RHSA-2026:72467HighCVSS 8.8

Red Hat Security Advisory: kernel-rt security update

Published
September 28, 2026
Last Modified
September 29, 2026

🔗 CVE IDs covered (13)

CVE-2026-68159 →CVE-2025-40323 →CVE-2026-46230 →CVE-2026-63875 →CVE-2026-64034 →CVE-2026-68155 →CVE-2026-68273 →CVE-2026-74753 →CVE-2026-45942 →CVE-2026-46199 →CVE-2026-46204 →CVE-2026-64556 →CVE-2026-68156 →

📋 Description

CVE-2025-40323 — kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released CVE-2026-45942 — kernel: ext4: fix e4b bitmap inconsistency reports CVE-2026-46199 — kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg CVE-2026-46204 — kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB CVE-2026-46230 — kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg CVE-2026-63875 — kernel: arm64: tlb: Flush walk cache when unsharing PMD tables CVE-2026-64034 — kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer CVE-2026-64556 — kernel: perf/core: Detach event groups during remove_on_exec CVE-2026-68155 — kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps CVE-2026-68156 — kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update CVE-2026-68159 — kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap CVE-2026-68273 — kernel: drm/amdgpu: Fix context pstate override handling CVE-2026-74753 — kernel: perf: Reject exited events as group leaders

🎯 Affected products32

  • Red Hat Enterprise Linux NFV (v. 8)
  • Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-0:4.18.0-553.169.1.rt7.510.el8_10.src as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-0:4.18.0-553.169.1.rt7.510.el8_10.src as a component of Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-core-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-core-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-debug-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-debug-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-debug-core-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-debug-core-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-debug-debuginfo-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-debug-debuginfo-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-debug-devel-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-debug-devel-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-debug-kvm-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-debug-modules-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-debug-modules-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-debug-modules-extra-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-debug-modules-extra-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-debuginfo-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-debuginfo-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-devel-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-devel-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
  • kernel-rt-kvm-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-modules-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)
  • kernel-rt-modules-0:4.18.0-553.169.1.rt7.510.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)
  • +2 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture. Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria, comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: To mitigate this vulnerability, prevent the `ceph` kernel module from loading if Ceph client functionality is not in use. Create a file `/etc/modprobe.d/ceph.conf` with `install ceph /bin/true`. If the module is currently loaded, unload it using `rmmod ceph`. A system reboot is required for the changes to take full effect and ensure the module is not reloaded. Unloading the `ceph` module will impact systems actively using Ceph client features. Workaround: If the system does not require the `libceph` module for Ceph cluster connectivity, prevent the `ceph` kernel module from loading by blacklisting it. Create a file `/etc/modprobe.d/ceph.conf` with the content `blacklist ceph`. After creating the file, regenerate the initramfs using `dracut -f -v` and reboot the system for the changes to take effect. If `libceph` is in use, restrict network access to Ceph monitors to trusted hosts through firewall rules to reduce the attack surface.

🔗 References (16)