Red Hat Product Errata RHSA-2026:59146 - Security Advisory Issued: 2026-08-24 Updated: 2026-08-24 RHSA-2026:59146 - Security Advisory Overview Updated Packages Synopsis Important: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-4.18.0-553.53.1.el8_10. Security Fix(es): kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Fixes BZ - 2480453 - CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() BZ - 2481922 - CVE-2026-45984 kernel: gfs2: Fix use-after-free in iomap inline data write path BZ - 2482523 - CVE-2026-46116 kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete BZ - 2482564 - CVE-2026-46227 kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL CVEs CVE-2026-43499 CVE-2026-45984 CVE-2026-46116 CVE-2026-46227 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM kpatch-patch-4_18_0-553_109_1-1-10.el8_10.src.rpm SHA-256: 8ba09b0fe682891288a3627eaa49da2d669ad13f808cb975a1a0098b10233a1e kpatch-patch-4_18_0-553_125_1-1-7.el8_10.src.rpm SHA-256: 07c01a64541ca815c6dd4b2d7061b8e8b471b4a431616333eb37af95e40313a5 kpatch-patch-4_18_0-553_53_1-1-17.el8_10.src.rpm SHA-256: 8454cecc2434dbbd00ddf455dff0420929635cc6503964a49b58fc895400602a kpatch-patch-4_18_0-553_72_1-1-14.el8_10.src.rpm SHA-256: ef05ae47db0a5ffc68c04d4bad6ce253b70727540ff68d5c3ce525f70aa39a1d kpatch-patch-4_18_0-553_85_1-1-12.el8_10.src.rpm SHA-256: 9e209e12a4db29037451ea469c7f6982b902f706b5abf41eefdc62e43aaa16c2 x86_64 kpatch-patch-4_18_0-553_109_1-1-10.el8_10.x86_64.rpm SHA-256: 6b48fe8590fd63495f2b8871525cba6ad7025782595d1f3ff9315f232d4fe156 kpatch-patch-4_18_0-553_109_1-debuginfo-1-10.el8_10.x86_64.rpm SHA-256: bf3d5fe47597d289c91ec268de0f3d07e854ae1b784b2afb91e85df04976c630 kpatch-patch-4_18_0-553_109_1-debugsource-1-10.el8_10.x86_64.rpm SHA-256: 6c2521d683fe7b77e6a35e0cac68a50ea8cae661f1fa43cd00f93e45dd4dbf9a kpatch-patch-4_18_0-553_125_1-1-7.el8_10.x86_64.rpm SHA-256: bd5d9057cbf3f56a2e3bcc7b336fe5b917ce393b5bc2001be1c8fdb36b239393 kpatch-patch-4_18_0-553_125_1-debuginfo-1-7.el8_10.x86_64.rpm SHA-256: ec9be11c919c7d4b61af270f5f122aa2e5acc54dd1fd4455760d23ae1abc6c7d kpatch-patch-4_18_0-553_125_1-debugsource-1-7.el8_10.x86_64.rpm SHA-256: d6a6e8d60c38a1c14761a69be4e6c2064fee2540c32815677cef81fb5f1fa42b kpatch-patch-4_18_0-553_53_1-1-17.el8_10.x86_64.rpm SHA-256: 8b2467bfeb79f92928404d82db2b0160808491c0710746da4bc55d4e7d9c3454 kpatch-patch-4_18_0-553_53_1-debuginfo-1-17.el8_10.x86_64.rpm SHA-256: fb3f3943fa1c01f993cea60f464f469e0917a6010cae8cbe665b47f3d714781b kpatch-patch-4_18_0-553_53_1-debugsource-1-17.el8_10.x86_64.rpm SHA-256: ac52e42ef00b9831a3184b46a05a536e67e46240ba7067a6e0d466e2c75a24c7 kpatch-patch-4_18_0-553_72_1-1-14.el8_10.x86_64.rpm SHA-256: c55a56db9c4757cdca4a78918f46e74b1f5b185f2181e93c86629bb52f7acf5f kpatch-patch-4_18_0-553_72_1-debuginfo-1-14.el8_10.x86_64.rpm SHA-256: 549f8722d54505e8e9e4510c41962e6f654a67d2a5bb9d93923bbc460ee8df89 kpatch-patch-4_18_0-553_72_1-debugsource-1-14.el8_10.x86_64.rpm SHA-256: 98e6961b8ceae1c4319a12aa15e2e345e42b39f7c6f5fa53b8b5bd8d5d89c7e9 kpatch-patch-4_18_0-553_85_1-1-12.el8_10.x86_64.rpm SHA-256: c4822aba043814aa43aeda205ebbe16d06d777a409e3c89168551590635b2257 kpatch-patch-4_18_0-553_85_1-debuginfo-1-12.el8_10.x86_64.rpm SHA-256: b8dd4f422489ab315f61be9f97e37fb02baedaed76f238423cd2b1176b72ef96 kpatch-patch-4_18_0-553_85_1-debugsource-1-12.el8_10.x86_64.rpm SHA-256: 4ce23aa0ebaab3bfa90ca386f343a16bb2733b13c78897cc2df95f1dd241697c Red Hat Enterprise Linux for Power, little endian 8 SRPM kpatch-patch-4_18_0-553_109_1-1-10.el8_10.src.rpm SHA-256: 8ba09b0fe682891288a3627eaa49da2d669ad13f808cb975a1a0098b10233a1e kpatch-patch-4_18_0-553_125_1-1-7.el8_10.src.rpm SHA-256: 07c01a64541ca815c6dd4b2d7061b8e8b471b4a431616333eb37af95e40313a5 kpatch-patch-4_18_0-553_53_1-1-17.el8_10.src.rpm SHA-256: 8454cecc2434dbbd00ddf455dff0420929635cc6503964a49b58fc895400602a kpatch-patch-4_18_0-553_72_1-1-14.el8_10.src.rpm SHA-256: ef05ae47db0a5ffc68c04d4bad6ce253b70727540ff68d5c3ce525f70aa39a1d kpatch-patch-4_18_0-553_85_1-1-12.el8_10.src.rpm SHA-256: 9e209e12a4db29037451ea469c7f6982b902f706b5abf41eefdc62e43aaa16c2 ppc64le kpatch-patch-4_18_0-553_109_1-1-10.el8_10.ppc64le.rpm SHA-256: 28c19e884fdf8c922dcfe9f70a2b958ce1c2218080bdaf3c2f0ac7dee4320683 kpatch-patch-4_18_0-553_109_1-debuginfo-1-10.el8_10.ppc64le.rpm SHA-256: 1ff26cdcd30a4bcf51c2bb15fb459753da210b1d14805c86a3c3c4fd3cb3566d kpatch-patch-4_18_0-553_109_1-debugsource-1-10.el8_10.ppc64le.rpm SHA-256: b3a2cd588c5c19634d43b377ab555a2bdf967fcf9c195d93d15a1640af498569 kpatch-patch-4_18_0-553_125_1-1-7.el8_10.ppc64le.rpm SHA-256: 5d74fbbdd3ba324e836b45ec19c1653db6080f2c61b793c9a1a17fa7302ab06b kpatch-patch-4_18_0-553_125_1-debuginfo-1-7.el8_10.ppc64le.rpm SHA-256: dc27e5ea0550881565d82f6e777685a3e875c50e84a2fdbeb5d6fa36513c47b2 kpatch-patch-4_18_0-553_125_1-debugsource-1-7.el8_10.ppc64le.rpm SHA-256: a2c62cf4e7ca590ed62c4b9e9ce637f6fe888a205054520500c8f40137247379 kpatch-patch-4_18_0-553_53_1-1-17.el8_10.ppc64le.rpm SHA-256: 5606d9d11700fc15ce1dc3ffe9ae6ec5a7a2f2c31ad99053a5f214d3fed8c209 kpatch-patch-4_18_0-553_53_1-debuginfo-1-17.el8_10.ppc64le.rpm SHA-256: d1a801c5262bd48d7708f7d52f497f1551bd9fc8b5e019c3d396561805a89a3e kpatch-patch-4_18_0-553_53_1-debugsource-1-17.el8_10.ppc64le.rpm SHA-256: b41786dbe4a7773bfd847f74b12b471273fa1d80964f117a8f694d3fd7d63bc8 kpatch-patch-4_18_0-553_72_1-1-14.el8_10.ppc64le.rpm SHA-256: 741ad3bcae5b9b44cfec5043860b86d4f145782942a54e5c4a982e79a594671a kpatch-patch-4_18_0-553_72_1-debuginfo-1-14.el8_10.ppc64le.rpm SHA-256: 433e14505bd9db6661d55c192566f9ad9dd4fbffc650bcd1cccb41877503d389 kpatch-patch-4_18_0-553_72_1-debugsource-1-14.el8_10.ppc64le.rpm SHA-256: 589aa129dd38191771ef1adb56f37a55ba191b88355e994db3e41950ba78f6b6 kpatch-patch-4_18_0-553_85_1-1-12.el8_10.ppc64le.rpm SHA-256: 1714e45c9c4b85b11e424511e31e622e8149689dcecf0b2c8c1eb36283580172 kpatch-patch-4_18_0-553_85_1-debuginfo-1-12.el8_10.ppc64le.rpm SHA-256: 9729b8d53c00dc78b1b61bb26c10924354ba1f5a17073e600409bf56416ebacc kpatch-patch-4_18_0-553_85_1-debugsource-1-12.el8_10.ppc64le.rpm SHA-256: 9571ef629a0f4a9da35dc13542555ca5b6b8194a4f29eaae94a3d363dff24b35 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM kpatch-patch-4_18_0-553_109_1-1-10.el8_10.src.rpm SHA-256: 8ba09b0fe682891288a3627eaa49da2d669ad13f808cb975a1a0098b10233a1e kpatch-patch-4_18_0-553_125_1-1-7.el8_10.src.rpm SHA-256: 07c01a64541ca815c6dd4b2d7061b8e8b471b4a431616333eb37af95e40313a5 kpatch-patch-4_18_0-553_53_1-1-17.el8_10.src.rpm SHA-256: 8454cecc2434dbbd00ddf455dff0420929635cc6503964a49b58fc895400602a kpatch-patch-4_18_0-553_72_1-1-14.el8_10.src.rpm SHA-256: ef05ae47db0a5ffc68c04d4bad6ce253b70727540ff68d5c3ce525f70aa39a1d kpatch-patch-4_18_0-553_85_1-1-12.el8_10.src.rpm SHA-256: 9e209e12a4db29037451ea469c7f6982b902f706b5abf41eefdc62e43aaa16c2 x86_64 kpatch-patch-4_18_0-553_109_1-1-10.el8_10.x86_64.rpm SHA-256: 6b48fe8590fd63495f2b8871525cba6ad7025782595d1f3ff9315f232d4fe156 kpatch-patch-4_18_0-553_109_1-debuginfo-1-10.el8_10.x86_64.rpm SHA-256: bf3d5fe47597d289c91ec268de0f3d07e854ae1b784b2afb91e85df04976c630 kpatch-patch-4_18_0-553_109_1-debugsource-1-10.el8_10.x86_64.rpm SHA-256: 6c2521d683fe7b77e6a35e0cac68a50ea8cae661f1fa43cd00f93e45dd4dbf9a kpatch-patch-4_18_0-553_125_1-1-7.el8_10.x86_64.rpm SHA-256: bd5d9057cbf3f56a2e3bcc7b336fe5b917ce393b5bc2001be1c8fdb36b239393 kpatch-patch-4_18_0-553_125_1-debuginfo-1-7.el8_10.x86_64.rpm SHA-256: ec9be11c919c7d4b61af270f5f122aa2e5acc54dd1fd4455760d23ae1abc6c7d kpatch-patch-4_18_0-553_125_1-debugsource-1-7.el8_10.x86_64.rpm SHA-256: d6a6e8d60c38a1c14761a69be4e6c2064fee2540c32815677cef81fb5f1fa42b kpatch-patch-4_18_0-553_53_1-1-17.el8_10.x86_64.rpm SHA-256: 8b2467bfeb79f92928404d82db2b0160808491c0710746da4bc55d4e7d9c3454 kpatch-patch-4_18_0-553_53_1-debuginfo-1-17.el8_10.x86_64.rpm SHA-256: fb3f3943fa1c01f993cea60f464f469e0917a6010cae8cbe665b47f3d714781b kpatch-patch-4_18_0-553_53_1-debugsource-1-17.el8_10.x86_64.rpm SHA-256: ac52e42ef00b9831a3184b46a05a536e67e46240ba7067a6e0d466e2c75a24c7