Skip to content
OpenAdvisories
Critical RHSA-2026:35904 5 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Jul 7, 2026 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-core 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-core 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-debuginfo 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-devel 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-kvm 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-modules 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-modules-core 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-modules-extra 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debuginfo 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-devel 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-kvm 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-modules 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-modules-core 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-modules-extra 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-core 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-core 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-debuginfo 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-devel 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-modules 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-modules-core 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-modules-extra 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debuginfo 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-devel 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-modules 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-modules-core 0:5.14.0-284.179.1.rt14.464.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-modules-extra 0:5.14.0-284.179.1.rt14.464.el9_2

Vulnerabilities 5

  • Critical 9.8
    CVE-2026-43198

    tcp: fix potential race in tcp_v6_syn_recv_sock()

    In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late. After tcp_v4_syn_recv_sock(), the child socket is a…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2026-46135

    nvmet-tcp: fix race between ICReq handling and queue teardown

    In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix race between ICReq handling and queue teardown nvmet_tcp_handle_icreq() updates queue->state after sending an Initialization Connection Response (ICResp), but it does so withou…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2026-31408

    Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold sco_recv_frame() reads conn->sk under sco_conn_lock() but immediately releases the lock without holding a refer…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-68183

    ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

    In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.0
    CVE-2026-46189

    RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

    In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path Sashiko points out that pvrdma_uar_free() is already called within pvrdma_dealloc_ucontext(), so calling it before trigg…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2422699
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2455334
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2467228
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2482588
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2482654
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35904.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-68183
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-68183
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-68183
  • article
    https://lore.kernel.org/linux-cve-announce/2025121632-CVE-2025-68183-f588@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-31408
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-31408
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-31408
  • article
    https://lore.kernel.org/linux-cve-announce/2026040629-CVE-2026-31408-9f0f@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-43198
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-43198
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-43198
  • article
    https://lore.kernel.org/linux-cve-announce/2026050645-CVE-2026-43198-0870@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-46135
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-46135
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-46135
  • article
    https://lore.kernel.org/linux-cve-announce/2026052818-CVE-2026-46135-6f53@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-46189
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-46189
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-46189
  • article
    https://lore.kernel.org/linux-cve-announce/2026052831-CVE-2026-46189-c188@gregkh/T