This advisory covers security fixes for six kernel vulnerabilities identified by CVE identifiers CVE-2025-40237, CVE-2026-23110, CVE-2026-31692, CVE-2026-46099, CVE-2026-52973, and CVE-2026-53059. The fixes include calling exportfs_encode_fid with s_umount to address a filesystem notification issue, waking up the SCSI error handler to handle race conditions, adding missing capability checks in rtnetlink for peer network namespaces, correcting NOREF destination usage in IPv6 seg6 and rpl lightweight tunnels, dropping the CLONE_THREAD requirement for futex private default hash allocation, and fixing an out-of-bounds write caused by region_count overflow in device mapper logging. These vulnerabilities affect the Linux kernel core, which is critical to the operating system's security and stability. The advisory applies to Red Hat Enterprise Linux 10 and related CodeReady Linux Builder packages across multiple hardware architectures.

The vulnerabilities affect core kernel components and could potentially lead to system instability, incorrect behavior, or security breaches if exploited. The issues include race conditions, missing capability checks, improper memory handling, and out-of-bounds writes, which may be leveraged to compromise system integrity or cause denial of service. However, there are no known exploits in the wild at the time of this advisory. The overall security impact is rated as high by Red Hat Product Security.

Red Hat has released updated kernel packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 10 and related CodeReady Linux Builder packages should apply the provided kernel updates as soon as possible. Detailed instructions and updated packages are available in the Red Hat advisory RHSA-2026:45114 at https://access.redhat.com/errata/RHSA-2026:45114 and https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patches.