RHSA-2026:39082 — Security Advisory

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

• kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)

• kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)

• kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411)

• kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499)

• kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)

• kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite (CVE-2026-53266)

• kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166)

• kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.