Red Hat Security Advisory

RHSA-2026:40082

kernel security update

Released 2026-07-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.181.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.181.1.el9_2, kernel-64k-devel-5.14.0-284.181.1.el9_2 +10
Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.181.1.el9_2, kernel-5.14.0-284.181.1.el9_2, kernel-64k-5.14.0-284.181.1.el9_2 +29

Fixes 4 records

TI-2026-38445 CVE-2026-53359 · GHSA-wpw8-53h7-xqcq

KVM: x86: Fix shadow paging use-after-free due to unexpected role

HIGH 73

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GF…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01368 Published 2026-07-04 Partial fix · 5.15.222, 6.1.177 +5 CWE-416

TI-2026-31676 CVE-2026-43499 · GHSA-cqc6-9f34-295v

rtmutex: Use waiter::task instead of current in remove_waiter()

HIGH 69

In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slowlock paths, but it is also used for proxy-lock rollba…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05372 Published 2026-05-21 Partial fix · 5.10.261, 5.15.212 +6 CWE-416

TI-2026-33837 CVE-2026-46113 · GHSA-gcf3-9g28-gv44

KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

LOW 39

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for direct shadow pages using sp->gfn plus the SPTE index.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00195 Published 2026-05-28 Partial fix · 5.15.222, 6.1.175 +5 CWE-416

TI-2026-31207 CVE-2026-43027 · GHSA-f42g-qv35-qm2v

netfilter: nf_conntrack_helper: pass helper to expect cleanup

LOW 33

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to expect cleanup nf_conntrack_helper_unregister() calls nf_ct_expect_iterate_destroy() to remove expectatio…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00131 Published 2026-05-01 Partial fix · 5.10.253, 5.15.203 +6 CWE-416