RHSA-2026:57254: Important: kernel-rt security, bug fix, and enhancement update

Published Aug 20, 2026
·
Updated

Important: kernel-rt security, bug fix, and enhancement update

Other sources

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.Security Fix(es): kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154create() (CVE-2024-56602) kernel: ip6gre: Use cached t->net in ip6erspanchangelink() (CVE-2026-46120) kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991) kernel: mm/hugememory: update file PMD counter before folioput() (CVE-2026-53189) kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd() (CVE-2026-63888) kernel: scsi: target: iscsi: Bound iscsiencodetextoutput() appends to rspbuf (CVE-2026-63887) kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ismdev slot (CVE-2026-64048) kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379) kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388) Bug Fix(es) and Enhancement(s): sfc: TX queue stalls and NIC resets caused by GFPATOMIC allocation failures after RHEL 8.10 kernel update (JIRA:RHEL-219767) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat

Affected Software

18 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Life Cycle
Red Hat Red Hat Enterprise Linux for Real Time for NFV
Red Hat Red Hat Enterprise Linux for Real Time
redhat/kernel-rt<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-core<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-debug<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-debug-core<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-debug-debuginfo<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-debug-devel<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-debug-modules<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-debug-modules-extra<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-debuginfo<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-devel<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-modules<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-modules-extra<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-debug-kvm<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10
redhat/kernel-rt-kvm<4.18.0-553.157.1.rt7.498.el8_10
4.18.0-553.157.1.rt7.498.el8_10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/kernel-rt to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  2. Upgrade

    Upgrade redhat/kernel-rt-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  3. Upgrade

    Upgrade redhat/kernel-rt-debug to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  4. Upgrade

    Upgrade redhat/kernel-rt-debug-core to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  5. Upgrade

    Upgrade redhat/kernel-rt-debug-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  6. Upgrade

    Upgrade redhat/kernel-rt-debug-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  7. Upgrade

    Upgrade redhat/kernel-rt-debug-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  8. Upgrade

    Upgrade redhat/kernel-rt-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  9. Upgrade

    Upgrade redhat/kernel-rt-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  10. Upgrade

    Upgrade redhat/kernel-rt-devel to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  11. Upgrade

    Upgrade redhat/kernel-rt-modules to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  12. Upgrade

    Upgrade redhat/kernel-rt-modules-extra to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  13. Upgrade

    Upgrade redhat/kernel-rt-debug-kvm to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  14. Upgrade

    Upgrade redhat/kernel-rt-kvm to a version that resolves this vulnerability.

    Fixed in 4.18.0-553.157.1.rt7.498.el8_10
  15. Upgrade

    Upgrade kernel-rt to a version that resolves this vulnerability.

    Patch RHEL-219767
  16. Upgrade

    Upgrade kernel to a version that resolves this vulnerability.

    Patch JIRA:RHEL-219767
  17. Upgrade

    Upgrade kernel to a version that resolves this vulnerability.

    Patch CVE-2024-56602
  18. Compensating control

    Reboot the system after applying the kernel-rt update so the changes described in the advisory take effect.

Event History

Aug 20, 2026
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·02:57 AM
Data Sourced
via Red Hat·02:57 AM
Severity

Frequently Asked Questions

1

Which systems should be prioritized for this update?

Prioritize systems running Red Hat kernel-rt packages, including Red Hat Enterprise Linux for Real Time, Real Time for NFV, and the listed x86_64 Extended Life Cycle offering. The affected package set includes kernel-rt, kernel-rt-core, and the debug variants.

2

Are there operational fixes in addition to the security fixes?

Yes. The update addresses sfc TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after a RHEL 8.10 kernel update.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203