Skip to content
OpenAdvisories
Critical RHSA-2026:70308 4 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Sep 23, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt 0:3.10.0-1160.162.1.rt56.1314.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debug 0:3.10.0-1160.162.1.rt56.1314.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debug-debuginfo 0:3.10.0-1160.162.1.rt56.1314.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debug-devel 0:3.10.0-1160.162.1.rt56.1314.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debuginfo 0:3.10.0-1160.162.1.rt56.1314.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-debuginfo-common-x86_64 0:3.10.0-1160.162.1.rt56.1314.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-devel 0:3.10.0-1160.162.1.rt56.1314.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-doc 0:3.10.0-1160.162.1.rt56.1314.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-trace 0:3.10.0-1160.162.1.rt56.1314.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-trace-debuginfo 0:3.10.0-1160.162.1.rt56.1314.el7
Red Hat · Rhel Extras Rt Els 7 rhel_extras_rt_els:7 kernel-rt-trace-devel 0:3.10.0-1160.162.1.rt56.1314.el7

Vulnerabilities 4

  • Critical 9.8
    CVE-2026-64564 Public exploit

    sctp: don't free the ASCONF's own transport in DEL-IP processing

    In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asconf->transport (== chunk->transport, se…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-64191

    i2c: stub: Reject I2C block transfers with invalid length

    In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2C_SMBUS_I2C_BLOCK_DATA case in stub_xfer() uses data->block[0] as the transfer length. The existing check only clamps it to avo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2026-46150

    fanotify: fix false positive on permission events

    In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may return false for a mark on an unrelated group, which results in bypassing the permission check. Fix by skipping …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 6.8
    CVE-2026-53196

    USB: serial: io_ti: fix heap overflow in get_manuf_info()

    In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads le16_to_cpu(rom_desc->Size) bytes from the device I2C EEPROM into a buffer allocated with kmalloc_obj(), which…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2482612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2492750
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502872
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510890
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70308.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-46150
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-46150
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-46150
  • article
    https://lore.kernel.org/linux-cve-announce/2026052822-CVE-2026-46150-c96d@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-53196
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-53196
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-53196
  • article
    https://lore.kernel.org/linux-cve-announce/2026062559-CVE-2026-53196-bcc6@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-64191
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-64191
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-64191
  • article
    https://lore.kernel.org/linux-cve-announce/2026072052-CVE-2026-64191-42fe@gregkh/T
  • report
    https://access.redhat.com/security/cve/CVE-2026-64564
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-64564
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-64564
  • article
    https://lore.kernel.org/linux-cve-announce/2026080404-CVE-2026-64564-6762@gregkh/T