RHSA-2026:64770 — Security Advisory
Red Hat Security Advisory: kernel-rt security update
Severity
ImportantRed Hat Product Security
Products
Official CSAF product identity
Published · September 8, 2026
Updated · November 4, 2026
Topic
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
-
kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)
-
kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002)
-
kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)
-
kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563)
-
kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)
-
kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129)
-
kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.