RHSA-2026:41234HighCVSS 7.8
Red Hat Security Advisory: kernel-rt security update
🔗 CVE IDs covered (4)
📋 Description
CVE-2026-31684 — kernel: net: sched: act_csum: validate nested VLAN headers CVE-2026-43499 — kernel: rtmutex: Use waiter::task instead of current in remove_waiter() CVE-2026-46116 — kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete CVE-2026-53166 — kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
🎯 Affected products13
- Red Hat Enterprise Linux for Real Time (v. 7 ELS)
- kernel-rt-0:3.10.0-1160.156.1.rt56.1308.el7.src as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
- kernel-rt-0:3.10.0-1160.156.1.rt56.1308.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
- kernel-rt-debug-0:3.10.0-1160.156.1.rt56.1308.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
- kernel-rt-debug-debuginfo-0:3.10.0-1160.156.1.rt56.1308.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
- kernel-rt-debug-devel-0:3.10.0-1160.156.1.rt56.1308.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
- kernel-rt-debuginfo-0:3.10.0-1160.156.1.rt56.1308.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
- kernel-rt-debuginfo-common-x86_64-0:3.10.0-1160.156.1.rt56.1308.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
- kernel-rt-devel-0:3.10.0-1160.156.1.rt56.1308.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
- kernel-rt-doc-0:3.10.0-1160.156.1.rt56.1308.el7.noarch as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
- kernel-rt-trace-0:3.10.0-1160.156.1.rt56.1308.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
- kernel-rt-trace-debuginfo-0:3.10.0-1160.156.1.rt56.1308.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
- kernel-rt-trace-devel-0:3.10.0-1160.156.1.rt56.1308.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7 ELS)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: See the security bulletin for a detailed mitigation procedure.
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2026:41234
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2461757
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2480453
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2482523
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2492805
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41234.json