RHSA-2026:1443 — Security Advisory

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

• kernel: Linux kernel: iommufd/iova_bitmap shift-out-of-bounds vulnerability (CVE-2025-21724)

• kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034)

• kernel: Linux kernel: SCTP use-after-free due to race condition in sendmsg (CVE-2025-23142)

• kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789)

• kernel: KVM: arm64: Tear down vGIC on failed vCPU creation (CVE-2025-37849)

• kernel: xsk: check IFF_UP earlier in Tx path (CVE-2023-53240)

• kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)

• kernel: drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CVE-2023-53552)

• kernel: net/mlx5e: Check for NOT_READY flag state after locking (CVE-2023-53581)

• kernel: i40e: fix idx validation in config queues msg (CVE-2025-39971)

• kernel: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (CVE-2023-53705)

• kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)

• kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141)

• kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.