RHSA-2026:73187HighCVSS 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Published
September 29, 2026
Last Modified
October 14, 2026

🔗 CVE IDs covered (5)

CVE-2026-43074 →CVE-2026-43499 →CVE-2026-46242 →CVE-2026-53166 →CVE-2026-74480 →

📋 Description

CVE-2026-43074 — kernel: eventpoll: defer struct eventpoll free to RCU grace period CVE-2026-43499 — kernel: rtmutex: Use waiter::task instead of current in remove_waiter() CVE-2026-46242 — kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF CVE-2026-53166 — kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock CVE-2026-74480 — kernel: net: bridge: stop fast-leave after deleting a port group

🎯 Affected products54

  • NVIDIA for RHEL 10
  • kernel-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-0:6.12.0-259.26.el10nv.src as a component of NVIDIA for RHEL 10
  • kernel-64k-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-core-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-core-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-debuginfo-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-devel-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-devel-matched-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-modules-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-modules-core-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-modules-extra-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debuginfo-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-devel-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-devel-matched-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-modules-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-modules-core-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-modules-extra-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-abi-stablelists-0:6.12.0-259.26.el10nv.noarch as a component of NVIDIA for RHEL 10
  • kernel-core-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-core-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-debuginfo-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-devel-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-devel-matched-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-modules-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-modules-core-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-modules-extra-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debuginfo-0:6.12.0-259.26.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • +24 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: See the security bulletin for a detailed mitigation procedure. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: If bridge multicast snooping is not required, it can be disabled to prevent the vulnerable code path from being reached: ``` echo 0 > /sys/class/net/<bridge>/bridge/multicast_snooping ``` The br_multicast_leave_group() code path is only reachable when multicast snooping is active, so disabling it eliminates exposure to this flaw. Alternatively, avoid toggling multicast_to_unicast on bridge ports after it has been enabled. If multicast snooping is required, ensure that multicast_to_unicast is either left at its default (disabled) or, once enabled on a port, is not subsequently disabled while the port has active multicast group memberships.

🔗 References (15)