Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
Red Hat kernel‑rt may let attackers run unauthorized code
published 21 days ago
Summary
The Red Hat real‑time kernel packages (kernel‑rt and its debug and development variants) contain a flaw that could allow a malicious user to execute code with full system privileges. This could lead to loss of control over affected servers. Install the latest kernel‑rt updates from Red Hat as soon as possible to close the gap.
What to do
- Update redhat kernel-rt to version 0:3.10.0-1160.167.1.rt56.1319.el7.
- Update redhat kernel-rt-debug to version 0:3.10.0-1160.167.1.rt56.1319.el7.
- Update redhat kernel-rt-debug-debuginfo to version 0:3.10.0-1160.167.1.rt56.1319.el7.
- Update redhat kernel-rt-debug-devel to version 0:3.10.0-1160.167.1.rt56.1319.el7.
- Update redhat kernel-rt-debuginfo to version 0:3.10.0-1160.167.1.rt56.1319.el7.
- Update redhat kernel-rt-debuginfo-common-x86_64 to version 0:3.10.0-1160.167.1.rt56.1319.el7.
- Update redhat kernel-rt-devel to version 0:3.10.0-1160.167.1.rt56.1319.el7.
- Update redhat kernel-rt-doc to version 0:3.10.0-1160.167.1.rt56.1319.el7.
- Update redhat kernel-rt-trace to version 0:3.10.0-1160.167.1.rt56.1319.el7.
- Update redhat kernel-rt-trace-debuginfo to version 0:3.10.0-1160.167.1.rt56.1319.el7.
- Update redhat kernel-rt-trace-devel to version 0:3.10.0-1160.167.1.rt56.1319.el7.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_extras_rt_els:7 | redhat | kernel-rt |
< 0:3.10.0-1160.167.1.rt56.1319.el7 Fix: upgrade to 0:3.10.0-1160.167.1.rt56.1319.el7
|
| Red Hat:rhel_extras_rt_els:7 | redhat | kernel-rt-debug |
< 0:3.10.0-1160.167.1.rt56.1319.el7 Fix: upgrade to 0:3.10.0-1160.167.1.rt56.1319.el7
|
| Red Hat:rhel_extras_rt_els:7 | redhat | kernel-rt-debug-debuginfo |
< 0:3.10.0-1160.167.1.rt56.1319.el7 Fix: upgrade to 0:3.10.0-1160.167.1.rt56.1319.el7
|
| Red Hat:rhel_extras_rt_els:7 | redhat | kernel-rt-debug-devel |
< 0:3.10.0-1160.167.1.rt56.1319.el7 Fix: upgrade to 0:3.10.0-1160.167.1.rt56.1319.el7
|
| Red Hat:rhel_extras_rt_els:7 | redhat | kernel-rt-debuginfo |
< 0:3.10.0-1160.167.1.rt56.1319.el7 Fix: upgrade to 0:3.10.0-1160.167.1.rt56.1319.el7
|
| Red Hat:rhel_extras_rt_els:7 | redhat | kernel-rt-debuginfo-common-x86_64 |
< 0:3.10.0-1160.167.1.rt56.1319.el7 Fix: upgrade to 0:3.10.0-1160.167.1.rt56.1319.el7
|
| Red Hat:rhel_extras_rt_els:7 | redhat | kernel-rt-devel |
< 0:3.10.0-1160.167.1.rt56.1319.el7 Fix: upgrade to 0:3.10.0-1160.167.1.rt56.1319.el7
|
| Red Hat:rhel_extras_rt_els:7 | redhat | kernel-rt-doc |
< 0:3.10.0-1160.167.1.rt56.1319.el7 Fix: upgrade to 0:3.10.0-1160.167.1.rt56.1319.el7
|
| Red Hat:rhel_extras_rt_els:7 | redhat | kernel-rt-trace |
< 0:3.10.0-1160.167.1.rt56.1319.el7 Fix: upgrade to 0:3.10.0-1160.167.1.rt56.1319.el7
|
| Red Hat:rhel_extras_rt_els:7 | redhat | kernel-rt-trace-debuginfo |
< 0:3.10.0-1160.167.1.rt56.1319.el7 Fix: upgrade to 0:3.10.0-1160.167.1.rt56.1319.el7
|
| Red Hat:rhel_extras_rt_els:7 | redhat | kernel-rt-trace-devel |
< 0:3.10.0-1160.167.1.rt56.1319.el7 Fix: upgrade to 0:3.10.0-1160.167.1.rt56.1319.el7
|
Original advisory text
Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
References
- https://access.redhat.com/errata/RHSA-2026:81371 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2492329 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2502361 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2521055 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2521498 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_81371.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-53002 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-53002 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-53002 Vendor Advisory
- https://lore.kernel.org/linux-cve-announce/2026062447-CVE-2026-53002-8577@gregkh... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-64007 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-64007 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-64007 Vendor Advisory
- https://lore.kernel.org/linux-cve-announce/2026071908-CVE-2026-64007-5e61@gregkh... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-74580 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-74580 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-74580 Vendor Advisory
- https://lore.kernel.org/linux-cve-announce/2026082158-CVE-2026-74580-5db9@gregkh... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-74705 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-74705 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-74705 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026... Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Sources
RHSA-2026:81371 · OSV
Track software like this
Free during beta