Skip to content
OpenAdvisories
Critical RHSA-2026:14869 4 CVEs

Red Hat Security Advisory: kernel-rt security update

Published May 8, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt 0:3.10.0-1160.149.1.rt56.1301.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debug 0:3.10.0-1160.149.1.rt56.1301.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debug-debuginfo 0:3.10.0-1160.149.1.rt56.1301.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debug-devel 0:3.10.0-1160.149.1.rt56.1301.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debuginfo 0:3.10.0-1160.149.1.rt56.1301.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debuginfo-common-x86_64 0:3.10.0-1160.149.1.rt56.1301.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-devel 0:3.10.0-1160.149.1.rt56.1301.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-doc 0:3.10.0-1160.149.1.rt56.1301.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-trace 0:3.10.0-1160.149.1.rt56.1301.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-trace-debuginfo 0:3.10.0-1160.149.1.rt56.1301.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-trace-devel 0:3.10.0-1160.149.1.rt56.1301.el7

Vulnerabilities 4

  • Critical 9.8
    CVE-2026-31402 Public exploit

    nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

    In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses. This size…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-23191

    ALSA: aloop: Fix racy access at PCM trigger

    In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since b…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2025-40240

    sctp: avoid NULL dereference when chunk data buffer is missing

    In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk->skb pointer is dereferenced in the if-block where it's supposed to be NULL only. chunk->skb can only be NULL if chunk->he…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 4.7
    CVE-2018-16885

    A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with…

    The Linux Foundation Kernel linux Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1661503
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2418832
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2439947
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2454844
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14869.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-16885
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-16885
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-16885
  • report
    https://access.redhat.com/security/cve/CVE-2025-40240
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-40240
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-40240
  • article
    https://kernelcve.org/list/?q=CVE-2025-40240
  • article
    https://lore.kernel.org/linux-cve-announce/2025120403-CVE-2025-40240-745a@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-23191
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23191
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23191
  • article
    https://lore.kernel.org/linux-cve-announce/2026021433-CVE-2026-23191-f990@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-31402
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-31402
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-31402
  • article
    https://lore.kernel.org/linux-cve-announce/2026040327-CVE-2026-31402-3e6a@gregkh/T