This advisory covers a kernel security update for Red Hat Enterprise Linux 8 that fixes several vulnerabilities: CVE-2026-31692 addresses a missing netlink_ns_capable() check in rtnetlink for peer network namespaces; CVE-2026-43116 ensures safe access to the master conntrack in netfilter's ctnetlink; CVE-2026-46150 fixes a false positive on permission events in fanotify; and CVE-2026-64530 resolves a use-after-free vulnerability due to a missing handler for TC_ACT_CONSUMED in the tcf_qevent_handle function within the network scheduler. The update improves the kernel's security posture by correcting these defects. Red Hat recommends prompt application of this update and rebooting the system to activate the fixes.

The vulnerabilities affect the Linux kernel's networking and permission event subsystems, potentially allowing unauthorized capability escalation, unsafe access to connection tracking data, incorrect permission event handling, and use-after-free conditions that could lead to system instability or security breaches. The kernel's fundamental role means these issues could impact overall system security if left unpatched. Red Hat rates the security impact as Important.

A security update is available from Red Hat for Red Hat Enterprise Linux 8 that addresses these vulnerabilities. Users should apply the update as described in the Red Hat advisory (https://access.redhat.com/articles/11258) and reboot their systems to ensure the fixes take effect. Red Hat recommends treating all kernel errata as security-relevant and advises against delaying updates.