RHSA-2026:34911

Details:

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)

• kernel: rxrpc: Fix potential UAF after skb_unshare() failure (CVE-2026-45998)

• kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)

• kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244)

• kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)

• kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

• kernel: kernel: ipv6 frag escape ()

Bug Fix(es) and Enhancement(s):

• crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [rhel-10.2.z] (JIRA:RHEL-182537)

• [ThinkPad Avon/Mario +RHEL 10.2]The OS hang up with CapsLock fliker (JIRA:RHEL-185110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.