Red Hat Product Errata RHSA-2026:62609 - Security Advisory Issued: 2026-09-02 Updated: 2026-09-02 RHSA-2026:62609 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: fanotify: fix false positive on permission events (CVE-2026-46150) kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120) kernel: af_unix: Set gc_in_progress to true in unix_gc() (CVE-2026-53361) kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002) kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) kernel: packet: use consistent hard_header_len in non-ring send paths () kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581) Bug Fix(es) and Enhancement(s): [kABI] protect struct alt_instr [rhel-10.0] (JIRA:RHEL-122758) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2482612 - CVE-2026-46150 kernel: fanotify: fix false positive on permission events BZ - 2482614 - CVE-2026-46120 kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() BZ - 2497035 - CVE-2026-53361 kernel: af_unix: Set gc_in_progress to true in unix_gc() BZ - 2502363 - CVE-2026-64002 kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() BZ - 2517046 - CVE-2026-74480 kernel: net: bridge: stop fast-leave after deleting a port group BZ - 2519475 - kernel: packet: use consistent hard_header_len in non-ring send paths BZ - 2520980 - CVE-2026-74581 kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer CVEs CVE-2026-46120 CVE-2026-46150 CVE-2026-53361 CVE-2026-64002 CVE-2026-74480 CVE-2026-74581 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM kernel-6.12.0-55.102.1.el10_0.src.rpm SHA-256: 92f6d6c0d499af7fc9961bf9095df455011507ab268baffd8d8a1ae8077ab1f3 x86_64 kernel-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 7e15592c1401993c665309fc187f6077ea66236f8dbdcd1138cb087813a537db kernel-abi-stablelists-6.12.0-55.102.1.el10_0.noarch.rpm SHA-256: 61d9064a89355bedb46423420d9a32b920f83e8a47ae14c64a87845a6f3f6c40 kernel-core-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: d2443b6dcf238db8dc2219947258f057cdcca43c384f67acdb15dbc94aa55e7a kernel-debug-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 916c45ff5e6581595c72fa2cd56677f2d878430ae1da823b2d7198a33593e6ce kernel-debug-core-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 3d76ee7f193a5bd109cace9d84f6b0443c1108f343b08236fa5d638fa7c4987b kernel-debug-debuginfo-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: c89b18b55857e76a118c342228eef5235a9b54438cd40bcd42b2be9940a875ec kernel-debug-debuginfo-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: c89b18b55857e76a118c342228eef5235a9b54438cd40bcd42b2be9940a875ec kernel-debug-debuginfo-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: c89b18b55857e76a118c342228eef5235a9b54438cd40bcd42b2be9940a875ec kernel-debug-debuginfo-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: c89b18b55857e76a118c342228eef5235a9b54438cd40bcd42b2be9940a875ec kernel-debug-devel-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: ef885986e8270a51a0a085ead654005ff6b0d6a10e2520037c02bdea6d9e6894 kernel-debug-devel-matched-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 85886f17be558d3f19b584c763a1cc63fd2570be98e79207831e434731cedd23 kernel-debug-modules-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: bcdfb7f81d7b469ef8bccdc8b616d2942e6325ffc801d5bc3b49da572cbdcdf9 kernel-debug-modules-core-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 993625ab3a70015e54d33f8e6e27b6885af089bf2b8d922938d91da1db08791e kernel-debug-modules-extra-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 82e20a3471ba7cfd7f34e8c0f0bbaed58fe0483c14b392e1cadf3a71c4462e86 kernel-debug-uki-virt-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 7022830aff0cf68741e9fd5f231962fd5a8c3c779ada98320e2efe2fa229d64d kernel-debuginfo-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 3526aed7549bae1c2d270dd2e9bd501105061dbdd02a759de82363ac7a2e0caa kernel-debuginfo-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 3526aed7549bae1c2d270dd2e9bd501105061dbdd02a759de82363ac7a2e0caa kernel-debuginfo-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 3526aed7549bae1c2d270dd2e9bd501105061dbdd02a759de82363ac7a2e0caa kernel-debuginfo-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 3526aed7549bae1c2d270dd2e9bd501105061dbdd02a759de82363ac7a2e0caa kernel-debuginfo-common-x86_64-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: b74ce8247a2a95fec59c411379cb5affdc197c1abfb918770650230a9f4e9aa2 kernel-debuginfo-common-x86_64-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: b74ce8247a2a95fec59c411379cb5affdc197c1abfb918770650230a9f4e9aa2 kernel-debuginfo-common-x86_64-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: b74ce8247a2a95fec59c411379cb5affdc197c1abfb918770650230a9f4e9aa2 kernel-debuginfo-common-x86_64-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: b74ce8247a2a95fec59c411379cb5affdc197c1abfb918770650230a9f4e9aa2 kernel-devel-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 4f03b70bac898b0c4179e21507d7d0ab62fc08691dda2e321e25fbcc6e268cfc kernel-devel-matched-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 03aec0419d3d29e69fed2867c2cb1933352c00ed5ef21ac2624fbecb4199965f kernel-doc-6.12.0-55.102.1.el10_0.noarch.rpm SHA-256: 41d86c5e801b1a7655506c495ef0bf5a6c462a02a3303e9885eab12447830ee1 kernel-headers-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 881094167c405505181180f8bcc49a3d9e0fe4737437ff7f0d0a8fdf0341b523 kernel-modules-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 32b078befc573ef2568011a68253bedf5119473c83e6cc88606f065f329f8bc4 kernel-modules-core-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 37cca0861739845d983b63e488f4b4971e3175b71946ffd78486a6be8cfd9b38 kernel-modules-extra-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: d53cbcc5b59a7de25f1322d3a9faf299f9e96de560301ed97836fb3a71c1259f kernel-rt-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 3721566f937c4ad813775c48567d95962930a242b4e86230ad7f1ef38f92d732 kernel-rt-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 3721566f937c4ad813775c48567d95962930a242b4e86230ad7f1ef38f92d732 kernel-rt-core-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 1fc398e3011e74f4b32ca52dbc5d007a39c06481d5b24984ed89c4e12438f316 kernel-rt-core-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 1fc398e3011e74f4b32ca52dbc5d007a39c06481d5b24984ed89c4e12438f316 kernel-rt-debug-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 2734496b3c4fcb1b7cba31cab9963d808789378b57c5cec9740b925d2251b931 kernel-rt-debug-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: 2734496b3c4fcb1b7cba31cab9963d808789378b57c5cec9740b925d2251b931 kernel-rt-debug-core-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: bad9dc25028a08689c429e4c7af07a23008005fa80d8381e7ccd35676ceea99d kernel-rt-debug-core-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: bad9dc25028a08689c429e4c7af07a23008005fa80d8381e7ccd35676ceea99d kernel-rt-debug-debuginfo-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: ce01e6b072b502e756a97eebaccbd20f5cac72ede798c35c66b668f0666867a1 kernel-rt-debug-debuginfo-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: ce01e6b072b502e756a97eebaccbd20f5cac72ede798c35c66b668f0666867a1 kernel-rt-debug-debuginfo-6.12.0-55.102.1.el10_0.x86_64.rpm SHA-256: ce01e6b072b502e756a97eebaccbd20f5cac72ede798c3