Red Hat Product Errata RHSA-2026:26570 - Security Advisory
Issued:
2026-06-17
Updated:
2026-06-17

RHSA-2026:26570 - Security Advisory

Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858)
  • kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)
  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
  • kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
  • kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
  • kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64

Fixes

  • BZ - 2351619 - CVE-2025-21858 kernel: geneve: Fix use-after-free in geneve_find_dev().
  • BZ - 2429065 - CVE-2025-68800 kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
  • BZ - 2448594 - CVE-2026-23243 kernel: Linux kernel: Denial of service and memory corruption in RDMA umad
  • BZ - 2451218 - CVE-2026-23392 kernel: netfilter: nf_tables: release flowtable after rcu grace period on error
  • BZ - 2467005 - CVE-2026-43116 kernel: netfilter: ctnetlink: ensure safe access to master conntrack
  • BZ - 2467210 - CVE-2026-43158 kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks
  • BZ - 2481486 - CVE-2026-46243 kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6

SRPM
kernel-4.18.0-372.196.1.el8_6.src.rpm SHA-256: 39c29ffb74310f2fa45fe3fae6a7f7db2c6ed1f76dfb18d090129aad24ce0ff1
x86_64
bpftool-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 655a95920a08853f73d79931fc14cb9ebba760ae92c650a8a53c44ef9dfceeee
bpftool-debuginfo-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: f7b52b7b9adc97af0274a19edc0b3546ce81a42aece504ba8d55888ca4f9d1b4
kernel-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: f151d5c39ab6e15fe6ca35dac4f4478c2113cc6d86ace27bf4bcfc42e0eb077c
kernel-abi-stablelists-4.18.0-372.196.1.el8_6.noarch.rpm SHA-256: 2dc9e5f4dd62088c4a7be7a6e3563450cf3f72ff92552a88d62f0b7f743b6c42
kernel-core-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 534500f91e51e084d5abc6f74442dc272c07cc016059082f52f3297d50434b44
kernel-cross-headers-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 201a3ebab00875f0c72c7dcc7d44675811f96a17ba01cd8788202b6ddb9bcf89
kernel-debug-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 08e5552e06983e306eb882427bfac95aad3f937b31ad34229302e9e95001d076
kernel-debug-core-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 1a00086386a10b3e6f9ff8c4f9ec0d050ba86645fa020831519b075e24dbf2c5
kernel-debug-debuginfo-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: db06e443fbb09c98e7e73febf2928313feb2f29abcc3399cc7dc768db0b699c4
kernel-debug-devel-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 1b62349352ceb4f07019c687d1f35aeaf1be61fbaacc23abfe224a589d263912
kernel-debug-modules-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 6a0d42897772b818659292e6cf5b443a36dfbb37116969a9c1517e266c6f59fc
kernel-debug-modules-extra-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 03d3a7e9a9e03927d4f979a26482fc454b7c49726e8e0610f8a35e71b5a2f31c
kernel-debuginfo-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 2395ac67d0a7c57f14e3fd525732876245f02089582ccff5e025fea8a245de73
kernel-debuginfo-common-x86_64-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 5403f79247e6a504ad0aa80cf1fbeea89bfdcdd943f0f5d3bf83ed446e6f4609
kernel-devel-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 2428b1be1bae83ca056cbde86bc6f2d41d05347687d4830d3731b2a87125aa23
kernel-doc-4.18.0-372.196.1.el8_6.noarch.rpm SHA-256: 30ac5c26d881a4b55f882f90ed0c366e2190abdef33aa670392acf47e907a339
kernel-headers-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 38a5169569714f6eebab610af803b9cd3e871e15948482fd5ef461c707a521eb
kernel-modules-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 14dcd85489693ac0418f6cff8daa358a2b21b4521cc51258ef4626265d7fe34f
kernel-modules-extra-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: e0c855b2a1da73b8defb63c9a56237fde7dadc6566b0ffd245331f2244bfa41d
kernel-tools-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 744eb4c8da6e369ded4bd63ac46530c5e7d497bf5bb022b7f33ef76bd6a8670f
kernel-tools-debuginfo-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 8ef4dd850b62fff4f7f5218b64ade7f300d5c0c8c1016d66b5d13f0c18d8b706
kernel-tools-libs-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 4e2492f090daef5af32de2e8c06631b329009b280689d914cac9dc71444d5e85
perf-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 2fdface2dbd3baec3b75eb980aa80997e01b69e5a5cc025fe4558cc4600baa41
perf-debuginfo-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 29bf60e44803547af125d0fe908838779c767f596473bbd0e3ee1cafb4a283fd
python3-perf-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: efb937c4d3d481dff781345f0b380ed9d95f899e8decedc5517ca0e7892b78e5
python3-perf-debuginfo-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: b36503cf4f8fdff0b84d6f16a75a05583bb86dacadb7b8ebe865fea8a261aa8d

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
kernel-4.18.0-372.196.1.el8_6.src.rpm SHA-256: 39c29ffb74310f2fa45fe3fae6a7f7db2c6ed1f76dfb18d090129aad24ce0ff1
x86_64
bpftool-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 655a95920a08853f73d79931fc14cb9ebba760ae92c650a8a53c44ef9dfceeee
bpftool-debuginfo-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: f7b52b7b9adc97af0274a19edc0b3546ce81a42aece504ba8d55888ca4f9d1b4
kernel-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: f151d5c39ab6e15fe6ca35dac4f4478c2113cc6d86ace27bf4bcfc42e0eb077c
kernel-abi-stablelists-4.18.0-372.196.1.el8_6.noarch.rpm SHA-256: 2dc9e5f4dd62088c4a7be7a6e3563450cf3f72ff92552a88d62f0b7f743b6c42
kernel-core-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 534500f91e51e084d5abc6f74442dc272c07cc016059082f52f3297d50434b44
kernel-cross-headers-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 201a3ebab00875f0c72c7dcc7d44675811f96a17ba01cd8788202b6ddb9bcf89
kernel-debug-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 08e5552e06983e306eb882427bfac95aad3f937b31ad34229302e9e95001d076
kernel-debug-core-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 1a00086386a10b3e6f9ff8c4f9ec0d050ba86645fa020831519b075e24dbf2c5
kernel-debug-debuginfo-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: db06e443fbb09c98e7e73febf2928313feb2f29abcc3399cc7dc768db0b699c4
kernel-debug-devel-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 1b62349352ceb4f07019c687d1f35aeaf1be61fbaacc23abfe224a589d263912
kernel-debug-modules-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 6a0d42897772b818659292e6cf5b443a36dfbb37116969a9c1517e266c6f59fc
kernel-debug-modules-extra-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 03d3a7e9a9e03927d4f979a26482fc454b7c49726e8e0610f8a35e71b5a2f31c
kernel-debuginfo-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 2395ac67d0a7c57f14e3fd525732876245f02089582ccff5e025fea8a245de73
kernel-debuginfo-common-x86_64-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 5403f79247e6a504ad0aa80cf1fbeea89bfdcdd943f0f5d3bf83ed446e6f4609
kernel-devel-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 2428b1be1bae83ca056cbde86bc6f2d41d05347687d4830d3731b2a87125aa23
kernel-doc-4.18.0-372.196.1.el8_6.noarch.rpm SHA-256: 30ac5c26d881a4b55f882f90ed0c366e2190abdef33aa670392acf47e907a339
kernel-headers-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 38a5169569714f6eebab610af803b9cd3e871e15948482fd5ef461c707a521eb
kernel-modules-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 14dcd85489693ac0418f6cff8daa358a2b21b4521cc51258ef4626265d7fe34f
kernel-modules-extra-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: e0c855b2a1da73b8defb63c9a56237fde7dadc6566b0ffd245331f2244bfa41d
kernel-tools-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 744eb4c8da6e369ded4bd63ac46530c5e7d497bf5bb022b7f33ef76bd6a8670f
kernel-tools-debuginfo-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 8ef4dd850b62fff4f7f5218b64ade7f300d5c0c8c1016d66b5d13f0c18d8b706
kernel-tools-libs-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 4e2492f090daef5af32de2e8c06631b329009b280689d914cac9dc71444d5e85
perf-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 2fdface2dbd3baec3b75eb980aa80997e01b69e5a5cc025fe4558cc4600baa41
perf-debuginfo-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: 29bf60e44803547af125d0fe908838779c767f596473bbd0e3ee1cafb4a283fd
python3-perf-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: efb937c4d3d481dff781345f0b380ed9d95f899e8decedc5517ca0e7892b78e5
python3-perf-debuginfo-4.18.0-372.196.1.el8_6.x86_64.rpm SHA-256: b36503cf4f8fdff0b84d6f16a75a05583bb86dacadb7b8ebe865fea8a261aa8d

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.