Critical Kernel Vulnerability in Red Hat Enterprise Linux 9: Security Advisory RHSA-2026:43307
Summary
RHSA-2026:43307: Red Hat Security Advisory: kernel security, bug fix, and enhancement update. Affects kernel-64k-debug-debuginfo versions < 0:5.14.0-687.29.1.el9_8. Fixed in 0:5.14.0-687.29.1.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel is the core component of the operating system, responsible for managing system resources and facilitating communication between hardware and software. Red Hat Enterprise Linux 9 provides a stable and secure environment for enterprise applications. However, vulnerabilities in the kernel can lead to severe security risks, including unauthorized access and system instability.
Vulnerability Detail
The vulnerability identified in the kernel (CVE-2025-71113, CVE-2026-23110, CVE-2026-46150, CVE-2026-46215, CVE-2026-53071) allows attackers to exploit weaknesses in the kernel's handling of system calls, potentially leading to privilege escalation. This could result in unauthorized access to sensitive data or control over system resources. The CVSS score for this vulnerability is 7.8, indicating a high severity level that necessitates immediate attention.
How To Fix
Minimum fixed version
0:5.14.0-687.29.1.el9_8
This is the first release that contains the fix.
sudo dnf update kernel-64k-debug-debuginfoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to sensitive system calls or limit user permissions until the patch is applied. However, this is not a permanent solution and should only be used as a stopgap.
Conclusion
The kernel vulnerability in Red Hat Enterprise Linux 9 poses a significant risk to system security. Immediate action is required to update the affected packages to the patched version to mitigate potential threats. Regular monitoring and vulnerability assessments are essential to maintain a secure environment.
See every vulnerability recorded for kernel-64k-debug-debuginfo →
FAQ
The vulnerability can lead to privilege escalation, allowing attackers to gain unauthorized access to system resources and sensitive data.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot apply the patch immediately, consider implementing temporary access restrictions to sensitive system calls and monitor your system for unusual activity.
Regularly check for vulnerabilities and updates, ideally on a weekly basis, to ensure your system remains secure.
Vulert monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json, providing real-time insights without requiring code access.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-64k-debug-debuginfo.
