RHSA-2026:98100: Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.Security Fix(es): kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330) kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability (CVE-2026-68398) kernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123) kernel: Bluetooth: mgmt: fix UAF in pair command cancellation (CVE-2026-74510) kernel: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (CVE-2026-80842) kernel: ALSA: seq: midi: Serialize input teardown with eventinput (CVE-2026-90207) kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (CVE-2026-98116) kernel: s390/boot: Avoid IPL parameter append past command line (CVE-2026-98403) kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses (CVE-2026-99152) kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU (CVE-2026-99153) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-develto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-debug-kvmto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
redhat/kernel-rt-kvmto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Operational
Reboot the system for the kernel security update to take effect.
Event History
Frequently Asked Questions
Which systems should be reviewed for this update?
Systems using the Red Hat kernel-rt package family should be reviewed, including kernel-rt-core and the listed debug, devel, modules, and modules-extra variants. These packages provide the Real Time Linux Kernel for systems requiring high determinism.
What functional areas are covered by the fixes?
The update addresses issues in networking components including SMC, PPP over L2TP, Open vSwitch, Bluetooth management, bridge multicast, and iSCSI. It also includes fixes in ALSA MIDI and PCM handling and s390 boot command-line processing.
What types of impact are identified in the advisory?
Several fixes address use-after-free conditions, including issues in PPP over L2TP, Bluetooth pair-command cancellation, bridge multicast handling, ALSA PCM handling, and ALSA MIDI input teardown. The advisory also identifies denial-of-service issues involving unvalidated iSCSI management-response tasks and task tags in iSCSI Reject PDUs.