This Red Hat security advisory addresses seven distinct vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 8.6. The issues include use-after-free vulnerabilities in geneve_find_dev() (CVE-2025-21858) and mlxsw spectrum_mr multicast route stats update (CVE-2025-68800), denial of service and memory corruption in RDMA umad (CVE-2026-23243), netfilter nf_tables flowtable release error (CVE-2026-23392), unsafe access to master conntrack in netfilter ctnetlink (CVE-2026-43116), freemap adjustment errors in xfs when adding xattrs (CVE-2026-43158), and rejection of userspace cifs.spnego descriptions in smb client (CVE-2026-46243). These vulnerabilities affect the core Linux kernel components and have been fixed in updated kernel packages for Red Hat Enterprise Linux 8.6. The advisory references Red Hat's errata RHSA-2026:26570 for detailed patch information.

The vulnerabilities could lead to use-after-free conditions, denial of service, memory corruption, and unsafe kernel memory access, potentially impacting system stability and security. Exploitation could allow attackers to cause crashes or corrupt kernel memory, which may affect system availability or integrity. No known exploits in the wild have been reported at this time.

Red Hat has released an important security update for the Linux kernel packages in Red Hat Enterprise Linux 8.6 that addresses these vulnerabilities. Users should apply the update as described in Red Hat advisory RHSA-2026:26570 and reboot affected systems to ensure the fixes take effect. Patch status is confirmed as fixed in the updated kernel packages. No additional mitigation actions are specified by the vendor.