RHSA-2026:0537HighCVSS 7.5

Red Hat Security Advisory: kernel-rt security update

Published
January 14, 2026
Last Modified
August 13, 2026

🔗 CVE IDs covered (13)

CVE-2023-53675 →CVE-2025-23142 →CVE-2025-38724 →CVE-2025-39825 →CVE-2025-39925 →CVE-2025-39982 →CVE-2025-68287 →CVE-2023-52638 →CVE-2023-53680 →CVE-2023-53705 →CVE-2024-35868 →CVE-2025-68285 →CVE-2023-53581 →

📋 Description

CVE-2023-52638 — kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock CVE-2023-53581 — kernel: net/mlx5e: Check for NOT_READY flag state after locking CVE-2023-53675 — kernel: scsi: ses: Fix possible desc_ptr out-of-bounds accesses CVE-2023-53680 — kernel: NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL CVE-2023-53705 — kernel: ipv6: Fix out-of-bounds access in ipv6_find_tlv() CVE-2024-35868 — kernel: smb: client: fix potential UAF in cifs_stats_proc_write() CVE-2025-23142 — kernel: Linux kernel: SCTP use-after-free due to race condition in sendmsg CVE-2025-38724 — kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() CVE-2025-39825 — kernel: smb: client: fix race with concurrent opens in rename(2) CVE-2025-39925 — kernel: can: j1939: implement NETDEV_UNREGISTER notification handler CVE-2025-39982 — kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync CVE-2025-68285 — kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() CVE-2025-68287 — kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths

🎯 Affected products32

  • Red Hat Enterprise Linux NFV E4S (v.9.0)
  • Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-0:5.14.0-70.161.1.rt21.233.el9_0.src as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-0:5.14.0-70.161.1.rt21.233.el9_0.src as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-core-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-core-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-debug-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-debug-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-debug-core-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-debug-core-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-debug-debuginfo-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-debug-debuginfo-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-debug-devel-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-debug-devel-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-debug-kvm-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-debug-modules-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-debug-modules-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-debug-modules-extra-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-debug-modules-extra-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-debuginfo-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-debuginfo-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-debuginfo-common-x86_64-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-debuginfo-common-x86_64-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-devel-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-devel-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • kernel-rt-kvm-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-modules-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux NFV E4S (v.9.0)
  • kernel-rt-modules-0:5.14.0-70.161.1.rt21.233.el9_0.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.0)
  • +2 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this issue, prevent the mlx5_core module from loading. See https://access.redhat.com/solutions/41278 for instructions on blacklisting kernel modules. Workaround: To mitigate this issue, prevent module ses from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: To mitigate this issue, prevent module nfs from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use anhd deployment, applicability to widespread installation base or stability.

🔗 References (16)