RLSA-2026:98100: Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330)
kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability (CVE-2026-68398)
kernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123)
kernel: Bluetooth: mgmt: fix UAF in pair command cancellation (CVE-2026-74510)
kernel: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (CVE-2026-80842)
kernel: ALSA: seq: midi: Serialize input teardown with eventinput (CVE-2026-90207)
kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (CVE-2026-98116)
kernel: s390/boot: Avoid IPL parameter append past command line (CVE-2026-98403)
kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses (CVE-2026-99152)
kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU (CVE-2026-99153)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.185.1.rt7.526.el8_10
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Which systems should be prioritized for this update?
Prioritize Rocky Linux systems running the kernel-rt package, especially workloads that use the Real Time Linux Kernel for high-determinism requirements. The update addresses issues across networking, Bluetooth, ALSA, s390 boot handling, and iSCSI code.
What level of access is indicated for exploitation?
The supplied severity vector indicates local attack access, low required privileges, and no user interaction. It also indicates high potential impact to confidentiality, integrity, and availability.
How can I determine whether a host is in scope?
Check whether the host has the rocky-linux/kernel-rt package installed and is using the real-time kernel. The advisory does not provide fixed package versions or detection indicators for individual CVEs.