Read the docs
Red Hat Security Advisory

RHSA-2026:39082

kernel-rt security update

Released 2026-07-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

Priority CRITICAL 97KEV

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind skb_ensure_writable(skb,…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00934 Published 2026-06-25 Fixed in 5.5, 5.9 +9 CWE-787
Priority HIGH 73

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GF…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01368 Published 2026-07-04 Partial fix · 5.15.222, 6.1.177 +5 CWE-416
Priority HIGH 69

In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slowlock paths, but it is also used for proxy-lock rollba…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05372 Published 2026-05-21 Partial fix · 5.10.261, 5.15.212 +6 CWE-416
Priority LOW 39

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for direct shadow pages using sp->gfn plus the SPTE index.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00195 Published 2026-05-28 Partial fix · 5.15.222, 6.1.175 +5 CWE-416
TI-2025-43239 CVE-2025-71089 · GHSA-r6cc-j9rp-4f85

iommu: disable SVA when CONFIG_X86 is set

Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: iommu: disable SVA when CONFIG_X86 is set Patch series "Fix stale IOTLB entries for kernel address space", v7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00162 Published 2026-01-13 Partial fix · 5.10.273, 5.15.200 +5 CWE-416
Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change [email protected] says: The vulnerability is a rac…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00174 Published 2026-01-13 Partial fix · 5.10.248, 5.15.198 +5 CWE-362
Priority LOW 24

In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00133 Published 2026-04-08 Partial fix · 5.10.252, 5.15.202 +6 CWE-476