Red Hat has released a critical security update for a special build of the Linux kernel packages used in Red Hat Enterprise Linux for NVIDIA ARM 64 (aarch64). This update addresses multiple vulnerabilities identified by CVE identifiers such as CVE-2026-31431, CVE-2026-43037, CVE-2026-43284, CVE-2026-46300, CVE-2026-46333, and others. The fixes include reverting to operating out-of-place in crypto algorithms, clearing kernel buffer fields to prevent errors, and patching local privilege escalation vulnerabilities in the ESP/XFRM subsystem. The advisory references a kernel version 6.12.0-231.12.el10nv and requires a system reboot after applying the update. The vendor advisory provides detailed information and instructions for applying the update.

The vulnerabilities fixed in this kernel update are rated critical by Red Hat Product Security. They include local privilege escalation vulnerabilities that could allow an unprivileged user to gain elevated privileges, potentially compromising system security. Other fixes address kernel memory handling bugs that could lead to system instability or information disclosure. No known exploits in the wild have been reported at this time.

A security update for the kernel packages is available from Red Hat for Red Hat Enterprise Linux for NVIDIA ARM 64 (aarch64). Users should apply the update as described in the Red Hat advisory (https://access.redhat.com/articles/11258) and reboot affected systems to ensure the fixes take effect. This update addresses all listed vulnerabilities and is the official fix. No additional mitigation steps are required beyond applying the update and rebooting.