RHSA-2026:98638: Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929) kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293) kernel: sunrpc: pin svcxprt across the asynchronous TLS handshake callback (CVE-2026-72222) kernel: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (CVE-2026-72221) kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CVE-2026-89638) kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488) kernel: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (CVE-2026-90315) Bug Fix(es) and Enhancement(s): [RHEL10.3z] watchdog: System can panic during reboot when pretimeout is disabled (0) (JIRA:RHEL-255346) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-abi-stableliststo a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-debugto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-debug-develto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-debug-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-debug-uki-virtto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-develto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-devel-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-docto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-headersto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-modules-extra-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-debug-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-develto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-toolsto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-uki-virtto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-uki-virt-addonsto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/libperf-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/perfto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/perf-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/python3-perfto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/rtlato a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/rtla-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/rvto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/rv-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-debuginfo-common-s390xto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-zfcpdumpto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-zfcpdump-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-zfcpdump-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-zfcpdump-develto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-zfcpdump-devel-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-zfcpdump-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-debuginfo-common-ppc64leto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-core-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-core-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-debuginfo-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-devel-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-devel-matched-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-modules-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-modules-core-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debug-modules-extra-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-debuginfo-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-devel-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-devel-matched-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-modules-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-modules-core-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 64k-modules-extra-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-debugto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-debug-develto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-debug-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-debuginfo-common-aarch64to a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-develto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-devel-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-headersto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-modules-extra-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-core-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-core-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-debuginfo-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-devel-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-modules-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-modules-core-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debug-modules-extra-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-debuginfo-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-devel-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-modules-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-modules-core-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 64k-modules-extra-6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-develto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-toolsto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-uki-virtto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-uki-virt-addonsto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/libperf-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/perfto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/perf-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/python3-perfto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/rtlato a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/rtla-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/rvto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/rv-debuginfoto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-cross-headersto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/libperfto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3 - Upgrade
Upgrade
redhat/kernel-cross-headersto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Upgrade
Upgrade
redhat/libperfto a version that resolves this vulnerability.Fixed in 6.12.0-264.15.1.el10_3.aa - Operational
Reboot the system for the kernel update to take effect.
Event History
Frequently Asked Questions
Which kernel package variants are covered by this update?
The update covers redhat/kernel, redhat/kernel-rt, redhat/kernel-core, and the listed debug, debuginfo, devel, and devel-matched kernel package variants.
Does the update include any non-security fixes relevant to system operations?
Yes. It includes a RHEL 10.3z watchdog fix for a system panic during reboot when watchdog pretimeout is disabled.
Which vulnerability classes are identified in the advisory?
The advisory identifies Buffer Overflow and Use After Free weaknesses. The listed fixes also cover SCTP, mlx5, SunRPC TLS handshake handling, SMB client permissions, Open vSwitch connection-tracking teardown, and PCI sysfs lockdown checks.