The vulnerability is "Dirty Frag," a universal Local Privilege Escalation (LPE) flaw in the Linux kernel's ESP XFRM component (CVE-2026-43284), with a CVSS 3.1 score of 8.8 (High). Affected kernel versions are from 4.11 up to but not including 5.10.255, from 5.12 up to but not including 5.15.205, from 5.16 up to but not including 6.1.171, from 6.2 up to but not including 6.6.138, and from 6.7 up to but not including 6.12.87. The fixed versions are 5.10.255, 5.15.205, 6.1.171, 6.6.138, 6.12.87, 6.18.28, and 7.0.5, and a system reboot is required after applying the update.
Red Hat Product Errata RHSA-2026:16202 - Security Advisory Issued: 2026-05-12 Updated: 2026-05-12 RHSA-2026:16202 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x Fixes BZ - 2467771 - CVE-2026-43284 kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVEs CVE-2026-43284 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 SRPM kernel-5.14.0-70.179.1.el9_0.src.rpm SHA-256: 222eb92dd461d8b3be1efa3e1a1de158911eef890146353c18cc4b423ccfcb7c ppc64le bpftool-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 2601262e9833ca2ccbeda6135a9887093c1f3e180b199d1cece3c2e0d9fe4ab2 bpftool-debuginfo-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: bf7fc95faac0ba3a5ad75f8007501aec8e41044a7eaa9d2c6bbb5054e8934a81 bpftool-debuginfo-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: bf7fc95faac0ba3a5ad75f8007501aec8e41044a7eaa9d2c6bbb5054e8934a81 kernel-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 340aaa80fec28c7d85b17ea565967e405d2c8554bbde7ecba730d05c1ff0f465 kernel-abi-stablelists-5.14.0-70.179.1.el9_0.noarch.rpm SHA-256: cc48fc8ee4430a4be3fdfe1681e3e1d60f2e13a613bd5619ab7f0b3f7af7d738 kernel-core-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 6074005c4e268ca13e3b0594b82e98d3acfd8afb864730254147ce8b6e2cd2e1 kernel-debug-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: ca5e5c9aca2df55403d9184cafd9b2552d95feb190b5f5074d6a82ba8aa43c02 kernel-debug-core-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 50857e9f4d9db86bc278ba4ef134bc1cf922fb9e90c5f6091fb0fa5536bbb2e1 kernel-debug-debuginfo-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: a13458ce93a2b805bf886eba0d7c630db885d12445ae527b92490d52259ccc3f kernel-debug-debuginfo-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: a13458ce93a2b805bf886eba0d7c630db885d12445ae527b92490d52259ccc3f kernel-debug-devel-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 245b9a44aade9457999cbd2500278019672d6f084c58b76691472809a86155e7 kernel-debug-devel-matched-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 69bd4232f2479c073027625380f840f356ee871fdbb869bdaa2e259914639f8b kernel-debug-modules-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: dd4354de573a0eeca90498c1cde7beac8f95af51fda5b61d04825cc3d32d8d81 kernel-debug-modules-extra-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 9d8b13d92cc5686e8521ad642c61bc582bc9832cc3af0d187e1b254880c7572c kernel-debuginfo-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 899149c6f2b9bc2ae53f2947c08abde448192b4b2b3a151c641ed45f36eb4c33 kernel-debuginfo-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 899149c6f2b9bc2ae53f2947c08abde448192b4b2b3a151c641ed45f36eb4c33 kernel-debuginfo-common-ppc64le-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 534b75d15c4a56cb87f50a977b4720ed015a162382d175ca210ec7994d429936 kernel-debuginfo-common-ppc64le-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 534b75d15c4a56cb87f50a977b4720ed015a162382d175ca210ec7994d429936 kernel-devel-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 207b84cabd7ed7290a10ba18a802c7766782fb3fc44462ec26cc033547f0be5e kernel-devel-matched-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 43df74586f0e48bd3fe5bb390fe8046a7bb5aadc1a0d4e095f54744c0c9a6e01 kernel-doc-5.14.0-70.179.1.el9_0.noarch.rpm SHA-256: 80a12628f10aa9956ec41632a86bf910c79952cd8ccef23453054717b0bf9453 kernel-headers-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 4a103d100474fea1451b01264825da051f83ed7eeb4207696cfd1de2c754ce70 kernel-modules-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 3e86661694ae298b642b81e074c82be61e766fe555de6d0b94db72e94e66a7ec kernel-modules-extra-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 34c0c993fa67e1016073aa024b6c50306a0c3cf6926586cafae3063867fc54de kernel-tools-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 8d11e93acac25b7d0e593fe68b50a23301bd4d63a4f7ee5b444b605e9a615c02 kernel-tools-debuginfo-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: d871d2215160c944cf508b662dd1083d9ec877f8aed3a17606e72ba692e82a18 kernel-tools-debuginfo-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: d871d2215160c944cf508b662dd1083d9ec877f8aed3a17606e72ba692e82a18 kernel-tools-libs-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 09d9bbce3ccd356ce420c34636597bf21fb5022163494e072f1d86c40cbd1f24 perf-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: c6114e9c0b5a97df7906d9c961fb07cf702a89b022942a6c63b7563492700c4d perf-debuginfo-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 0e52d4afb1d2f3eec1a7036d60a5238e21f83a572495daf0f36cbc74188235d7 perf-debuginfo-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 0e52d4afb1d2f3eec1a7036d60a5238e21f83a572495daf0f36cbc74188235d7 python3-perf-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 488bc262ed099c1a957bc0d5d6f182bbcbc855fc9368a38ad981b08b5c9477c1 python3-perf-debuginfo-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 327e211a1844ff5b7e1dd1e7a9599cec995524d6e0d7e5a6902f4945c96b0d06 python3-perf-debuginfo-5.14.0-70.179.1.el9_0.ppc64le.rpm SHA-256: 327e211a1844ff5b7e1dd1e7a9599cec995524d6e0d7e5a6902f4945c96b0d06 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 SRPM kernel-5.14.0-70.179.1.el9_0.src.rpm SHA-256: 222eb92dd461d8b3be1efa3e1a1de158911eef890146353c18cc4b423ccfcb7c x86_64 bpftool-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: b30c31bc3444ad4be17e8f9b65d59a6054911f710a22a42c444576ab810c200f bpftool-debuginfo-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: c280c233a02909358ea99ee9076065472aae6b448963ddb9e7b27629e04e9736 bpftool-debuginfo-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: c280c233a02909358ea99ee9076065472aae6b448963ddb9e7b27629e04e9736 kernel-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: f12cfeaa6fcbce3a6116e5b8d739c922ce1d51b10c611917f28e942760085575 kernel-abi-stablelists-5.14.0-70.179.1.el9_0.noarch.rpm SHA-256: cc48fc8ee4430a4be3fdfe1681e3e1d60f2e13a613bd5619ab7f0b3f7af7d738 kernel-core-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: c430c9dafd52817df996d9c3903f3abc30a3ccfc7fa36afe8139c206315d1834 kernel-debug-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 103a5d54ced3dbe4a468a8115b2fa5c33226aabf4e5a1824dc23f68fcb51f5fd kernel-debug-core-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 3719e0eee6f35bec5759eab331f21bb5ed9c38d4a7a6b77d90daf802dc801eec kernel-debug-debuginfo-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 0d30a3a819eadc97a21c8689c66d5727099915b6d7b239ac1dcdafae555d0bfa kernel-debug-debuginfo-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 0d30a3a819eadc97a21c8689c66d5727099915b6d7b239ac1dcdafae555d0bfa kernel-debug-devel-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 5bab21823fe976c131fb2f5a3384b9785c1b7b1e5dbd39eca32d4219be823341 kernel-debug-devel-matched-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 73b4c5f60b693d728b3c8adf6232af083e0f15e2e153c07d62d820add09ede85 kernel-debug-modules-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 355a569b375b92894cac274bbff6da8762bc4088ed9e506b9f79cd9efabf1e72 kernel-debug-modules-extra-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: e24d05468dee63033bfb9dd7fb9a079c03440550f3dd82ea1c9d9037d9efac04 kernel-debuginfo-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 98425e33bbdb2b7c4f69a03c7053f198724b3df77d86c7508519ae314b256744 kernel-debuginfo-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 98425e33bbdb2b7c4f69a03c7053f198724b3df77d86c7508519ae314b256744 kernel-debuginfo-common-x86_64-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 850299a11a5cb4cf62bcf2f3a6041040789192ab1cd947df2a26a4ae9545ce4a kernel-debuginfo-common-x86_64-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 850299a11a5cb4cf62bcf2f3a6041040789192ab1cd947df2a26a4ae9545ce4a kernel-devel-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 67d06ada388ac854b0dd915012bb96c2978d0b4c2e4550723cbce3ca9260b0f6 kernel-devel-matched-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 1a50630bcb166185ca94b3d33114349985339039e6072def101eb8fd06946366 kernel-doc-5.14.0-70.179.1.el9_0.noarch.rpm SHA-256: 80a12628f10aa9956ec41632a86bf910c79952cd8ccef23453054717b0bf9453 kernel-headers-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: d4f9fad7a3cd0b80f3f748f01eec830e955746603fe38d327effc3fb476c8d53 kernel-modules-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: f15debcad2b4aaa1f25bc94ece7d1d16bf69471f3b36a18f73118a291b276bbc kernel-modules-extra-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 9a6f11cbdeb0c3d73e539c21317880dbb6850d527f8c239c77c91aa80f2d9642 kernel-tools-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 7e22dfcffa181bc0dd26294681f10725cc866550033c03e1b18e3aeca329c28f kernel-tools-debuginfo-5.14.0-70.179.1.el9_0.x86_64.rpm SHA-256: 9174bba134e2