RHSA-2026:2583MediumCVSS 7.8

Red Hat Security Advisory: kernel-rt security update

Published
February 11, 2026
Last Modified
August 4, 2026

🔗 CVE IDs covered (9)

CVE-2025-38022 →CVE-2025-40096 →CVE-2025-40251 →CVE-2025-40258 →CVE-2025-40304 →CVE-2025-40322 →CVE-2023-53673 →CVE-2023-53833 →CVE-2025-38051 →

📋 Description

CVE-2023-53673 — kernel: Bluetooth: hci_event: call disconnect callback before deleting conn CVE-2023-53833 — kernel: drm/i915: Fix NULL ptr deref by checking new_crtc_state CVE-2025-38022 — kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem CVE-2025-38051 — kernel: smb: client: Fix use-after-free in cifs_fill_dirent CVE-2025-40096 — kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies CVE-2025-40251 — kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy CVE-2025-40258 — kernel: mptcp: fix race condition in mptcp_schedule_work() CVE-2025-40304 — kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. CVE-2025-40322 — kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling

🎯 Affected products36

  • Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-0:5.14.0-284.156.1.rt14.441.el9_2.src as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-0:5.14.0-284.156.1.rt14.441.el9_2.src as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-core-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-core-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-core-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-core-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-debuginfo-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-debuginfo-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-devel-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-devel-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-kvm-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-modules-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-modules-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-modules-core-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-modules-core-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debug-modules-extra-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debug-modules-extra-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debuginfo-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debuginfo-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-debuginfo-common-x86_64-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-debuginfo-common-x86_64-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-devel-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • kernel-rt-devel-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • kernel-rt-kvm-0:5.14.0-284.156.1.rt14.441.el9_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • +6 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: To mitigate this issue, prevent the i915 module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist a kernel module. Note that this will disable Intel integrated graphics. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: If enabled, you may disable MPTCP support. For more information please read https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/configuring_and_managing_networking/getting-started-with-multipath-tcp_configuring-and-managing-networking#preparing-rhel-to-enable-mptcp-support_getting-started-with-multipath-tcp Workaround: To mitigate this issue, prevent the `fbdev` kernel module from loading if it is not required for system operation. Create a file named `/etc/modprobe.d/disable-fbdev.conf` with the following content: ``` install fbdev /bin/true blacklist fbdev ``` After creating the file, regenerate the initramfs using `dracut -f -v` and reboot the system for the changes to take effect. This mitigation may impact systems that rely on `fbdev` for console display or specific graphics hardware, requiring careful evaluation before implementation.

🔗 References (12)