Red Hat Product Errata RHSA-2026:33900 - Security Advisory Issued: 2026-07-01 Updated: 2026-07-01 RHSA-2026:33900 - Security Advisory Overview Updated Packages Synopsis Important: kernel-rt security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125) kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) Bug Fix(es) and Enhancement(s): [rhel-9] WARNING: possible recursive locking detected - vmd_enable_domain+0x757/0x910 (JIRA:RHEL-174467) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Fixes BZ - 2461503 - CVE-2026-31669 kernel: mptcp: fix slab-use-after-free in __inet_lookup_established BZ - 2467144 - CVE-2026-43128 kernel: RDMA/umem: Fix double dma_buf_unpin in failure path BZ - 2467215 - CVE-2026-43279 kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing BZ - 2467234 - CVE-2026-43125 kernel: dlm: validate length in dlm_search_rsb_tree BZ - 2468124 - CVE-2026-43329 kernel: netfilter: flowtable: strictly check for maximum number of actions BZ - 2480457 - CVE-2026-43501 kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows BZ - 2481980 - CVE-2026-46090 kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop BZ - 2482532 - CVE-2026-46181 kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() BZ - 2482634 - CVE-2026-46173 kernel: exit: prevent preemption of oopsing TASK_DEAD task CVEs CVE-2026-31669 CVE-2026-43125 CVE-2026-43128 CVE-2026-43279 CVE-2026-43329 CVE-2026-43501 CVE-2026-46090 CVE-2026-46173 CVE-2026-46181 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM kernel-rt-5.14.0-284.178.1.rt14.463.el9_2.src.rpm SHA-256: b0718007304ead322b49a46e6eeff44ae8c7c9229baf5282cc2920f3d6ef5958 x86_64 kernel-rt-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 96faf82a85df9a35c9ed29c98e626e0eb70783cea323ab8aeeaaab714d3f37e0 kernel-rt-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 96faf82a85df9a35c9ed29c98e626e0eb70783cea323ab8aeeaaab714d3f37e0 kernel-rt-core-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 3363f9fc2fd07089c819293ae231417c9a0193c66c31cc3f921cec307289a411 kernel-rt-core-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 3363f9fc2fd07089c819293ae231417c9a0193c66c31cc3f921cec307289a411 kernel-rt-debug-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: af7495962f82792e79abd86cee7eb9ecdcabb075429367bf1534df664408762f kernel-rt-debug-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: af7495962f82792e79abd86cee7eb9ecdcabb075429367bf1534df664408762f kernel-rt-debug-core-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 31b619f11ebf6bd5e8abf5d007707261261e6df0e5c5691931a303f96fee5eb3 kernel-rt-debug-core-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 31b619f11ebf6bd5e8abf5d007707261261e6df0e5c5691931a303f96fee5eb3 kernel-rt-debug-debuginfo-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: ea03f024cd324bc9b4f16448a7b92382d0fa2a770d5e53c9ba868270623b3fbf kernel-rt-debug-debuginfo-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: ea03f024cd324bc9b4f16448a7b92382d0fa2a770d5e53c9ba868270623b3fbf kernel-rt-debug-devel-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 192925b9a3d64a25548cf35a7cff07ea1544dc40721ed613d6fb4c937fc87279 kernel-rt-debug-devel-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 192925b9a3d64a25548cf35a7cff07ea1544dc40721ed613d6fb4c937fc87279 kernel-rt-debug-kvm-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: e65f949dbe9480f4d65b69e094ffceebc5b3334a9cee8f29e8ee76e2bb8fd79f kernel-rt-debug-modules-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: b87a29cad54b327a687520787cdff49712da42580871331d9888e711cd608ae8 kernel-rt-debug-modules-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: b87a29cad54b327a687520787cdff49712da42580871331d9888e711cd608ae8 kernel-rt-debug-modules-core-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 2ffee514e889ea355e693351e18c88c057359797b8025b1fad7b843dba5e647a kernel-rt-debug-modules-core-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 2ffee514e889ea355e693351e18c88c057359797b8025b1fad7b843dba5e647a kernel-rt-debug-modules-extra-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 0b09ba4ede55692c2dd75a756d852221e9b04a2b9518ddb100e69761260087be kernel-rt-debug-modules-extra-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 0b09ba4ede55692c2dd75a756d852221e9b04a2b9518ddb100e69761260087be kernel-rt-debuginfo-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 612d33a902e6a153a2668197e231f7d5dcc8fae41403c446fe5ebbaf6946b6e6 kernel-rt-debuginfo-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 612d33a902e6a153a2668197e231f7d5dcc8fae41403c446fe5ebbaf6946b6e6 kernel-rt-debuginfo-common-x86_64-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 7c6a5e523539c155a55ed1db63c2fd47524570b8305b35d2ddb8dbcc38c1b2bd kernel-rt-debuginfo-common-x86_64-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 7c6a5e523539c155a55ed1db63c2fd47524570b8305b35d2ddb8dbcc38c1b2bd kernel-rt-devel-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: bf7aa200b96eaa6d6d32a7d2c4d462285a7985213d6089d2a9e8c22be4a3d450 kernel-rt-devel-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: bf7aa200b96eaa6d6d32a7d2c4d462285a7985213d6089d2a9e8c22be4a3d450 kernel-rt-kvm-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 86fa660f63eeeb8e44d58c658004e867c20c770c864f62137a26cc8fba89bb54 kernel-rt-modules-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 28afda5b94d0a80a6a9c372b9fb2b83daca242ed58de8d4a3ce13cd1f3294a4b kernel-rt-modules-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 28afda5b94d0a80a6a9c372b9fb2b83daca242ed58de8d4a3ce13cd1f3294a4b kernel-rt-modules-core-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 6527c8eeb939149f7fd1661a8c8d4715aa3f32c51665e8b7b6c81c2609331205 kernel-rt-modules-core-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 6527c8eeb939149f7fd1661a8c8d4715aa3f32c51665e8b7b6c81c2609331205 kernel-rt-modules-extra-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 39f842de639cd3dcf03e27e1dd517d0f7ed86c0d45d051dd6e4640d3110de48b kernel-rt-modules-extra-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 39f842de639cd3dcf03e27e1dd517d0f7ed86c0d45d051dd6e4640d3110de48b Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 SRPM kernel-rt-5.14.0-284.178.1.rt14.463.el9_2.src.rpm SHA-256: b0718007304ead322b49a46e6eeff44ae8c7c9229baf5282cc2920f3d6ef5958 x86_64 kernel-rt-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 96faf82a85df9a35c9ed29c98e626e0eb70783cea323ab8aeeaaab714d3f37e0 kernel-rt-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 96faf82a85df9a35c9ed29c98e626e0eb70783cea323ab8aeeaaab714d3f37e0 kernel-rt-core-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 3363f9fc2fd07089c819293ae231417c9a0193c66c31cc3f921cec307289a411 kernel-rt-core-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 3363f9fc2fd07089c819293ae231417c9a0193c66c31cc3f921cec307289a411 kernel-rt-debug-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: af7495962f82792e79abd86cee7eb9ecdcabb075429367bf1534df664408762f kernel-rt-debug-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: af7495962f82792e79abd86cee7eb9ecdcabb075429367bf1534df664408762f kernel-rt-debug-core-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 31b619f11ebf6bd5e8abf5d007707261261e6df0e5c5691931a303f96fee5eb3 kernel-rt-debug-core-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 31b619f11ebf6bd5e8abf5d007707261261e6df0e5c5691931a303f96fee5eb3 kernel-rt-debug-debuginfo-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: ea03f024cd324bc9b4f16448a7b92382d0fa2a770d5e53c9ba868270623b3fbf kernel-rt-debug-debuginfo-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: ea03f024cd324bc9b4f16448a7b92382d0fa2a770d5e53c9ba868270623b3fbf kernel-rt-debug-devel-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 192925b9a3d64a25548cf35a7cff07ea1544dc40721ed613d6fb4c937fc87279 kernel-rt-debug-devel-5.14.0-284.178.1.rt14.463.el9_2.x86_64.rpm SHA-256: 192925b9a3d64a25548cf35