RHSA-2026:39983: Moderate: kernel-rt security update
Moderate: kernel-rt security update
Other sources
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.Security Fix(es): kernel: netfilter: nfconntrackhelper: pass helper to expect cleanup (CVE-2026-43027) kernel: rtmutex: Use waiter::task instead of current in removewaiter() (CVE-2026-43499) kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) kernel: futex/requeue: Prevent NULL pointer dereference in removewaiter() on self-deadlock (CVE-2026-53166) kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-debug-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-debug-kvmto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-debuginfoto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-develto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-kvmto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-modules-coreto a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
redhat/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 5.14.0-284.181.1.rt14.466.el9_2 - Upgrade
Upgrade
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2: kernel-rtto a version that resolves this vulnerability.Fixed in kernel-rt-5.14.0-284.181.1.rt14.466.el9_2
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:39983?
The severity of RHSA-2026:39983 is classified as medium with a score of 4.
What security vulnerabilities are addressed in RHSA-2026:39983?
RHSA-2026:39983 addresses a security vulnerability related to netfilter and rtmutex, as identified in CVE-2026-43027.
How do I fix RHSA-2026:39983?
To fix RHSA-2026:39983, update the kernel-rt packages to the latest version provided by Red Hat.
What systems are affected by RHSA-2026:39983?
RHSA-2026:39983 affects systems running Red Hat Enterprise Linux for x86_64 and related Real Time Linux Kernel packages.
What are the potential impacts of not addressing RHSA-2026:39983?
Failing to address RHSA-2026:39983 could lead to security vulnerabilities such as use after free and null pointer dereference issues.