Red Hat Product Errata RHSA-2026:59145 - Security Advisory Issued: 2026-08-24 Updated: 2026-08-24 RHSA-2026:59145 - Security Advisory Overview Updated Packages Synopsis Important: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-427.68.2.el9_4. Security Fix(es): kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Fixes BZ - 2480453 - CVE-2026-43499 kernel: rtmutex: Use waiter::task instead of current in remove_waiter() BZ - 2481922 - CVE-2026-45984 kernel: gfs2: Fix use-after-free in iomap inline data write path BZ - 2482523 - CVE-2026-46116 kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete BZ - 2482564 - CVE-2026-46227 kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL BZ - 2507402 - CVE-2026-64531 kernel: net: openvswitch: reject oversized nested action attrs CVEs CVE-2026-43499 CVE-2026-45984 CVE-2026-46116 CVE-2026-46227 CVE-2026-64531 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM kpatch-patch-5_14_0-427_100_1-1-13.el9_4.src.rpm SHA-256: bab9e6b4ffad5c63500b7b1fc3512849f4485c31f305fd4504049b3441782184 kpatch-patch-5_14_0-427_113_1-1-11.el9_4.src.rpm SHA-256: 6cf18b95bb5abb7504278a80bf771d65e9de91739eb9a8d6c6c3490050f0683c kpatch-patch-5_14_0-427_126_1-1-8.el9_4.src.rpm SHA-256: 71acb184d6525b4539477c4c5d0006c38473d1fbcbab47ef6e434d9fb8829328 kpatch-patch-5_14_0-427_68_2-1-20.el9_4.src.rpm SHA-256: 727fc0c5924d71a6282a74b547273ef18e1756609482185fbec5f97070133baf kpatch-patch-5_14_0-427_84_1-1-15.el9_4.src.rpm SHA-256: dd984ddb1159ec58d598da7cb0a822b2e9bd3f74a54e08cdd1774ef218408de8 x86_64 kpatch-patch-5_14_0-427_100_1-1-13.el9_4.x86_64.rpm SHA-256: d457cc6a3638cf542b5c21e6c737095d76d002559a181667f3e146df19a90453 kpatch-patch-5_14_0-427_100_1-debuginfo-1-13.el9_4.x86_64.rpm SHA-256: 6f08246a5564ba7ce149c33f8fb362a0319ce1d459f47134f82a0b79112018c0 kpatch-patch-5_14_0-427_100_1-debugsource-1-13.el9_4.x86_64.rpm SHA-256: 4b8bd92d2cd03ec4d9a56f9bc03a488c5de2676933f82dcc67d3551a120554f9 kpatch-patch-5_14_0-427_113_1-1-11.el9_4.x86_64.rpm SHA-256: e37796980e15fa6932c0d4dd366a844c4e6f2ea45f3f84188bd4f8f7ec37acee kpatch-patch-5_14_0-427_113_1-debuginfo-1-11.el9_4.x86_64.rpm SHA-256: 9b1fe181bdc0079184ab03759ec9b095344774fc7b6db964d0f170200cafedf3 kpatch-patch-5_14_0-427_113_1-debugsource-1-11.el9_4.x86_64.rpm SHA-256: 7d240fa0b84f0d9be8c3a1f33c82b296ea4da663b91999c5d34e1cc0f5ab2cc6 kpatch-patch-5_14_0-427_126_1-1-8.el9_4.x86_64.rpm SHA-256: 6103b1ebc321ed7f3a3f26c4527d4de3932290bdd630e351898078c9bc4f767a kpatch-patch-5_14_0-427_126_1-debuginfo-1-8.el9_4.x86_64.rpm SHA-256: 2b62667b4153633d2f97668fb89c9c2f99316c91bfe4dfe6960f617629ec752f kpatch-patch-5_14_0-427_126_1-debugsource-1-8.el9_4.x86_64.rpm SHA-256: 9f87f0f8668b99b4afef12e4f956773fceac1df4a603dce435699eea6c90ec3b kpatch-patch-5_14_0-427_68_2-1-20.el9_4.x86_64.rpm SHA-256: d6ecea607cc37539a691fc1deb4e3ca7ae77921e775d07535aeefa3fa0d9f793 kpatch-patch-5_14_0-427_68_2-debuginfo-1-20.el9_4.x86_64.rpm SHA-256: 9ef80b481619ba21f182379dbd32aa931df5c93906cbf03c341621df53508d58 kpatch-patch-5_14_0-427_68_2-debugsource-1-20.el9_4.x86_64.rpm SHA-256: 2f4ddffa06317f8cd7b971a86eb4f0d0fc19376d8a4e07d633ec9da4ed79963b kpatch-patch-5_14_0-427_84_1-1-15.el9_4.x86_64.rpm SHA-256: e0acdef3175ec796f643bf6798c4a61d55ae53e40aad852650b5f21a0e83a6b6 kpatch-patch-5_14_0-427_84_1-debuginfo-1-15.el9_4.x86_64.rpm SHA-256: 63ec6575883b5f586aff12788185a34faa4c07de8246d5ebda910e0970e48ac5 kpatch-patch-5_14_0-427_84_1-debugsource-1-15.el9_4.x86_64.rpm SHA-256: a21186a7d141c353809f98c6249e4cd01c5f94270ee9714e00cbd9ce72c97875 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM kpatch-patch-5_14_0-427_100_1-1-13.el9_4.src.rpm SHA-256: bab9e6b4ffad5c63500b7b1fc3512849f4485c31f305fd4504049b3441782184 kpatch-patch-5_14_0-427_113_1-1-11.el9_4.src.rpm SHA-256: 6cf18b95bb5abb7504278a80bf771d65e9de91739eb9a8d6c6c3490050f0683c kpatch-patch-5_14_0-427_126_1-1-8.el9_4.src.rpm SHA-256: 71acb184d6525b4539477c4c5d0006c38473d1fbcbab47ef6e434d9fb8829328 kpatch-patch-5_14_0-427_68_2-1-20.el9_4.src.rpm SHA-256: 727fc0c5924d71a6282a74b547273ef18e1756609482185fbec5f97070133baf kpatch-patch-5_14_0-427_84_1-1-15.el9_4.src.rpm SHA-256: dd984ddb1159ec58d598da7cb0a822b2e9bd3f74a54e08cdd1774ef218408de8 ppc64le kpatch-patch-5_14_0-427_100_1-1-13.el9_4.ppc64le.rpm SHA-256: 81f15c1c3b2c1e550c5c3ce9c78b93f361145b87d995aaceac5753c8e5b5012c kpatch-patch-5_14_0-427_100_1-debuginfo-1-13.el9_4.ppc64le.rpm SHA-256: da0c920b30fec1e9fba793dd05aa231c2c1a218543169e6ffde224c60712ae4b kpatch-patch-5_14_0-427_100_1-debugsource-1-13.el9_4.ppc64le.rpm SHA-256: d45219d5b57d465739af81f142a4aca1af71e2888601e3eb4fd8a41d253095dc kpatch-patch-5_14_0-427_113_1-1-11.el9_4.ppc64le.rpm SHA-256: b207d859bab4fe8e5b9baa5dd7750c25aabd11456da1aa53a62d9843c32d78e3 kpatch-patch-5_14_0-427_113_1-debuginfo-1-11.el9_4.ppc64le.rpm SHA-256: a1d7548c4272f4b990c0fee4ddefea384d23e5986d4fc97ac6c649336149aa8a kpatch-patch-5_14_0-427_113_1-debugsource-1-11.el9_4.ppc64le.rpm SHA-256: 34121d9cbd0ca019fec741149b071086a8823a28adde10bd431567609bfb07bf kpatch-patch-5_14_0-427_126_1-1-8.el9_4.ppc64le.rpm SHA-256: 350d39b86c8ec278acd44550077f40d9f2450dd9e0156d03a2c2006b4645d6f3 kpatch-patch-5_14_0-427_126_1-debuginfo-1-8.el9_4.ppc64le.rpm SHA-256: 78907e3875c6d6ccb44e21700d96287657eea1dd452c8cd9a0f7846c588f9d2c kpatch-patch-5_14_0-427_126_1-debugsource-1-8.el9_4.ppc64le.rpm SHA-256: 9727f240fbb96f855c878522e4d66f70426670c629ad7f4404a3d8c157886876 kpatch-patch-5_14_0-427_68_2-1-20.el9_4.ppc64le.rpm SHA-256: 8fe81feff432b59ce84bb0d81e0f22e9518109aef6ae238ee8b1cfa07ce7229f kpatch-patch-5_14_0-427_68_2-debuginfo-1-20.el9_4.ppc64le.rpm SHA-256: 7abc797dbb5aa5e0f4934241a4e00dbf4748b8c6381a8d3c391b76283b0f0da9 kpatch-patch-5_14_0-427_68_2-debugsource-1-20.el9_4.ppc64le.rpm SHA-256: 413879884af86ebdc873d038667be24753f26baaa8c90c8481a7a8337d6aedc2 kpatch-patch-5_14_0-427_84_1-1-15.el9_4.ppc64le.rpm SHA-256: f73427f1034f21e889feef4980791286382a9b918f37ce63bc741e187eecd59f kpatch-patch-5_14_0-427_84_1-debuginfo-1-15.el9_4.ppc64le.rpm SHA-256: 4c5de0d8b779be85d5035add1d297533eed36efb718d7acd26f4a58f0b52095a kpatch-patch-5_14_0-427_84_1-debugsource-1-15.el9_4.ppc64le.rpm SHA-256: 8f41a2cc31369a83d1f4a4ef0cf1651358da4b58b96bea4ee6f29a1e86ea689c Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM kpatch-patch-5_14_0-427_100_1-1-13.el9_4.src.rpm SHA-256: bab9e6b4ffad5c63500b7b1fc3512849f4485c31f305fd4504049b3441782184 kpatch-patch-5_14_0-427_113_1-1-11.el9_4.src.rpm SHA-256: 6cf18b95bb5abb7504278a80bf771d65e9de91739eb9a8d6c6c3490050f0683c kpatch-patch-5_14_0-427_126_1-1-8.el9_4.src.rpm SHA-256: 71acb184d6525b4539477c4c5d0006c38473d1fbcbab47ef6e434d9fb8829328 kpatch-patch-5_14_0-427_68_2-1-20.el9_4.src.rpm SHA-256: 727fc0c5924d71a6282a74b547273ef18e1756609482185fbec5f97070133baf kpatch-patch-5_14_0-427_84_1-1-15.el9_4.src.rpm SHA-256: dd984ddb1159ec58d598da7cb0a822b2e9bd3f74a54e08cdd1774ef218408de8 x86_64 kpatch-patch-5_14_0-427_100_1-1-13.el9_4.x86_64.rpm SHA-256: d457cc6a3638cf542b5c21e6c737095d76d002559a181667f3e146df19a90453 kpatch-patch-5_14_0-427_100_1-debuginfo-1-13.el9_4.x86_64.rpm SHA-256: 6f08246a5564ba7ce149c33f8fb362a0319ce1d459f47134f82a0b79112018c0 kpatch-patch-5_14_0-427_100_1-debugsource-1-13.el9_4.x86_64.rpm SHA-256: 4b8bd92d2cd03ec4d9a56f9bc03a488c5de2676933f82dcc67d3551a120554f9 kpatch-patch-5_14_0-427_113_1-1-11.el9_4.x86_64.rpm SHA-256: e37796980e15fa6932c0d4dd366a844c4e6f2ea45f3f84188bd4f8f7ec37acee kpatch-patch-5_14_0-427_113_1-debuginfo-1-11.el9_4.x86_64.rpm SHA-256: 9b1fe181bdc0079184ab03759ec9b095344774fc7b6db964d0f170200cafedf3 kpatch-patch-5_14_0-427_113_1-debugsource-1-11.el9_4.x86_64.rpm SHA-256: 7d240fa0b84f0d9be8c3a1f33c82b296ea4da663b91999c5d34e1cc0f5ab2cc6 kpatch-patch-5_14_0-427_126_1-1-8.el9_4.x86_64.