{"schema":"vulnpedia.research/1","cve":"CVE-2026-64531","references":[{"url":"https://git.kernel.org/stable/c/ab855641241387db062a5e41d9ad6b8561542572","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","url":"https://git.kernel.org/stable/c/ab855641241387db062a5e41d9ad6b8561542572"},{"source":"nvd","sourceId":"CVE-2026-64531","modified":"2026-10-19T21:17:42.510","url":"https://git.kernel.org/stable/c/ab855641241387db062a5e41d9ad6b8561542572"}]},{"url":"https://git.kernel.org/stable/c/c66bd2626c2764f23764ff0f8277f44a9cfe8349","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","url":"https://git.kernel.org/stable/c/c66bd2626c2764f23764ff0f8277f44a9cfe8349"},{"source":"nvd","sourceId":"CVE-2026-64531","modified":"2026-10-19T21:17:42.510","url":"https://git.kernel.org/stable/c/c66bd2626c2764f23764ff0f8277f44a9cfe8349"}]},{"url":"https://git.kernel.org/stable/c/d573250d228401f707f4dbc09d11227a6215ee5f","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","url":"https://git.kernel.org/stable/c/d573250d228401f707f4dbc09d11227a6215ee5f"},{"source":"nvd","sourceId":"CVE-2026-64531","modified":"2026-10-19T21:17:42.510","url":"https://git.kernel.org/stable/c/d573250d228401f707f4dbc09d11227a6215ee5f"}]},{"url":"https://git.kernel.org/stable/c/f1efff8858403191361a01269c6fe8dd7f55a385","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","url":"https://git.kernel.org/stable/c/f1efff8858403191361a01269c6fe8dd7f55a385"},{"source":"nvd","sourceId":"CVE-2026-64531","modified":"2026-10-19T21:17:42.510","url":"https://git.kernel.org/stable/c/f1efff8858403191361a01269c6fe8dd7f55a385"}]},{"url":"https://git.kernel.org/stable/c/dbd14f736be02cfe73049bd801af89becd1a0749","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","url":"https://git.kernel.org/stable/c/dbd14f736be02cfe73049bd801af89becd1a0749"},{"source":"nvd","sourceId":"CVE-2026-64531","modified":"2026-10-19T21:17:42.510","url":"https://git.kernel.org/stable/c/dbd14f736be02cfe73049bd801af89becd1a0749"}]},{"url":"https://git.kernel.org/stable/c/1b41cbe05b184f8861712f0806cc0c4f5d8c6dfe","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","url":"https://git.kernel.org/stable/c/1b41cbe05b184f8861712f0806cc0c4f5d8c6dfe"},{"source":"nvd","sourceId":"CVE-2026-64531","modified":"2026-10-19T21:17:42.510","url":"https://git.kernel.org/stable/c/1b41cbe05b184f8861712f0806cc0c4f5d8c6dfe"}]},{"url":"https://git.kernel.org/stable/c/3f1f755366687d051174739fb99f7d560202f60b","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T04:57:08.992Z","url":"https://git.kernel.org/stable/c/3f1f755366687d051174739fb99f7d560202f60b"},{"source":"nvd","sourceId":"CVE-2026-64531","modified":"2026-10-19T21:17:42.510","url":"https://git.kernel.org/stable/c/3f1f755366687d051174739fb99f7d560202f60b"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/07/28/8","tags":[],"source":"mitre","sourceId":"CVE","modified":"2026-08-22T04:12:18.141Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-08-22T04:12:18.141Z","url":"http://www.openwall.com/lists/oss-security/2026/07/28/8"},{"source":"nvd","sourceId":"CVE-2026-64531","modified":"2026-10-19T21:17:42.510","url":"http://www.openwall.com/lists/oss-security/2026/07/28/8"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/07/31/17","tags":[],"source":"mitre","sourceId":"CVE","modified":"2026-08-22T04:12:18.141Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-08-22T04:12:18.141Z","url":"http://www.openwall.com/lists/oss-security/2026/07/31/17"},{"source":"nvd","sourceId":"CVE-2026-64531","modified":"2026-10-19T21:17:42.510","url":"http://www.openwall.com/lists/oss-security/2026/07/31/17"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/08/01/1","tags":[],"source":"mitre","sourceId":"CVE","modified":"2026-08-22T04:12:18.141Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-08-22T04:12:18.141Z","url":"http://www.openwall.com/lists/oss-security/2026/08/01/1"},{"source":"nvd","sourceId":"CVE-2026-64531","modified":"2026-10-19T21:17:42.510","url":"http://www.openwall.com/lists/oss-security/2026/08/01/1"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/08/01/3","tags":[],"source":"mitre","sourceId":"CVE","modified":"2026-08-22T04:12:18.141Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-08-22T04:12:18.141Z","url":"http://www.openwall.com/lists/oss-security/2026/08/01/3"},{"source":"nvd","sourceId":"CVE-2026-64531","modified":"2026-10-19T21:17:42.510","url":"http://www.openwall.com/lists/oss-security/2026/08/01/3"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/08/22/1","tags":[],"source":"mitre","sourceId":"CVE","modified":"2026-08-22T04:12:18.141Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-08-22T04:12:18.141Z","url":"http://www.openwall.com/lists/oss-security/2026/08/22/1"},{"source":"nvd","sourceId":"CVE-2026-64531","modified":"2026-10-19T21:17:42.510","url":"http://www.openwall.com/lists/oss-security/2026/08/22/1"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-64531","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-64531"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507402","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507402"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-64531","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-64531"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64531","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64531"}]},{"url":"https://lore.kernel.org/linux-cve-announce/2026072732-CVE-2026-64531-e4ce@gregkh/T","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://lore.kernel.org/linux-cve-announce/2026072732-CVE-2026-64531-e4ce@gregkh/T"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:56786","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:56786"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:53330","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:53330"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:51603","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:51603"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:53329","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:53329"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:59147","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:59147"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:51746","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:51746"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:59145","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:59145"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:56853","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:56853"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:57483","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:57483"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:57362","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:57362"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:59143","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:59143"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:59149","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:59149"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:51604","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:51604"}]},{"source":"euvd","sourceId":"EUVD-2026-49109","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49109","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-49109","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49109"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/suominen/ovswrap","source":"poc-in-github","sourceId":"CVE-2026-64531","description":"Tracking OVSwrap (CVE-2026-64531), the Open vSwitch datapath netlink overflow","modified":"2026-10-06T11:36:57Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64531","url":"https://github.com/suominen/ovswrap"},{"source":"poc-in-github","sourceId":"CVE-2026-64531","modified":"2026-10-06T11:36:57Z","url":"https://github.com/suominen/ovswrap"}],"tags":[]},{"url":"https://github.com/mahfuzreham/OVSwrap-CVE-2026-64531-Mitigation-Tool","source":"poc-in-github","sourceId":"CVE-2026-64531","modified":"2026-10-05T04:29:47Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64531","url":"https://github.com/mahfuzreham/OVSwrap-CVE-2026-64531-Mitigation-Tool"},{"source":"poc-in-github","sourceId":"CVE-2026-64531","modified":"2026-10-05T04:29:47Z","url":"https://github.com/mahfuzreham/OVSwrap-CVE-2026-64531-Mitigation-Tool"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-64531","source":"poc-in-github","sourceId":"CVE-2026-64531","description":"CVE-2026-64531","modified":"2026-08-04T03:52:02Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64531","url":"https://github.com/0xBlackash/CVE-2026-64531"},{"source":"poc-in-github","sourceId":"CVE-2026-64531","modified":"2026-08-04T03:52:02Z","url":"https://github.com/0xBlackash/CVE-2026-64531"}],"tags":[]},{"url":"https://github.com/HackSpeak/CVE-2026-64531","source":"poc-in-github","sourceId":"CVE-2026-64531","description":"CVE-2026-64531 (OVSwrap) PoC - Linux kernel Open vSwitch LPE; for patch validation and security research","modified":"2026-10-15T00:32:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64531","url":"https://github.com/HackSpeak/CVE-2026-64531"},{"source":"poc-in-github","sourceId":"CVE-2026-64531","modified":"2026-10-15T00:32:43Z","url":"https://github.com/HackSpeak/CVE-2026-64531"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"9Base-RHOSE-4.14:rhcos-aarch64-414.92.202608172040-0","product":"rhcos-aarch64-414.92.202608172040-0 as a component of Red Hat OpenShift Container Platform 4.14","status":"fixed","remediations":[{"category":"vendor_fix","details":"For OpenShift Container Platform 4.14 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is\nsha256:e6be81645e10fedbbd1ebeca18933b761c648e37de9b761929e4d3cb46c46322\n\n      (For s390x architecture)\n      The image digest is\nsha256:18a0809716072ebbfa149cea7b523fb24a54f345549e15b0fb7052ccd8b2966c\n\n      (For ppc64le architecture)\n      The image digest is\nsha256:ac88feeaf4a90e38cca07b8eff7c88f6fbc4efe650ff901b8211735814603031\n\n      (For aarch64 architecture)\n      The image digest is\nsha256:7b4b85d36da80453343920f3049faac6c654d881180f37a22e9cfc4c71a4c09b\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.","url":"https://access.redhat.com/errata/RHSA-2026:56786"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:generic/redhat/rhcos@414.92.202608172040?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"AppStream-10.2.Z:python3-perf-0:6.12.0-211.46.1.el10_2.aarch64","product":"python3-perf-0:6.12.0-211.46.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:53330"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/python3-perf@6.12.0-211.46.1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"AppStream-9.2.0.Z.E4S:rtla-0:5.14.0-284.186.1.el9_2.x86_64","product":"rtla-0:5.14.0-284.186.1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:51603"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/rtla@5.14.0-284.186.1.el9_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:kernel-64k-debug-devel-0:5.14.0-687.38.1.el9_8.aarch64","product":"kernel-64k-debug-devel-0:5.14.0-687.38.1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:53329"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/kernel-64k-debug-devel@5.14.0-687.38.1.el9_8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"BaseOS-10.2.Z:kernel-0:6.12.0-211.46.1.el10_2.ppc64le","product":"kernel-0:6.12.0-211.46.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:53330"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/kernel@6.12.0-211.46.1.el10_2?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"BaseOS-10.2.Z:kernel-tools-0:6.12.0-211.46.1.el10_2.aarch64","product":"kernel-tools-0:6.12.0-211.46.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:53330"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/kernel-tools@6.12.0-211.46.1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"BaseOS-9.2.0.Z.E4S:kernel-debug-debuginfo-0:5.14.0-284.186.1.el9_2.aarch64","product":"kernel-debug-debuginfo-0:5.14.0-284.186.1.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:51603"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/kernel-debug-debuginfo@5.14.0-284.186.1.el9_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"BaseOS-9.2.0.Z.E4S:kpatch-patch-5_14_0-284_158_1-0:1-10.el9_2.ppc64le","product":"kpatch-patch-5_14_0-284_158_1-0:1-10.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:59147"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/kpatch-patch-5_14_0-284_158_1@1-10.el9_2?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"BaseOS-9.4.0.Z.E4S:kernel-debug-modules-extra-0:5.14.0-427.143.1.el9_4.aarch64","product":"kernel-debug-modules-extra-0:5.14.0-427.143.1.el9_4.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:51746"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/kernel-debug-modules-extra@5.14.0-427.143.1.el9_4?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"BaseOS-9.4.0.Z.E4S:kpatch-patch-5_14_0-427_84_1-0:1-15.el9_4.src","product":"kpatch-patch-5_14_0-427_84_1-0:1-15.el9_4.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:59145"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/kpatch-patch-5_14_0-427_84_1@1-15.el9_4?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"BaseOS-9.8.0.Z.MAIN.EUS:kernel-modules-0:5.14.0-687.38.1.el9_8.aarch64","product":"kernel-modules-0:5.14.0-687.38.1.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:53329"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/kernel-modules@5.14.0-687.38.1.el9_8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"CRB-10.2.Z:kernel-tools-debuginfo-0:6.12.0-211.46.1.el10_2.aarch64","product":"kernel-tools-debuginfo-0:6.12.0-211.46.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:53330"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/kernel-tools-debuginfo@6.12.0-211.46.1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"NFV-10.2.Z:kernel-rt-debug-devel-0:6.12.0-211.46.1.el10_2.x86_64","product":"kernel-rt-debug-devel-0:6.12.0-211.46.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:53330"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/kernel-rt-debug-devel@6.12.0-211.46.1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"RT-10.2.Z:kernel-64k-debug-debuginfo-0:6.12.0-211.46.1.el10_2.aarch64","product":"kernel-64k-debug-debuginfo-0:6.12.0-211.46.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux Real Time (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:53330"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/kernel-64k-debug-debuginfo@6.12.0-211.46.1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"RT-9.4.0.Z.E4S:kernel-debuginfo-common-x86_64-0:5.14.0-427.143.1.el9_4.x86_64","product":"kernel-debuginfo-common-x86_64-0:5.14.0-427.143.1.el9_4.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:51746"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/kernel-debuginfo-common-x86_64@5.14.0-427.143.1.el9_4?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"RT-9.8.0.Z.MAIN.EUS:python3-perf-debuginfo-0:5.14.0-687.38.1.el9_8.x86_64","product":"python3-perf-debuginfo-0:5.14.0-687.38.1.el9_8.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:53329"},{"category":"workaround","details":"Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nIf OVS is not required on a given system, unloading the openvswitch module (`modprobe -r openvswitch`) eliminates the attack surface entirely. For systems that require OVS but cannot patch immediately, the single most effective mitigation is disabling unprivileged user namespaces (`sysctl -w user.max_user_namespaces=0`), which blocks the primary path an unprivileged attacker uses to obtain CAP_NET_ADMIN and reach the vulnerable netlink interface. Standard kernel hardening (KASLR, SMEP, SMAP, kptr_restrict) is enabled by default on supported RHEL kernels and significantly increases exploitation complexity, but these controls are defense-in-depth and not a substitute for patching or removing the vulnerable module."}],"purl":"pkg:rpm/redhat/python3-perf-debuginfo@5.14.0-687.38.1.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_6:kernel","product":"kernel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_6:kernel-doc","product":"kernel-doc as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_6:perf","product":"perf as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/perf","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_7:kernel-debug","product":"kernel-debug as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_7:kernel-kdump-devel","product":"kernel-kdump-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-kdump-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_7:kernel-rt-doc","product":"kernel-rt-doc as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_7:kernel-tools","product":"kernel-tools as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-tools","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_8:bpftool","product":"bpftool as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bpftool","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_8:kernel-debug","product":"kernel-debug as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_8:kernel-devel","product":"kernel-devel as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_8:kernel-modules-internal","product":"kernel-modules-internal as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-modules-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_8:kernel-rt-debug-kvm","product":"kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-debug-kvm","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_8:kernel-rt-modules","product":"kernel-rt-modules as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-modules","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_8:kernel-tools","product":"kernel-tools as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-tools","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_enterprise_linux_8:kernel-zfcpdump-modules","product":"kernel-zfcpdump-modules as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-zfcpdump-modules","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]},{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8","product":"openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8","origins":[{"source":"redhat","sourceId":"CVE-2026-64531","modified":"2026-10-08T20:45:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64531.json"}]}],"vendorCoverage":{"total":1236,"shown":32,"omitted":1204,"source":"redhat"}}