RHSA-2026:99722: Important: kpatch-patch-6_12_0-211_16_1 and kpatch-patch-6_12_0-211_49_1 security update
Important: kpatch-patch-6120-211161 and kpatch-patch-6120-211491 security update
Other sources
This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-6.12.0-211.16.1.el102.Security Fix(es): kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) kernel: afunix: Set gcinprogress to true in unixgc() (CVE-2026-53361) kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705) kernel: net: tun: bound receive headroom (CVE-2026-81000) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 6_12_0-211_16_1-2-12.el10_2 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 6_12_0-211_49_1-2-4.el10_2 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 6_12_0-211_16_1-debuginfo-2-12.el10_2 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 6_12_0-211_49_1-debuginfo-2-4.el10_2 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 6_12_0-211_16_1-debugsource-2-12.el10_2 - Upgrade
Upgrade
redhat/kpatch-patchto a version that resolves this vulnerability.Fixed in 6_12_0-211_49_1-debugsource-2-4.el10_2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch kpatch-patch-6_12_0-211_16_1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch kpatch-patch-6_12_0-211_49_1
Event History
Frequently Asked Questions
Which running kernel is this live patch module intended for?
The module is targeted for kernel-6.12.0-211.16.1.el10_2. It is loaded with the kpatch command-line utility to modify a running kernel.
Which security issues are addressed by this update?
It fixes CVE-2026-31709 in SMB client cifsacl DACL validation, CVE-2026-53361 in AF_UNIX garbage collection, CVE-2026-74705 involving a potential use-after-free in UDP tunnel segmentation, and CVE-2026-81000 in TUN receive headroom handling.
Which platforms are listed as affected by this advisory?
The advisory lists Red Hat Enterprise Linux for x86_64 and Power little endian across Extended Life Cycle, Extended Update Support, and four-year support offerings.