This Red Hat kernel security update addresses multiple vulnerabilities, including a critical (CVSS 9.8) use-after-free in IPv6's icmpv6_rcv() (CVE-2026-53006) and a high-severity (CVSS 8.8) use-after-free in Bluetooth SSP passkey handlers (CVE-2026-46056), which can lead to privilege escalation or arbitrary code execution. The affected version ranges are extensive; for example, CVE-2026-53006 affects Linux kernel versions from 4.4 up to, but not including, 5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, and 7.0.10. The advisory provides fixed kernel packages for Red Hat Enterprise Linux 8.6 Advanced Mission Critical and Extended Update Support, and a system reboot is required after applying the update.
Red Hat Product Errata RHSA-2026:65711 - Security Advisory Issued: 2026-09-09 Updated: 2026-09-09 RHSA-2026:65711 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009) kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191) kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges (CVE-2026-17523) kernel: packet: use consistent hard_header_len in non-ring send paths () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64 Red Hat Enterprise Linux Server - AUS 8.6 x86_64 Fixes BZ - 2482181 - CVE-2026-46056 kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers BZ - 2492363 - CVE-2026-53006 kernel: ipv6: fix possible UAF in icmpv6_rcv() BZ - 2492390 - CVE-2026-53009 kernel: ice: fix double-free of tx_buf skb BZ - 2492458 - CVE-2026-53071 kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp BZ - 2492750 - CVE-2026-53196 kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() BZ - 2502872 - CVE-2026-64191 kernel: i2c: stub: Reject I2C block transfers with invalid length BZ - 2507407 - CVE-2026-17523 kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges BZ - 2519475 - kernel: packet: use consistent hard_header_len in non-ring send paths CVEs CVE-2026-17523 CVE-2026-46056 CVE-2026-53006 CVE-2026-53009 CVE-2026-53071 CVE-2026-53196 CVE-2026-64191 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 SRPM kernel-4.18.0-372.213.1.el8_6.src.rpm SHA-256: 04eab60d4d3fabeafbbda5c8a1f55dc48fe723db881a162c398467c0572bd1f9 x86_64 bpftool-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 458caa460e26d2eb88d0e00c8397b03e40ad514e9cfbae25dfc5dfc61d43d209 bpftool-debuginfo-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 2af7c3e970ec27e519c649a59fc49889fdf57a77b4e78e57fbefd9e4e39e5e4e kernel-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: ed2d513c744a405cf87e555d785f608a1246be72289b930c653c2c3cdd726ac3 kernel-abi-stablelists-4.18.0-372.213.1.el8_6.noarch.rpm SHA-256: 1971829fac6bea8c779bb3958a05506e75043838c97be737832bd3dd79004bd3 kernel-core-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 380c438e1c9a078758855736ed6bc93125ffe333df51e6fdcdd7a430a8e3cc24 kernel-cross-headers-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 7301dca76e4f5af0a34df33e831bb4515a57d3a891dd0ed48d0762496bc7c323 kernel-debug-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 20778256e62204968296ba8daa463d6fb578048da06066d137a83a5710ba76cd kernel-debug-core-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 72f37b381cf9ed2a72a0643f6ae77f0eedf5658cb597a6cefa2cd42ffaca9633 kernel-debug-debuginfo-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 3b5a569b5b3369e2903282d9e0d921be6a58bda0d24176525c195e20932cc50e kernel-debug-devel-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: a32e94f6b9d75086b85b840048bd25ab382af31fa09485697b1da0f4312b9ea7 kernel-debug-modules-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 0d17549ad6ecc06841f60b8c346cb0a48efa7344b1a528b6de380722173c3e3b kernel-debug-modules-extra-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 17db9f1eb1529b03b75cc2c15be9c1e11eb0d3b8c0ca98d36c06b1f5667bbf4b kernel-debuginfo-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: f601b5e1b546d86ff361299549d3a41245772503ab2f33df89dc3d43bd7d9198 kernel-debuginfo-common-x86_64-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 2944f461d1147204414adf61fc7edf4b4ae26bc6441233db6d64de41e4a3e8ec kernel-devel-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 3b078eba08bfcf49d53030ab6d554b8814bc401dd504115eb8c2b7875ba266c2 kernel-doc-4.18.0-372.213.1.el8_6.noarch.rpm SHA-256: df3055c06ccafdec9a04f01dbda1e8ddf04304163cad4ef7607c9c7247222673 kernel-headers-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 49fa3b9e7397e8d3499c11f59e56ce2807e0e0d64a4f515dc90435036f83ca3a kernel-modules-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 4a805c29b1e0a277495a31d3389dcdb67f695e32e60c5e2019a8e7f11ba4f9d9 kernel-modules-extra-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: f7481de2bfe87b5e0383fb2ac04918c2fac1534abd5ff3e2ccd9db2bc581c84b kernel-tools-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 197adb9436000c129e3fc02e4318c893ee57ad99f0d646515800d75b8ae39c77 kernel-tools-debuginfo-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: c8affbe41cda2b6ede9e78e3aad372ccd52f6d67714735c0f5420a03ec397408 kernel-tools-libs-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: dbf7e56069011811604982172f6e10ae14a2a5644e48f9d2126fdb5f91dcdd6b perf-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 8dc1d88c111e074ce668db464497f6967b1615665405d8d990a4a6e79735aab9 perf-debuginfo-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: cfb31d7f3333b2e17cc1c8869b0327fdef28de7fd6ea91dd71a8fe5eccab3673 python3-perf-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: e0e96cafe8d2a5d9e04953d5ad8a8259a73b4bbbbb72a30e1f4f52a6c07be3e7 python3-perf-debuginfo-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 473272f5564180c12b85a6a4c28cecd79613f49daa294f196fc6f32a1c347bc5 Red Hat Enterprise Linux Server - AUS 8.6 SRPM kernel-4.18.0-372.213.1.el8_6.src.rpm SHA-256: 04eab60d4d3fabeafbbda5c8a1f55dc48fe723db881a162c398467c0572bd1f9 x86_64 bpftool-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 458caa460e26d2eb88d0e00c8397b03e40ad514e9cfbae25dfc5dfc61d43d209 bpftool-debuginfo-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 2af7c3e970ec27e519c649a59fc49889fdf57a77b4e78e57fbefd9e4e39e5e4e kernel-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: ed2d513c744a405cf87e555d785f608a1246be72289b930c653c2c3cdd726ac3 kernel-abi-stablelists-4.18.0-372.213.1.el8_6.noarch.rpm SHA-256: 1971829fac6bea8c779bb3958a05506e75043838c97be737832bd3dd79004bd3 kernel-core-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 380c438e1c9a078758855736ed6bc93125ffe333df51e6fdcdd7a430a8e3cc24 kernel-cross-headers-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 7301dca76e4f5af0a34df33e831bb4515a57d3a891dd0ed48d0762496bc7c323 kernel-debug-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 20778256e62204968296ba8daa463d6fb578048da06066d137a83a5710ba76cd kernel-debug-core-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 72f37b381cf9ed2a72a0643f6ae77f0eedf5658cb597a6cefa2cd42ffaca9633 kernel-debug-debuginfo-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 3b5a569b5b3369e2903282d9e0d921be6a58bda0d24176525c195e20932cc50e kernel-debug-devel-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: a32e94f6b9d75086b85b840048bd25ab382af31fa09485697b1da0f4312b9ea7 kernel-debug-modules-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 0d17549ad6ecc06841f60b8c346cb0a48efa7344b1a528b6de380722173c3e3b kernel-debug-modules-extra-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 17db9f1eb1529b03b75cc2c15be9c1e11eb0d3b8c0ca98d36c06b1f5667bbf4b kernel-debuginfo-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: f601b5e1b546d86ff361299549d3a41245772503ab2f33df89dc3d43bd7d9198 kernel-debuginfo-common-x86_64-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 2944f461d1147204414adf61fc7edf4b4ae26bc6441233db6d64de41e4a3e8ec kernel-devel-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 3b078eba08bfcf49d53030ab6d554b8814bc401dd504115eb8c2b7875ba266c2 kernel-doc-4.18.0-372.213.1.el8_6.noarch.rpm SHA-256: df3055c06ccafdec9a04f01dbda1e8ddf04304163cad4ef7607c9c7247222673 kernel-headers-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 49fa3b9e7397e8d3499c11f59e56ce2807e0e0d64a4f515dc90435036f83ca3a kernel-modules-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 4a805c29b1e0a277495a31d3389dcdb67f695e32e60c5e2019a8e7f11ba4f9d9 kernel-modules-extra-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: f7481de2bfe87b5e0383fb2ac04918c2fac1534abd5ff3e2ccd9db2bc581c84b kernel-tools-4.18.0-372.213.1.el8_6.x86_64.rpm SHA-256: 197adb9436000c129e3fc02e4318c893ee57ad99f0d646515800d75b8ae39c77 kernel-tools-debuginfo-4.18.0-372.213.1.el8_6