Red Hat Product Errata RHSA-2026:59149 - Security Advisory Issued: 2026-08-24 Updated: 2026-08-24 RHSA-2026:59149 - Security Advisory Overview Updated Packages Synopsis Important: kpatch-patch-5_14_0-687_10_1 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kpatch-patch-5_14_0-687_10_1 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-687.10.1.el9_8. Security Fix(es): kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Fixes BZ - 2480453 - CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() BZ - 2481922 - CVE-2026-45984 kernel: gfs2: Fix use-after-free in iomap inline data write path BZ - 2482523 - CVE-2026-46116 kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete BZ - 2482564 - CVE-2026-46227 kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL BZ - 2507402 - CVE-2026-64531 kernel: net: openvswitch: reject oversized nested action attrs CVEs CVE-2026-43499 CVE-2026-45984 CVE-2026-46116 CVE-2026-46227 CVE-2026-64531 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM kpatch-patch-5_14_0-687_10_1-1-7.el9_8.src.rpm SHA-256: 70c42670959e763578ad12cf93b8536a4415359ac48d804be88b7ed5da721ad1 x86_64 kpatch-patch-5_14_0-687_10_1-1-7.el9_8.x86_64.rpm SHA-256: 7f16f02a12e5b6a205aeb3b58a3ea4a4e1c2a3be59b3c930fa3ebe6154ee870e kpatch-patch-5_14_0-687_10_1-debuginfo-1-7.el9_8.x86_64.rpm SHA-256: a4256eafa9a6de1a53f2258a0e6881b1de74d67adda258cfb9715e2b3bf4e9d6 kpatch-patch-5_14_0-687_10_1-debugsource-1-7.el9_8.x86_64.rpm SHA-256: b37eb9c0e93d0a47166bb1e1717bb67d7666663c797f95d948e4b1cbea96191a Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM kpatch-patch-5_14_0-687_10_1-1-7.el9_8.src.rpm SHA-256: 70c42670959e763578ad12cf93b8536a4415359ac48d804be88b7ed5da721ad1 x86_64 kpatch-patch-5_14_0-687_10_1-1-7.el9_8.x86_64.rpm SHA-256: 7f16f02a12e5b6a205aeb3b58a3ea4a4e1c2a3be59b3c930fa3ebe6154ee870e kpatch-patch-5_14_0-687_10_1-debuginfo-1-7.el9_8.x86_64.rpm SHA-256: a4256eafa9a6de1a53f2258a0e6881b1de74d67adda258cfb9715e2b3bf4e9d6 kpatch-patch-5_14_0-687_10_1-debugsource-1-7.el9_8.x86_64.rpm SHA-256: b37eb9c0e93d0a47166bb1e1717bb67d7666663c797f95d948e4b1cbea96191a Red Hat Enterprise Linux for Power, little endian 9 SRPM kpatch-patch-5_14_0-687_10_1-1-7.el9_8.src.rpm SHA-256: 70c42670959e763578ad12cf93b8536a4415359ac48d804be88b7ed5da721ad1 ppc64le kpatch-patch-5_14_0-687_10_1-1-7.el9_8.ppc64le.rpm SHA-256: 3b7e3c1306c111c361ac13d9d846b7b2ffe6152e1d2af9c6a361cc05431b3b66 kpatch-patch-5_14_0-687_10_1-debuginfo-1-7.el9_8.ppc64le.rpm SHA-256: 693812e7c55a096161a0b192cfb7ff513751824a945ccae66d19308be15118ee kpatch-patch-5_14_0-687_10_1-debugsource-1-7.el9_8.ppc64le.rpm SHA-256: b964b6f34cf1e7423865391a9ebb9e45884a5e565c08d997ef423524dbbd64a2 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM kpatch-patch-5_14_0-687_10_1-1-7.el9_8.src.rpm SHA-256: 70c42670959e763578ad12cf93b8536a4415359ac48d804be88b7ed5da721ad1 ppc64le kpatch-patch-5_14_0-687_10_1-1-7.el9_8.ppc64le.rpm SHA-256: 3b7e3c1306c111c361ac13d9d846b7b2ffe6152e1d2af9c6a361cc05431b3b66 kpatch-patch-5_14_0-687_10_1-debuginfo-1-7.el9_8.ppc64le.rpm SHA-256: 693812e7c55a096161a0b192cfb7ff513751824a945ccae66d19308be15118ee kpatch-patch-5_14_0-687_10_1-debugsource-1-7.el9_8.ppc64le.rpm SHA-256: b964b6f34cf1e7423865391a9ebb9e45884a5e565c08d997ef423524dbbd64a2 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM kpatch-patch-5_14_0-687_10_1-1-7.el9_8.src.rpm SHA-256: 70c42670959e763578ad12cf93b8536a4415359ac48d804be88b7ed5da721ad1 ppc64le kpatch-patch-5_14_0-687_10_1-1-7.el9_8.ppc64le.rpm SHA-256: 3b7e3c1306c111c361ac13d9d846b7b2ffe6152e1d2af9c6a361cc05431b3b66 kpatch-patch-5_14_0-687_10_1-debuginfo-1-7.el9_8.ppc64le.rpm SHA-256: 693812e7c55a096161a0b192cfb7ff513751824a945ccae66d19308be15118ee kpatch-patch-5_14_0-687_10_1-debugsource-1-7.el9_8.ppc64le.rpm SHA-256: b964b6f34cf1e7423865391a9ebb9e45884a5e565c08d997ef423524dbbd64a2 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM kpatch-patch-5_14_0-687_10_1-1-7.el9_8.src.rpm SHA-256: 70c42670959e763578ad12cf93b8536a4415359ac48d804be88b7ed5da721ad1 x86_64 kpatch-patch-5_14_0-687_10_1-1-7.el9_8.x86_64.rpm SHA-256: 7f16f02a12e5b6a205aeb3b58a3ea4a4e1c2a3be59b3c930fa3ebe6154ee870e kpatch-patch-5_14_0-687_10_1-debuginfo-1-7.el9_8.x86_64.rpm SHA-256: a4256eafa9a6de1a53f2258a0e6881b1de74d67adda258cfb9715e2b3bf4e9d6 kpatch-patch-5_14_0-687_10_1-debugsource-1-7.el9_8.x86_64.rpm SHA-256: b37eb9c0e93d0a47166bb1e1717bb67d7666663c797f95d948e4b1cbea96191a Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 SRPM kpatch-patch-5_14_0-687_10_1-1-7.el9_8.src.rpm SHA-256: 70c42670959e763578ad12cf93b8536a4415359ac48d804be88b7ed5da721ad1 x86_64 kpatch-patch-5_14_0-687_10_1-1-7.el9_8.x86_64.rpm SHA-256: 7f16f02a12e5b6a205aeb3b58a3ea4a4e1c2a3be59b3c930fa3ebe6154ee870e kpatch-patch-5_14_0-687_10_1-debuginfo-1-7.el9_8.x86_64.rpm SHA-256: a4256eafa9a6de1a53f2258a0e6881b1de74d67adda258cfb9715e2b3bf4e9d6 kpatch-patch-5_14_0-687_10_1-debugsource-1-7.el9_8.x86_64.rpm SHA-256: b37eb9c0e93d0a47166bb1e1717bb67d7666663c797f95d948e4b1cbea96191a Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 SRPM kpatch-patch-5_14_0-687_10_1-1-7.el9_8.src.rpm SHA-256: 70c42670959e763578ad12cf93b8536a4415359ac48d804be88b7ed5da721ad1 ppc64le kpatch-patch-5_14_0-687_10_1-1-7.el9_8.ppc64le.rpm SHA-256: 3b7e3c1306c111c361ac13d9d846b7b2ffe6152e1d2af9c6a361cc05431b3b66 kpatch-patch-5_14_0-687_10_1-debuginfo-1-7.el9_8.ppc64le.rpm SHA-256: 693812e7c55a096161a0b192cfb7ff513751824a945ccae66d19308be15118ee kpatch-patch-5_14_0-687_10_1-debugsource-1-7.el9_8.ppc64le.rpm SHA-256: b964b6f34cf1e7423865391a9ebb9e45884a5e565c08d997ef423524dbbd64a2 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .