Red Hat Product Errata RHSA-2026:59148 - Security Advisory Issued: 2026-08-24 Updated: 2026-08-24 RHSA-2026:59148 - Security Advisory Overview Updated Packages Synopsis Important: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for multiple packages is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-570.17.1.el9_6. Security Fix(es): kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Fixes BZ - 2480453 - CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() BZ - 2481922 - CVE-2026-45984 kernel: gfs2: Fix use-after-free in iomap inline data write path BZ - 2482523 - CVE-2026-46116 kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete BZ - 2482564 - CVE-2026-46227 kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL CVEs CVE-2026-43499 CVE-2026-45984 CVE-2026-46116 CVE-2026-46227 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM kpatch-patch-5_14_0-570_116_1-1-8.el9_6.src.rpm SHA-256: 9cbde3caa5654a09e0a4eb67d938b41dd7723b828e54c7f9aaee6bdc6895b5ef kpatch-patch-5_14_0-570_17_1-1-23.el9_6.src.rpm SHA-256: 46a3b9d5200d020a010c0bc06f29962904680a1119b8958ef037a2327cee0127 kpatch-patch-5_14_0-570_39_1-1-14.el9_6.src.rpm SHA-256: daa1cf8916c9c46e6714ec073a756ad133ad926889cde1875ea455c1302a48ea kpatch-patch-5_14_0-570_66_1-1-13.el9_6.src.rpm SHA-256: 763c3587f3d0608b2ad34fb6999655ff6463b8dab7a8c7809e29262a9dc10891 kpatch-patch-5_14_0-570_94_1-1-11.el9_6.src.rpm SHA-256: b37c0ac362742a40e03710c22f25974f84abfaaf725d0783d84373a496e90b41 x86_64 kpatch-patch-5_14_0-570_116_1-1-8.el9_6.x86_64.rpm SHA-256: 5d9e504fc8a02fdf189bb813b35765934f3a483e950314321fcef27d0da714b9 kpatch-patch-5_14_0-570_116_1-debuginfo-1-8.el9_6.x86_64.rpm SHA-256: 9dd8ff5c24334d35033fab59de5ea8a6365f445a1db5098d6ed695d5c137661d kpatch-patch-5_14_0-570_116_1-debugsource-1-8.el9_6.x86_64.rpm SHA-256: f3b6eed2628f95d73a8a4b61d887e055a331b7e0a662500ba01d40850fa5505d kpatch-patch-5_14_0-570_17_1-1-23.el9_6.x86_64.rpm SHA-256: 32c84897666b1361a952b371d57033cbc0ff4180313ae47ecdaf1c7c120989fb kpatch-patch-5_14_0-570_17_1-debuginfo-1-23.el9_6.x86_64.rpm SHA-256: 6dc49dd93790b5ab8a599537caa2e27660bc6f51673b124b480f153c112712f6 kpatch-patch-5_14_0-570_17_1-debugsource-1-23.el9_6.x86_64.rpm SHA-256: d75a2207bf4dfc88e091d410518eb330f9050e1303dd110d5079b171ee3b19a8 kpatch-patch-5_14_0-570_39_1-1-14.el9_6.x86_64.rpm SHA-256: d1956082a17e5d2ee0e3679a483381692ac6349565594353bf7c857e5a07c812 kpatch-patch-5_14_0-570_39_1-debuginfo-1-14.el9_6.x86_64.rpm SHA-256: 0d6643849e8924e9960e7ebd641130e11e3a8326e1cef90c743fcd697fde11fb kpatch-patch-5_14_0-570_39_1-debugsource-1-14.el9_6.x86_64.rpm SHA-256: 53d218841723ecfc3a55b7588ec912780ad9775023f98ddec9273e0704d867fa kpatch-patch-5_14_0-570_66_1-1-13.el9_6.x86_64.rpm SHA-256: 74f8e3c99985482b74129600bff02c04d5472f157b4753c418fbeacbb1410001 kpatch-patch-5_14_0-570_66_1-debuginfo-1-13.el9_6.x86_64.rpm SHA-256: 9861466b7639b0fdc318cf68c65c867b997064360243c23979e810c50ae1e72f kpatch-patch-5_14_0-570_66_1-debugsource-1-13.el9_6.x86_64.rpm SHA-256: 7d5a11e33c1f5dcee2367ab51219b57cedf023377069ec82dc001397c0db36b1 kpatch-patch-5_14_0-570_94_1-1-11.el9_6.x86_64.rpm SHA-256: 17c5a20c0c96c3451dda8baedbf19eed57da499d380c8f84f196b299f2f2443c kpatch-patch-5_14_0-570_94_1-debuginfo-1-11.el9_6.x86_64.rpm SHA-256: 4b112ae45aa735d6017485bfbda2056cd39f02a6a964d00f08f3ee0352b0bf86 kpatch-patch-5_14_0-570_94_1-debugsource-1-11.el9_6.x86_64.rpm SHA-256: 987775c860e18d6a2673db28924a032f4aa61036b129d73744c7c0b8fbd0eb69 Red Hat Enterprise Linux Server - AUS 9.6 SRPM kpatch-patch-5_14_0-570_116_1-1-8.el9_6.src.rpm SHA-256: 9cbde3caa5654a09e0a4eb67d938b41dd7723b828e54c7f9aaee6bdc6895b5ef kpatch-patch-5_14_0-570_17_1-1-23.el9_6.src.rpm SHA-256: 46a3b9d5200d020a010c0bc06f29962904680a1119b8958ef037a2327cee0127 kpatch-patch-5_14_0-570_39_1-1-14.el9_6.src.rpm SHA-256: daa1cf8916c9c46e6714ec073a756ad133ad926889cde1875ea455c1302a48ea kpatch-patch-5_14_0-570_66_1-1-13.el9_6.src.rpm SHA-256: 763c3587f3d0608b2ad34fb6999655ff6463b8dab7a8c7809e29262a9dc10891 kpatch-patch-5_14_0-570_94_1-1-11.el9_6.src.rpm SHA-256: b37c0ac362742a40e03710c22f25974f84abfaaf725d0783d84373a496e90b41 x86_64 kpatch-patch-5_14_0-570_116_1-1-8.el9_6.x86_64.rpm SHA-256: 5d9e504fc8a02fdf189bb813b35765934f3a483e950314321fcef27d0da714b9 kpatch-patch-5_14_0-570_116_1-debuginfo-1-8.el9_6.x86_64.rpm SHA-256: 9dd8ff5c24334d35033fab59de5ea8a6365f445a1db5098d6ed695d5c137661d kpatch-patch-5_14_0-570_116_1-debugsource-1-8.el9_6.x86_64.rpm SHA-256: f3b6eed2628f95d73a8a4b61d887e055a331b7e0a662500ba01d40850fa5505d kpatch-patch-5_14_0-570_17_1-1-23.el9_6.x86_64.rpm SHA-256: 32c84897666b1361a952b371d57033cbc0ff4180313ae47ecdaf1c7c120989fb kpatch-patch-5_14_0-570_17_1-debuginfo-1-23.el9_6.x86_64.rpm SHA-256: 6dc49dd93790b5ab8a599537caa2e27660bc6f51673b124b480f153c112712f6 kpatch-patch-5_14_0-570_17_1-debugsource-1-23.el9_6.x86_64.rpm SHA-256: d75a2207bf4dfc88e091d410518eb330f9050e1303dd110d5079b171ee3b19a8 kpatch-patch-5_14_0-570_39_1-1-14.el9_6.x86_64.rpm SHA-256: d1956082a17e5d2ee0e3679a483381692ac6349565594353bf7c857e5a07c812 kpatch-patch-5_14_0-570_39_1-debuginfo-1-14.el9_6.x86_64.rpm SHA-256: 0d6643849e8924e9960e7ebd641130e11e3a8326e1cef90c743fcd697fde11fb kpatch-patch-5_14_0-570_39_1-debugsource-1-14.el9_6.x86_64.rpm SHA-256: 53d218841723ecfc3a55b7588ec912780ad9775023f98ddec9273e0704d867fa kpatch-patch-5_14_0-570_66_1-1-13.el9_6.x86_64.rpm SHA-256: 74f8e3c99985482b74129600bff02c04d5472f157b4753c418fbeacbb1410001 kpatch-patch-5_14_0-570_66_1-debuginfo-1-13.el9_6.x86_64.rpm SHA-256: 9861466b7639b0fdc318cf68c65c867b997064360243c23979e810c50ae1e72f kpatch-patch-5_14_0-570_66_1-debugsource-1-13.el9_6.x86_64.rpm SHA-256: 7d5a11e33c1f5dcee2367ab51219b57cedf023377069ec82dc001397c0db36b1 kpatch-patch-5_14_0-570_94_1-1-11.el9_6.x86_64.rpm SHA-256: 17c5a20c0c96c3451dda8baedbf19eed57da499d380c8f84f196b299f2f2443c kpatch-patch-5_14_0-570_94_1-debuginfo-1-11.el9_6.x86_64.rpm SHA-256: 4b112ae45aa735d6017485bfbda2056cd39f02a6a964d00f08f3ee0352b0bf86 kpatch-patch-5_14_0-570_94_1-debugsource-1-11.el9_6.x86_64.rpm SHA-256: 987775c860e18d6a2673db28924a032f4aa61036b129d73744c7c0b8fbd0eb69 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM kpatch-patch-5_14_0-570_116_1-1-8.el9_6.src.rpm SHA-256: 9cbde3caa5654a09e0a4eb67d938b41dd7723b828e54c7f9aaee6bdc6895b5ef kpatch-patch-5_14_0-570_17_1-1-23.el9_6.src.rpm SHA-256: 46a3b9d5200d020a010c0bc06f29962904680a1119b8958ef037a2327cee0127 kpatch-patch-5_14_0-570_39_1-1-14.el9_6.src.rpm SHA-256: daa1cf8916c9c46e6714ec073a756ad133ad926889cde1875ea455c1302a48ea kpatch-patch-5_14_0-570_66_1-1-13.el9_6.src.rpm SHA-256: 763c3587f3d0608b2ad34fb6999655ff6463b8dab7a8c7809e29262a9dc10891 kpatch-patch-5_14_0-570_94_1-1-11.el9_6.src.rpm SHA-256: b37c0ac362742a40e03710c22f25974f84abfaaf725d0783d84373a496e90b41 ppc64le kpatch-patch-5_14_0-570_116_1-1-8.el9_6.ppc64le.rpm SHA-256: f63203a83a0e83357039807dfc290181fa96f6edf038e629eb685e3d94514cc7 kpatch-patch-5_14_0-570_116_1-debuginfo-1-8.el9_6.ppc64le.rpm SHA-256: e7bdefe13a843ba888c90e3d171979c99b65e7d009d0c2aca7fb5e345e43ea23 kpatch-patch-5_14_0-570_116_1-debugsource-1-8.el9_6.ppc64le.rpm SHA-256: 88f16f73c03a6a352feb820443d6e7104e2a3ef562b9d283dddcae916c4c1044 kpatch-patch-5_14_0-570_17_1-1-23.el9_6.ppc64le.rpm SHA-256: 97c53d3fcb44cf8d5e357b33a4acb6127bce6ac3148bbbe599d48d060d24b06e kpatch-patch-5_14_0-570_17_1-debuginfo-1-23.el9_6.ppc64le.rpm SHA-256: fa5ee737dc5aff02c09fbf8944365338aa9918701af95fc26eb9785eb70cad8a kpatch-patch-5_14_0-570_17_1-debugsource-1-23.el9_6.ppc64le.rpm SHA-256: a4fed2a9621e56c810c592516da676aad53acd2b588a3d8534749c5ff3b0b76f kpatch-patch-5_14_0-570_39_1-1-14.el9_6.ppc64le.rpm SHA-256: 9d6025b657ec9a7ba7056c690c70859e2587ac7dca58ee0fd92fac6f1d4c1c7c kpatch-p