RHSA-2026:60486: Important: kernel security update
Important: kernel security update
Other sources
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: packet: use consistent hardheaderlen in non-ring send paths () kernel: net: ipv6: use-after-free in fib6rulesuppress due to stale res->rt6 pointer (CVE-2026-74581) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-abi-stableliststo a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-debugto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-debug-develto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-debug-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-debug-uki-virtto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-develto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-docto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-headersto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-debug-kvmto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-develto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-kvmto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-toolsto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-uki-virtto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-uki-virt-addonsto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/libperf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/perfto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/perf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/python3-perfto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/rtlato a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/rvto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-debuginfo-common-s390xto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-zfcpdumpto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-zfcpdump-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-zfcpdump-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-zfcpdump-develto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-zfcpdump-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-debuginfo-common-ppc64leto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-core-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-core-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-debuginfo-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-devel-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-devel-matched-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-modules-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-modules-core-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-modules-extra-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debuginfo-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-devel-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-devel-matched-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-modules-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-modules-core-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-modules-extra-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-debugto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-debug-develto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-debug-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-debuginfo-common-aarch64to a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-develto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-devel-matchedto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-headersto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-core-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-core-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-debuginfo-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-devel-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-modules-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-modules-core-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-modules-extra-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debuginfo-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-devel-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-modules-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-modules-core-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-modules-extra-5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-develto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-toolsto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/libperf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/perfto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/perf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/python3-perfto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/rtlato a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/rvto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-cross-headersto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/libperfto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6 - Upgrade
Upgrade
redhat/kernel-cross-headersto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
redhat/libperfto a version that resolves this vulnerability.Fixed in 5.14.0-570.136.1.el9_6.aa - Upgrade
Upgrade
kernel (Red Hat errata updates)to a version that resolves this vulnerability.Patch CVE-2026-74581 - Upgrade
Upgrade
kernel (Red Hat errata updates)to a version that resolves this vulnerability.Patch kernel: packet: use consistent hard_header_len in non-ring send paths () - Operational
Reboot the system after applying the Red Hat kernel update so the update takes effect (required per the advisory).
Event History
Frequently Asked Questions
Which installed packages should be checked when assessing exposure?
Check for the Red Hat kernel package variants listed in the advisory: kernel, kernel-rt, kernel-core, and the kernel-debug package family, including associated debuginfo and devel packages.
What vulnerability class is addressed by the identified CVE?
CVE-2026-74581 addresses a use-after-free issue in IPv6 routing rule suppression, caused by a stale res->rt6 pointer in fib6_rule_suppress.
Is there enough information here to determine whether a particular system configuration is exploitable?
No. The advisory identifies kernel and IPv6 routing code, but does not state affected versions, required configuration, attack prerequisites, or whether default configurations are vulnerable.