Red Hat Security Advisory

RHSA-2026:48386

kernel security update

Released 2026-07-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.4) kernel-64k-debug-devel-5.14.0-427.141.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.141.1.el9_4, kernel-64k-devel-5.14.0-427.141.1.el9_4 +11
Red Hat Enterprise Linux BaseOS E4S (v.9.4) bpftool-7.3.0-427.141.1.el9_4, kernel-5.14.0-427.141.1.el9_4, kernel-64k-5.14.0-427.141.1.el9_4 +29
Red Hat Enterprise Linux Real Time E4S (v.9.4) kernel-rt-5.14.0-427.141.1.el9_4, kernel-rt-core-5.14.0-427.141.1.el9_4, kernel-rt-debug-5.14.0-427.141.1.el9_4 +9
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) kernel-rt-5.14.0-427.141.1.el9_4, kernel-rt-core-5.14.0-427.141.1.el9_4, kernel-rt-debug-5.14.0-427.141.1.el9_4 +11

Fixes 5 records

TI-2026-46125 CVE-2026-64561 · GHSA-hp26-g45f-hxp5

KVM: x86: Check for invalid/obsolete root after making MMU pages available

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a "stale" page fault, i.e.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00273 Published 2026-08-04 Partial fix · 5.15.218, 6.1.183 +5 CWE-362

TI-2026-46126 CVE-2026-64562 · GHSA-mc77-r35g-cpmm

KVM: nVMX: Hide shadow VMCS right after VMCLEAR

LOW 39

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR free_nested() frees the shadow VMCS while vmcs01 still points to it.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00162 Published 2026-08-04 Fixed in 5.10.265, 5.15.216 +6 CWE-416

TI-2026-38010 CVE-2026-52923 · GHSA-m237-4jxg-w5jh

ipc: limit next_id allocation to the valid ID range

LOW 35

In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request the next SysV IPC id through ids->next_id.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00215 Published 2026-06-24 Partial fix · 5.10.259, 5.15.210 +6 CWE-20

TI-2025-26698 CVE-2025-40026 · GHSA-3p46-x25w-pgvh

KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

LOW 34

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O,…

CVSS 3.1HIGH 7.9 Local Low privileges No interaction EPSS 0.0017 Published 2025-10-28 Partial fix · 5.4.301, 5.10.246 +7

TI-2026-24343 CVE-2026-31787 · GHSA-3c28-g28m-gm93

xen/privcmd: fix double free via VMA splitting

LOW 33

In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmd_vm_ops defines .close (privcmd_close), but neither .may_split nor .open.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00183 Published 2026-04-30 Partial fix · 5.10.254, 5.15.204 +6 CWE-415