Red Hat Product Errata RHSA-2026:19564 - Security Advisory Issued: 2026-05-20 Updated: 2026-05-20 RHSA-2026:19564 - Security Advisory Overview Updated Packages Synopsis Important: kpatch-patch-4_18_0-372_137_1, kpatch-patch-4_18_0-372_145_1, kpatch-patch-4_18_0-372_158_1, kpatch-patch-4_18_0-372_170_1, and kpatch-patch-4_18_0-372_181_1 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for multiple packages is now available for Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-4.18.0-372.137.1.el8_6. Security Fix(es): kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64 Fixes BZ - 2467771 - CVE-2026-43284 kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVEs CVE-2026-43284 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 SRPM kpatch-patch-4_18_0-372_137_1-1-11.el8_6.src.rpm SHA-256: 6cb23a58fb194f634cdabdb21ed98cbc70eb7a3274f992cde667dcb558b3a3f8 kpatch-patch-4_18_0-372_145_1-1-9.el8_6.src.rpm SHA-256: 70546911d18f220156fb429a6134d9195795aa45800c0aab48298047685bc75f kpatch-patch-4_18_0-372_158_1-1-5.el8_6.src.rpm SHA-256: 57734865a2c786b9a2a450a66212fe6cc06d878a059db85fc4a482ea59a088d4 kpatch-patch-4_18_0-372_170_1-1-4.el8_6.src.rpm SHA-256: 2b15d56c630be17b36f8cb8699b7dafe27961c5ea84e0afe5c1b968a7aac6401 kpatch-patch-4_18_0-372_181_1-1-2.el8_6.src.rpm SHA-256: 2188badb94143ef30056573e207cf2476ca4eb7015f7ba7d091df6294457704c x86_64 kpatch-patch-4_18_0-372_137_1-1-11.el8_6.x86_64.rpm SHA-256: d2e4cf2a7deae52f69ee0ff7b8f0371de993167570deb1177c4ff7ed72325e57 kpatch-patch-4_18_0-372_137_1-debuginfo-1-11.el8_6.x86_64.rpm SHA-256: 42665f30c207e4cda702ae205c63db81fcfa51d486be18e3561130203d243e29 kpatch-patch-4_18_0-372_137_1-debugsource-1-11.el8_6.x86_64.rpm SHA-256: 44ac09cf75022767a3023bda42955e3147a51e7d2d0f9b37d42c94b166d75004 kpatch-patch-4_18_0-372_145_1-1-9.el8_6.x86_64.rpm SHA-256: a3bf61ec2402471b38772c455de789a64a092998b48f33bf5939bb1b3ed28d10 kpatch-patch-4_18_0-372_145_1-debuginfo-1-9.el8_6.x86_64.rpm SHA-256: adc007ab82a3d2f4a71db7c7178d694a2d5cf5aecd4aa0edb6b488d57175c51d kpatch-patch-4_18_0-372_145_1-debugsource-1-9.el8_6.x86_64.rpm SHA-256: 7c5b49de53dffd895019b0effe3a31d010133293bf98131cd721e5770d19d6c8 kpatch-patch-4_18_0-372_158_1-1-5.el8_6.x86_64.rpm SHA-256: 57882f0544bcaef9f905be89fdca784ffdf21f8203d5b8f280b46c72e3e51e59 kpatch-patch-4_18_0-372_158_1-debuginfo-1-5.el8_6.x86_64.rpm SHA-256: 00d8c67971d9ed40c6567cfab7e586819553749856ba4e73bacdf0cf17cc0537 kpatch-patch-4_18_0-372_158_1-debugsource-1-5.el8_6.x86_64.rpm SHA-256: 6a9ec2d9146e800b7228a740352ca2818869448eb0c1e56d328f0acd21093c36 kpatch-patch-4_18_0-372_170_1-1-4.el8_6.x86_64.rpm SHA-256: 4d68ba7f2881c3601d85ab5a946df5610daf0f880f3501991379fe9f8d9ed903 kpatch-patch-4_18_0-372_170_1-debuginfo-1-4.el8_6.x86_64.rpm SHA-256: 1f736a8e055f3cce67a7ff9c92b0528e20315624bc6292b99e236717a12749f3 kpatch-patch-4_18_0-372_170_1-debugsource-1-4.el8_6.x86_64.rpm SHA-256: 91eb6e7255b423f067b2d71f6e78f5feba52d28b425ee8880291c65150e4c0b2 kpatch-patch-4_18_0-372_181_1-1-2.el8_6.x86_64.rpm SHA-256: c99a079d967a8a21fc028b79d384701f35c5ea43710f15d969e0219cbdd128d3 kpatch-patch-4_18_0-372_181_1-debuginfo-1-2.el8_6.x86_64.rpm SHA-256: 12ca4c6168c804654b27228195613f367b3d3efd7f86811429545dc56d936d7f kpatch-patch-4_18_0-372_181_1-debugsource-1-2.el8_6.x86_64.rpm SHA-256: 717e39b9c2b9be3f1a36e28271b3199de82c985109bcf452b6754c88b39f18bf Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 SRPM kpatch-patch-4_18_0-372_137_1-1-11.el8_6.src.rpm SHA-256: 6cb23a58fb194f634cdabdb21ed98cbc70eb7a3274f992cde667dcb558b3a3f8 kpatch-patch-4_18_0-372_145_1-1-9.el8_6.src.rpm SHA-256: 70546911d18f220156fb429a6134d9195795aa45800c0aab48298047685bc75f kpatch-patch-4_18_0-372_158_1-1-5.el8_6.src.rpm SHA-256: 57734865a2c786b9a2a450a66212fe6cc06d878a059db85fc4a482ea59a088d4 kpatch-patch-4_18_0-372_170_1-1-4.el8_6.src.rpm SHA-256: 2b15d56c630be17b36f8cb8699b7dafe27961c5ea84e0afe5c1b968a7aac6401 kpatch-patch-4_18_0-372_181_1-1-2.el8_6.src.rpm SHA-256: 2188badb94143ef30056573e207cf2476ca4eb7015f7ba7d091df6294457704c ppc64le kpatch-patch-4_18_0-372_137_1-1-11.el8_6.ppc64le.rpm SHA-256: 5bb88501ed9fd2c6e42ad761b1cd41b710ee37f486b905b0a95f0d6ea76637f8 kpatch-patch-4_18_0-372_137_1-debuginfo-1-11.el8_6.ppc64le.rpm SHA-256: 50daa4109c234baba59e1555b26b5d6f7a79ae9871f98b5c89e0878523d6a02e kpatch-patch-4_18_0-372_137_1-debugsource-1-11.el8_6.ppc64le.rpm SHA-256: e23919580969d2b4190d7e5b26da55c67224dabb6950951ad11c60cfc9ba95e5 kpatch-patch-4_18_0-372_145_1-1-9.el8_6.ppc64le.rpm SHA-256: 61ce08a11b9c24239fb3638853f0ea55d5047fabf848a096690e383df8200354 kpatch-patch-4_18_0-372_145_1-debuginfo-1-9.el8_6.ppc64le.rpm SHA-256: 256e0f50412ca5ccb695b6c7d105692f9528fea7662aef717d187ce52dc8a3cd kpatch-patch-4_18_0-372_145_1-debugsource-1-9.el8_6.ppc64le.rpm SHA-256: 7286b0bfa1fea016a4c25c7c30a13f4e7453ecb04ee73e62cb0f9a19bcf846fb kpatch-patch-4_18_0-372_158_1-1-5.el8_6.ppc64le.rpm SHA-256: 3a61a8dfbf3ce92338c1fb88610be581dbb8b63f851a35fc7c1bd6be977c02ed kpatch-patch-4_18_0-372_158_1-debuginfo-1-5.el8_6.ppc64le.rpm SHA-256: b8bda0f05015afa8126aee4b7f580244404232918784d8f79ef5e4a69a36a378 kpatch-patch-4_18_0-372_158_1-debugsource-1-5.el8_6.ppc64le.rpm SHA-256: b87fc4071f7b1b89774a42056bf87761dcf424556e47eec545bcd12f25a0381e kpatch-patch-4_18_0-372_170_1-1-4.el8_6.ppc64le.rpm SHA-256: e02303014b87d9f7ce70ae88257a9aa3896cd5ddd998381d60e7af6c677c94aa kpatch-patch-4_18_0-372_170_1-debuginfo-1-4.el8_6.ppc64le.rpm SHA-256: e0b5a02d7e83eaf25a2c31b8612797ba7c97956f81148e06b81a63a5a547190b kpatch-patch-4_18_0-372_170_1-debugsource-1-4.el8_6.ppc64le.rpm SHA-256: a51a79bc920b6ced29412c45d77a897a045c3ddf7d77475f13dc91eee89b4dbe kpatch-patch-4_18_0-372_181_1-1-2.el8_6.ppc64le.rpm SHA-256: 3c6a7233787bc240ab684866975842e643db6c5e98e1a6d6df3919729f05a02f kpatch-patch-4_18_0-372_181_1-debuginfo-1-2.el8_6.ppc64le.rpm SHA-256: 700916deaf1eb82ce916e20f7f3e445086605eee3a6a64acfeafde286b5ef8bf kpatch-patch-4_18_0-372_181_1-debugsource-1-2.el8_6.ppc64le.rpm SHA-256: 19f4077a04b5c9637da116ec73c4912544f19e4deceac39eb90388d5aeb1f9c7 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 SRPM kpatch-patch-4_18_0-372_137_1-1-11.el8_6.src.rpm SHA-256: 6cb23a58fb194f634cdabdb21ed98cbc70eb7a3274f992cde667dcb558b3a3f8 kpatch-patch-4_18_0-372_145_1-1-9.el8_6.src.rpm SHA-256: 70546911d18f220156fb429a6134d9195795aa45800c0aab48298047685bc75f kpatch-patch-4_18_0-372_158_1-1-5.el8_6.src.rpm SHA-256: 57734865a2c786b9a2a450a66212fe6cc06d878a059db85fc4a482ea59a088d4 kpatch-patch-4_18_0-372_170_1-1-4.el8_6.src.rpm SHA-256: 2b15d56c630be17b36f8cb8699b7dafe27961c5ea84e0afe5c1b968a7aac6401 kpatch-patch-4_18_0-372_181_1-1-2.el8_6.src.rpm SHA-256: 2188badb94143ef30056573e207cf2476ca4eb7015f7ba7d091df6294457704c x86_64 kpatch-patch-4_18_0-372_137_1-1-11.el8_6.x86_64.rpm SHA-256: d2e4cf2a7deae52f69ee0ff7b8f0371de993167570deb1177c4ff7ed72325e57 kpatch-patch-4_18_0-372_137_1-debuginfo-1-11.el8_6.x86_64.rpm SHA-256: 42665f30c207e4cda702ae205c63db81fcfa51d486be18e3561130203d243e29 kpatch-patch-4_18_0-372_137_1-debugsource-1-11.el8_6.x86_64.rpm SHA-256: 44ac09cf75022767a3023bda42955e3147a51e7d2d0f9b37d42c94b166d75004 kpatch-patch-4_18_0-372_145_1-1-9.el8_6.x86_64.rpm SHA-256: a3bf61ec2402471b38772c455de789a64a092998b48f33bf5939bb1b3ed28d10 kpatch-patch-4_18_0-372_145_1-debuginfo-1-9.el8_6.x86_64.rpm SHA-256: adc007ab82a3d2f4a71db7c7178d694a2d5cf5aecd4aa0edb6b488d57175c51d kpatch-patch-4_18_0-372_145_1-debugsource-1-9.el8_6.x86_64.rpm SHA-256: 7c5b49de53dffd895019b0effe3a31d010133293bf98131cd721e5770d19d6c8 kpatch-patch-4_18_0-372_158_1-1-5.el8_6.x86_64.rpm SHA-256: 57882f0544bcaef9f905be89fdca784ffdf21f8203d5b8f280b46c72e3e51e59 kpatch-patch-4_18_0-372_158_1-debuginfo-1-5.el8_6.x86_64.rpm SHA-256: 00d8c67971d9ed40c6567cfab7e586819553749856ba4e73bacdf0cf17cc0537 kpatch-patch-4_18_0-372_158_1-debugsource-1-5.el8_6.x86_64.rpm SHA-256: 6a9ec2d9146e800b7228a740352ca2818869448eb0c1e56d328f0acd21093c36 kpatch-patch-4_18_0-372_170_1-1-4.el8_6.x86_64.rpm SHA-256: 4d68ba7f2881c3601d85ab5a946df5610daf0f880f3501991379fe9f8d9ed903 kpatch-patch-4_18_0-372_170_1-debuginfo-1-4.el8_6.x86_64.rpm SHA-256: 1f736a8e055f3cce67a7ff9c92b0528e20315624bc6292b99e236717a12749f3 kpatch-patch-4_18_0-372_170_1-debugsource-1-4.el8_6.x86_64.rpm SHA-256: 91eb6e7255b423f067b2d71f6e78f5feba52d28b425ee8880291c65150e4c0b2 kpatch-patch-4_18_0-372_181_1-1-2.el8_6.x86_64.rpm SHA-256: c99a079d967a8a