Red Hat RHEL 9.6 EUS Kernel Update Addresses Sixteen Vulnerabilities
Tech GuruQuick Answer
Red Hat published RHSA-2026:77219 for RHEL 9.6 Extended Update Support standard, real-time, and NFV kernel packages. Inventory the exact affected scope, apply kernel 5.14.0-570.147.1.el9_6 and the matching advisory-listed packages, followed by a controlled reboot, validate dependent operations, and preserve change evidence.
Validate kernel Scope And Apply The Supported Fix
What to do now: Inventory RHEL 9.6 Extended Update Support standard, real-time, and NFV kernel packages, match versions and enabled features to the authority's scope, apply supported remediation, validate representative operations, and document exceptions.
Last verified: 2026-10-08 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.
Scope And Authority
| Product scope | RHEL 9.6 Extended Update Support standard, real-time, and NFV kernel packages |
|---|---|
| Advisory | RHSA-2026:77219 |
| CVEs | CVE-2026-23442, CVE-2026-45910, CVE-2026-46043, CVE-2026-46114, CVE-2026-46133, CVE-2026-63920, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-64383, CVE-2026-64385, CVE-2026-64386, CVE-2026-64582, CVE-2026-80792, CVE-2026-80863, CVE-2026-80864 |
| Authoritative release date | 2026-10-08 08:26:22 UTC |
| Authority revision date | 2026-10-08 12:01:49 UTC |
| Affected versions | The exact entitled RHEL 9.6 Extended Update Support standard, real-time, and NFV kernel packages branches and package or image relationships identified by RHSA-2026:77219; compare installed NEVRAs or digests with the fixed content. |
| Fixed version | kernel 5.14.0-570.147.1.el9_6 and the matching advisory-listed packages, followed by a controlled reboot |
| CVSS base score | 6.4 / 6.5 / 7.0 / 7.3 / 7.8 (CVSS v3.1) |
| CVSS severity | Medium to High |
| Exploitation status | Not stated by the authority; no exploitation claim is inferred. |
What Changed
Red Hat published authority-rated Important kernel security content with branch-specific fixed packages or images for the listed CVEs.
What To Validate Now
- Inventory. Locate RHEL 9.6 Extended Update Support standard, real-time, and NFV kernel packages; record versions, enabled features, exposure paths, owners, dependencies, support channels, and maintenance groups.
- Establish applicability. Compare every deployment with the authority's affected statement: The exact entitled RHEL 9.6 Extended Update Support standard, real-time, and NFV kernel packages branches and package or image relationships identified by RHSA-2026:77219; compare installed NEVRAs or digests with the fixed content. Do not infer applicability from product family, CVSS, or Internet reachability alone.
- Remediate. Apply kernel 5.14.0-570.147.1.el9_6 and the matching advisory-listed packages, followed by a controlled reboot through the authority-supported channel and follow the current advisory.
- Validate. Confirm the resulting kernel build or managed state, exercise representative services and recovery paths, monitor for regressions, and retain the result.
- Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.
Operational Cautions
Retain the prior boot entry, rebuild external modules where required, reboot in a controlled window, and validate workload and recovery behavior. Preserve pre-change state, installation output, logs, validation evidence, and rollback decisions.
Evidence To Retain
- Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
- UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
- Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.
Related TechGeeks Resources
Authoritative References
Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.
