RHSA-2026:25534CriticalCVSS 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Published
June 12, 2026
Last Modified
August 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-43037 →

📋 Description

CVE-2026-43037 — kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

🎯 Affected products46

  • NVIDIA for RHEL 10
  • kernel-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-0:6.12.0-212.10.el10nv.src as a component of NVIDIA for RHEL 10
  • kernel-64k-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-core-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-core-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-debuginfo-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-modules-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-modules-core-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-modules-extra-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debuginfo-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-modules-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-modules-core-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-modules-extra-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-abi-stablelists-0:6.12.0-212.10.el10nv.noarch as a component of NVIDIA for RHEL 10
  • kernel-core-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-core-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-debuginfo-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-devel-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-devel-matched-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-modules-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-modules-core-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-modules-extra-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debuginfo-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debuginfo-common-aarch64-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-devel-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-devel-matched-0:6.12.0-212.10.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-doc-0:6.12.0-212.10.el10nv.noarch as a component of NVIDIA for RHEL 10
  • +16 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time. ~~~ How do I blacklist a kernel module to prevent it from loading automatically? https://access.redhat.com/solutions/41278 ~~~ We may also want to detection and monitoring an affected system as below: ~~~ Monitor for exploitation attempts: # Enable kernel audit for IPv6 tunnel operations auditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel # Monitor system logs for kernel panics/crashes journalctl -k -p err -f | grep -i "ip6_tunnel\|icmp\|stack" ~~~

🔗 References (5)