Red Hat RHEL 10 Kernel Update Fixes Two Vulnerabilities

P1 — VALIDATE AND UPDATEHigh · 7.3 / 7.8 (CVSS v3.1)EXPLOITATION: NOT STATED

Quick Answer

Red Hat published RHSA-2026:75576 for RHEL 10 Linux kernel packages. Match entitled systems to the advisory scope, install kernel 6.12.0-211.62.1.el10_2, reboot into the updated kernel, validate dependent operations, and retain change evidence.

Validate Linux kernel Scope And Apply The Red Hat Fix

What to do now: Inventory RHEL 10 Linux kernel packages, confirm the exact entitled branch and installed build, apply the advisory-listed content and reboot through change control, validate representative services, and document exceptions.

Open the authoritative advisory

Last verified: 2026-10-05 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.

Scope And Authority

Product scopeRHEL 10 Linux kernel packages
AdvisoryRHSA-2026:75576
CVEsCVE-2026-64034, CVE-2026-72099
Authoritative release date2026-10-05 09:10:24 UTC
Authority revision date2026-10-05 10:49:07 UTC
Affected versionsThe supported RHEL 10 Linux kernel packages builds identified as affected in the advisory product-status relationships.
Fixed versionkernel 6.12.0-211.62.1.el10_2
CVSS base score7.3 / 7.8 (CVSS v3.1)
CVSS severityHigh
Exploitation statusNot stated by the authority; no exploitation claim is inferred.

What Changed

Red Hat published supported Linux kernel replacement content for the advisory-listed CVEs and product branches.

What To Validate Now

  1. Inventory. Locate RHEL 10 Linux kernel packages; record the installed build, repository and entitlement, owner, exposure, dependencies, and maintenance group.
  2. Establish applicability. Compare every system with the product and package relationships in RHSA-2026:75576. Do not infer applicability from the component name or CVSS rating alone.
  3. Remediate. Install kernel 6.12.0-211.62.1.el10_2 from the supported Red Hat channel for the exact branch. Reboot into the updated kernel.
  4. Validate. Confirm the installed running kernel, exercise representative Linux kernel functions and recovery paths, monitor for regressions, and record the result.
  5. Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.

Operational Cautions

The new kernel is not active until reboot. Validate third-party modules, Secure Boot, storage, networking, clustering, and the approved rollback entry. Preserve pre-change versions, logs, installation output, validation evidence, and any rollback decision.

Evidence To Retain

  • Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
  • UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
  • Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.

Related TechGeeks Resources

Authoritative References

Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.