Linux · Security advisory · July 7, 2026

RHSA-2026:36018: Security update for 72 packages

RHSA-2026:36018, released July 7, 2026, fixes 11 CVEs across 72 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
11
3 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0054
45th percentile

Priority of the 11 CVEs

Patch now 0 Urgent 3 High 8 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelRHEL 90:5.14.0-687.22.1.el9_8
kernel-64kRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-debugRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-debug-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-debug-develRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-debug-devel-matchedRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-debug-modulesRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-debug-modules-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-debug-modules-extraRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-develRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-devel-matchedRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-modulesRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-modules-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-64k-modules-extraRHEL 90:5.14.0-687.22.1.el9_8
kernel-abi-stablelistsRHEL 90:5.14.0-687.22.1.el9_8
kernel-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-debugRHEL 90:5.14.0-687.22.1.el9_8
kernel-debug-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-debug-develRHEL 90:5.14.0-687.22.1.el9_8
kernel-debug-devel-matchedRHEL 90:5.14.0-687.22.1.el9_8
kernel-debug-modulesRHEL 90:5.14.0-687.22.1.el9_8
kernel-debug-modules-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-debug-modules-extraRHEL 90:5.14.0-687.22.1.el9_8
kernel-debug-uki-virtRHEL 90:5.14.0-687.22.1.el9_8
kernel-develRHEL 90:5.14.0-687.22.1.el9_8
kernel-devel-matchedRHEL 90:5.14.0-687.22.1.el9_8
kernel-docRHEL 90:5.14.0-687.22.1.el9_8
kernel-modulesRHEL 90:5.14.0-687.22.1.el9_8
kernel-modules-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-modules-extraRHEL 90:5.14.0-687.22.1.el9_8
kernel-rtRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-64kRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-64k-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-64k-debugRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-64k-debug-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-64k-debug-develRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-64k-debug-modulesRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-64k-debug-modules-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-64k-debug-modules-extraRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-64k-develRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-64k-modulesRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-64k-modules-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-64k-modules-extraRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-debugRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-debug-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-debug-develRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-debug-modulesRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-debug-modules-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-debug-modules-extraRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-develRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-modulesRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-modules-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-rt-modules-extraRHEL 90:5.14.0-687.22.1.el9_8
kernel-toolsRHEL 90:5.14.0-687.22.1.el9_8
kernel-tools-libsRHEL 90:5.14.0-687.22.1.el9_8
kernel-tools-libs-develRHEL 90:5.14.0-687.22.1.el9_8
kernel-uki-virtRHEL 90:5.14.0-687.22.1.el9_8
kernel-uki-virt-addonsRHEL 90:5.14.0-687.22.1.el9_8
kernel-zfcpdumpRHEL 90:5.14.0-687.22.1.el9_8
kernel-zfcpdump-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-zfcpdump-develRHEL 90:5.14.0-687.22.1.el9_8
kernel-zfcpdump-devel-matchedRHEL 90:5.14.0-687.22.1.el9_8
kernel-zfcpdump-modulesRHEL 90:5.14.0-687.22.1.el9_8
kernel-zfcpdump-modules-coreRHEL 90:5.14.0-687.22.1.el9_8
kernel-zfcpdump-modules-extraRHEL 90:5.14.0-687.22.1.el9_8
libperfRHEL 90:5.14.0-687.22.1.el9_8
perfRHEL 90:5.14.0-687.22.1.el9_8
python3-perfRHEL 90:5.14.0-687.22.1.el9_8
rtlaRHEL 90:5.14.0-687.22.1.el9_8
rvRHEL 90:5.14.0-687.22.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-10263 ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] 9.3 0.0054 Exploitation Less Likely
Urgent CVE-2026-46155 linux: In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2_compo... 9.1 0.0048 None reported
Urgent CVE-2026-46316 linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache... 9.3 0.0034 None reported
High CVE-2026-46244 netfilter: nft_inner: Fix IPv6 inner_thoff desync 9.1 0.0042 None reported
High CVE-2026-43112 kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... 8.8 0.0035 None reported
High CVE-2026-46209 kernel-uek-core: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... 8.4 0.0014 None reported
High CVE-2026-46323 net: gro: don't merge zcopy skbs 8.4 0.0014 None reported
High CVE-2026-46116 xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete 8.4 0.0013 None reported
High CVE-2026-46259 linux: In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when reading... 8.4 0.0012 None reported
High CVE-2026-43276 linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix double destroy_workqueue on servi... 8.4 0.0012 None reported
High CVE-2026-46227 sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL 8.4 0.0010 None reported
Showing 1 to 11 of 11 1