RHSA-2026:1495 — Security Advisory

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

• kernel: mac80211: fix potential double free on mesh join (CVE-2022-49290)

• kernel: net: bonding: fix use-after-free after 802.3ad slave unbind (CVE-2022-49667)

• kernel: Linux kernel: be2net buffer overflow in be_get_module_eeprom (CVE-2022-49581)

• kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034)

• kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789)

• kernel: KVM: arm64: Tear down vGIC on failed vCPU creation (CVE-2025-37849)

• kernel: smb: client: Fix use-after-free in cifs_fill_dirent (CVE-2025-38051)

• kernel: RDMA/rxe: Fix incomplete state save in rxe_requester (CVE-2023-53539)

• kernel: i40e: fix idx validation in config queues msg (CVE-2025-39971)

• kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)

• kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)

• kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258)

• kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.