The advisory covers a set of kernel live patch modules for Red Hat Enterprise Linux 9.2 that fix three security vulnerabilities in the Linux kernel 5.14.0-284.117.1.el9_2. CVE-2026-23401 addresses a privilege escalation or denial of service in the KVM subsystem caused by improper handling of shadow page table entries. CVE-2026-31402 fixes a heap overflow vulnerability in the NFSv4.0 LOCK replay cache within the nfsd kernel service. CVE-2026-31419 resolves a use-after-free vulnerability in the bonding driver that can lead to denial of service. The patches are delivered as kpatch live patch modules, allowing modification of running kernel code without reboot. Red Hat classifies the update as important and provides detailed patch packages and instructions. The affected products include various Red Hat Enterprise Linux 9.2 variants for x86_64 and ppc64le architectures.

Successful exploitation of CVE-2026-23401 could allow an attacker to escalate privileges or cause denial of service via the KVM subsystem. CVE-2026-31402 could lead to a heap overflow in the NFS server, potentially causing denial of service or other impacts. CVE-2026-31419 involves a use-after-free in the bonding driver, which can cause denial of service by crashing the kernel. These vulnerabilities affect kernel stability and security, potentially allowing attackers to disrupt services or gain elevated privileges on affected systems.

Red Hat has released official kpatch live patch modules that address these vulnerabilities for the Linux kernel version 5.14.0-284.117.1.el9_2. Users should apply the provided kpatch updates as detailed in the Red Hat advisory RHSA-2026:36532 to remediate these issues. The advisory includes instructions and links for applying the updates. Since these are live patches, they can be applied without rebooting the system. Patch status is confirmed as available and official fixes are provided.