Skip to content
OpenAdvisories
Critical RHSA-2026:51604 7 CVEs

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Published Aug 8, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-core 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-core 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-debuginfo 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-devel 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-kvm 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-modules 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-modules-core 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debug-modules-extra 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debuginfo 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-devel 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-kvm 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-modules 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-modules-core 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::nfv kernel-rt-modules-extra 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-core 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-core 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-debuginfo 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-devel 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-modules 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-modules-core 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debug-modules-extra 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debuginfo 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-debuginfo-common-x86_64 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-devel 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-modules 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-modules-core 0:5.14.0-284.186.1.rt14.471.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::realtime kernel-rt-modules-extra 0:5.14.0-284.186.1.rt14.471.el9_2

Vulnerabilities 7

  • Critical 9.1
    CVE-2025-10263 Public exploit

    Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X…

    Arm Cortex-X925 Cortex-X3 Neoverse V3 Debian Ubuntu Alpine
  • High 8.8
    CVE-2026-64562

    KVM: nVMX: Hide shadow VMCS right after VMCLEAR

    In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR free_nested() frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loaded_vmcs_clear(), the vC…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.9
    CVE-2025-40026

    KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

    In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-45984

    gfs2: Fix use-after-free in iomap inline data write path

    In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in iomap inline data write path The inline data buffer head (dibh) is being released prematurely in gfs2_iomap_begin() via release_metapath() while iomap->inline_data…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-52923 Public exploit

    ipc: limit next_id allocation to the valid ID range

    In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request the next SysV IPC id through ids->next_id. ipc_idr_alloc() currently forwards that request t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-64531 Public exploit

    net: openvswitch: reject oversized nested action attrs

    In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbeh…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-31787 Public exploit

    xen/privcmd: fix double free via VMA splitting

    In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmd_vm_ops defines .close (privcmd_close), but neither .may_split nor .open. When userspace does a partial munmap() on a privcmd mapping, th…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2406712
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2464092
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2481922
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2486958
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2492094
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2507402
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51604.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-10263
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-10263
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-10263
  • article
    https://developer.arm.com/documentation/112137
  • report
    https://access.redhat.com/security/cve/CVE-2025-40026
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-40026
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-40026
  • article
    https://lore.kernel.org/linux-cve-announce/2025102841-CVE-2025-40026-760b@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-31787
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-31787
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-31787
  • article
    https://lore.kernel.org/linux-cve-announce/2026043034-CVE-2026-31787-f6cc@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-45984
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-45984
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-45984
  • article
    https://lore.kernel.org/linux-cve-announce/2026052739-CVE-2026-45984-107d@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-52923
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-52923
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-52923
  • article
    https://lore.kernel.org/linux-cve-announce/2026062431-CVE-2026-52923-35fb@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-64531
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-64531
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-64531
  • article
    https://lore.kernel.org/linux-cve-announce/2026072732-CVE-2026-64531-e4ce@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-64562
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510894
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-64562
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-64562
  • article
    https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-64562.mbox