This Red Hat security advisory addresses eight vulnerabilities in the kernel-rt packages for RHEL 8, including a critical (CVSS 9.8) slab-use-after-free in the MPTCP subsystem (CVE-2026-31669) and high-severity flaws in Xen and Bluetooth components. The vulnerabilities affect the Real Time Linux Kernel, with specific version ranges detailed in the NVD data, such as CVE-2026-31669 affecting Linux kernel versions 5.12.1 through 5.15.202 and others. The update provides fixed packages that require a system reboot, and users should apply the patch following Red Hat's documented procedures.
Red Hat Product Errata RHSA-2026:26428 - Security Advisory Issued: 2026-06-16 Updated: 2026-06-16 RHSA-2026:26428 - Security Advisory Overview Updated Packages Synopsis Important: kernel-rt security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for Real Time 8 x86_64 Red Hat Enterprise Linux for Real Time for NFV 8 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Fixes BZ - 2461503 - CVE-2026-31669 kernel: mptcp: fix slab-use-after-free in __inet_lookup_established BZ - 2464092 - CVE-2026-31787 kernel: xen/privcmd: fix double free via VMA splitting BZ - 2464096 - CVE-2026-31786 kernel: Buffer overflow in drivers/xen/sys-hypervisor.c BZ - 2467014 - CVE-2026-43110 kernel: wifi: brcmfmac: validate bsscfg indices in IF events BZ - 2468124 - CVE-2026-43329 kernel: netfilter: flowtable: strictly check for maximum number of actions BZ - 2482181 - CVE-2026-46056 kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers BZ - 2482563 - CVE-2026-46152 kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result BZ - 2482608 - CVE-2026-46125 kernel: wifi: mac80211: remove station if connection prep fails CVEs CVE-2026-31669 CVE-2026-31786 CVE-2026-31787 CVE-2026-43110 CVE-2026-43329 CVE-2026-46056 CVE-2026-46125 CVE-2026-46152 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for Real Time 8 SRPM kernel-rt-4.18.0-553.134.1.rt7.475.el8_10.src.rpm SHA-256: 41fd15387be15ee8be52fd876ffc0b306de65f75041bb60a74bd6009c812fdc4 x86_64 kernel-rt-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 2b345776443048b6465b63a3965b89054708e7bbf710cd826285f3b08851e66b kernel-rt-core-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: a27950e0201b6534364c7349d2b5b2e1084675e4ed7c8155ea79624398941cf6 kernel-rt-debug-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 24e21a15ba1bd347182ae9399104de44c5d12e04568725d819a44655e92d0283 kernel-rt-debug-core-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: c08aaada576beddf7862b796fbc162252b5c09382d9a39f83ed2e5d89766d702 kernel-rt-debug-debuginfo-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: fd6b469822aa2e8256c4461134066befb0767dd2c26045128c2b742fcc9a82d3 kernel-rt-debug-devel-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 72fb63adc38bceff5246485920ec8dde17658770f301ff58a4c23ab194e2f81f kernel-rt-debug-modules-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 25623b9b9d4f6a53cf1c31f83abe9d7e86076dfa00cae110b012b60f60f4d940 kernel-rt-debug-modules-extra-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 5cddf3f3d629f22b0e55e31efaef2133e5005d53e359ddc8198d34f17523956d kernel-rt-debuginfo-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: a78f553d45e5281c16e983f432bfa3a66795de246c0342bfa5505901dbef6bf6 kernel-rt-debuginfo-common-x86_64-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: bd50ed1b4999665c7f33041e82f4eb14764947443ac38ef2bab89e66f51a16f1 kernel-rt-devel-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: c50095e1ce5b2a4ffb6996395a3b7421fa5a2bee7b6844c802e5bcd285ac67ea kernel-rt-modules-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 9bed0a96a086608f8db07a50c4f948db3e94adcbfecad18036b2cdad45b39f81 kernel-rt-modules-extra-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: bf204a8211c1bb66b1a2154b62b5d3450990d2388410a7cadf90416396b281b3 Red Hat Enterprise Linux for Real Time for NFV 8 SRPM kernel-rt-4.18.0-553.134.1.rt7.475.el8_10.src.rpm SHA-256: 41fd15387be15ee8be52fd876ffc0b306de65f75041bb60a74bd6009c812fdc4 x86_64 kernel-rt-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 2b345776443048b6465b63a3965b89054708e7bbf710cd826285f3b08851e66b kernel-rt-core-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: a27950e0201b6534364c7349d2b5b2e1084675e4ed7c8155ea79624398941cf6 kernel-rt-debug-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 24e21a15ba1bd347182ae9399104de44c5d12e04568725d819a44655e92d0283 kernel-rt-debug-core-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: c08aaada576beddf7862b796fbc162252b5c09382d9a39f83ed2e5d89766d702 kernel-rt-debug-debuginfo-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: fd6b469822aa2e8256c4461134066befb0767dd2c26045128c2b742fcc9a82d3 kernel-rt-debug-devel-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 72fb63adc38bceff5246485920ec8dde17658770f301ff58a4c23ab194e2f81f kernel-rt-debug-kvm-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 3ef456a7aa9146e28ba4255df06657a77de41957ddad52a6808ad07369232885 kernel-rt-debug-modules-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 25623b9b9d4f6a53cf1c31f83abe9d7e86076dfa00cae110b012b60f60f4d940 kernel-rt-debug-modules-extra-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 5cddf3f3d629f22b0e55e31efaef2133e5005d53e359ddc8198d34f17523956d kernel-rt-debuginfo-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: a78f553d45e5281c16e983f432bfa3a66795de246c0342bfa5505901dbef6bf6 kernel-rt-debuginfo-common-x86_64-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: bd50ed1b4999665c7f33041e82f4eb14764947443ac38ef2bab89e66f51a16f1 kernel-rt-devel-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: c50095e1ce5b2a4ffb6996395a3b7421fa5a2bee7b6844c802e5bcd285ac67ea kernel-rt-kvm-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 9785533c3c0cfc8aaced8459f588e6e8b812cb1b911ab0d04b03598c6aa3305e kernel-rt-modules-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 9bed0a96a086608f8db07a50c4f948db3e94adcbfecad18036b2cdad45b39f81 kernel-rt-modules-extra-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: bf204a8211c1bb66b1a2154b62b5d3450990d2388410a7cadf90416396b281b3 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM kernel-rt-4.18.0-553.134.1.rt7.475.el8_10.src.rpm SHA-256: 41fd15387be15ee8be52fd876ffc0b306de65f75041bb60a74bd6009c812fdc4 x86_64 kernel-rt-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 2b345776443048b6465b63a3965b89054708e7bbf710cd826285f3b08851e66b kernel-rt-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 2b345776443048b6465b63a3965b89054708e7bbf710cd826285f3b08851e66b kernel-rt-core-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: a27950e0201b6534364c7349d2b5b2e1084675e4ed7c8155ea79624398941cf6 kernel-rt-core-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: a27950e0201b6534364c7349d2b5b2e1084675e4ed7c8155ea79624398941cf6 kernel-rt-debug-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 24e21a15ba1bd347182ae9399104de44c5d12e04568725d819a44655e92d0283 kernel-rt-debug-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 24e21a15ba1bd347182ae9399104de44c5d12e04568725d819a44655e92d0283 kernel-rt-debug-core-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: c08aaada576beddf7862b796fbc162252b5c09382d9a39f83ed2e5d89766d702 kernel-rt-debug-core-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: c08aaada576beddf7862b796fbc162252b5c09382d9a39f83ed2e5d89766d702 kernel-rt-debug-debuginfo-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: fd6b469822aa2e8256c4461134066befb0767dd2c26045128c2b742fcc9a82d3 kernel-rt-debug-debuginfo-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: fd6b469822aa2e8256c4461134066befb0767dd2c26045128c2b742fcc9a82d3 kernel-rt-debug-devel-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 72fb63adc38bceff5246485920ec8dde17658770f301ff58a4c23ab194e2f81f kernel-rt-debug-devel-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 72fb63adc38bceff5246485920ec8dde17658770f301ff58a4c23ab194e2f81f kernel-rt-debug-kvm-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 3ef456a7aa9146e28ba4255df06657a77de41957ddad52a6808ad07369232885 kernel-rt-debug-modules-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 25623b9b9d4f6a53cf1c31f83abe9d7e86076dfa00cae110b012b60f60f4d940 kernel-rt-debug-modules-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 25623b9b9d4f6a53cf1c31f83abe9d7e86076dfa00cae110b012b60f60f4d940 kernel-rt-debug-modules-extra-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 5cddf3f3d629f22b0e55e31efaef2133e5005d53e359ddc8198d34f17523956d kernel-rt-debug-modules-extra-4.18.0-553.134.1.rt7.475.el8_10.x86_64.rpm SHA-256: 5cddf3f3d629f22b0e55e31efaef2133e5005d53e359ddc8198d34f17523956d kernel-rt-debuginfo-4.18.0-553.13