RHSA-2026:71016 — Security Advisory

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Loading…

Severity

Important

Red Hat Product Security

RHEL 8

Products

Official CSAF product identity

Published · September 24, 2026

Updated · November 2, 2026

Topic

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370)
kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831)
kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)
kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CVE-2026-72261)
kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844)
kernel: net: tun: bound receive headroom (CVE-2026-81000)
kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846)

Bug Fix(es) and Enhancement(s):

sctp: prevent peer transport count overflow [rhel-8.10.z] (JIRA:RHEL-216297)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.