Skip to content
OpenAdvisories
Critical RHSA-2026:49033 5 CVEs

Red Hat Security Advisory: kernel security update

Published Aug 1, 2026 · Updated Oct 14, 2026

Ecosystem: Red Hat

Fixed packages 48

ReleasePackageFixed in
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos bpftool 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos bpftool-debuginfo 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-abi-stablelists 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-core 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-core 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-debuginfo 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-devel 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-modules 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debug-modules-extra 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debuginfo 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-debuginfo-common-x86_64 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-devel 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-doc 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-modules 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-modules-extra 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools-debuginfo 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos kernel-tools-libs 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos perf 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos perf-debuginfo 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-perf 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-perf-debuginfo 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos bpftool 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos bpftool-debuginfo 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-abi-stablelists 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-core 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-core 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-debuginfo 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-devel 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-modules 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debug-modules-extra 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debuginfo 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-debuginfo-common-x86_64 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-devel 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-doc 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-modules 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-modules-extra 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-tools 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-tools-debuginfo 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos kernel-tools-libs 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos perf 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos perf-debuginfo 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos python3-perf 0:4.18.0-372.204.1.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos python3-perf-debuginfo 0:4.18.0-372.204.1.el8_6

Vulnerabilities 5

  • Critical 9.8
    CVE-2026-64530

    net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle

    In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle tcf_classify() can return TC_ACT_CONSUMED while the skb is held by the defragmentation engine (e.g. act_ct on out-of-order frag…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.1
    CVE-2025-10263 Public exploit

    Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X…

    Arm Neoverse V3AE Cortex-X925 Cortex-X3 Debian Ubuntu Alpine
  • High 8.8
    CVE-2026-46113

    KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

    In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for direct shadow pages using sp->gfn plus the SPTE index. This assumption breaks for shadow pagi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2026-53359 Public exploit

    KVM: x86: Fix shadow paging use-after-free due to unexpected role

    In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GFN") fixed a shadow paging mismatch betw…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-46116

    xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

    In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete KASAN reproduces a slab-use-after-free in __xfrm_state_delete()'s hlist_del_rcu calls under syzkaller load on linux-6.12.y sta…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2482523
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2482587
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2486958
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2497033
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2507345
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49033.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-10263
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-10263
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-10263
  • article
    https://developer.arm.com/documentation/112137
  • report
    https://access.redhat.com/security/cve/CVE-2026-46113
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-46113
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-46113
  • article
    https://lore.kernel.org/linux-cve-announce/2026052813-CVE-2026-46113-f083@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-46116
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-46116
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-46116
  • article
    https://lore.kernel.org/linux-cve-announce/2026052814-CVE-2026-46116-73b8@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-53359
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-53359
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-53359
  • article
    https://lore.kernel.org/linux-cve-announce/2026070403-CVE-2026-53359-4f57@gregkh/T
  • article
    https://www.openwall.com/lists/oss-security/2026/07/06/7
  • report
    https://access.redhat.com/security/cve/CVE-2026-64530
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2504052
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-64530
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-64530
  • article
    https://lore.kernel.org/linux-cve-announce/2026072624-CVE-2026-64530-52e9@gregkh/T/#u