Red Hat Ships Important RHEL 9.6 Kernel Updates Fixing Multiple CVEs

Red Hat released two Important security advisories for the Linux kernel in Red Hat Enterprise Linux 9.6 Extended Update Support, updating affected systems first to 5.14.0-570.129.1.el9_6 and later to 5.14.0-570.132.1.el9_6. The earlier advisory addressed eight kernel CVEs spanning components including VMCI, vt, Bluetooth, AMD display, SMB client, traffic scheduling, xfrm, and DRM GEM, alongside several bug fixes and enhancements. Red Hat said affected systems must be rebooted after applying the packages.

A subsequent advisory fixed three additional kernel vulnerabilities: CVE-2025-71131, CVE-2026-46054, and CVE-2026-52976. Red Hat’s Bugzilla entry for CVE-2025-71131 said the flaw was in the kernel crypto: seqiv code, where req->iv could be used after crypto_aead_encrypt returns even though the underlying request may already have been freed through asynchronous completion; the fix replaces that unsafe post-call check with a separate variable, unaligned_info. Red Hat said the issue was remediated for RHEL 9.6 EUS through RHSA-2026:52667, and customers were again instructed to apply the update and reboot.