Red Hat Product Errata RHSA-2026:62641 - Security Advisory Issued: 2026-09-02 Updated: 2026-09-02 RHSA-2026:62641 - Security Advisory Overview Updated Packages Synopsis Important: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for multiple packages is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-570.17.1.el9_6. Security Fix(es): kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111) kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114) kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Fixes BZ - 2439687 - CVE-2026-23111 kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check BZ - 2466994 - CVE-2026-43114 kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry BZ - 2467015 - CVE-2026-43112 kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath BZ - 2479832 - CVE-2026-46323 kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs BZ - 2492851 - CVE-2026-53264 kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle CVEs CVE-2026-23111 CVE-2026-43112 CVE-2026-43114 CVE-2026-46323 CVE-2026-53264 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM kpatch-patch-5_14_0-570_116_1-1-9.el9_6.src.rpm SHA-256: cd399158828931318acbceb19089a8a96901991464c7c3ef44b8e6fb0601ccfe kpatch-patch-5_14_0-570_17_1-1-24.el9_6.src.rpm SHA-256: cadbfe50d36a4736d750d7fc92be08624fc583f11114c98b3b6b3b24a4d6ef69 kpatch-patch-5_14_0-570_39_1-1-15.el9_6.src.rpm SHA-256: cb2f87356cb735a791e545b8d15fab9d36f5b7f48c08d364418378856d114bb8 kpatch-patch-5_14_0-570_66_1-1-14.el9_6.src.rpm SHA-256: 0c6f606a036d250576c4bef50ae91c1a61883373c70a5023ef8c3b1789e2d950 kpatch-patch-5_14_0-570_94_1-1-12.el9_6.src.rpm SHA-256: ccd3fd9b8b04a79a33da828cccc7cf36f03bd5d4fa30566093004b649df084f1 x86_64 kpatch-patch-5_14_0-570_116_1-1-9.el9_6.x86_64.rpm SHA-256: 1c44bc0978fa0c79651bae678311ed737688ad1fb8d291164d47eb8f7f3c6737 kpatch-patch-5_14_0-570_116_1-debuginfo-1-9.el9_6.x86_64.rpm SHA-256: 47744bb2de7d7d24a0e8be713352aa0070ca4f08c68cca57e2ea672725c85735 kpatch-patch-5_14_0-570_116_1-debugsource-1-9.el9_6.x86_64.rpm SHA-256: f2429a224195b0f7a67f5ed527577a1fe022cc329078bdfab357ec18e1e88368 kpatch-patch-5_14_0-570_17_1-1-24.el9_6.x86_64.rpm SHA-256: 76aaf8696e1d5547e58a05af5b65fd5ee9b194296cf5528f0ca95b4163992348 kpatch-patch-5_14_0-570_17_1-debuginfo-1-24.el9_6.x86_64.rpm SHA-256: 846fd8315dceb761f3fb712ba774d8eb19885654fa7be883e38099328f4fba7b kpatch-patch-5_14_0-570_17_1-debugsource-1-24.el9_6.x86_64.rpm SHA-256: b561284fc0a33fc652722075f39cbbece831ff597bb170040ab2456d5944103e kpatch-patch-5_14_0-570_39_1-1-15.el9_6.x86_64.rpm SHA-256: 680b8131dff24bff66bd41d8119d834762dcdfef75be1c3634297202e9baa308 kpatch-patch-5_14_0-570_39_1-debuginfo-1-15.el9_6.x86_64.rpm SHA-256: c09cdc802ee23e4dac477ad8c88f98cac95cb9a338a34a731c5456bdfce678c0 kpatch-patch-5_14_0-570_39_1-debugsource-1-15.el9_6.x86_64.rpm SHA-256: fecdc2cb14bbbdc57aa27c2ef7eaafe53cc5509a61a5f23a021aa59b1555a4b2 kpatch-patch-5_14_0-570_66_1-1-14.el9_6.x86_64.rpm SHA-256: 277681409dba56aa6a508a60ee57b24ac7c10432d4f168b3588907da941cdcfa kpatch-patch-5_14_0-570_66_1-debuginfo-1-14.el9_6.x86_64.rpm SHA-256: 08c0ba3761eacf6c64b79e3a7a028cf1c056c6cd8b86e8fdd8aa3d3f760483f5 kpatch-patch-5_14_0-570_66_1-debugsource-1-14.el9_6.x86_64.rpm SHA-256: d188ae4330e1a256c0b2fbd20b9c0dc4eae402f01193a3ef17b4fd3360245929 kpatch-patch-5_14_0-570_94_1-1-12.el9_6.x86_64.rpm SHA-256: a28e29ea0186c54579f04b6e2f6c01acaa1501759e27c4096e9b58913079aded kpatch-patch-5_14_0-570_94_1-debuginfo-1-12.el9_6.x86_64.rpm SHA-256: a504737d7a2450a7633572e12bc64390d4f16a08fae89ac70fc4f0f3818ea723 kpatch-patch-5_14_0-570_94_1-debugsource-1-12.el9_6.x86_64.rpm SHA-256: 9f26d2222a8fa1b0513cc67ba4990df6e9079d862c2bad32e22b3dafa889dd14 Red Hat Enterprise Linux Server - AUS 9.6 SRPM kpatch-patch-5_14_0-570_116_1-1-9.el9_6.src.rpm SHA-256: cd399158828931318acbceb19089a8a96901991464c7c3ef44b8e6fb0601ccfe kpatch-patch-5_14_0-570_17_1-1-24.el9_6.src.rpm SHA-256: cadbfe50d36a4736d750d7fc92be08624fc583f11114c98b3b6b3b24a4d6ef69 kpatch-patch-5_14_0-570_39_1-1-15.el9_6.src.rpm SHA-256: cb2f87356cb735a791e545b8d15fab9d36f5b7f48c08d364418378856d114bb8 kpatch-patch-5_14_0-570_66_1-1-14.el9_6.src.rpm SHA-256: 0c6f606a036d250576c4bef50ae91c1a61883373c70a5023ef8c3b1789e2d950 kpatch-patch-5_14_0-570_94_1-1-12.el9_6.src.rpm SHA-256: ccd3fd9b8b04a79a33da828cccc7cf36f03bd5d4fa30566093004b649df084f1 x86_64 kpatch-patch-5_14_0-570_116_1-1-9.el9_6.x86_64.rpm SHA-256: 1c44bc0978fa0c79651bae678311ed737688ad1fb8d291164d47eb8f7f3c6737 kpatch-patch-5_14_0-570_116_1-debuginfo-1-9.el9_6.x86_64.rpm SHA-256: 47744bb2de7d7d24a0e8be713352aa0070ca4f08c68cca57e2ea672725c85735 kpatch-patch-5_14_0-570_116_1-debugsource-1-9.el9_6.x86_64.rpm SHA-256: f2429a224195b0f7a67f5ed527577a1fe022cc329078bdfab357ec18e1e88368 kpatch-patch-5_14_0-570_17_1-1-24.el9_6.x86_64.rpm SHA-256: 76aaf8696e1d5547e58a05af5b65fd5ee9b194296cf5528f0ca95b4163992348 kpatch-patch-5_14_0-570_17_1-debuginfo-1-24.el9_6.x86_64.rpm SHA-256: 846fd8315dceb761f3fb712ba774d8eb19885654fa7be883e38099328f4fba7b kpatch-patch-5_14_0-570_17_1-debugsource-1-24.el9_6.x86_64.rpm SHA-256: b561284fc0a33fc652722075f39cbbece831ff597bb170040ab2456d5944103e kpatch-patch-5_14_0-570_39_1-1-15.el9_6.x86_64.rpm SHA-256: 680b8131dff24bff66bd41d8119d834762dcdfef75be1c3634297202e9baa308 kpatch-patch-5_14_0-570_39_1-debuginfo-1-15.el9_6.x86_64.rpm SHA-256: c09cdc802ee23e4dac477ad8c88f98cac95cb9a338a34a731c5456bdfce678c0 kpatch-patch-5_14_0-570_39_1-debugsource-1-15.el9_6.x86_64.rpm SHA-256: fecdc2cb14bbbdc57aa27c2ef7eaafe53cc5509a61a5f23a021aa59b1555a4b2 kpatch-patch-5_14_0-570_66_1-1-14.el9_6.x86_64.rpm SHA-256: 277681409dba56aa6a508a60ee57b24ac7c10432d4f168b3588907da941cdcfa kpatch-patch-5_14_0-570_66_1-debuginfo-1-14.el9_6.x86_64.rpm SHA-256: 08c0ba3761eacf6c64b79e3a7a028cf1c056c6cd8b86e8fdd8aa3d3f760483f5 kpatch-patch-5_14_0-570_66_1-debugsource-1-14.el9_6.x86_64.rpm SHA-256: d188ae4330e1a256c0b2fbd20b9c0dc4eae402f01193a3ef17b4fd3360245929 kpatch-patch-5_14_0-570_94_1-1-12.el9_6.x86_64.rpm SHA-256: a28e29ea0186c54579f04b6e2f6c01acaa1501759e27c4096e9b58913079aded kpatch-patch-5_14_0-570_94_1-debuginfo-1-12.el9_6.x86_64.rpm SHA-256: a504737d7a2450a7633572e12bc64390d4f16a08fae89ac70fc4f0f3818ea723 kpatch-patch-5_14_0-570_94_1-debugsource-1-12.el9_6.x86_64.rpm SHA-256: 9f26d2222a8fa1b0513cc67ba4990df6e9079d862c2bad32e22b3dafa889dd14 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM kpatch-patch-5_14_0-570_116_1-1-9.el9_6.src.rpm SHA-256: cd399158828931318acbceb19089a8a96901991464c7c3ef44b8e6fb0601ccfe kpatch-patch-5_14_0-570_17_1-1-24.el9_6.src.rpm SHA-256: cadbfe50d36a4736d750d7fc92be08624fc583f11114c98b3b6b3b24a4d6ef69 kpatch-patch-5_14_0-570_39_1-1-15.el9_6.src.rpm SHA-256: cb2f87356cb735a791e545b8d15fab9d36f5b7f48c08d364418378856d114bb8 kpatch-patch-5_14_0-570_66_1-1-14.el9_6.src.rpm SHA-256: 0c6f606a036d250576c4bef50ae91c1a61883373c70a5023ef8c3b1789e2d950 kpatch-patch-5_14_0-570_94_1-1-12.el9_6.src.rpm SHA-256: ccd3fd9b8b04a79a33da828cccc7cf36f03bd5d4fa30566093004b649df084f1 ppc64le kpatch-patch-5_14_0-570_116_1-1-9.el9_6.ppc64le.rpm SHA-256: b4ed9ce59a1c5b25055b3e63bc3b81eb1225a746b76400b9987c4affb173a077 kpatch-patch-5_14_0-570_116_1-debuginfo-1-9.el9_6.ppc64le.rpm SHA-256: 61e5d39503165fe66f1c5757bb883f174f12822833664df9b7297c384c1bb387 kpatch-patch-5_14_0-570_116_1-debugsource-1-9.el9_6.ppc64le.rpm SHA-256: e3a28bc6a77f43a7723466152f0cb7f95a641daecfd9091f723dbc6fcbc42bdd kpatch-patch-5_14_0-570_17_1-1-24.el9_6.ppc64le.rpm SHA-256: 13e3524b8a89f613277a81528cf62d2f983944e69e22cac4018109bcdaab0f9e kpatch-patch-5_14_0-570_17_1-debuginfo-1-24.el9_6.ppc64le.rpm SHA-256: 4