The Red Hat security advisory RHSA-2026:36530 describes fixes for three kernel vulnerabilities affecting Red Hat Enterprise Linux 8 with kernel version 4.18.0-553.53.1.el8_10. CVE-2026-23401 involves privilege escalation or denial of service in the Linux kernel KVM subsystem caused by improper handling of shadow page table entries. CVE-2026-31402 is a heap overflow in the NFSv4.0 LOCK replay cache within the kernel's nfsd component. CVE-2026-31419 is a use-after-free vulnerability in the bonding driver that can lead to denial of service. These vulnerabilities can be mitigated by applying the provided kpatch live patch modules targeting the affected kernel version. The advisory does not provide CVSS scores but classifies the impact as Important.

Successful exploitation of CVE-2026-23401 could allow privilege escalation or denial of service via the KVM subsystem. CVE-2026-31402 could lead to a heap overflow in the NFSv4.0 LOCK replay cache, potentially causing denial of service or other impacts. CVE-2026-31419 could cause denial of service due to a use-after-free condition in the bonding driver. These vulnerabilities affect kernel stability and security, potentially allowing attackers to disrupt services or escalate privileges on affected systems.

Red Hat has released kpatch live patch modules for kernel-4.18.0-553.53.1.el8_10 that address these vulnerabilities. Users should apply the relevant kpatch updates as described in the Red Hat advisory RHSA-2026:36530 and the referenced article https://access.redhat.com/articles/11258 to remediate these issues. Since these are live patches, they can be applied without rebooting the system. No additional mitigation steps are indicated by the vendor advisory.