Red Hat Product Errata RHSA-2026:64767 - Security Advisory Issued: 2026-09-08 Updated: 2026-09-08 RHSA-2026:64767 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (CVE-2025-40149) kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114) kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886) kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304) Bug Fix(es) and Enhancement(s): Memory leak in metadata_dst leading to OOM [rhel-10.0.z] (JIRA:RHEL-125758) Kernel panic in cached_dir_offload_close [rhel-10.0.z] (JIRA:RHEL-128580) RHEL10.0 - s390/pci: Fix __pcilg_mio_inuser() inline assembly [rhel-10.0.z] (JIRA:RHEL-161485) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2414466 - CVE-2025-40149 kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() BZ - 2466994 - CVE-2026-43114 kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry BZ - 2481972 - CVE-2026-46099 kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels BZ - 2482181 - CVE-2026-46056 kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers BZ - 2482581 - CVE-2026-46145 kernel: RDMA/mana: Validate rx_hash_key_len BZ - 2482660 - CVE-2026-46155 kernel: smb/client: fix out-of-bounds read in smb2_compound_op() BZ - 2492269 - CVE-2026-53016 kernel: crypto: ccp - copy IV using skcipher ivsize BZ - 2492363 - CVE-2026-53006 kernel: ipv6: fix possible UAF in icmpv6_rcv() BZ - 2502329 - CVE-2026-63886 kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode BZ - 2507119 - CVE-2026-64304 kernel: crypto: qat - validate RSA CRT component lengths CVEs CVE-2025-40149 CVE-2026-43114 CVE-2026-46056 CVE-2026-46099 CVE-2026-46145 CVE-2026-46155 CVE-2026-53006 CVE-2026-53016 CVE-2026-63886 CVE-2026-64304 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM kernel-6.12.0-55.103.1.el10_0.src.rpm SHA-256: 195f2a345beeec653d4087c905be0429e706ede9bc403600f35c2429eadab920 x86_64 kernel-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: fe69b05243f43818576df0d4e87588c3bca22e2797858a9c8a4f34f1e480129c kernel-abi-stablelists-6.12.0-55.103.1.el10_0.noarch.rpm SHA-256: 22008004e563d0f4f6c5615f5fa48ade8a2958473d95036ca5f2def8623da73d kernel-core-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 9734f7a374239238c2f813bb2f11b9b0cb179c03b7e5389e5ba26871ddcfc509 kernel-debug-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 18d9e4d2b0b04209259093447248fdfbd7bc972d0edff69860d1c0398321f98c kernel-debug-core-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 11a6a819fede1a4ac65eb1deac66df2ad0f5fbdea96e4e294fdbc1957d5af406 kernel-debug-debuginfo-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 19a42deeff33ef12a484dafe6d86e4917dfee6bd9f84356c917b872492fb34fb kernel-debug-debuginfo-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 19a42deeff33ef12a484dafe6d86e4917dfee6bd9f84356c917b872492fb34fb kernel-debug-debuginfo-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 19a42deeff33ef12a484dafe6d86e4917dfee6bd9f84356c917b872492fb34fb kernel-debug-debuginfo-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 19a42deeff33ef12a484dafe6d86e4917dfee6bd9f84356c917b872492fb34fb kernel-debug-devel-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: a1bee7983eba650ac89fc2db4b3eca38ced537c3e25fe554a08733137acddc88 kernel-debug-devel-matched-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: ce61075be159f451bf649eb4fb1e90aaf675614aef07c0ad19a3800f2fae0040 kernel-debug-modules-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: fa313d53173c89aa79d49d2f0bc554d80f5483bc0186e335a438c78a56e7e909 kernel-debug-modules-core-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: d60e074f85322a2ed1fbe6601cc2d97930305caea743525141e667d7f7b6151f kernel-debug-modules-extra-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 30d7970f81d3c6f37901d4b94ea3f81ff36acf4f883dee5a9b05a24aaa062cf1 kernel-debug-uki-virt-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 065299d1b9a18551f1531c43c4987f949ca46bb134e564f3985afcebd899b4cb kernel-debuginfo-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 3f54b1bca28abe2610f6987da25e9f8fe92e7c65ef8a8facc4b73871302bd13b kernel-debuginfo-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 3f54b1bca28abe2610f6987da25e9f8fe92e7c65ef8a8facc4b73871302bd13b kernel-debuginfo-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 3f54b1bca28abe2610f6987da25e9f8fe92e7c65ef8a8facc4b73871302bd13b kernel-debuginfo-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 3f54b1bca28abe2610f6987da25e9f8fe92e7c65ef8a8facc4b73871302bd13b kernel-debuginfo-common-x86_64-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: cf16c69f0ace98a4e811a0c02f377731bb32b1c03f701f02af12782972e5fa35 kernel-debuginfo-common-x86_64-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: cf16c69f0ace98a4e811a0c02f377731bb32b1c03f701f02af12782972e5fa35 kernel-debuginfo-common-x86_64-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: cf16c69f0ace98a4e811a0c02f377731bb32b1c03f701f02af12782972e5fa35 kernel-debuginfo-common-x86_64-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: cf16c69f0ace98a4e811a0c02f377731bb32b1c03f701f02af12782972e5fa35 kernel-devel-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: ad003aad0573092b926e83d9221262eca36f65e812fde80855eec9d702754c46 kernel-devel-matched-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 6585644c543a11cb426d1fb47c9a51d9aee67a04efaaa267f6d3c2cbdb9ac66d kernel-doc-6.12.0-55.103.1.el10_0.noarch.rpm SHA-256: a1881e3385fd73b2eef80f5a36ab9c003c8b117b90b056eac054889d268bebc9 kernel-headers-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 1375b04bc479c213e5c6f7f9e6306b305b38203163e241509c3bc666bf03d229 kernel-modules-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 2ea983041a16d19e12958a8877c079fa7a2854a83e07dac724c046b92877b8cd kernel-modules-core-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 56b08b939191cfe758beeb03cbafaae0bd16838507b9f7a14ae27d3073eb6d95 kernel-modules-extra-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 1b2f23840d9f6faed5eb677187beab18933606f1df972c7eb67457a784b505af kernel-rt-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 6283442bfea38c03cec77f1b56189d6bd8124e4c870a576ea516b8c6e61b998b kernel-rt-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: 6283442bfea38c03cec77f1b56189d6bd8124e4c870a576ea516b8c6e61b998b kernel-rt-core-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: dc13f8ccc26b12e829424ebafe63405b485eafbc094885e51050b2bb54f8bd7b kernel-rt-core-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: dc13f8ccc26b12e829424ebafe63405b485eafbc094885e51050b2bb54f8bd7b kernel-rt-debug-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: a5124ab0e41e2d17f472dccbeef5edc937e419f210fbf7e130fe356e60db152b kernel-rt-debug-6.12.0-55.103.1.el10_0.x86_64.rpm SHA-256: a5124ab0e41e2d