This Red Hat security advisory addresses three Important-rated vulnerabilities in the kernel-rt package for RHEL 8: CVE-2026-23216, CVE-2026-45984, and CVE-2026-46189, which are use-after-free and double-free flaws in the iSCSI target, GFS2 filesystem, and RDMA subsystems, respectively. Each vulnerability has a CVSS 3.1 base score of 7.8 (High). The affected kernel version ranges are extensive, as detailed in the NVD data, but the specific fixed version for Red Hat Enterprise Linux for Real Time 8 is provided in the kernel-rt-4.18.0-553.139.1.rt7.480.el8_10 update, which requires a system reboot.
Red Hat Product Errata RHSA-2026:36049 - Security Advisory Issued: 2026-07-07 Updated: 2026-07-07 RHSA-2026:36049 - Security Advisory Overview Updated Packages Synopsis Important: kernel-rt security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) Bug Fix(es) and Enhancement(s): [RHEL 8.10.z] Add an .sbat section to the x86 kernel (JIRA:RHEL-182788) Incorrect message "NFS: Server wrote zero bytes" is shown in the logs (JIRA:RHEL-147665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for Real Time 8 x86_64 Red Hat Enterprise Linux for Real Time for NFV 8 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Fixes BZ - 2440630 - CVE-2026-23216 kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() BZ - 2481922 - CVE-2026-45984 kernel: gfs2: Fix use-after-free in iomap inline data write path BZ - 2482588 - CVE-2026-46189 kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path CVEs CVE-2026-23216 CVE-2026-45984 CVE-2026-46189 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for Real Time 8 SRPM kernel-rt-4.18.0-553.139.1.rt7.480.el8_10.src.rpm SHA-256: ff47deba06df8b6c2fe5f73c260985ed72293b16ddb200ce26e89c758bcca6a3 x86_64 kernel-rt-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: eb3709f2f41d34e063a5733cba6fde6a30bee3d1580b9025c18dfeb7b10cff8e kernel-rt-core-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 45243273d2dfd28ab6a50e1e2c8799d41df6174807834bc94022ed7a4e883357 kernel-rt-debug-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 9edf558fdd6d3de99e0c8022f13cfa01c2ed1d8a0558141098ec45d1f946e9b5 kernel-rt-debug-core-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 405e2dbfc8d3cc8806326664aafbc5fd02195e93899bc5118a8e7d4f6dadeca3 kernel-rt-debug-debuginfo-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 4c5d60d507abfe1ce39a8a51c70e5ffa754c6058ea2cab0acd866f35474fe6c4 kernel-rt-debug-devel-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 634fed85baa12c786bdef6e9640bad75b76a94cffb609f66492d6e9bd4eb082b kernel-rt-debug-modules-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 8e0be7c200489fd0ee617c50157b38fad8b6c38bf22446696130d9921f8204a5 kernel-rt-debug-modules-extra-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 5265eac4812629740420c6b445c8d73efcca759b015bb1fdf4e5107a70f5a60f kernel-rt-debuginfo-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 1f3cf97fad30b7daea3497e8b092042c2747bfe6329d0471aea92cc22b2e1c5f kernel-rt-debuginfo-common-x86_64-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: bbaea47d1af4a7c1128e8b6e391ce8900db39211fc16e5afff830781b511ddc8 kernel-rt-devel-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: c6d138ab31a27f5c16c5e879987195f4f7f980a21e613bda5d99bc1b933f521a kernel-rt-modules-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 99af0c3c1b9f1d02f068474f9a15420e2a524abc4e446d1f3e827ed4f894e00e kernel-rt-modules-extra-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: b3e4d253343c5e1872538d84974774bd19514549de58f7df5feb838365814d6b Red Hat Enterprise Linux for Real Time for NFV 8 SRPM kernel-rt-4.18.0-553.139.1.rt7.480.el8_10.src.rpm SHA-256: ff47deba06df8b6c2fe5f73c260985ed72293b16ddb200ce26e89c758bcca6a3 x86_64 kernel-rt-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: eb3709f2f41d34e063a5733cba6fde6a30bee3d1580b9025c18dfeb7b10cff8e kernel-rt-core-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 45243273d2dfd28ab6a50e1e2c8799d41df6174807834bc94022ed7a4e883357 kernel-rt-debug-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 9edf558fdd6d3de99e0c8022f13cfa01c2ed1d8a0558141098ec45d1f946e9b5 kernel-rt-debug-core-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 405e2dbfc8d3cc8806326664aafbc5fd02195e93899bc5118a8e7d4f6dadeca3 kernel-rt-debug-debuginfo-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 4c5d60d507abfe1ce39a8a51c70e5ffa754c6058ea2cab0acd866f35474fe6c4 kernel-rt-debug-devel-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 634fed85baa12c786bdef6e9640bad75b76a94cffb609f66492d6e9bd4eb082b kernel-rt-debug-kvm-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 5de6a44a64ed7f141fe0434336a5cd2d009cf0d3c158f2e87a6c72cb9a79b599 kernel-rt-debug-modules-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 8e0be7c200489fd0ee617c50157b38fad8b6c38bf22446696130d9921f8204a5 kernel-rt-debug-modules-extra-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 5265eac4812629740420c6b445c8d73efcca759b015bb1fdf4e5107a70f5a60f kernel-rt-debuginfo-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 1f3cf97fad30b7daea3497e8b092042c2747bfe6329d0471aea92cc22b2e1c5f kernel-rt-debuginfo-common-x86_64-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: bbaea47d1af4a7c1128e8b6e391ce8900db39211fc16e5afff830781b511ddc8 kernel-rt-devel-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: c6d138ab31a27f5c16c5e879987195f4f7f980a21e613bda5d99bc1b933f521a kernel-rt-kvm-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: b17cacd41df58f702948512733b3f643cac0ba6bb38be26fa6ca0a17af020795 kernel-rt-modules-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 99af0c3c1b9f1d02f068474f9a15420e2a524abc4e446d1f3e827ed4f894e00e kernel-rt-modules-extra-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: b3e4d253343c5e1872538d84974774bd19514549de58f7df5feb838365814d6b Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM kernel-rt-4.18.0-553.139.1.rt7.480.el8_10.src.rpm SHA-256: ff47deba06df8b6c2fe5f73c260985ed72293b16ddb200ce26e89c758bcca6a3 x86_64 kernel-rt-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: eb3709f2f41d34e063a5733cba6fde6a30bee3d1580b9025c18dfeb7b10cff8e kernel-rt-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: eb3709f2f41d34e063a5733cba6fde6a30bee3d1580b9025c18dfeb7b10cff8e kernel-rt-core-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 45243273d2dfd28ab6a50e1e2c8799d41df6174807834bc94022ed7a4e883357 kernel-rt-core-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 45243273d2dfd28ab6a50e1e2c8799d41df6174807834bc94022ed7a4e883357 kernel-rt-debug-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 9edf558fdd6d3de99e0c8022f13cfa01c2ed1d8a0558141098ec45d1f946e9b5 kernel-rt-debug-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 9edf558fdd6d3de99e0c8022f13cfa01c2ed1d8a0558141098ec45d1f946e9b5 kernel-rt-debug-core-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 405e2dbfc8d3cc8806326664aafbc5fd02195e93899bc5118a8e7d4f6dadeca3 kernel-rt-debug-core-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 405e2dbfc8d3cc8806326664aafbc5fd02195e93899bc5118a8e7d4f6dadeca3 kernel-rt-debug-debuginfo-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 4c5d60d507abfe1ce39a8a51c70e5ffa754c6058ea2cab0acd866f35474fe6c4 kernel-rt-debug-debuginfo-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 4c5d60d507abfe1ce39a8a51c70e5ffa754c6058ea2cab0acd866f35474fe6c4 kernel-rt-debug-devel-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 634fed85baa12c786bdef6e9640bad75b76a94cffb609f66492d6e9bd4eb082b kernel-rt-debug-devel-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 634fed85baa12c786bdef6e9640bad75b76a94cffb609f66492d6e9bd4eb082b kernel-rt-debug-kvm-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 5de6a44a64ed7f141fe0434336a5cd2d009cf0d3c158f2e87a6c72cb9a79b599 kernel-rt-debug-modules-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 8e0be7c200489fd0ee617c50157b38fad8b6c38bf22446696130d9921f8204a5 kernel-rt-debug-modules-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 8e0be7c200489fd0ee617c50157b38fad8b6c38bf22446696130d9921f8204a5 kernel-rt-debug-modules-extra-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 5265eac4812629740420c6b445c8d73efcca759b015bb1fdf4e5107a70f5a60f kernel-rt-debug-modules-extra-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 5265eac4812629740420c6b445c8d73efcca759b015bb1fdf4e5107a70f5a60f kernel-rt-debuginfo-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 1f3cf97fad30b7daea3497e8b092042c2747bfe6329d0471aea92cc22b2e1c5f kernel-rt-debuginfo-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: 1f3cf97fad30b7daea3497e8b092042c2747bfe6329d0471aea92cc22b2e1c5f kernel-rt-debuginfo-common-x86_64-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: bbaea47d1af4a7c1128e8b6e391ce8900db39211fc16e5afff830781b511ddc8 kernel-rt-debuginfo-common-x86_64-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: bbaea47d1af4a7c1128e8b6e391ce8900db39211fc16e5afff830781b511ddc8 kernel-rt-devel-4.18.0-553.139.1.rt7.480.el8_10.x86_64.rpm SHA-256: c6d138ab31a27f5c16c5e879987195f4f7f980a21e613bda5d99bc1b933f521a k