Red Hat has released an Important security update for the kernel-rt package in RHEL 9.2 Update Services for SAP Solutions, addressing four CVEs including CVE-2026-31488 (CVSS 7.8/HIGH) and CVE-2026-46116 (CVSS 7.8/HIGH), which affect the AMD display driver and XFRM networking subsystem respectively. The vulnerabilities affect multiple upstream Linux kernel versions, such as CVE-2026-46116 affecting versions from 2.6.19 through 5.15.209 and 5.16 through 6.1.175. The update provides the patched kernel-rt package for the affected RHEL channel, and a system reboot is required for the changes to take effect.
Red Hat Product Errata RHSA-2026:47632 - Security Advisory Issued: 2026-07-29 Updated: 2026-07-29 RHSA-2026:47632 - Security Advisory Overview Updated Packages Synopsis Important: kernel-rt security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) Bug Fix(es) and Enhancement(s): [RHEL-9] Performance impact of CVE-2025-38085 (JIRA:RHEL-161143) NVMe-FC: Panic during NVMe Controller Reset tests (JIRA:RHEL-178451) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Fixes BZ - 2460619 - CVE-2026-31488 kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation BZ - 2461757 - CVE-2026-31684 kernel: net: sched: act_csum: validate nested VLAN headers BZ - 2482523 - CVE-2026-46116 kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete BZ - 2482636 - CVE-2026-46209 kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() CVEs CVE-2026-31488 CVE-2026-31684 CVE-2026-46116 CVE-2026-46209 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM kernel-rt-5.14.0-284.183.1.rt14.468.el9_2.src.rpm SHA-256: 5fa6f61b5e619a788d9c104519f1dfa5cc9cb440fa9890f68e15dbf55345804f x86_64 kernel-rt-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 749b4e8aebaab276357ede642788fcc31e2ca22906afdbcd8c4ba579fc6cb699 kernel-rt-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 749b4e8aebaab276357ede642788fcc31e2ca22906afdbcd8c4ba579fc6cb699 kernel-rt-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: ad770a2a034136665ea5fd2f67f9ff861dad6ce9a132df66f15b0a6de3074ce9 kernel-rt-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: ad770a2a034136665ea5fd2f67f9ff861dad6ce9a132df66f15b0a6de3074ce9 kernel-rt-debug-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 39df5b367028d9fbdcfc397a18ec0806dda9c10c71eb88f119394034f2d8bbfb kernel-rt-debug-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 39df5b367028d9fbdcfc397a18ec0806dda9c10c71eb88f119394034f2d8bbfb kernel-rt-debug-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: a716babbba9f6760871fe4f78ca8f549add9fb78cde4594862aba0cafb09b16d kernel-rt-debug-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: a716babbba9f6760871fe4f78ca8f549add9fb78cde4594862aba0cafb09b16d kernel-rt-debug-debuginfo-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 8a07d9329de7a6df60b8bbbea11e481806d7e8b5516c35cc3eb2a8ab082444ab kernel-rt-debug-debuginfo-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 8a07d9329de7a6df60b8bbbea11e481806d7e8b5516c35cc3eb2a8ab082444ab kernel-rt-debug-devel-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: f12f0999cd5c63b604777dcdd505b7bea1c57091677752c93d942d72b2246451 kernel-rt-debug-devel-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: f12f0999cd5c63b604777dcdd505b7bea1c57091677752c93d942d72b2246451 kernel-rt-debug-kvm-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 7dc6fd21af76f0191004597c489fbf46ef62580034ad0ed52594f9a2f9a2c564 kernel-rt-debug-modules-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 02d2c826bd6ece2ac2d0b4b1256bc4de80055869418f05118416c58093b066db kernel-rt-debug-modules-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 02d2c826bd6ece2ac2d0b4b1256bc4de80055869418f05118416c58093b066db kernel-rt-debug-modules-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: f1258e7bbfa2a2bdac4993576395b4a26dd31a9b2a8027a276eda7ee6f806119 kernel-rt-debug-modules-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: f1258e7bbfa2a2bdac4993576395b4a26dd31a9b2a8027a276eda7ee6f806119 kernel-rt-debug-modules-extra-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 3bf2418880dd9dcd04f00ca5acacd33a4bdec05ed0fb6225b0cce8de68976b2a kernel-rt-debug-modules-extra-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 3bf2418880dd9dcd04f00ca5acacd33a4bdec05ed0fb6225b0cce8de68976b2a kernel-rt-debuginfo-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: b4858ab303c1633ef14b0a16cb4b233a261d433b52ad7aa3f5fa58d2ab04474e kernel-rt-debuginfo-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: b4858ab303c1633ef14b0a16cb4b233a261d433b52ad7aa3f5fa58d2ab04474e kernel-rt-debuginfo-common-x86_64-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: aeacba9575692715da70a3dd1cb6d2873986c4194f9704b48914e29ab20beb88 kernel-rt-debuginfo-common-x86_64-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: aeacba9575692715da70a3dd1cb6d2873986c4194f9704b48914e29ab20beb88 kernel-rt-devel-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: c4da5bee7548f26df9d1a32e0cd1c65f655b5486083db39332da68859eb21560 kernel-rt-devel-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: c4da5bee7548f26df9d1a32e0cd1c65f655b5486083db39332da68859eb21560 kernel-rt-kvm-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 426c37e7d8e64c49d9a3a41d33d0e90081ebdf2b35cb4e67b5791de47ebde880 kernel-rt-modules-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 599486b1638f1c54af477bb399a504830ea72ca926564c9296af6478bec78bbd kernel-rt-modules-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 599486b1638f1c54af477bb399a504830ea72ca926564c9296af6478bec78bbd kernel-rt-modules-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: a801b78a8eafbbb5333f5042eb316432c59074712772b2b68f408ca4eae97868 kernel-rt-modules-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: a801b78a8eafbbb5333f5042eb316432c59074712772b2b68f408ca4eae97868 kernel-rt-modules-extra-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 4447df7dbb4790dca61973ce2da30eeb1ec68b5dedd707d947ef58bf58c83d0b kernel-rt-modules-extra-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 4447df7dbb4790dca61973ce2da30eeb1ec68b5dedd707d947ef58bf58c83d0b Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 SRPM kernel-rt-5.14.0-284.183.1.rt14.468.el9_2.src.rpm SHA-256: 5fa6f61b5e619a788d9c104519f1dfa5cc9cb440fa9890f68e15dbf55345804f x86_64 kernel-rt-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 749b4e8aebaab276357ede642788fcc31e2ca22906afdbcd8c4ba579fc6cb699 kernel-rt-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 749b4e8aebaab276357ede642788fcc31e2ca22906afdbcd8c4ba579fc6cb699 kernel-rt-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: ad770a2a034136665ea5fd2f67f9ff861dad6ce9a132df66f15b0a6de3074ce9 kernel-rt-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: ad770a2a034136665ea5fd2f67f9ff861dad6ce9a132df66f15b0a6de3074ce9 kernel-rt-debug-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 39df5b367028d9fbdcfc397a18ec0806dda9c10c71eb88f119394034f2d8bbfb kernel-rt-debug-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 39df5b367028d9fbdcfc397a18ec0806dda9c10c71eb88f119394034f2d8bbfb kernel-rt-debug-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: a716babbba9f6760871fe4f78ca8f549add9fb78cde4594862aba0cafb09b16d kernel-rt-debug-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: a716babbba9f6760871fe4f78ca8f549add9fb78cde4594862aba0cafb09b16d kernel-rt-debug-debuginfo-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 8a07d9329de7a6df60b8bbbea11e481806d7e8b5516c35cc3eb2a8ab082444ab kernel-rt-debug-debuginfo-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 8a07d9329de7a6df60b8bbbea11e481806d7e8b5516c35cc3eb2a8ab082444ab kernel-rt-debug-devel-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: f12f0999cd5c63b604777dcdd505b7bea1c57091677752c93d942d72b2246451 kernel-rt-debug-devel-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: f12f0999cd5c63b604777dcdd505b7bea1c57091677752c93d942d72b2246451 kernel-rt-debug-kvm-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 7dc6fd21af76f0191004597c489fbf46ef62580034ad0ed52594f9a2f9a2c564 kernel-rt-debug-modules-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 02d2c826bd6ece2ac2d0b4b1256bc4de80055869418f05118416c58093b066db kernel-rt-debug-modules-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 02d2c826bd6ece2ac2d0b4b1256bc4de80055869418f05118416c58093b066db kernel-rt-debug-modules-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: f1258e7bbfa2a2bdac4993576395b4a26dd31a9b2a8027a276eda7ee6f806119 kernel-rt-debug-modules-core-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: f1258e7bbfa2a2bdac4993576395b4a26dd31a9b2a8027a276eda7ee6f806119 kernel-rt-debug-modules-extra-5.14.0-284.183.1.rt14.468.el9_2.x86_64.rpm SHA-256: 3b