RHSA-2026:68131

MEDIUM5.5

Red Hat Security Advisory: kernel security update

Published Sep 16, 2026

Modified Today

Fix available

Details

Details:

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Packages(24 packages)

bpftool

Red Hat rhel_aus 8.6 baseosRed Hat rhel_eus_long_life 8.6 baseos

Fixed in:

0:4.18.0-372.214.1.el8_6

bpftool-debuginfo

Red Hat rhel_aus 8.6 baseosRed Hat rhel_eus_long_life 8.6 baseos

Fixed in:

0:4.18.0-372.214.1.el8_6

kernel

Red Hat rhel_aus 8.6 baseosRed Hat rhel_eus_long_life 8.6 baseos

Fixed in:

0:4.18.0-372.214.1.el8_6

kernel-abi-stablelists

Red Hat rhel_aus 8.6 baseosRed Hat rhel_eus_long_life 8.6 baseos

Fixed in:

0:4.18.0-372.214.1.el8_6

kernel-core

Red Hat rhel_aus 8.6 baseosRed Hat rhel_eus_long_life 8.6 baseos

Fixed in:

0:4.18.0-372.214.1.el8_6

kernel-debug

Red Hat rhel_aus 8.6 baseosRed Hat rhel_eus_long_life 8.6 baseos

Fixed in:

0:4.18.0-372.214.1.el8_6

kernel-debug-core

Red Hat rhel_aus 8.6 baseosRed Hat rhel_eus_long_life 8.6 baseos

Fixed in:

0:4.18.0-372.214.1.el8_6

kernel-debug-debuginfo

Red Hat rhel_aus 8.6 baseosRed Hat rhel_eus_long_life 8.6 baseos

Fixed in:

0:4.18.0-372.214.1.el8_6

kernel-debug-devel

Red Hat rhel_aus 8.6 baseosRed Hat rhel_eus_long_life 8.6 baseos

Fixed in:

0:4.18.0-372.214.1.el8_6

kernel-debug-modules

Red Hat rhel_aus 8.6 baseosRed Hat rhel_eus_long_life 8.6 baseos

Fixed in:

0:4.18.0-372.214.1.el8_6

References

https://access.redhat.com/errata/RHSA-2026:68131

https://access.redhat.com/security/updates/classification/#moderate

https://bugzilla.redhat.com/show_bug.cgi?id=2406712

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68131.json

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Upstream

Ecosystems

Red Hat rhel_aus 8.6 baseos Red Hat rhel_eus_long_life 8.6 baseos

Timeline

PublishedSep 16, 2026

ModifiedSep 16, 2026

RHSA-2026:68131 | Mondoo Vulnerability Intelligence