Red Hat Product Errata RHSA-2026:56574 - Security Advisory Issued: 2026-08-19 Updated: 2026-08-19 RHSA-2026:56574 - Security Advisory Overview Updated Packages Synopsis Moderate: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411) kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) Bug Fix(es) and Enhancement(s): Kernels 5.14.0-434+ may lose page table dirty bit (and page data) [rhel-9.6.z] (JIRA:RHEL-220786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2436755 - CVE-2026-23110 kernel: scsi: core: Wake up the error handler when final completions race against each other BZ - 2456521 - CVE-2026-31411 kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() BZ - 2492269 - CVE-2026-53016 kernel: crypto: ccp - copy IV using skcipher ivsize BZ - 2492277 - CVE-2026-53059 kernel: dm log: fix out-of-bounds write due to region_count overflow CVEs CVE-2026-23110 CVE-2026-31411 CVE-2026-53016 CVE-2026-53059 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM kernel-5.14.0-570.135.1.el9_6.src.rpm SHA-256: c4e6b7bf4a7b74796595c81d9d0041f0e12cb61220f2f1580aaeda013f351b23 x86_64 kernel-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: e24aabe2cb489d2d2a2d0afa95eef77e8cb229d10b12e9913b522d9b03b7c743 kernel-abi-stablelists-5.14.0-570.135.1.el9_6.noarch.rpm SHA-256: 1b84ad6a8bb9cd9a6b316037758dcb56818c44954ee6bc81ef55ce77aa9db8e7 kernel-core-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 4257600d1159984f57fb5ce790b058b1bb093dbfc1487f6a95227826e153df36 kernel-debug-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: b1e7acce76d9af74444e279eac88964ad4497b4f3db9dd057105e153f404f75c kernel-debug-core-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 11a8374c926951c78f4e08d1f653132f768e630a471cfd7d3595d5f615b342bf kernel-debug-debuginfo-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 6b5997ddf15ba0850c6b0bbfda83880483a5d137ac6d79805f6c6fb7b5f42e1f kernel-debug-debuginfo-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 6b5997ddf15ba0850c6b0bbfda83880483a5d137ac6d79805f6c6fb7b5f42e1f kernel-debug-debuginfo-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 6b5997ddf15ba0850c6b0bbfda83880483a5d137ac6d79805f6c6fb7b5f42e1f kernel-debug-debuginfo-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 6b5997ddf15ba0850c6b0bbfda83880483a5d137ac6d79805f6c6fb7b5f42e1f kernel-debug-devel-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: cf655fe0f7d0d20ce52a99aa5977629662c02f6ff7195553882f9c74f67d4cce kernel-debug-devel-matched-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 7afd7d8f0aa49eee65c4f2b2984c56609e3bcaea9550f4b492505d03468c65ea kernel-debug-modules-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 3106b87d588c34944153a9a1b6fce2d7d1598fee5529339d2be741beabe63fc3 kernel-debug-modules-core-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: a40784d17f2dd1358f88ea7518ea2127da8c0c81c1e5fe939e13f50cf468de25 kernel-debug-modules-extra-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 00b781a0396d04d22c928d783f91d253020702ca2b1f6c7ea60f7d10466455c8 kernel-debug-uki-virt-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: f12e57f4d1f9508ad578d6926e8f3f7eeaac86d04a163495eb28e2e566359e44 kernel-debuginfo-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 34f3b838498c226a13fbfb2333606effe7d36ae06b2621fbf13d34352ec92518 kernel-debuginfo-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 34f3b838498c226a13fbfb2333606effe7d36ae06b2621fbf13d34352ec92518 kernel-debuginfo-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 34f3b838498c226a13fbfb2333606effe7d36ae06b2621fbf13d34352ec92518 kernel-debuginfo-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 34f3b838498c226a13fbfb2333606effe7d36ae06b2621fbf13d34352ec92518 kernel-debuginfo-common-x86_64-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 2d16c332277e9344803a66684167c39b3c254e56c6ea5fd9cf557e4fc1faaf8c kernel-debuginfo-common-x86_64-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 2d16c332277e9344803a66684167c39b3c254e56c6ea5fd9cf557e4fc1faaf8c kernel-debuginfo-common-x86_64-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 2d16c332277e9344803a66684167c39b3c254e56c6ea5fd9cf557e4fc1faaf8c kernel-debuginfo-common-x86_64-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 2d16c332277e9344803a66684167c39b3c254e56c6ea5fd9cf557e4fc1faaf8c kernel-devel-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 732c5d8c03c6a7673e54513959fd86b6e5b6fa6d58b67ce477a13f9ecbe5b9c0 kernel-devel-matched-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 91e90975247ff13724bc69b73311363a8440750777da7877cf8f71fccdfd47b2 kernel-doc-5.14.0-570.135.1.el9_6.noarch.rpm SHA-256: ffc6eed3de04349059f11b688809ccd0c605f1b27ac2846e79e09f6507d9f59d kernel-headers-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 752bdfc69fce9b6a8f4a5224bf161560aac019826c397e21910c8e4063862616 kernel-modules-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 7b883c6c95bfecff6d448651d84defcbc21f61231d6522f8b024ad3e0c0d329c kernel-modules-core-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: cf504d5cd843530199b96f4df17cf354af97d47ef008ce2555d930136cbdb813 kernel-modules-extra-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: cc65b52ca446f300c48a9e8803b2bf86ce05c27c3904d59f1bee7a1e9c45d129 kernel-rt-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 7686ac7eb51e9e003bec7b843c5f08fd2fd5dd1c70f9be7c0690b0d523228f32 kernel-rt-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 7686ac7eb51e9e003bec7b843c5f08fd2fd5dd1c70f9be7c0690b0d523228f32 kernel-rt-core-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 410bee024d9a9dae45aefe30fdb1b880df7c1ab72e6956d3040e76f7c36a761b kernel-rt-core-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 410bee024d9a9dae45aefe30fdb1b880df7c1ab72e6956d3040e76f7c36a761b kernel-rt-debug-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 7842a5e7ca6eb839c8ad92b1f72b6ff31e6f1892b580f1f04851e35e9e7a62fc kernel-rt-debug-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 7842a5e7ca6eb839c8ad92b1f72b6ff31e6f1892b580f1f04851e35e9e7a62fc kernel-rt-debug-core-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 8cbddb7aafe2e74d60a38475e3c7319300cf35dca132f1cc55823e99a4bc874a kernel-rt-debug-core-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 8cbddb7aafe2e74d60a38475e3c7319300cf35dca132f1cc55823e99a4bc874a kernel-rt-debug-debuginfo-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 1ff49ba270accd9922363e5c7624bceecc6c606d943835eb0becec27e17d760f kernel-rt-debug-debuginfo-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 1ff49ba270accd9922363e5c7624bceecc6c606d943835eb0becec27e17d760f kernel-rt-debug-debuginfo-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 1ff49ba270accd9922363e5c7624bceecc6c606d943835eb0becec27e17d760f kernel-rt-debug-debuginfo-5.14.0-570.135.1.el9_6.x86_64.rpm SHA-256: 1ff49ba270accd9922363e5c7624bceecc6c606d943835eb0becec27e17d760f kern