RHSA-2026:41235HighCVSS 7.8

Red Hat Security Advisory: kernel security update

Published
July 17, 2026
Last Modified
July 30, 2026

🔗 CVE IDs covered (4)

CVE-2026-31684 →CVE-2026-43499 →CVE-2026-46116 →CVE-2026-53166 →

📋 Description

CVE-2026-31684 — kernel: net: sched: act_csum: validate nested VLAN headers CVE-2026-43499 — kernel: rtmutex: Use waiter::task instead of current in remove_waiter() CVE-2026-46116 — kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete CVE-2026-53166 — kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock

🎯 Affected products95

  • Red Hat Enterprise Linux Server (v. 7 ELS)
  • Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • bpftool-0:3.10.0-1160.156.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-0:3.10.0-1160.156.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-0:3.10.0-1160.156.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-0:3.10.0-1160.156.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.156.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.156.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.156.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.156.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.156.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.156.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • bpftool-debuginfo-0:3.10.0-1160.156.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • kernel-0:3.10.0-1160.156.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-0:3.10.0-1160.156.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-0:3.10.0-1160.156.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-0:3.10.0-1160.156.1.el7.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-0:3.10.0-1160.156.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-abi-whitelists-0:3.10.0-1160.156.1.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-bootwrapper-0:3.10.0-1160.156.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-bootwrapper-0:3.10.0-1160.156.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-0:3.10.0-1160.156.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-0:3.10.0-1160.156.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-0:3.10.0-1160.156.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-0:3.10.0-1160.156.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.156.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.156.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.156.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.156.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • kernel-debug-debuginfo-0:3.10.0-1160.156.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • +65 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: See the security bulletin for a detailed mitigation procedure.

🔗 References (7)