RHSA-2026:47633

Details:

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

• kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)

• kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)

• kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

• kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

• kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)

• kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)

• kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)

• kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)

• kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135)

Bug Fix(es) and Enhancement(s):

• [FJ8.6 Bug]: Backport request of "mm: swap: get rid of livelock in swapin readahead" to RHEL 8.4 AUS (JIRA:RHEL-182028)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.