RHSA-2026:59473: Important: kernel security, bug fix, and enhancement update

Q: Which systems should be prioritized for this update?

Systems using the affected Red Hat kernel packages should be prioritized, particularly those with exposed or enabled ATM, Wacom HID, SELinux with overlayfs use, AMD CCP cryptography, or iSCSI target functionality. The advisory also lists Red Hat Enterprise Linux Server - AUS and x86_64 Extended Life Cycle Long Life offerings among affected software.

Q: Does this update address more than security vulnerabilities?

Yes. In addition to five kernel security fixes, it fixes vhost behavior by resetting the vring metadata cache when a vring is reconfigured.

Q: How can I determine whether the advisory applies to a host?

Check whether the host has Red Hat kernel packages installed, including kernel-core, kernel-abi-stablelists, kernel-cross-headers, bpftool, or bpftool-debuginfo, and whether it uses one of the listed Red Hat Enterprise Linux offerings. The provided data does not include fixed or affected package version numbers.

Published Aug 25, 2026

Updated

Important: kernel security, bug fix, and enhancement update

Other sources

The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: net: atm: fix crash due to unvalidated vcc pointer in sigdsend() (CVE-2026-31411) kernel: HID: wacom: fix out-of-bounds read in wacomintuosbtirq (CVE-2026-43051) kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd() (CVE-2026-63888) Bug Fix(es) and Enhancement(s): vhost: reset the vring metadata cache on vring reconfiguration (JIRA:RHEL-224604) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat

Affected Software

28 affected componentsFixes available

Red Hat Red Hat Enterprise Linux Server - AUS

Red Hat Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life

redhat/kernel<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/bpftool<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/bpftool-debuginfo<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-abi-stablelists<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-core<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-cross-headers<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-debug<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-debug-core<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-debug-debuginfo<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-debug-devel<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-debug-modules<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-debug-modules-extra<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-debuginfo<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-devel<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-doc<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-headers<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-modules<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-modules-extra<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-tools<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-tools-debuginfo<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/kernel-tools-libs<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/perf<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/perf-debuginfo<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/python3-perf<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

redhat/python3-perf-debuginfo<4.18.0-372.208.1.el8_6

4.18.0-372.208.1.el8_6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/bpftool to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/bpftool-debuginfo to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-abi-stablelists to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-core to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-cross-headers to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-debug to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-debug-core to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-debug-debuginfo to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-debug-devel to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-debug-modules to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-debug-modules-extra to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-debuginfo to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-devel to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-doc to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-headers to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-modules to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-modules-extra to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-tools to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-tools-debuginfo to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/kernel-tools-libs to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/perf to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/perf-debuginfo to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/python3-perf to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade redhat/python3-perf-debuginfo to a version that resolves this vulnerability.
Fixed in 4.18.0-372.208.1.el8_6
Upgrade
Upgrade kernel to a version that resolves this vulnerability.
Patch RHEL-224604
Compensating control
Reboot the system after applying the kernel security/bugfix update so the changes take effect (required per advisory text).

Event History

Aug 25, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·02:32 PM

Data Sourced

via Red Hat·02:32 PM

Severity

Frequently Asked Questions

Which systems should be prioritized for this update?

Systems using the affected Red Hat kernel packages should be prioritized, particularly those with exposed or enabled ATM, Wacom HID, SELinux with overlayfs use, AMD CCP cryptography, or iSCSI target functionality. The advisory also lists Red Hat Enterprise Linux Server - AUS and x86_64 Extended Life Cycle Long Life offerings among affected software.

Does this update address more than security vulnerabilities?

Yes. In addition to five kernel security fixes, it fixes vhost behavior by resetting the vring metadata cache when a vring is reconfigured.

How can I determine whether the advisory applies to a host?

Check whether the host has Red Hat kernel packages installed, including kernel-core, kernel-abi-stablelists, kernel-cross-headers, bpftool, or bpftool-debuginfo, and whether it uses one of the listed Red Hat Enterprise Linux offerings. The provided data does not include fixed or affected package version numbers.

RHSA-2026:59473: Important: kernel security, bug fix, and enhancement update

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems should be prioritized for this update?

Does this update address more than security vulnerabilities?

How can I determine whether the advisory applies to a host?

Company

Resources

Contact

Frequently Asked Questions

Which systems should be prioritized for this update?

Does this update address more than security vulnerabilities?

How can I determine whether the advisory applies to a host?