Red Hat Product Errata RHSA-2026:57253 - Security Advisory Issued: 2026-08-20 Updated: 2026-08-20 RHSA-2026:57253 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602) kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120) kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991) kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189) kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888) kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048) kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379) kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388) Bug Fix(es) and Enhancement(s): sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after RHEL 8.10 kernel update (JIRA:RHEL-219767) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2334501 - CVE-2024-56602 kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() BZ - 2482614 - CVE-2026-46120 kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() BZ - 2492403 - CVE-2026-52991 kernel: sched/psi: fix race between file release and pressure write BZ - 2492788 - CVE-2026-53189 kernel: mm/huge_memory: update file PMD counter before folio_put() BZ - 2502443 - CVE-2026-63888 kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() BZ - 2502447 - CVE-2026-63887 kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf BZ - 2502589 - CVE-2026-64048 kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot BZ - 2507135 - CVE-2026-64379 kernel: smb: client: mask server-provided mode to 07777 in modefromsid BZ - 2513470 - CVE-2026-68388 kernel: smb/client: handle overlapping allocated ranges in fallocate CVEs CVE-2024-56602 CVE-2026-46120 CVE-2026-52991 CVE-2026-53189 CVE-2026-63887 CVE-2026-63888 CVE-2026-64048 CVE-2026-64379 CVE-2026-68388 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kernel-4.18.0-553.157.1.el8_10.src.rpm SHA-256: 689e35ac0da47106b2e7a5e7a6f8fc478990b05b91832ad8762e1c559149acb9 x86_64 bpftool-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: d49d10e4aaf2d1cf18fec146b1680b68031bf6cb329709a843df4353bb3e0a3f bpftool-debuginfo-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: e0c646e2c7bfcafe6538254a7a58af4a69ab0fc527e65bbce4e701e2973a03a9 kernel-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: 1099ea72c386902f21f3f7f07dbb9f98c3767c8126fed28531d81de1f60bed40 kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch.rpm SHA-256: e98ae15da115c5de98fe8f07734da210b5947a2d491d7113ad07add1ded3201f kernel-core-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: 14392c6aa43f7b9ea444e77e714f7dd96ca07827e0cfcf6a9320ff548843a46e kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: aa56a87b61234c95b1a4e3bd8bc7f4c1e3b6936158afae06aa2140ecb6b00164 kernel-debug-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: 0d1a39ec5fbd2ff18cd304ad94dacda2ec4f0e1833f3fc8052949bcaf889290a kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: d45e5aa6f726226ae6ca00d32aa36567a3dcabd3c525c0f43797e2d54721bd42 kernel-debug-debuginfo-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: c90ed7dd130fdb0aa5a3eafe09c35011477dbbcd24a41388dbb0c56fd996efba kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: fc4494ebe4e12c8c169e6322218c980afc0c1399083eb8001c9dc7794d395f59 kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: dfccddb2cc5feb90c1c07f5c054a20f639d6269a047704f9b0c924ced8ec3542 kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: f2acc10071617fa8c8206f2686520ce30a6c21b4805a4ce7a357c1d5cde75277 kernel-debuginfo-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: 1ebbce29c565be6443489d5b8fe75e1f6a1cad64525ab3f3c4e80dd2862985f9 kernel-debuginfo-common-x86_64-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: c03e5c7320b952a9bf786b203242e895813927041050392c10478eb144fc160d kernel-devel-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: 26fdc5c4e2e902d1eb96357af2741687867d800ec78341836b4433bc5219c9c8 kernel-doc-4.18.0-553.157.1.el8_10.noarch.rpm SHA-256: d5a4d8cc5a32a2a61bb163bb40bd781df6850e141ce54137b81684568666b712 kernel-headers-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: 63e61d814bcdc211a98bdfdc3d5641bdec31807c5fc8eec3ac542ba96b9b92a6 kernel-modules-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: 44cbf058c808fd0818fd2b1ae641326fff494bceca70cb1e66844b43c9b1b911 kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: ee5630ec37b56a964074f8cf053667196e7512aad5644e7035074537df517c14 kernel-tools-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: cda215cee0c631b47ebcad8a93c944b32bc78794dc8faf7aadec129794ac0d73 kernel-tools-debuginfo-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: 9bf2a8bd019ebaa6073b31df8871afcb1ac7993cec5eb23f8204814dc7a3961f kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: 6ff9f1952ca104351fc9e66e17bb17721e738380a3704b98e73e5aecc7cf289b perf-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: e2ba3e083f97a2012e7b2ade481f5781e2f898ae77c630832be817462dc138af perf-debuginfo-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: 66f10ec1ffa5b8d2838ed44b3fff91bbd24755569540892447cbaf77e75350b4 python3-perf-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: 35c2f9c954257c0e290865f1d4c646cb9973c3648e87cb77b8521b7c0d7b3e50 python3-perf-debuginfo-4.18.0-553.157.1.el8_10.x86_64.rpm SHA-256: 7e6712152b6d644b730b378bb4fcffed3b97833568b09d4395444f1afb0bd62f Red Hat Enterprise Linux for IBM z Systems 8 SRPM kernel-4.18.0-553.157.1.el8_10.src.rpm SHA-256: 689e35ac0da47106b2e7a5e7a6f8fc478990b05b91832ad8762e1c559149acb9 s390x bpftool-4.18.0-553.157.1.el8_10.s390x.rpm SHA-256: 139bfa9f1f6ffc2a8a408a618dff903c7e9a78adeb819d755047f80291aa3964 bpftool-debuginfo-4.18.0-553.157.1.el8_10.s390x.rpm SHA-256: bf6ea7173b8bf44802cc8fa65b1f3e1d99c3f75da7373c0c744e7bf860523b96 kernel-4.18.0-553.157.1.el8_10.s390x.rpm SHA-256: 1f6fd4f1368258321e8356e0b7cb1747e7136fe4882881210f4944c99115afdc kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch.rpm SHA-256: e98ae15da115c5de98fe8f07734da210b5947a2d491d7113ad07add1ded3201f kernel-core-4.18.0-553.157.1.el8_10.s390x.rpm SHA-256: 963083bcbad46acd7f7f7793c656035c8bee8331b244e26bb712662f5fcfdc10 kernel-cross-headers-4.18.0-553.157.1.el8_10.s390x.rpm SHA-256: c74e6bf87ffa6264096b8f799c82827bd102de570aba558a5f48ade18e8b3527 kernel-debug-4.18.0-553.157.1.el8_10.s390x.rpm SHA-256: abfb9a2daf2b3ff59e6f6821164a17e34cfcd377f91c372c7dfbebf03ec69efa kernel-debug-core-4.18.0-553.157.1.el8_10.s390x.rpm SHA-256: 57f67853b47a97c46db57fb42797e0b58bd28ad4af7405af64a8bc562a933c32 kernel-debug-debuginfo-4.18.0-553.157.1.el8_10.s390x.rpm SHA-256: 44efac6abf36d7147bb0ddf1d1b8ea72458c43ac38a5b97992e6ff436646fcb9 kernel-debug-devel-4.18.0-553.157.1.el8_10.s390x.rpm SHA-256: 29dd02b7e7f0359ae12c2796fa8332aa020b9fcbda7c8e21e32e135bcb613843 kernel-debug-modules-4.18.0-553.157.1.el8_10.s390x.rpm SHA-256: e23b2a1077a7f9c27d5e9382e590a53ef98db831b07ebbcc611c6a87fb342e18 kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.s390x.rpm SHA-256: db68d2129d5781912b24ec4a20c7b93fc3ba876df7332e9ff345c5dcf02a719c kernel-debuginfo-4.18.0-553.157.1.el8