RHSA-2026:95100: Important: kernel-rt security, bug fix, and enhancement update
Important: kernel-rt security, bug fix, and enhancement update
Other sources
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.Security Fix(es): kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929) kernel: net/smc: fix UAF in smccdcrxhandler() by pinning the socket (CVE-2026-64541) kernel: sctp: clear newtransport when removing a peer (CVE-2026-74586) kernel: RDMA/rxe: Fix responder UAF on IBQPMAXDESTRDATOMIC modifyqp (CVE-2026-80864) kernel: RDMA/rxe: Fix OOB in freerdatomicresources() (CVE-2026-80863) kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488) Bug Fix(es) and Enhancement(s): RHEL8.10 - s390/smp: Remove conditional emergency signal usage (JIRA:RHEL-298849) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-develto a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-kvmto a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-kvmto a version that resolves this vulnerability.Fixed in 4.18.0-553.184.1.rt7.525.el8_10 - Operational
Reboot the system after applying the kernel update for the changes to take effect.
Event History
Frequently Asked Questions
Which installed packages indicate that a system is within this advisory's package scope?
The advisory lists kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, and kernel-rt-debug-debuginfo. Systems using the listed Red Hat Enterprise Linux Real Time, Real Time for NFV, or x86_64 Extended Life Cycle offerings should be evaluated for the applicable update.