Red Hat Security Advisory: kernel security update

Fixed packages 91

Vulnerabilities 4

• High 8.8
  CVE-2026-63807

  KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level When recovering hugepages in the shadow MMU, verify that the base gfn of the shadow page is actually contained wi…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jul 19, 2026
• High 8.8
  CVE-2026-64561 Public exploit

  KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 4, 2026
• High 8.8
  CVE-2026-64562

  KVM: nVMX: Hide shadow VMCS right after VMCLEAR

  In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR free_nested() frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loaded_vmcs_clear(), the vC…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Aug 4, 2026
• High 7.9
  CVE-2025-40026

  KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has …

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Oct 28, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2406712
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2502249
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49030.json
• report
  https://access.redhat.com/security/cve/CVE-2025-40026
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-40026
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-40026
• article
  https://lore.kernel.org/linux-cve-announce/2025102841-CVE-2025-40026-760b@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-63807
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-63807
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-63807
• article
  https://lore.kernel.org/linux-cve-announce/2026071902-CVE-2026-63807-1018@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-64561
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2510891
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-64561
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-64561
• article
  https://lore.kernel.org/linux-cve-announce/2026080401-CVE-2026-64561-d0d4@gregkh/T
• report
  https://access.redhat.com/security/cve/CVE-2026-64562
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2510894
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-64562
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-64562
• article
  https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-64562.mbox