Which CVE IDs does RHSA-2026:28740 cover?

RHSA-2026:28740 covers the following CVE IDs: CVE-2026-43037. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:28740?

RHSA-2026:28740 has a CVSS v3 base score of 8.8, published by Red Hat Product Security.

Which products are affected by RHSA-2026:28740?

RHSA-2026:28740 affects 36 products, including: Red Hat Enterprise Linux BaseOS EUS (v.9.6); kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6); kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6); kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6); kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6); and others — see the full list on the advisory page.

RHSA-2026:28740CriticalCVSS 8.8

Red Hat Security Advisory: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update

Vendor

Red Hat Product Security

Published

June 24, 2026

Last Modified

August 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-43037 →

📋 Description

CVE-2026-43037 — kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

🎯 Affected products36

Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-0:1-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-debuginfo-0:1-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_116_1-debugsource-0:1-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-0:1-16.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-debuginfo-0:1-16.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_17_1-debugsource-0:1-16.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-0:1-7.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-debuginfo-0:1-7.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_39_1-debugsource-0:1-7.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-0:1-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-debuginfo-0:1-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_66_1-debugsource-0:1-6.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
kpatch-patch-5_14_0-570_94_1-0:1-4.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)
+6 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time. ~~~ How do I blacklist a kernel module to prevent it from loading automatically? https://access.redhat.com/solutions/41278 ~~~ We may also want to detection and monitoring an affected system as below: ~~~ Monitor for exploitation attempts: # Enable kernel audit for IPv6 tunnel operations auditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel # Monitor system logs for kernel panics/crashes journalctl -k -p err -f | grep -i "ip6_tunnel\|icmp\|stack" ~~~

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products36

✅ Remediation

🔗 References (4)