Critical Kernel Security Update for bpftool and Related Packages
Summary
RHSA-2026:84793: Red Hat Security Advisory: kernel security update. Affects bpftool versions < 0:4.18.0-477.175.1.el8_8. Fixed in 0:4.18.0-477.175.1.el8_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The bpftool package is a utility for managing and inspecting BPF (Berkeley Packet Filter) programs in the Linux kernel. It provides users with the ability to interact with BPF features, which are crucial for network performance and security monitoring. This package, along with its dependencies such as kernel and kernel-debug, is integral to the functioning of various system-level operations in Red Hat Enterprise Linux (RHEL) environments.
Vulnerability Detail
The vulnerability identified in this advisory (CVE-2026-43450, CVE-2026-46149, CVE-2026-53062, CVE-2026-63802, CVE-2026-63920, CVE-2026-63922, CVE-2026-63924) poses a significant risk to systems running affected versions of the kernel and related packages. The flaws may allow an attacker to escalate privileges or execute arbitrary code, potentially compromising the integrity and confidentiality of the system. The vulnerabilities stem from improper handling of certain operations within the kernel, which can be exploited under specific conditions.
How To Fix
Minimum fixed version
0:4.18.0-477.175.1.el8_8
This is the first release that contains the fix.
sudo dnf update bpftoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected systems and monitor for unusual activity until the packages are updated. Additionally, disabling certain kernel features that utilize BPF may mitigate the risk until a patch is applied.
Conclusion
In summary, the kernel security update addresses critical vulnerabilities affecting the bpftool and related packages in Red Hat Enterprise Linux. Users are strongly advised to update their systems to the patched versions to mitigate risks associated with these vulnerabilities.
See every vulnerability recorded for bpftool →
FAQ
The CVSS score of this vulnerability is 7.1, indicating a high severity level.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
Exploitation of this vulnerability could lead to privilege escalation, allowing attackers to execute arbitrary code and compromise system integrity.
Yes, limiting access to the affected systems and disabling certain kernel features that utilize BPF can help mitigate the risk temporarily.
If immediate updates are not possible, ensure that your systems are monitored closely for any unusual activity and consider implementing additional security measures.
Related vulnerabilities
Recent vulnerabilities recorded for bpftool.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
