RHSA-2026:82806 — Security Advisory

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

• kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)

• kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)

• kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236)

• kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278)

• kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)

• kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108)

• kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887)

• kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.