Red Hat Product Errata RHSA-2026:51604 - Security Advisory Issued: 2026-08-07 Updated: 2026-08-07 RHSA-2026:51604 - Security Advisory Overview Updated Packages Synopsis Important: kernel-rt security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026) kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) Bug Fix(es) and Enhancement(s): qemu-kvm: error: failed to set MSR 0xc0000102 to 0xff4547ceb1600000 [RHEL.9.2.z] (JIRA:RHEL-126981) [RHEL9.2-z] observe hang with nvme/051 test (JIRA:RHEL-129407) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Fixes BZ - 2406712 - CVE-2025-40026 kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O BZ - 2464092 - CVE-2026-31787 kernel: xen/privcmd: fix double free via VMA splitting BZ - 2481922 - CVE-2026-45984 kernel: gfs2: Fix use-after-free in iomap inline data write path BZ - 2486958 - CVE-2025-10263 kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources BZ - 2492094 - CVE-2026-52923 kernel: ipc: limit next_id allocation to the valid ID range BZ - 2507402 - CVE-2026-64531 kernel: net: openvswitch: reject oversized nested action attrs CVEs CVE-2025-10263 CVE-2025-40026 CVE-2026-31787 CVE-2026-45984 CVE-2026-52923 CVE-2026-64531 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM kernel-rt-5.14.0-284.186.1.rt14.471.el9_2.src.rpm SHA-256: ea163842cd9abf2e300861e972ab264aa20461074b5631a927d8fba6710a6734 x86_64 kernel-rt-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: a581f35d7bdf6e0a0924b145f98949c2bc4e4665dafbc6f3da448f5c7c688490 kernel-rt-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: a581f35d7bdf6e0a0924b145f98949c2bc4e4665dafbc6f3da448f5c7c688490 kernel-rt-core-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 596516324f9aee0f4056e274b8a6c5a0092edbfdab0f27c91f2483a514cde1cb kernel-rt-core-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 596516324f9aee0f4056e274b8a6c5a0092edbfdab0f27c91f2483a514cde1cb kernel-rt-debug-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 3aa153f36b217332d57f22212b0558465d7f872ddfbde184c0ac183768f44fdb kernel-rt-debug-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 3aa153f36b217332d57f22212b0558465d7f872ddfbde184c0ac183768f44fdb kernel-rt-debug-core-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: c67af987465a6e76a1084f4382d1a8e93cf542a00cad7d2e9de1a49872f8fc93 kernel-rt-debug-core-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: c67af987465a6e76a1084f4382d1a8e93cf542a00cad7d2e9de1a49872f8fc93 kernel-rt-debug-debuginfo-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 3e2cab977beb0b29e6e7a7d59c5f99920071eced81dd0190af96224219862bba kernel-rt-debug-debuginfo-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 3e2cab977beb0b29e6e7a7d59c5f99920071eced81dd0190af96224219862bba kernel-rt-debug-devel-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: f0e3e97f41e38e16725c5350ae0d9eb8053a0cfd50634bdcfba30701c0f7b4c2 kernel-rt-debug-devel-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: f0e3e97f41e38e16725c5350ae0d9eb8053a0cfd50634bdcfba30701c0f7b4c2 kernel-rt-debug-kvm-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 4218d8de3ad3dcc6922f221b9eb1be5acf0109c0b8ce9868690918a6c6a383ee kernel-rt-debug-modules-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: f21b4c2f74f772a81edd4b633fee8c0bea64c110805da3b32b91b80d48c3bda4 kernel-rt-debug-modules-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: f21b4c2f74f772a81edd4b633fee8c0bea64c110805da3b32b91b80d48c3bda4 kernel-rt-debug-modules-core-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 4073b710c4ef5d8d87ce84f0d051beb21c24499d4046de303f2eb421a8181111 kernel-rt-debug-modules-core-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 4073b710c4ef5d8d87ce84f0d051beb21c24499d4046de303f2eb421a8181111 kernel-rt-debug-modules-extra-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 4e5acab699596f3a76b8013e5a9f349063d5570bd8eee5967068df96d5a8bc6e kernel-rt-debug-modules-extra-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 4e5acab699596f3a76b8013e5a9f349063d5570bd8eee5967068df96d5a8bc6e kernel-rt-debuginfo-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 748a184d3cfe966241a32fa0b8e19d6cce0d1ec32f69e0f69c27e1628e10c803 kernel-rt-debuginfo-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 748a184d3cfe966241a32fa0b8e19d6cce0d1ec32f69e0f69c27e1628e10c803 kernel-rt-debuginfo-common-x86_64-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 1eaea5c47bf2e86aa04dd8d60ca4c2220175b8200ea8f5ed381183852725e724 kernel-rt-debuginfo-common-x86_64-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 1eaea5c47bf2e86aa04dd8d60ca4c2220175b8200ea8f5ed381183852725e724 kernel-rt-devel-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: ed97aa8d6e3c0c24e89440909337e41a1d9d1a9f6ec8347a8d7ebc6044ed05a3 kernel-rt-devel-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: ed97aa8d6e3c0c24e89440909337e41a1d9d1a9f6ec8347a8d7ebc6044ed05a3 kernel-rt-kvm-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 1ff5b38818fa4b80798fa8dc693c809b1d4e8a65e8f8d1c60e36161e52d827cc kernel-rt-modules-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 8436ee285ea7c820cc47300a776a1bf8768afe2d6d1bba0d4770513b11aea441 kernel-rt-modules-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 8436ee285ea7c820cc47300a776a1bf8768afe2d6d1bba0d4770513b11aea441 kernel-rt-modules-core-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 0667c9233294cb99ab41b3c1bdc089989360d07f1a407ec0d25f08730ec57143 kernel-rt-modules-core-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 0667c9233294cb99ab41b3c1bdc089989360d07f1a407ec0d25f08730ec57143 kernel-rt-modules-extra-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 75f9b424905fef497b4af34f4dc8997aa54e8013327a3f667787ad34c9199232 kernel-rt-modules-extra-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 75f9b424905fef497b4af34f4dc8997aa54e8013327a3f667787ad34c9199232 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 SRPM kernel-rt-5.14.0-284.186.1.rt14.471.el9_2.src.rpm SHA-256: ea163842cd9abf2e300861e972ab264aa20461074b5631a927d8fba6710a6734 x86_64 kernel-rt-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: a581f35d7bdf6e0a0924b145f98949c2bc4e4665dafbc6f3da448f5c7c688490 kernel-rt-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: a581f35d7bdf6e0a0924b145f98949c2bc4e4665dafbc6f3da448f5c7c688490 kernel-rt-core-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 596516324f9aee0f4056e274b8a6c5a0092edbfdab0f27c91f2483a514cde1cb kernel-rt-core-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 596516324f9aee0f4056e274b8a6c5a0092edbfdab0f27c91f2483a514cde1cb kernel-rt-debug-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 3aa153f36b217332d57f22212b0558465d7f872ddfbde184c0ac183768f44fdb kernel-rt-debug-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 3aa153f36b217332d57f22212b0558465d7f872ddfbde184c0ac183768f44fdb kernel-rt-debug-core-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: c67af987465a6e76a1084f4382d1a8e93cf542a00cad7d2e9de1a49872f8fc93 kernel-rt-debug-core-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: c67af987465a6e76a1084f4382d1a8e93cf542a00cad7d2e9de1a49872f8fc93 kernel-rt-debug-debuginfo-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 3e2cab977beb0b29e6e7a7d59c5f99920071eced81dd0190af96224219862bba kernel-rt-debug-debuginfo-5.14.0-284.186.1.rt14.471.el9_2.x86_64.rpm SHA-256: 3e2cab977beb0b29e6e7a7d59c5f99920071eced81dd0190af