The advisory covers a kernel live patch module for Red Hat Enterprise Linux 9.6 Extended Update Support, specifically for kernel-5.14.0-570.17.1.el9_6. It resolves three vulnerabilities: CVE-2026-23401, a privilege escalation or denial of service in the Linux kernel KVM due to improper handling of shadow page table entries; CVE-2026-31402, a heap overflow in the NFSv4.0 LOCK replay cache; and CVE-2026-31419, a use-after-free in the bonding driver causing denial of service. The update is distributed as multiple kpatch-patch packages. The vendor rates the impact as Important and provides official patches for the affected kernel versions.

Successful exploitation of CVE-2026-23401 could allow privilege escalation or denial of service via KVM. CVE-2026-31402 could lead to a heap overflow in the NFS daemon, potentially causing service disruption. CVE-2026-31419 involves a use-after-free in the bonding driver, which can result in denial of service. These vulnerabilities affect kernel stability and security, potentially impacting system availability and integrity.

Red Hat has released official kernel live patch updates (kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1) to address these vulnerabilities. Users should apply these updates promptly to mitigate the risks. For detailed update instructions, refer to Red Hat's official advisory and article https://access.redhat.com/articles/11258. No additional mitigations are specified or required beyond applying the provided patches.