RHSA-2026:21556: Security update for 72 packages

RHSA-2026:21556, released June 24, 2026, fixes 20 CVEs across 72 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

1 rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0159

75th percentile

Priority of the 20 CVEs

Patch now 0
                                Urgent 1
                                High 19
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-debug	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-debug-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-debug-devel	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-debug-devel-matched	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-debug-modules	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-debug-modules-extra	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-devel	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-devel-matched	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-modules	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-modules-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-64k-modules-extra	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-abi-stablelists	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-debug	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-debug-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-debug-devel	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-debug-devel-matched	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-debug-modules	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-debug-modules-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-debug-modules-extra	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-debug-uki-virt	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-devel	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-devel-matched	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-doc	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-modules	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-modules-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-modules-extra	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-64k	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-64k-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debug	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-devel	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules-extra	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-64k-devel	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-64k-modules	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-64k-modules-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-64k-modules-extra	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-debug	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-debug-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-debug-devel	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-debug-modules	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-debug-modules-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-debug-modules-extra	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-devel	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-modules	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-modules-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-rt-modules-extra	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-tools	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-tools-libs	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-tools-libs-devel	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-uki-virt	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-uki-virt-addons	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-zfcpdump	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-devel	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-devel-matched	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-modules	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-modules-core	RHEL 9	0:5.14.0-687.12.1.el9_8
kernel-zfcpdump-modules-extra	RHEL 9	0:5.14.0-687.12.1.el9_8
libperf	RHEL 9	0:5.14.0-687.12.1.el9_8
perf	RHEL 9	0:5.14.0-687.12.1.el9_8
python3-perf	RHEL 9	0:5.14.0-687.12.1.el9_8
rtla	RHEL 9	0:5.14.0-687.12.1.el9_8
rv	RHEL 9	0:5.14.0-687.12.1.el9_8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2025-68366	linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect Th...	8.8	0.0020	None reported
High	CVE-2026-23455	kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng...	9.1	0.0159	None reported
High	CVE-2026-46195	smb: client: validate dacloffset before building DACL pointers	9.8	0.0068	None reported
High	CVE-2026-31685	netfilter: ip6t_eui64: reject invalid MAC header for all packets	9.4	0.0049	None reported
High	CVE-2026-43158	linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs...	8.8	0.0047	None reported
High	CVE-2026-43190	kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length befo...	8.2	0.0046	None reported
High	CVE-2026-31709	smb: client: validate the whole DACL before rewriting it in cifsacl	8.8	0.0035	None reported
High	CVE-2026-31408	Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold	8.8	0.0032	None reported
High	CVE-2026-43110	linux: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF ev...	8.8	0.0027	None reported
High	CVE-2026-43051	linux: In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intu...	8.1	0.0026	None reported
High	CVE-2025-38653	proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al	7.8	0.0018	None reported
High	CVE-2026-43303	mm/page_alloc: clear page->private in free_pages_prepare()	7.8	0.0017	None reported
High	CVE-2026-23392	netfilter: nf_tables: release flowtable after rcu grace period on error	8.8	0.0017	None reported
High	CVE-2025-71089	iommu: disable SVA when CONFIG_X86 is set	7.8	0.0016	None reported
High	CVE-2025-68183	linux: In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or...	7.8	0.0015	None reported
High	CVE-2025-68724	linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in as...	8.1	0.0014	None reported
High	CVE-2026-43027	linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to e...	7.8	0.0013	None reported
High	CVE-2026-43020	linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load...	7.8	0.0013	None reported
High	CVE-2026-31684	net: sched: act_csum: validate nested VLAN headers	7.8	0.0012	None reported
High	CVE-2026-43023	kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in sco_sock_c...	7.8	0.0010	None reported

Also fixes CVE-2025-68366

ELSA-2026-50112
kernel-uek, kernel-uek-core, kernel-uek-debug and 32 more on ol 10, ol 9
ELSA-2026-21556
kernel, kernel-abi-stablelists, kernel-core and 26 more on ol 9
ALSA-2026:21556
kernel, kernel-64k, kernel-64k-core and 71 more on almalinux 9
RLSA-2026:21556
kernel on rocky 9
ELSA-2026-50145
bpftool, kernel-uek, kernel-uek-container and 16 more on ol 8, ol 9
OPENSUSE-SU-2026:20287-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:20599-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 16.0
SUSE-SU-2026:0472-1
kernel-azure, kernel-source-azure, kernel-syms-azure on sles 15.7

Vendor advisory

https://access.redhat.com/errata/RHSA-2026:21556

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/rhsa-2026-21556">RHSA-2026:21556 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.