Red Hat Security Advisory

RHSA-2026:49030

kernel security update

Released 2026-07-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.94.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.94.1.el10_0, kernel-64k-devel-6.12.0-55.94.1.el10_0 +12
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.94.1.el10_0, kernel-64k-6.12.0-55.94.1.el10_0, kernel-64k-core-6.12.0-55.94.1.el10_0 +28
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.94.1.el10_0, libperf-6.12.0-55.94.1.el10_0
Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.94.1.el10_0, kernel-rt-64k-6.12.0-55.94.1.el10_0, kernel-rt-64k-core-6.12.0-55.94.1.el10_0 +21
Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.94.1.el10_0, kernel-rt-core-6.12.0-55.94.1.el10_0, kernel-rt-debug-6.12.0-55.94.1.el10_0 +11

Fixes 4 records

TI-2026-46125 CVE-2026-64561 · GHSA-hp26-g45f-hxp5

KVM: x86: Check for invalid/obsolete root after making MMU pages available

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a "stale" page fault, i.e.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00273 Published 2026-08-04 Partial fix · 5.15.218, 6.1.183 +5 CWE-362

TI-2026-46126 CVE-2026-64562 · GHSA-mc77-r35g-cpmm

KVM: nVMX: Hide shadow VMCS right after VMCLEAR

LOW 39

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR free_nested() frees the shadow VMCS while vmcs01 still points to it.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00162 Published 2026-08-04 Fixed in 5.10.265, 5.15.216 +6 CWE-416

TI-2026-45373 CVE-2026-63807 · GHSA-xxf6-pvjr-qhj4

KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level

LOW 39

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level When recovering hugepages in the shadow MMU, verify that the base gfn of t…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00173 Published 2026-07-19 Partial fix · 5.15.211, 6.1.177 +5 CWE-787

TI-2025-26698 CVE-2025-40026 · GHSA-3p46-x25w-pgvh

KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

LOW 34

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O,…

CVSS 3.1HIGH 7.9 Local Low privileges No interaction EPSS 0.0017 Published 2025-10-28 Partial fix · 5.4.301, 5.10.246 +7