Red Hat Product Errata RHSA-2026:63538 - Security Advisory Issued: 2026-09-04 Updated: 2026-09-04 RHSA-2026:63538 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) Bug Fix(es) and Enhancement(s): [RHEL 7] : NULL pointer dereference in nft_rbtree_lookup (JIRA:RHEL-235483) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2517046 - CVE-2026-74480 kernel: net: bridge: stop fast-leave after deleting a port group CVEs CVE-2026-74480 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM kernel-3.10.0-1160.160.1.el7.src.rpm SHA-256: ffae88966f91ccb74bc554581cae0fc4b7da1cf846ba53d5d8be4c9eaed36133 x86_64 bpftool-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: f04db3acc6e3b68746964b3f19ea9f183f8c4cdc8c048a2339ba02ae6097d748 bpftool-debuginfo-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 78ee8cc6a36992899cdc0a1db472bde90db57c4cd7d91f64a7ef707503beb943 bpftool-debuginfo-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 78ee8cc6a36992899cdc0a1db472bde90db57c4cd7d91f64a7ef707503beb943 kernel-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: c54392da709de4740cf354262706dcea28970675f0efeabd3f4750b39ffa582e kernel-abi-whitelists-3.10.0-1160.160.1.el7.noarch.rpm SHA-256: 2d23380a272a80a54ad263400e290b3d3387683d3e9848f262ad9252c1df2a16 kernel-debug-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 54ad347b272aeb27d6884a1be31fca4abf4b8a9c9f9fa3c31c871e307f07bc4b kernel-debug-debuginfo-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 3858bba78f5f4daa9f94df71d2ced05aee12486d1da72c5a3492e8fd225e6ee9 kernel-debug-debuginfo-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 3858bba78f5f4daa9f94df71d2ced05aee12486d1da72c5a3492e8fd225e6ee9 kernel-debug-devel-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 4aa92589a5845ce612d6d26156e02ad788bb38ca43e005d73c618af157d4dc73 kernel-debuginfo-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: c61c885ce2dae560fbae0eaeb3268e63409b6b901cf583aa24affbbd9add6240 kernel-debuginfo-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: c61c885ce2dae560fbae0eaeb3268e63409b6b901cf583aa24affbbd9add6240 kernel-debuginfo-common-x86_64-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: eaaea5d2c089fc9bc224557715004e2e6020a5bb1e908c7780c1c83db5d69283 kernel-debuginfo-common-x86_64-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: eaaea5d2c089fc9bc224557715004e2e6020a5bb1e908c7780c1c83db5d69283 kernel-devel-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: c096d7d8642d4c06181f0c80dfbf2909ab2f42a60c9976d9393d56c8c5626dae kernel-doc-3.10.0-1160.160.1.el7.noarch.rpm SHA-256: 97bd1bc2e0c0ce18edc1d16511bc71d7300ce015b166ba873f079dfcf81ad023 kernel-headers-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 5873065eeb77068044c3fd8ce0e6a274b0f61dc9e32934fbea156bff0535a411 kernel-tools-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 41336a6e73e50ea3a997dfa6673852082b7e35c0e68f9673e34e41704c1254f8 kernel-tools-debuginfo-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 3f0dfc374856f3e276bfa34a374d150857e8413cfc92dc093be231ca0bb9e6fc kernel-tools-debuginfo-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 3f0dfc374856f3e276bfa34a374d150857e8413cfc92dc093be231ca0bb9e6fc kernel-tools-libs-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 32e474176b3123969890440715debfcce9867758428d569f5f857fe778abd6b8 kernel-tools-libs-devel-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: d6a863bdd84b8d8bd5e3c332d09150fa4a85e4d138b9e45b427341373dbfe115 perf-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 3b9501117029e9eccd2541a4c92e3094edb64039abd83b9d74da425bf9125f65 perf-debuginfo-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: c3d4715208e208688848c22b7de5d9669f6ea9a762801f8b3ac20e6827c731d3 perf-debuginfo-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: c3d4715208e208688848c22b7de5d9669f6ea9a762801f8b3ac20e6827c731d3 python-perf-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: e5e409a21ca66a70ead60d1c754e6a6fc1a30e96a5e7df1dfc9397f84cf7cef1 python-perf-debuginfo-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 7d81c0d2291b53a9a0631be5b45e7f0e58583807d6cdf87e169f5f0bab678197 python-perf-debuginfo-3.10.0-1160.160.1.el7.x86_64.rpm SHA-256: 7d81c0d2291b53a9a0631be5b45e7f0e58583807d6cdf87e169f5f0bab678197 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM kernel-3.10.0-1160.160.1.el7.src.rpm SHA-256: ffae88966f91ccb74bc554581cae0fc4b7da1cf846ba53d5d8be4c9eaed36133 s390x bpftool-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: 491b5720d052296e02ec604c5dc0cbc26c8d89695d58c6a70e469db0d32808a3 bpftool-debuginfo-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: e7d9d3880e98d0e9bbdf2c84a94f87b2273beab0f9c3c7c1ffc828234f9f6931 kernel-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: 8b60c30c362f597f7c6b009ed55279c25c1dc9b518f2e652a0035d1bb3ffcbc9 kernel-abi-whitelists-3.10.0-1160.160.1.el7.noarch.rpm SHA-256: 2d23380a272a80a54ad263400e290b3d3387683d3e9848f262ad9252c1df2a16 kernel-debug-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: b839b49a64e3eab0740949d398a24f1e373ac5b82d00b531bc9bb1e14127b55b kernel-debug-debuginfo-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: 46b1af73a9ccc030601780c806e048ae532909931d5e2077ca4925213ed5e1ff kernel-debug-devel-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: 5548fc3e6c99ea4ab4832803e2ac62add2def2f909664ea643b2974d1242e0e8 kernel-debuginfo-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: e05fdf61ff1d70077d7c544afd65a021db56fd8d47e5553b479aba9c7f1442cb kernel-debuginfo-common-s390x-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: 5ec0c4acb427986324c66cf961bfb077689312cfe20a2e0db76538a59b95b930 kernel-devel-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: acecade37c3e5e078f7a924b110fe330eaab56637eea85802289f3bfa1043bff kernel-doc-3.10.0-1160.160.1.el7.noarch.rpm SHA-256: 97bd1bc2e0c0ce18edc1d16511bc71d7300ce015b166ba873f079dfcf81ad023 kernel-headers-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: 6daff088b4742d3059988aedfcd6d21ba0aaf7a563052491a4af38b7e008fbb1 kernel-kdump-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: 03add077800b9ec14532da63b355cafd38de461fb665e650dc3dfb99e220673f kernel-kdump-debuginfo-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: 6faf0c46f1d8dc0148b63e87c4b7be6cb048d755aac8a145a0b4b788c9d7738e kernel-kdump-devel-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: 24b3b7529d9d8d4a07bd4c8ee576899f6e0db9dc0d256055c2269a0c0b51fa38 perf-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: 44f5feb7da7681a99647269132bab6529d262031dcdd99ac2d7fa257c1b67b05 perf-debuginfo-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: d300e6001edc9fbf53da9fbfc22edf33d34329f4b1fae0c12aa401980245702c python-perf-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: d4e038074670e1808d7755a4af89a7e15101b2185a7097606835a8bb5a326aea python-perf-debuginfo-3.10.0-1160.160.1.el7.s390x.rpm SHA-256: 274c107dbfcd528f17aae2077e1ad84810aaf3d1c0445617ef8c85a7550b2f74 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM kernel-3.10.0-1160.160.1.el7.src.rpm SHA-256: ffae88966f91ccb74bc554581cae0fc4b7da1cf846ba53d5d8be4c9eaed36133 ppc64 bpftool-3.10.0-1160.160.1.el7.ppc64.rpm SHA-256: fc7a3262fd74cc7e2b0a73330cd34d667c074ef0ebd6ae928f0288a1cef84bd1 bpftool-debuginfo-3.10.0-1160.160.1.el7.ppc64.rpm SHA-256: e9186cc64a7ba2f2ff79d1a1373b05301fafc2a36706d23cc8e102d4fdaf4835 bpftool-debuginfo-3.10.0-1160.160.1.el7.ppc64.rpm SHA-256: e9186cc64a7ba2f2ff79d1a1373b05301fafc2a36706d23cc8e102d4fdaf4835 kernel-3.10.0-1160.160.1.el7.ppc64.rpm SHA-256: 7149c5de75424a5016c00457ed6e67cf6c9693b96d6d7d8f6e1b23c4fc2b6a5f kernel-abi-whitelists-3.10.0-1160.160.1.el7.noarch.rpm SHA-256: 2d23380a272a80a54ad263400e290b3d3387683d3e9848f262ad9252c1df2a16 kernel-bootwrapper-3.10.0-1160.160.1.el7.ppc64.rpm SHA-256: 355df97065f4c7c7fe5c4daf909e9c8559b1cf1f2e47e288af47473ea2250f1e kernel-debug-3.10.0-1160.160.1.el7.ppc64.rpm SHA-256: 6e6df980dd56ddf1c21335d4add565480dc70fa82cefccd87031ebdbf5b8d859 kernel-debug-debuginfo-3.10.0-1160.160.1.el7.