RHSA-2026:51604 — Security Advisory

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

• kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)

• kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)

• kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984)

• kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)

• kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923)

• kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531)

Bug Fix(es) and Enhancement(s):

• qemu-kvm: error: failed to set MSR 0xc0000102 to 0xff4547ceb1600000 [RHEL.9.2.z] (JIRA:RHEL-126981)

• [RHEL9.2-z] observe hang with nvme/051 test (JIRA:RHEL-129407)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.