Red Hat Product Errata RHSA-2026:25120 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-10 RHSA-2026:25120 - Security Advisory Overview Updated Packages Synopsis Critical: kernel-rt security update Type/Severity Security Advisory: Critical Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): kernel: geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858) kernel: smc: Fix use-after-free in tcp_write_timer_handler() (CVE-2023-53781) kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125) kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852) kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for Real Time 8 x86_64 Red Hat Enterprise Linux for Real Time for NFV 8 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Fixes BZ - 2351619 - CVE-2025-21858 kernel: geneve: Fix use-after-free in geneve_find_dev(). BZ - 2420279 - CVE-2023-53781 kernel: smc: Fix use-after-free in tcp_write_timer_handler() BZ - 2424881 - CVE-2025-68366 kernel: nbd: defer config unlock in nbd_genl_connect BZ - 2432389 - CVE-2026-22984 kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() BZ - 2432400 - CVE-2026-22990 kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() BZ - 2451218 - CVE-2026-23392 kernel: netfilter: nf_tables: release flowtable after rcu grace period on error BZ - 2461471 - CVE-2026-31581 kernel: ALSA: 6fire: fix use-after-free on disconnect BZ - 2461480 - CVE-2026-31613 kernel: smb: client: fix OOB reads parsing symlink error response BZ - 2464351 - CVE-2026-43037 kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() BZ - 2464397 - CVE-2026-43038 kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() BZ - 2467234 - CVE-2026-43125 kernel: dlm: validate length in dlm_search_rsb_tree BZ - 2482166 - CVE-2026-45852 kernel: RDMA/rxe: Fix double free in rxe_srq_from_init BZ - 2482532 - CVE-2026-46181 kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() CVEs CVE-2023-53781 CVE-2025-21858 CVE-2025-68366 CVE-2026-22984 CVE-2026-22990 CVE-2026-23392 CVE-2026-31581 CVE-2026-31613 CVE-2026-43037 CVE-2026-43038 CVE-2026-43125 CVE-2026-45852 CVE-2026-46181 References https://access.redhat.com/security/updates/classification/#critical Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for Real Time 8 SRPM kernel-rt-4.18.0-553.132.1.rt7.473.el8_10.src.rpm SHA-256: fcd750d3137fa91bb1721d1461d716d66c27c433359203006522970941cd1e00 x86_64 kernel-rt-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 1bea92b616e45ce635d74f2d55d4cd38fe07ea8dd322e20e3430b5487ba0d2e2 kernel-rt-core-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 1f6a3d8229dfce935cb3451ee52080f15fa2eb870b1631528ba429c09085b362 kernel-rt-debug-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: b9d0e3e81070dfd2cddf2f2681625e3909e7521d52b54ae9c5685d2a0ac7fa5a kernel-rt-debug-core-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 237efc2fd3979fe28335b1a0888d288745df543c5ae60dd1ed7ee22413159c3c kernel-rt-debug-debuginfo-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 24af5b5b66c781fd8d5e48741964f7c72e7d4336b5721e710a5274d1d102d439 kernel-rt-debug-devel-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 0dde3b5f308646cbc263eef198141198fce4a4749ce8493b64a881917379280f kernel-rt-debug-modules-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 60fa9111e3809e275273b8ee0ceae74e00982df8259a99273c555d6ed7438d63 kernel-rt-debug-modules-extra-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: abfadf113359c59c2ae998c9ac2154179df42391d8d89cd1f63750aff803a484 kernel-rt-debuginfo-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 72e61f221cbf0709971983e9bb6508ed7ea8ae42ec567379428e5260e4596c03 kernel-rt-debuginfo-common-x86_64-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 00850a2e8135fecd0a6d4c75721f1eda898b8b9b222dfb5f82cdcda69a2c56d6 kernel-rt-devel-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: ecc04008544cc0528a0922d406fc28714c0860afcd89dc4aa312473044717f69 kernel-rt-modules-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 5392edcef80a6187ae8502d5c60afe3d56f6038753b1542462ffb78a16a65085 kernel-rt-modules-extra-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: d972ced1bfddfd9ab598bafae26594caa844e5e0e1164c8d0aaa95ea455bfc1b Red Hat Enterprise Linux for Real Time for NFV 8 SRPM kernel-rt-4.18.0-553.132.1.rt7.473.el8_10.src.rpm SHA-256: fcd750d3137fa91bb1721d1461d716d66c27c433359203006522970941cd1e00 x86_64 kernel-rt-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 1bea92b616e45ce635d74f2d55d4cd38fe07ea8dd322e20e3430b5487ba0d2e2 kernel-rt-core-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 1f6a3d8229dfce935cb3451ee52080f15fa2eb870b1631528ba429c09085b362 kernel-rt-debug-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: b9d0e3e81070dfd2cddf2f2681625e3909e7521d52b54ae9c5685d2a0ac7fa5a kernel-rt-debug-core-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 237efc2fd3979fe28335b1a0888d288745df543c5ae60dd1ed7ee22413159c3c kernel-rt-debug-debuginfo-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 24af5b5b66c781fd8d5e48741964f7c72e7d4336b5721e710a5274d1d102d439 kernel-rt-debug-devel-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 0dde3b5f308646cbc263eef198141198fce4a4749ce8493b64a881917379280f kernel-rt-debug-kvm-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 0f431f760e99c98128917ca342fa8d97e66d00eb7a00678035d194d953701c3a kernel-rt-debug-modules-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 60fa9111e3809e275273b8ee0ceae74e00982df8259a99273c555d6ed7438d63 kernel-rt-debug-modules-extra-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: abfadf113359c59c2ae998c9ac2154179df42391d8d89cd1f63750aff803a484 kernel-rt-debuginfo-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 72e61f221cbf0709971983e9bb6508ed7ea8ae42ec567379428e5260e4596c03 kernel-rt-debuginfo-common-x86_64-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 00850a2e8135fecd0a6d4c75721f1eda898b8b9b222dfb5f82cdcda69a2c56d6 kernel-rt-devel-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: ecc04008544cc0528a0922d406fc28714c0860afcd89dc4aa312473044717f69 kernel-rt-kvm-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 6839e8e5eca04e2c06eab6b0418c5b01954114b44adf7ba59c86d4dc0973c0c4 kernel-rt-modules-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 5392edcef80a6187ae8502d5c60afe3d56f6038753b1542462ffb78a16a65085 kernel-rt-modules-extra-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: d972ced1bfddfd9ab598bafae26594caa844e5e0e1164c8d0aaa95ea455bfc1b Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM kernel-rt-4.18.0-553.132.1.rt7.473.el8_10.src.rpm SHA-256: fcd750d3137fa91bb1721d1461d716d66c27c433359203006522970941cd1e00 x86_64 kernel-rt-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 1bea92b616e45ce635d74f2d55d4cd38fe07ea8dd322e20e3430b5487ba0d2e2 kernel-rt-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 1bea92b616e45ce635d74f2d55d4cd38fe07ea8dd322e20e3430b5487ba0d2e2 kernel-rt-core-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 1f6a3d8229dfce935cb3451ee52080f15fa2eb870b1631528ba429c09085b362 kernel-rt-core-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 1f6a3d8229dfce935cb3451ee52080f15fa2eb870b1631528ba429c09085b362 kernel-rt-debug-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: b9d0e3e81070dfd2cddf2f2681625e3909e7521d52b54ae9c5685d2a0ac7fa5a kernel-rt-debug-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: b9d0e3e81070dfd2cddf2f2681625e3909e7521d52b54ae9c5685d2a0ac7fa5a kernel-rt-debug-core-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 237efc2fd3979fe28335b1a0888d288745df543c5ae60dd1ed7ee22413159c3c kernel-rt-debug-core-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 237efc2fd3979fe28335b1a0888d288745df543c5ae60dd1ed7ee22413159c3c kernel-rt-debug-debuginfo-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 24af5b5b66c781fd8d5e48741964f7c72e7d4336b5721e710a5274d1d102d439 kernel-rt-debug-debuginfo-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 24af5b5b66c781fd8d5e48741964f7c72e7d4336b5721e710a5274d1d102d439 kernel-rt-debug-devel-4.18.0-553.132.1.rt7.473.el8_10.x86_64.rpm SHA-256: 0dde3b5f308646cbc263eef198141198fce4a4749ce8493b64a88191737928