Red Hat Security AdvisoryRHSA-2026:39082
kernel-rt security update
Released 2026-07-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.143.1.rt7.484.el8_10, kernel-rt-core-4.18.0-553.143.1.rt7.484.el8_10, kernel-rt-debug-4.18.0-553.143.1.rt7.484.el8_10 +9
- Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.143.1.rt7.484.el8_10, kernel-rt-core-4.18.0-553.143.1.rt7.484.el8_10, kernel-rt-debug-4.18.0-553.143.1.rt7.484.el8_10 +7
Fixes 7 records
Priority CRITICAL 97KEV
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind skb_ensure_writable(skb,…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00934 · Published 2026-06-25 · Fixed in 5.5, 5.9 +9 CWE-787
Priority HIGH 73
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GF…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.01368 · Published 2026-07-04 · Partial fix · 5.15.222, 6.1.177 +5 CWE-416
Priority HIGH 69
In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slowlock paths, but it is also used for proxy-lock rollba…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.05372 · Published 2026-05-21 · Partial fix · 5.10.261, 5.15.212 +6 CWE-416
Priority LOW 39
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for direct shadow pages using sp->gfn plus the SPTE index.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00195 · Published 2026-05-28 · Partial fix · 5.15.222, 6.1.175 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: iommu: disable SVA when CONFIG_X86 is set Patch series "Fix stale IOTLB entries for kernel address space", v7.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00162 · Published 2026-01-13 · Partial fix · 5.10.273, 5.15.200 +5 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change [email protected] says: The vulnerability is a rac…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00174 · Published 2026-01-13 · Partial fix · 5.10.248, 5.15.198 +5 CWE-362
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00133 · Published 2026-04-08 · Partial fix · 5.10.252, 5.15.202 +6 CWE-476