Skip to content
OpenAdvisories
High RHSA-2026:10756 9 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Apr 28, 2026 · Updated Sep 11, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt 0:3.10.0-1160.148.1.rt56.1300.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debug 0:3.10.0-1160.148.1.rt56.1300.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debug-debuginfo 0:3.10.0-1160.148.1.rt56.1300.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debug-devel 0:3.10.0-1160.148.1.rt56.1300.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debuginfo 0:3.10.0-1160.148.1.rt56.1300.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debuginfo-common-x86_64 0:3.10.0-1160.148.1.rt56.1300.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-devel 0:3.10.0-1160.148.1.rt56.1300.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-doc 0:3.10.0-1160.148.1.rt56.1300.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-trace 0:3.10.0-1160.148.1.rt56.1300.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-trace-debuginfo 0:3.10.0-1160.148.1.rt56.1300.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-trace-devel 0:3.10.0-1160.148.1.rt56.1300.el7

Vulnerabilities 9

  • High 8.8
    CVE-2026-23193

    scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

    In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() In iscsit_dec_session_usage_count(), the function calls complete() while holding the sess->session_usage_lock. Simi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-53539

    RDMA/rxe: Fix incomplete state save in rxe_requester

    In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix incomplete state save in rxe_requester If a send packet is dropped by the IP layer in rxe_requester() the call to rxe_xmit_packet() can fail with err == -EAGAIN. To recover, the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38024

    RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug

    In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x7d/0xa0 lib/dump_stack.c:120 print_address_descri…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-38180

    net: atm: fix /proc/net/atm/lec handling

    In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev_lec[] changes. It appears it had dev_put() calls without prior dev_hold(), leading to imbalance and U…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23231 Public exploit

    netfilter: nf_tables: fix use-after-free in nf_tables_addchain()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_tables_addchain() publishes the chain to table->chains via list_add_tail_rcu() (in nft_chain_add()) before registering hook…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2026-23204

    net/sched: cls_u32: use skb_header_pointer_careful()

    In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values. Use skb_header_pointer_careful() instead. GangMin Kim provided a rep…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2022-50053

    iavf: Fix reset error handling

    In the Linux kernel, the following vulnerability has been resolved: iavf: Fix reset error handling Do not call iavf_close in iavf_reset_task error handling. Doing so can lead to double call of napi_disable, which can lead to deadlock there. Removing VF would …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-71238

    scsi: qla2xxx: Fix bsg_done() causing double free

    In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix bsg_done() causing double free Kernel panic observed on system, [5353358.825191] BUG: unable to handle page fault for address: ff5f5e897b024000 [5353358.825194] #PF: superv…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-23216

    scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()

    In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() In iscsit_dec_conn_usage_count(), the function calls complete() while holding the conn->conn_usage_lock. As soon as co…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2373354
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2373553
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376376
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2401510
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2439887
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2439931
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2440630
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2444376
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2444398
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10756.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-50053
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-50053
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-50053
  • article
    https://lore.kernel.org/linux-cve-announce/2025061847-CVE-2022-50053-9359@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2023-53539
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-53539
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-53539
  • article
    https://lore.kernel.org/linux-cve-announce/2025100443-CVE-2023-53539-4411@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38024
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38024
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38024
  • article
    https://lore.kernel.org/linux-cve-announce/2025061847-CVE-2025-38024-2904@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-38180
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-38180
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-38180
  • article
    https://lore.kernel.org/linux-cve-announce/2025070410-CVE-2025-38180-c6d0@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2025-71238
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-71238
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-71238
  • article
    https://lore.kernel.org/linux-cve-announce/2026030437-CVE-2025-71238-76bc@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-23193
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23193
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23193
  • article
    https://lore.kernel.org/linux-cve-announce/2026021434-CVE-2026-23193-2c6c@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-23204
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23204
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23204
  • article
    https://lore.kernel.org/linux-cve-announce/2026021437-CVE-2026-23204-be85@gregkh/T