Red Hat Product Errata RHSA-2026:42550 - Security Advisory Issued: 2026-07-21 Updated: 2026-07-21 RHSA-2026:42550 - Security Advisory Overview Updated Packages Synopsis Important: kernel-rt security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) Bug Fix(es) and Enhancement(s): [rhel-8] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected - at: vmd_pci_write+0x85/0xe0 - deadlock (JIRA:RHEL-174916) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for Real Time 8 x86_64 Red Hat Enterprise Linux for Real Time for NFV 8 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Fixes BZ - 2482576 - CVE-2026-46117 kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() BZ - 2492458 - CVE-2026-53071 kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp CVEs CVE-2026-46117 CVE-2026-53071 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for Real Time 8 SRPM kernel-rt-4.18.0-553.146.1.rt7.487.el8_10.src.rpm SHA-256: c987a26016e3cca6abdc9607b0cccb7ee5c623ee08090924b0a1fec18819b145 x86_64 kernel-rt-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: be15ca9275ed8165deadbaffd6f5c67f615b863148fbcd307b0c056f0a552274 kernel-rt-core-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 713ef40a54d9ecf611c5ab3a590060599423a140434bb4fe1c3d9f897a89375f kernel-rt-debug-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 3436994d8fc622621365e1d7a9d55fa1e830a45e01f07bf21ec47a4fda78e7a6 kernel-rt-debug-core-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 591109e50f35ccfb77efa8cd275548476853199652a20083d2a83e8efea6a185 kernel-rt-debug-debuginfo-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 085cae0a00b07d3946815f8f306e96ce5444500180970050c87a068d1db2f726 kernel-rt-debug-devel-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 833d7eb1065ca8c9752b820c0bd809a8384fd79a7ff0934eae001a8edeb178a2 kernel-rt-debug-modules-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: fb08453e7aeb8faf072b80b4407fc177291675983ed0e9044ebe574b14f5a773 kernel-rt-debug-modules-extra-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 4b77ae7fe34e4cfa1f7affbe8cd716d8e37257c069e9950ff9a79c740a482f66 kernel-rt-debuginfo-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 3e2e9fb314ac5621494eab285c92859c792c05594c33e3f1b898aea59828ab90 kernel-rt-debuginfo-common-x86_64-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 4946cd31c4dd0458140fdee340144bce18c78ce00ec898f5380453ab8dc89615 kernel-rt-devel-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: c3480afe5d0b1baf7ba56612608839165c6ba5c412ae34203a8327052025b56e kernel-rt-modules-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 1c1630ba15e888573387ff9ed5e4d85c54016fba3d49bebc4eb23673e9160376 kernel-rt-modules-extra-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 52200981140e4704461b463c483b186473a8c4ee196bf77192d5b463fe7e930f Red Hat Enterprise Linux for Real Time for NFV 8 SRPM kernel-rt-4.18.0-553.146.1.rt7.487.el8_10.src.rpm SHA-256: c987a26016e3cca6abdc9607b0cccb7ee5c623ee08090924b0a1fec18819b145 x86_64 kernel-rt-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: be15ca9275ed8165deadbaffd6f5c67f615b863148fbcd307b0c056f0a552274 kernel-rt-core-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 713ef40a54d9ecf611c5ab3a590060599423a140434bb4fe1c3d9f897a89375f kernel-rt-debug-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 3436994d8fc622621365e1d7a9d55fa1e830a45e01f07bf21ec47a4fda78e7a6 kernel-rt-debug-core-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 591109e50f35ccfb77efa8cd275548476853199652a20083d2a83e8efea6a185 kernel-rt-debug-debuginfo-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 085cae0a00b07d3946815f8f306e96ce5444500180970050c87a068d1db2f726 kernel-rt-debug-devel-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 833d7eb1065ca8c9752b820c0bd809a8384fd79a7ff0934eae001a8edeb178a2 kernel-rt-debug-kvm-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 69582630a3decb1c1cac2c344e5e1280ebb9936f0d6a16020fa0a18accc1797d kernel-rt-debug-modules-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: fb08453e7aeb8faf072b80b4407fc177291675983ed0e9044ebe574b14f5a773 kernel-rt-debug-modules-extra-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 4b77ae7fe34e4cfa1f7affbe8cd716d8e37257c069e9950ff9a79c740a482f66 kernel-rt-debuginfo-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 3e2e9fb314ac5621494eab285c92859c792c05594c33e3f1b898aea59828ab90 kernel-rt-debuginfo-common-x86_64-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 4946cd31c4dd0458140fdee340144bce18c78ce00ec898f5380453ab8dc89615 kernel-rt-devel-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: c3480afe5d0b1baf7ba56612608839165c6ba5c412ae34203a8327052025b56e kernel-rt-kvm-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 1840a6b69d9bd1a47baab6af808d0ebb91478937c8946fb03ae18eaa5eaf43f0 kernel-rt-modules-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 1c1630ba15e888573387ff9ed5e4d85c54016fba3d49bebc4eb23673e9160376 kernel-rt-modules-extra-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 52200981140e4704461b463c483b186473a8c4ee196bf77192d5b463fe7e930f Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM kernel-rt-4.18.0-553.146.1.rt7.487.el8_10.src.rpm SHA-256: c987a26016e3cca6abdc9607b0cccb7ee5c623ee08090924b0a1fec18819b145 x86_64 kernel-rt-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: be15ca9275ed8165deadbaffd6f5c67f615b863148fbcd307b0c056f0a552274 kernel-rt-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: be15ca9275ed8165deadbaffd6f5c67f615b863148fbcd307b0c056f0a552274 kernel-rt-core-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 713ef40a54d9ecf611c5ab3a590060599423a140434bb4fe1c3d9f897a89375f kernel-rt-core-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 713ef40a54d9ecf611c5ab3a590060599423a140434bb4fe1c3d9f897a89375f kernel-rt-debug-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 3436994d8fc622621365e1d7a9d55fa1e830a45e01f07bf21ec47a4fda78e7a6 kernel-rt-debug-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 3436994d8fc622621365e1d7a9d55fa1e830a45e01f07bf21ec47a4fda78e7a6 kernel-rt-debug-core-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 591109e50f35ccfb77efa8cd275548476853199652a20083d2a83e8efea6a185 kernel-rt-debug-core-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 591109e50f35ccfb77efa8cd275548476853199652a20083d2a83e8efea6a185 kernel-rt-debug-debuginfo-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 085cae0a00b07d3946815f8f306e96ce5444500180970050c87a068d1db2f726 kernel-rt-debug-debuginfo-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 085cae0a00b07d3946815f8f306e96ce5444500180970050c87a068d1db2f726 kernel-rt-debug-devel-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 833d7eb1065ca8c9752b820c0bd809a8384fd79a7ff0934eae001a8edeb178a2 kernel-rt-debug-devel-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 833d7eb1065ca8c9752b820c0bd809a8384fd79a7ff0934eae001a8edeb178a2 kernel-rt-debug-kvm-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 69582630a3decb1c1cac2c344e5e1280ebb9936f0d6a16020fa0a18accc1797d kernel-rt-debug-modules-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: fb08453e7aeb8faf072b80b4407fc177291675983ed0e9044ebe574b14f5a773 kernel-rt-debug-modules-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: fb08453e7aeb8faf072b80b4407fc177291675983ed0e9044ebe574b14f5a773 kernel-rt-debug-modules-extra-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 4b77ae7fe34e4cfa1f7affbe8cd716d8e37257c069e9950ff9a79c740a482f66 kernel-rt-debug-modules-extra-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 4b77ae7fe34e4cfa1f7affbe8cd716d8e37257c069e9950ff9a79c740a482f66 kernel-rt-debuginfo-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 3e2e9fb314ac5621494eab285c92859c792c05594c33e3f1b898aea59828ab90 kernel-rt-debuginfo-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 3e2e9fb314ac5621494eab285c92859c792c05594c33e3f1b898aea59828ab90 kernel-rt-debuginfo-common-x86_64-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 4946cd31c4dd0458140fdee340144bce18c78ce00ec898f5380453ab8dc89615 kernel-rt-debuginfo-common-x86_64-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 4946cd31c4dd0458140fdee340144bce18c78ce00ec898f5380453ab8dc89615 kernel-rt-devel-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: c3480afe5d0b1baf7ba56612608839165c6ba5c412ae34203a8327052025b56e kernel-rt-devel-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: c3480afe5d0b1baf7ba56612608839165c6ba5c412ae34203a8327052025b56e kernel-rt-kvm-4.18.0-553.146.1.rt7.487.el8_10.x86_64.rpm SHA-256: 1840a6b69d9bd1a47baab6af808d0ebb914789
This Important Red Hat kernel-rt update addresses two high-severity vulnerabilities: CVE-2026-46117 (CVSS 7.8), a user-triggerable WARN_ON() in the RDMA mana driver, and CVE-2026-53071 (CVSS 8.8), a missing lock in the Bluetooth L2CAP implementation. For CVE-2026-46117, the authoritative NVD data indicates affected Linux kernel versions are 6.8 through 6.12.90, 6.13 through 6.18.29, and 6.19 through 7.0.6, with fixes available in kernel versions 6.12.91, 6.18.30, and 7.0.7. The advisory requires a system reboot after applying the update.