Red Hat Product Errata RHSA-2026:64770 - Security Advisory Issued: 2026-09-08 Updated: 2026-09-08 RHSA-2026:64770 - Security Advisory Overview Updated Packages Synopsis Important: kernel-rt security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002) kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007) kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563) kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343) kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129) kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Affected Products Red Hat Enterprise Linux for Real Time 8 x86_64 Red Hat Enterprise Linux for Real Time for NFV 8 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Fixes BZ - 2479812 - CVE-2026-43493 kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests BZ - 2492329 - CVE-2026-53002 kernel: netfilter: conntrack: remove sprintf usage BZ - 2502361 - CVE-2026-64007 kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable BZ - 2510892 - CVE-2026-64563 kernel: rhashtable: clear stale iter->p on table restart BZ - 2513373 - CVE-2026-68343 kernel: smb: client: validate DFS referral PathConsumed BZ - 2516731 - CVE-2026-72129 kernel: nvmet-rdma: handle inline data with a nonzero offset BZ - 2517046 - CVE-2026-74480 kernel: net: bridge: stop fast-leave after deleting a port group CVEs CVE-2026-43493 CVE-2026-53002 CVE-2026-64007 CVE-2026-64563 CVE-2026-68343 CVE-2026-72129 CVE-2026-74480 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for Real Time 8 SRPM kernel-rt-4.18.0-553.160.1.rt7.501.el8_10.src.rpm SHA-256: ddea5c53ca8f51dc3096217b1a68b03461b0496de8afaf494202e4b3f0d2b70f x86_64 kernel-rt-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 4b5b0ba890dab1305cc50b995f5206603a7ec6b07471289c15bd6b10b9e72758 kernel-rt-core-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 99457d02797325d856e945d9d39ad9faf4fab64c3b606450d96eb1b778330fc5 kernel-rt-debug-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: cf0468bf3e7a052dc2ce07b92b4f13590a3fd0f7a2782bf4380d34600512472f kernel-rt-debug-core-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 881f92a518808887894c07b31f88f022a8c9a53f1b09381fd97fc1656c9ef370 kernel-rt-debug-debuginfo-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 0b8f85e9274ac4a9a426ee9567fb1ecb507c69958ab4c6cb852390b76309df3b kernel-rt-debug-devel-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 2f9ad9c253addddbb4865a1a93fcff1f59e869aa472d4229aebc29d4507082bc kernel-rt-debug-modules-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: c386032e10ef7a672a787f3f43a813be3a2a66f1b33d2ad757f5c21dd6323868 kernel-rt-debug-modules-extra-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 1fbf97c47514519c73ba31cd761a9fcea65f5433306f8a8ff0e44271071f7dac kernel-rt-debuginfo-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 92161df2820c1e759f8f922155ecc9db82973bab314508d47bdd2c865691b263 kernel-rt-debuginfo-common-x86_64-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 355d03626d6f3de1f1aa60e9db260c7efc3ad7fe86afc759661da8a660419142 kernel-rt-devel-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: c7d6c72f80dadd50434e03faf9fd12658e8bee63626d67a64a0392b7c97fd8d5 kernel-rt-modules-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 434ccff35b44d8dd5904f4f5501ab0b4e046e7d50e91d24d18b9e24d2b68c88c kernel-rt-modules-extra-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 62f20b30b29520403ab06efecc04827b5665c6c887e26597a90faf390b24e8cd Red Hat Enterprise Linux for Real Time for NFV 8 SRPM kernel-rt-4.18.0-553.160.1.rt7.501.el8_10.src.rpm SHA-256: ddea5c53ca8f51dc3096217b1a68b03461b0496de8afaf494202e4b3f0d2b70f x86_64 kernel-rt-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 4b5b0ba890dab1305cc50b995f5206603a7ec6b07471289c15bd6b10b9e72758 kernel-rt-core-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 99457d02797325d856e945d9d39ad9faf4fab64c3b606450d96eb1b778330fc5 kernel-rt-debug-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: cf0468bf3e7a052dc2ce07b92b4f13590a3fd0f7a2782bf4380d34600512472f kernel-rt-debug-core-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 881f92a518808887894c07b31f88f022a8c9a53f1b09381fd97fc1656c9ef370 kernel-rt-debug-debuginfo-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 0b8f85e9274ac4a9a426ee9567fb1ecb507c69958ab4c6cb852390b76309df3b kernel-rt-debug-devel-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 2f9ad9c253addddbb4865a1a93fcff1f59e869aa472d4229aebc29d4507082bc kernel-rt-debug-kvm-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: d8d753f97672a0b3908f6b5882794e8de631cb827482a4c6a0f2f0942666972b kernel-rt-debug-modules-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: c386032e10ef7a672a787f3f43a813be3a2a66f1b33d2ad757f5c21dd6323868 kernel-rt-debug-modules-extra-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 1fbf97c47514519c73ba31cd761a9fcea65f5433306f8a8ff0e44271071f7dac kernel-rt-debuginfo-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 92161df2820c1e759f8f922155ecc9db82973bab314508d47bdd2c865691b263 kernel-rt-debuginfo-common-x86_64-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 355d03626d6f3de1f1aa60e9db260c7efc3ad7fe86afc759661da8a660419142 kernel-rt-devel-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: c7d6c72f80dadd50434e03faf9fd12658e8bee63626d67a64a0392b7c97fd8d5 kernel-rt-kvm-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 4e76b1cf6f2eb5fc436cf5a60eee6eda5141cac230b6d68c6c869bad0b63edb0 kernel-rt-modules-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 434ccff35b44d8dd5904f4f5501ab0b4e046e7d50e91d24d18b9e24d2b68c88c kernel-rt-modules-extra-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 62f20b30b29520403ab06efecc04827b5665c6c887e26597a90faf390b24e8cd Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM kernel-rt-4.18.0-553.160.1.rt7.501.el8_10.src.rpm SHA-256: ddea5c53ca8f51dc3096217b1a68b03461b0496de8afaf494202e4b3f0d2b70f x86_64 kernel-rt-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 4b5b0ba890dab1305cc50b995f5206603a7ec6b07471289c15bd6b10b9e72758 kernel-rt-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 4b5b0ba890dab1305cc50b995f5206603a7ec6b07471289c15bd6b10b9e72758 kernel-rt-core-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 99457d02797325d856e945d9d39ad9faf4fab64c3b606450d96eb1b778330fc5 kernel-rt-core-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 99457d02797325d856e945d9d39ad9faf4fab64c3b606450d96eb1b778330fc5 kernel-rt-debug-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: cf0468bf3e7a052dc2ce07b92b4f13590a3fd0f7a2782bf4380d34600512472f kernel-rt-debug-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: cf0468bf3e7a052dc2ce07b92b4f13590a3fd0f7a2782bf4380d34600512472f kernel-rt-debug-core-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 881f92a518808887894c07b31f88f022a8c9a53f1b09381fd97fc1656c9ef370 kernel-rt-debug-core-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 881f92a518808887894c07b31f88f022a8c9a53f1b09381fd97fc1656c9ef370 kernel-rt-debug-debuginfo-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 0b8f85e9274ac4a9a426ee9567fb1ecb507c69958ab4c6cb852390b76309df3b kernel-rt-debug-debuginfo-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 0b8f85e9274ac4a9a426ee9567fb1ecb507c69958ab4c6cb852390b76309df3b kernel-rt-debug-devel-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 2f9ad9c253addddbb4865a1a93fcff1f59e869aa472d4229aebc29d4507082bc kernel-rt-debug-devel-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: 2f9ad9c253addddbb4865a1a93fcff1f59e869aa472d4229aebc29d4507082bc kernel-rt-debug-kvm-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: d8d753f97672a0b3908f6b5882794e8de631cb827482a4c6a0f2f0942666972b kernel-rt-debug-modules-4.18.0-553.160.1.rt7.501.el8_10.x86_64.rpm SHA-256: c386032e10ef7a672a787f3f43a813be3a2a66f1b33d2ad757f5c21dd6323868 kernel-rt-debug-modules-4.18.0-553.160.1.rt7.501.el8_10.x