Red Hat Security Advisory

RHSA-2026:5690

kernel-rt security update

Released 2026-03-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Real Time E4S (v.9.2) kernel-rt-5.14.0-284.161.1.rt14.446.el9_2, kernel-rt-core-5.14.0-284.161.1.rt14.446.el9_2, kernel-rt-debug-5.14.0-284.161.1.rt14.446.el9_2 +9
Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) kernel-rt-5.14.0-284.161.1.rt14.446.el9_2, kernel-rt-core-5.14.0-284.161.1.rt14.446.el9_2, kernel-rt-debug-5.14.0-284.161.1.rt14.446.el9_2 +11

Fixes 4 records

TI-2025-25495 CVE-2025-38154 · GHSA-vvj3-j4jg-68hm

bpf, sockmap: Avoid using sk_socket after free when sending

LOW 35

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sk_socket after free when sending The sk->sk_socket is not locked or referenced in backlog thread, and during the call to skb_…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00191 Published 2025-07-03 Partial fix · 5.15.186, 6.1.142 +5 CWE-416

TI-2025-25470 CVE-2025-38129 · GHSA-98jq-f2h2-hqf4

page_pool: Fix use-after-free in page_pool_recycle_in_ring

LOW 35

In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a uaf in page_pool_recycle_in_ring: BUG: KASAN: slab-use-after-free in lock_r…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00199 Published 2025-07-03 Partial fix · 5.10.259, 5.15.198 +5 CWE-416

TI-2025-26910 CVE-2025-40240 · GHSA-p7wh-phc3-g7xr

sctp: avoid NULL dereference when chunk data buffer is missing

LOW 34

In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk->skb pointer is dereferenced in the if-block where it's supposed to be NULL only.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00644 Published 2025-12-04 Partial fix · 5.4.301, 5.10.246 +6

TI-2025-43235 CVE-2025-71085 · GHSA-hjpx-f2r6-rr4q

ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()

LOW 33

In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00305 Published 2026-01-13 Partial fix · 5.10.248, 5.15.198 +5 CWE-190