The Red Hat security advisory RHSA-2026:36531 provides a kernel live patch module update for Red Hat Enterprise Linux 8.8, specifically for kernel-4.18.0-477.97.1.el8_8. It addresses three vulnerabilities: CVE-2026-23401, a privilege escalation or denial of service in the Linux kernel KVM due to improper handling of shadow page table entries; CVE-2026-31402, a heap overflow in the NFSv4.0 LOCK replay cache; and CVE-2026-31419, a use-after-free vulnerability in the bonding driver leading to denial of service. The update is delivered as kpatch live patch modules that can be applied without rebooting. Red Hat rates the security impact as Important and provides detailed patch packages and instructions for remediation.

Successful exploitation of CVE-2026-23401 could allow privilege escalation or denial of service via the KVM subsystem. CVE-2026-31402 could lead to a heap overflow in the NFSv4.0 LOCK replay cache, potentially causing service disruption. CVE-2026-31419 involves a use-after-free in the bonding driver, which can result in denial of service. These vulnerabilities affect kernel stability and security, potentially allowing attackers to disrupt services or escalate privileges on affected systems.

Red Hat has released official kpatch live patch modules to address these vulnerabilities for kernel-4.18.0-477.97.1.el8_8 on Red Hat Enterprise Linux 8.8. Administrators should apply the provided kpatch updates as described in the Red Hat advisory RHSA-2026:36531 and the referenced article https://access.redhat.com/articles/11258 to remediate these issues. Since these are live patches, they can be applied without rebooting. No additional mitigation steps are indicated by the vendor.