RHSA-2026:93437: Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.Security Fix(es): kernel: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo() (CVE-2026-63924) kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922) kernel: afunix: Fix UAF read of tail->len in unixstreamdatawait() (CVE-2026-64109) kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083) kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283) kernel: smb: client: bound dirent name against end of SMB response in cifsfilldir (CVE-2026-93787) kernel: ZDI-CAN-33367: Linux Kernel skbuff skbzerocopy Improper Ownership Management Local Privilege Escalation Vulnerability () For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-develto a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-kvmto a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-kvmto a version that resolves this vulnerability.Fixed in 4.18.0-553.181.1.rt7.522.el8_10 - Operational
Reboot the system after applying the kernel update for the changes to take effect.
Event History
Frequently Asked Questions
Which systems are affected by this advisory?
Systems using the kernel-rt packages are affected. These packages provide the Real Time Linux Kernel for environments with high determinism requirements.
What types of security issues are addressed?
The advisory fixes issues in IPv6 extension-header handling, AF_UNIX sockets, SCSI target iSCSI handling, TIPC netlink mutations, SMB client directory-entry parsing, and skbuff zerocopy ownership management. Several fixes explicitly address use-after-free or improper ownership-management conditions.
Does exploiting every issue require the same level of access?
No. The listed TIPC issue changes TIPCv2 netlink mutators to require network-administrator privileges, while the skbuff zerocopy issue is identified as a local privilege-escalation vulnerability. The advisory does not provide exploit prerequisites for the other issues.