The advisory covers security fixes for eight CVEs affecting the Linux kernel in Red Hat Enterprise Linux 10 and its derivatives. Vulnerabilities include an out-of-bounds read in the rxrpc RESPONSE authenticator parser (CVE-2026-31636), clearing of skb2->cb[] in IPv6 ICMP error generation (CVE-2026-43038), a potential race condition in tcp_v6_syn_recv_sock() (CVE-2026-43198), a complete fix for a double free in the qla2xxx SCSI driver (CVE-2026-43414), workqueue list corruption in RDMA/iwcm (CVE-2026-45898), removal of a user-triggerable WARN_ON() in RDMA/mana (CVE-2026-46117), validation of rx_hash_key_len in RDMA/mana (CVE-2026-46145), and a race condition fix in nvmet-tcp (CVE-2026-46135). The advisory also addresses unexpected SELinux execmem denials after a prior fix. The update is rated as Important by Red Hat Product Security and requires a system reboot. Detailed patch instructions are available in the vendor advisory.

These vulnerabilities affect the Linux kernel core, potentially leading to out-of-bounds memory reads, race conditions, double free errors, and kernel warnings that could impact system stability and security. The issues span multiple kernel subsystems including networking (rxrpc, ipv6, tcp), storage (scsi), and RDMA components. Exploitation could lead to denial of service or other kernel-level impacts. No known exploits in the wild have been reported. The update mitigates these risks by correcting the underlying code defects.

A security update for the Linux kernel packages is available from Red Hat for Red Hat Enterprise Linux 10 and related variants. Administrators should apply the update as described in the Red Hat advisory RHSA-2026:30129 (https://access.redhat.com/errata/RHSA-2026:30129) and reboot affected systems to ensure the fixes take effect. No additional mitigation steps are indicated by the vendor advisory.