RHSA-2026:33900 — Security Advisory

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

• kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)

• kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)

• kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)

• kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)

• kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)

• kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)

• kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090)

• kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)

• kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)

Bug Fix(es) and Enhancement(s):

• [rhel-9] WARNING: possible recursive locking detected - vmd_enable_domain+0x757/0x910 (JIRA:RHEL-174467)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.