Red Hat Product Errata RHSA-2026:67723 - Security Advisory Issued: 2026-09-16 Updated: 2026-09-16 RHSA-2026:67723 - Security Advisory Overview Updated Packages Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114) kernel: rxrpc: Fix potential UAF after skb_unshare() failure (CVE-2026-45998) kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886) kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304) kernel: packet: use consistent hard_header_len in non-ring send paths () Bug Fix(es) and Enhancement(s): RT scheduler livelock caused by missing backport of 94894c9c477e (JIRA:RHEL-244407) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2466994 - CVE-2026-43114 kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry BZ - 2482024 - CVE-2026-45998 kernel: rxrpc: Fix potential UAF after skb_unshare() failure BZ - 2482025 - CVE-2026-46054 kernel: selinux: fix overlayfs mmap() and mprotect() access checks BZ - 2482181 - CVE-2026-46056 kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers BZ - 2492269 - CVE-2026-53016 kernel: crypto: ccp - copy IV using skcipher ivsize BZ - 2492363 - CVE-2026-53006 kernel: ipv6: fix possible UAF in icmpv6_rcv() BZ - 2492458 - CVE-2026-53071 kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp BZ - 2492750 - CVE-2026-53196 kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() BZ - 2502329 - CVE-2026-63886 kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode BZ - 2507119 - CVE-2026-64304 kernel: crypto: qat - validate RSA CRT component lengths BZ - 2519475 - kernel: packet: use consistent hard_header_len in non-ring send paths CVEs CVE-2026-43114 CVE-2026-45998 CVE-2026-46054 CVE-2026-46056 CVE-2026-53006 CVE-2026-53016 CVE-2026-53071 CVE-2026-53196 CVE-2026-63886 CVE-2026-64304 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM kernel-5.14.0-284.191.1.el9_2.src.rpm SHA-256: 775a3de8f08c476b744b73112a0eb5dfdd3a1df6acb3d50742c10dc5ef2c7453 x86_64 bpftool-7.0.0-284.191.1.el9_2.x86_64.rpm SHA-256: 3c65c6784ec1c699cb1386c5af0405ffaedc062923731e508692c1572f19731d bpftool-debuginfo-7.0.0-284.191.1.el9_2.x86_64.rpm SHA-256: d0aad308e1ed21e8e9d883a1745e0331780b0c29c92a7a46d34577b6dc72d7ee bpftool-debuginfo-7.0.0-284.191.1.el9_2.x86_64.rpm SHA-256: d0aad308e1ed21e8e9d883a1745e0331780b0c29c92a7a46d34577b6dc72d7ee kernel-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: bbcf038a6dbda37fad23e7bfc19141e6912491c349ffc3e64d7f722a39046430 kernel-abi-stablelists-5.14.0-284.191.1.el9_2.noarch.rpm SHA-256: 43fc88ede155cf0610062d39273c0f3dfb0a0ad4b2564db676aaff807918b7a9 kernel-core-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 982b128d7c456136a1cb515374992e2af453f5534c45dcbf16ba40682c975a20 kernel-debug-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 8e809dcb296ff6211a1f556e6204f0b603ad0a7cb15008e6ffe5bc751dc112ca kernel-debug-core-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 5b46559ecfbb450dceb44bd6470ec59e8cd85f876ac3a13e30d965a5c97426b1 kernel-debug-debuginfo-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: a70a9bcf12f2e97927427ab1a971e73743fdf2147b1329e6ff2b60126017f367 kernel-debug-debuginfo-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: a70a9bcf12f2e97927427ab1a971e73743fdf2147b1329e6ff2b60126017f367 kernel-debug-devel-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: f484203e3c7a13d2d904dd98dea0c9b15ad3962bee2b23ab7383898d9d8e3e3b kernel-debug-devel-matched-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 8931e04a3f384c11ea55e8e7b14d061e255747d2a93daf9eebacf0d59c91fb6a kernel-debug-modules-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 8630737035821dae1140477f0cbcc601ed49808b52e5579c5010a0a268c14002 kernel-debug-modules-core-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: f0cd0248ebc856841b660ce1b781bde71324bc76dcb4592d7ebec5aaa6800d1e kernel-debug-modules-extra-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 6517b79a39f71b77201568c11a24263f59cb035b737ac1c0407c0fd15c5ee47a kernel-debug-uki-virt-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 99694d7e767dd70793dee77e4c9629404a4ae5e355e1cf6e92a1fab666b25631 kernel-debuginfo-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: cb42fc4ae268e9b8895695406702a57497731b9621d079637d4c2a5571874441 kernel-debuginfo-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: cb42fc4ae268e9b8895695406702a57497731b9621d079637d4c2a5571874441 kernel-debuginfo-common-x86_64-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 54fdc129caf24c4d63362da67de5332c6c758f23cc05a2d7cd437c5ca2c72e4e kernel-debuginfo-common-x86_64-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 54fdc129caf24c4d63362da67de5332c6c758f23cc05a2d7cd437c5ca2c72e4e kernel-devel-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 5c16d748e8e940069d52c76f4b4f211f0745fe00d7e56a7a3e3c87e76fa82bea kernel-devel-matched-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: d3a027e4eaf0a40864e4ce05d3f88a6db54e5dfcfeca2b8c2b4a223e49369f37 kernel-doc-5.14.0-284.191.1.el9_2.noarch.rpm SHA-256: b647463a219720dcad4ed9c980186ee1b4ad753580bdb2ae860fd8aba06c704d kernel-headers-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: d1f59a1ed41d611027d3755f3d84b4a5383bd821e953d822c915afe856710237 kernel-modules-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: f85f50dda928d269831371a8ec1a16ac76ec2e7670e811d7b52b951f92ce8b7b kernel-modules-core-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 9627c577f9bb87163b92591d993c6d3278141dbc55221bf7631ef39a8549c91c kernel-modules-extra-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 5cb69d76a8eeb1027f018fb282d3ce7f1ff8e72280967a0f83afb083bdaaa6f9 kernel-tools-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 008462bf8ccec48efd8d1bf2e30f7a35d3af5f1961388d00d17a4b99de1740ff kernel-tools-debuginfo-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 6af5e7a1b0b6a28c8c0e885f0d1451ab07815ba953eabbcb8c9f5ea8e2956245 kernel-tools-debuginfo-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 6af5e7a1b0b6a28c8c0e885f0d1451ab07815ba953eabbcb8c9f5ea8e2956245 kernel-tools-libs-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 0c6c22236d6e87aaa5cff16c42266016851884a55905ef9d9223ddd85d261f3d kernel-uki-virt-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 148afec4853400a8f3cc6713130ceeba7a7b7bd237ee351d9b5e026476afc135 perf-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 8ddbf677207e5a980b5d411901bdb3dbc408896e229c2e81b00366e380174530 perf-debuginfo-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 23e70757d43145a8014ed21722dbbd9cd93cba0f1e8727231f75dce0040a3f69 perf-debuginfo-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 23e70757d43145a8014ed21722dbbd9cd93cba0f1e8727231f75dce0040a3f69 python3-perf-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: 829b120d85115a06bff125384abb6e2218d4fcfb14b3589f5a273bb9ef728687 python3-perf-debuginfo-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: afc54defcb4732d2f4102e0019c0f098d554d01e032c8ca9b0fa32732bbe0eea python3-perf-debuginfo-5.14.0-284.191.1.el9_2.x86_64.rpm SHA-256: afc54defcb4732d2f4102e0019c0f098d554d01e032c8ca9b0fa32732bbe0eea rt