- Issued:
- 2026-07-24
- Updated:
- 2026-07-24
RHSA-2026:45116 - Security Advisory
Synopsis
Important: kernel-rt security update
Type/Severity
Security Advisory: Important
Red Hat Lightspeed patch analysis
Identify and remediate systems affected by this advisory.
Topic
An update for kernel-rt is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables
fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
- kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)
- kernel: xfrm single-frag length not properly limited
- kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)
- kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
Affected Products
- Red Hat Enterprise Linux for Real Time 8 x86_64
- Red Hat Enterprise Linux for Real Time for NFV 8 x86_64
- Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
Fixes
- BZ - 2406712 - CVE-2025-40026 kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
- BZ - 2492277 - CVE-2026-53059 kernel: dm log: fix out-of-bounds write due to region_count overflow
- BZ - 2492437 - CVE-2026-52993 kernel: tipc: fix double-free in tipc_buf_append()
Red Hat Enterprise Linux for Real Time 8
| SRPM | |
|---|---|
| kernel-rt-4.18.0-553.147.1.rt7.488.el8_10.src.rpm | SHA-256: 144afbc3333c09613bce6af71c79e37ee36c621e1d99c762b2e0bec3bd81072c |
| x86_64 | |
| kernel-rt-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: f96d3c30cf3ff55d90fa180c7747c12c86db420814af0d13b332d0a77e6802f7 |
| kernel-rt-core-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: b33b93ca24f8e8f2ebfc34de90378f855f6270c91eefdaef2e9e4beb23dc215b |
| kernel-rt-debug-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 165700a71ef2433fde2c151d4268be8e3d8ef4c0dba1b1c1b757e719d6956958 |
| kernel-rt-debug-core-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 070d5d1e133e65344e160c6778e565899c461c8234a120a0bdbaeddf137fb8e1 |
| kernel-rt-debug-debuginfo-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: e360a082293800a80c51291fc3ff439efb0f5e43499aef9e79b4a804a9a74b21 |
| kernel-rt-debug-devel-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 403504d6c1b3bbe5766e94701b7180073706bb45d90831e07a8f11a47d8bce14 |
| kernel-rt-debug-modules-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: da4eeb7643b7fa3bbae44914f864a1bd3726e28b1d03958e1f31d5b594db77f7 |
| kernel-rt-debug-modules-extra-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 9ce182f0851c5607a50d9b65c0bb3398db02ca8ae662721e82ac32ddf15af6c2 |
| kernel-rt-debuginfo-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: fffe06fd2495f83082c478b9e8961ec4978645e772bb8d13d298b5ddfe17e7bb |
| kernel-rt-debuginfo-common-x86_64-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 448f2ba9861ec4c3d0f5eb8a04596eea21fc59bc38552a1f9a917eba42a534ce |
| kernel-rt-devel-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: a4a142bc55b614978230706912087ab3ed357141a93750bd7ebd017d06eb601f |
| kernel-rt-modules-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 276cbee02936286c6688b801a3fa584a0794ac7876cdb5d78081d9fa77859d07 |
| kernel-rt-modules-extra-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 0b23832e8b0477466d57f045950c8c98727cdc5c9dec7ba01ecbcf5d5dcc7e3f |
Red Hat Enterprise Linux for Real Time for NFV 8
| SRPM | |
|---|---|
| kernel-rt-4.18.0-553.147.1.rt7.488.el8_10.src.rpm | SHA-256: 144afbc3333c09613bce6af71c79e37ee36c621e1d99c762b2e0bec3bd81072c |
| x86_64 | |
| kernel-rt-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: f96d3c30cf3ff55d90fa180c7747c12c86db420814af0d13b332d0a77e6802f7 |
| kernel-rt-core-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: b33b93ca24f8e8f2ebfc34de90378f855f6270c91eefdaef2e9e4beb23dc215b |
| kernel-rt-debug-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 165700a71ef2433fde2c151d4268be8e3d8ef4c0dba1b1c1b757e719d6956958 |
| kernel-rt-debug-core-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 070d5d1e133e65344e160c6778e565899c461c8234a120a0bdbaeddf137fb8e1 |
| kernel-rt-debug-debuginfo-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: e360a082293800a80c51291fc3ff439efb0f5e43499aef9e79b4a804a9a74b21 |
| kernel-rt-debug-devel-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 403504d6c1b3bbe5766e94701b7180073706bb45d90831e07a8f11a47d8bce14 |
| kernel-rt-debug-kvm-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 77dd3ad05a3e94857caa83c56eda0d81bd9c14822455def9e346f5a37fcb9454 |
| kernel-rt-debug-modules-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: da4eeb7643b7fa3bbae44914f864a1bd3726e28b1d03958e1f31d5b594db77f7 |
| kernel-rt-debug-modules-extra-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 9ce182f0851c5607a50d9b65c0bb3398db02ca8ae662721e82ac32ddf15af6c2 |
| kernel-rt-debuginfo-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: fffe06fd2495f83082c478b9e8961ec4978645e772bb8d13d298b5ddfe17e7bb |
| kernel-rt-debuginfo-common-x86_64-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 448f2ba9861ec4c3d0f5eb8a04596eea21fc59bc38552a1f9a917eba42a534ce |
| kernel-rt-devel-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: a4a142bc55b614978230706912087ab3ed357141a93750bd7ebd017d06eb601f |
| kernel-rt-kvm-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 750186e3558ef205e4713ca79608ec0fef542a32dfd39f14b06f3c2fc4a970fd |
| kernel-rt-modules-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 276cbee02936286c6688b801a3fa584a0794ac7876cdb5d78081d9fa77859d07 |
| kernel-rt-modules-extra-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 0b23832e8b0477466d57f045950c8c98727cdc5c9dec7ba01ecbcf5d5dcc7e3f |
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10
| SRPM | |
|---|---|
| kernel-rt-4.18.0-553.147.1.rt7.488.el8_10.src.rpm | SHA-256: 144afbc3333c09613bce6af71c79e37ee36c621e1d99c762b2e0bec3bd81072c |
| x86_64 | |
| kernel-rt-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: f96d3c30cf3ff55d90fa180c7747c12c86db420814af0d13b332d0a77e6802f7 |
| kernel-rt-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: f96d3c30cf3ff55d90fa180c7747c12c86db420814af0d13b332d0a77e6802f7 |
| kernel-rt-core-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: b33b93ca24f8e8f2ebfc34de90378f855f6270c91eefdaef2e9e4beb23dc215b |
| kernel-rt-core-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: b33b93ca24f8e8f2ebfc34de90378f855f6270c91eefdaef2e9e4beb23dc215b |
| kernel-rt-debug-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 165700a71ef2433fde2c151d4268be8e3d8ef4c0dba1b1c1b757e719d6956958 |
| kernel-rt-debug-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 165700a71ef2433fde2c151d4268be8e3d8ef4c0dba1b1c1b757e719d6956958 |
| kernel-rt-debug-core-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 070d5d1e133e65344e160c6778e565899c461c8234a120a0bdbaeddf137fb8e1 |
| kernel-rt-debug-core-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 070d5d1e133e65344e160c6778e565899c461c8234a120a0bdbaeddf137fb8e1 |
| kernel-rt-debug-debuginfo-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: e360a082293800a80c51291fc3ff439efb0f5e43499aef9e79b4a804a9a74b21 |
| kernel-rt-debug-debuginfo-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: e360a082293800a80c51291fc3ff439efb0f5e43499aef9e79b4a804a9a74b21 |
| kernel-rt-debug-devel-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 403504d6c1b3bbe5766e94701b7180073706bb45d90831e07a8f11a47d8bce14 |
| kernel-rt-debug-devel-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 403504d6c1b3bbe5766e94701b7180073706bb45d90831e07a8f11a47d8bce14 |
| kernel-rt-debug-kvm-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 77dd3ad05a3e94857caa83c56eda0d81bd9c14822455def9e346f5a37fcb9454 |
| kernel-rt-debug-modules-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: da4eeb7643b7fa3bbae44914f864a1bd3726e28b1d03958e1f31d5b594db77f7 |
| kernel-rt-debug-modules-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: da4eeb7643b7fa3bbae44914f864a1bd3726e28b1d03958e1f31d5b594db77f7 |
| kernel-rt-debug-modules-extra-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 9ce182f0851c5607a50d9b65c0bb3398db02ca8ae662721e82ac32ddf15af6c2 |
| kernel-rt-debug-modules-extra-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 9ce182f0851c5607a50d9b65c0bb3398db02ca8ae662721e82ac32ddf15af6c2 |
| kernel-rt-debuginfo-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: fffe06fd2495f83082c478b9e8961ec4978645e772bb8d13d298b5ddfe17e7bb |
| kernel-rt-debuginfo-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: fffe06fd2495f83082c478b9e8961ec4978645e772bb8d13d298b5ddfe17e7bb |
| kernel-rt-debuginfo-common-x86_64-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 448f2ba9861ec4c3d0f5eb8a04596eea21fc59bc38552a1f9a917eba42a534ce |
| kernel-rt-debuginfo-common-x86_64-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 448f2ba9861ec4c3d0f5eb8a04596eea21fc59bc38552a1f9a917eba42a534ce |
| kernel-rt-devel-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: a4a142bc55b614978230706912087ab3ed357141a93750bd7ebd017d06eb601f |
| kernel-rt-devel-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: a4a142bc55b614978230706912087ab3ed357141a93750bd7ebd017d06eb601f |
| kernel-rt-kvm-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 750186e3558ef205e4713ca79608ec0fef542a32dfd39f14b06f3c2fc4a970fd |
| kernel-rt-modules-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 276cbee02936286c6688b801a3fa584a0794ac7876cdb5d78081d9fa77859d07 |
| kernel-rt-modules-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 276cbee02936286c6688b801a3fa584a0794ac7876cdb5d78081d9fa77859d07 |
| kernel-rt-modules-extra-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 0b23832e8b0477466d57f045950c8c98727cdc5c9dec7ba01ecbcf5d5dcc7e3f |
| kernel-rt-modules-extra-4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm | SHA-256: 0b23832e8b0477466d57f045950c8c98727cdc5c9dec7ba01ecbcf5d5dcc7e3f |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/