Linux · Security advisory · July 9, 2026

RHSA-2026:36645: Security update for 72 packages

RHSA-2026:36645, released July 9, 2026, fixes 3 CVEs across 72 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV

CVEs closed

None rated Critical

Exploited

CVE-2026-53266

Exploitation more likely

Vendor assessment

Highest EPSS

0.0458

91st percentile

Priority of the 3 CVEs

Patch now 1
                                Urgent 0
                                High 2
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-debug	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-debug-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-debug-devel	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-debug-devel-matched	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-debug-modules	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-debug-modules-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-debug-modules-extra	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-devel	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-devel-matched	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-modules	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-modules-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-64k-modules-extra	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-abi-stablelists	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-debug	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-debug-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-debug-devel	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-debug-devel-matched	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-debug-modules	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-debug-modules-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-debug-modules-extra	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-debug-uki-virt	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-devel	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-devel-matched	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-doc	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-modules	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-modules-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-modules-extra	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-64k	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-64k-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-64k-debug	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-64k-debug-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-64k-debug-devel	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-64k-debug-modules	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-64k-debug-modules-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-64k-debug-modules-extra	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-64k-devel	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-64k-modules	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-64k-modules-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-64k-modules-extra	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-debug	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-debug-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-debug-devel	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-debug-modules	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-debug-modules-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-debug-modules-extra	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-devel	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-modules	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-modules-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-rt-modules-extra	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-tools	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-tools-libs	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-tools-libs-devel	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-uki-virt	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-uki-virt-addons	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-zfcpdump	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-zfcpdump-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-zfcpdump-devel	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-zfcpdump-devel-matched	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-zfcpdump-modules	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-zfcpdump-modules-core	RHEL 9	0:5.14.0-687.23.1.el9_8
kernel-zfcpdump-modules-extra	RHEL 9	0:5.14.0-687.23.1.el9_8
libperf	RHEL 9	0:5.14.0-687.23.1.el9_8
perf	RHEL 9	0:5.14.0-687.23.1.el9_8
python3-perf	RHEL 9	0:5.14.0-687.23.1.el9_8
rtla	RHEL 9	0:5.14.0-687.23.1.el9_8
rv	RHEL 9	0:5.14.0-687.23.1.el9_8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2026-53266	netfilter: bridge: make ebt_snat ARP rewrite writable	8.8	0.0093	KEVExploited
High	CVE-2026-46242	kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...	7.8	0.0458	None reported
High	CVE-2026-43074	kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer...	7.8	0.0048	None reported

Also fixes CVE-2026-53266

SUSE-SU-2026:22835-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 16.0
OPENSUSE-SU-2026:21388-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:2799-1
kernel-livepatch-SLE15-SP7-RT_Update_17 on sles 15.7
SUSE-SU-2026:2800-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7
RHSA-2026:71326
kernel on RHEL 10
ALAS2023-2026-1968
bpftool6.12, bpftool6.12-debuginfo, kernel-livepatch-6.12.94-123.174 and 15 more on amzn 2023
ELSA-2026-36645
kernel, kernel-abi-stablelists, kernel-core and 26 more on ol 9
ALSA-2026:36645
kernel, kernel-64k, kernel-64k-core and 71 more on almalinux 9

Vendor advisory

https://access.redhat.com/errata/RHSA-2026:36645

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo