7a493804d6d906f6296d30bf82 kernel-core-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 1ed9498dbb7da859c2f8857eb96b2cf8d1c1d8ea4e895e8794ec6a350c4d48af kernel-debug-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 015dc14629f11fa59ac80e0a962dac15e2888872f26dedd2a675e04ff7d8caae kernel-debug-core-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: a1cc51024b05732f5089aa1ae77ac6ec1ade7feae9874ce99d53a70d5a6f170e kernel-debug-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 568d89150de8d3caca660cc440ea0d5a6e4350455d47ce1c5333c3ef30511751 kernel-debug-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 568d89150de8d3caca660cc440ea0d5a6e4350455d47ce1c5333c3ef30511751 kernel-debug-devel-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 554e6501870998667e8d7d41323261917528663a6c8f4ce026f2c6910b77eec9 kernel-debug-devel-matched-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: b5cc854d263de3a0e8e395410dc5d64d5200e87615c8668cd8dd2a674904f3fc kernel-debug-modules-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 6f080d5b2eb902ed90e7c0e64d8e15d4ab5922ad8bb35de91eaace0087106e36 kernel-debug-modules-core-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 14a40780576cf20c2ad5077d0a2dbac785fc6f72f48d1e3b6eeef4d8e9ea030d kernel-debug-modules-extra-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 3f81362f590b4f3df3278bc975419fc28479f4fd38964690341bd6a57a2823da kernel-debug-uki-virt-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 00e2a7a9807528652da6326fae38973a7f686a9f53058f8e1cb9b9a603b16c31 kernel-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 1c9747c395ed07b814c867040e41d7a6baa09a6bd8f469a24c09bf9ac7a22b05 kernel-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 1c9747c395ed07b814c867040e41d7a6baa09a6bd8f469a24c09bf9ac7a22b05 kernel-debuginfo-common-x86_64-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 8808219e78ef4cb518344820f472d9d4ddf8c8103fec6168e015f7b716e4f3a8 kernel-debuginfo-common-x86_64-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 8808219e78ef4cb518344820f472d9d4ddf8c8103fec6168e015f7b716e4f3a8 kernel-devel-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 39083dc644e3423bb482e83baa612d6af1c97f3b227e55c1a019c35277e47a52 kernel-devel-matched-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 30464c59b2427ec8200f5f35ca764335e7eb7c282911093471f0dd5131b7369d kernel-doc-5.14.0-427.145.1.el9_4.noarch.rpm SHA-256: d7bb82ca245560d31c7e6d5d79f858e51e44ee5e49ecf0e009de2d4be1da8328 kernel-headers-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 29c46a6999c66bdc0c5f723ac7a502ae39bc5c513464bd213db8bfdd07db803c kernel-modules-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: c072ebcf89e9de6255cd491ebd90332490e0fd3eccbc73d802e0a3ec1a35624f kernel-modules-core-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 96136d67bbcce1c849089ac8ba1e51c8a1fd7426a47bec135a7f8f86246b0c34 kernel-modules-extra-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: afe66fded3c526bf4dbcdff801f66ac1c96f33e98896676ad10d92c7af68d7ee kernel-rt-debug-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 1cd42f2cfcf6d0b3f4cab3536ce1b0a97fae87329206e886d5b72cfe781e0693 kernel-rt-debug-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 1cd42f2cfcf6d0b3f4cab3536ce1b0a97fae87329206e886d5b72cfe781e0693 kernel-rt-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 6e2a2dc0fbdc25186dce744f0da993d7d1584c0ea0382ebb76b9e3d8659976a5 kernel-rt-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 6e2a2dc0fbdc25186dce744f0da993d7d1584c0ea0382ebb76b9e3d8659976a5 kernel-tools-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 8428659cd18d4dbfc1efd16e9d68250b2e9cf39c440424e7c32d19d918703974 kernel-tools-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 96ba6009f63ab5b5d688edb1981cacd228594d3bcc67e1985b87626db4623981 kernel-tools-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 96ba6009f63ab5b5d688edb1981cacd228594d3bcc67e1985b87626db4623981 kernel-tools-libs-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 6db430987ed281455e6d04d668f36c2028520e98ba70442236584338f09d8adf kernel-uki-virt-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 71140fe628da37ece9bf65ee4c78f1e0982eb9792364504c1b80f000725e19fb libperf-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 67bd4eef7386b78f407bd794c12bd950d15aac549a21e87f39b1a7fe4449afe8 libperf-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 67bd4eef7386b78f407bd794c12bd950d15aac549a21e87f39b1a7fe4449afe8 perf-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: 916d283fcc8b6f1fe88fbbf90f4a4dcca88d9aecb37dac3a27393033fb66b732 perf-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: fc497e68a94eb3777cedf83a88b2deff606f56e225ba5eef3c5386c40b12dba8 perf-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: fc497e68a94eb3777cedf83a88b2deff606f56e225ba5eef3c5386c40b12dba8 python3-perf-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: cb055a511255eaee52ca37ff7d48b5ab4c2e5ae63a9087e4ae4e9f315c3b3eb9 python3-perf-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: a9f87776a8f4265c280bc2f93931ff813f27b40c0ba12387b7f01a02d0d21448 python3-perf-debuginfo-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: a9f87776a8f4265c280bc2f93931ff813f27b40c0ba12387b7f01a02d0d21448 rtla-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: b4360af28ca5e039b7b8a59045ce883fa18f088c3f6e7c4714830b67f39c0aac rv-5.14.0-427.145.1.el9_4.x86_64.rpm SHA-256: b21f8b2aef873ecb3a13145335b45f33cc2d9fb6d1f219442306a52d3332d196 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM kernel-5.14.0-427.145.1.el9_4.src.rpm SHA-256: b5247b70832cab8ef57bfc6c7df06ac07705f1225bf822665f21ad9a35512cbb ppc64le bpftool-7.3.0-427.145.1.el9_4.ppc64le.rpm SHA-256: 75c5f9818db697ef69fba23f6bea615f103e38ee9609d91e79857fd35c911854 bpftool-debuginfo-7.3.0-427.145.1.el9_4.ppc64le.rpm SHA-256: 6e36c070eac563d65b10e9279692401f