Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
Real‑time Linux kernel update fixes multiple security risks
published 2 months ago
Summary
The update addresses several weaknesses in the real‑time Linux kernel that could let attackers interfere with network, storage or system scheduling functions. Applying the update will close these gaps and also resolves a known issue that caused network‑card stalls after a recent OS upgrade. Install the provided kernel‑rt packages as soon as possible to keep your systems secure and stable.
What to do
- Update rocky kernel-rt to version 0:4.18.0-553.157.1.rt7.498.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Rocky Linux:8 | rocky | kernel-rt |
< 0:4.18.0-553.157.1.rt7.498.el8_10 Fix: upgrade to 0:4.18.0-553.157.1.rt7.498.el8_10
|
Original advisory text
Important: kernel-rt security, bug fix, and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602)
* kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
* kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
* kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
* kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
* kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
* kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
* kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
* kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)
Bug Fix(es) and Enhancement(s):
* sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after Rocky Linux 8.10 kernel update (JIRA:Rocky Linux-219767)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602)
* kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
* kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
* kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
* kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
* kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
* kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
* kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
* kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)
Bug Fix(es) and Enhancement(s):
* sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after Rocky Linux 8.10 kernel update (JIRA:Rocky Linux-219767)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://errata.rockylinux.org/RLSA-2026:57254 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2334501 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2482614 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2492403 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2492788 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2502443 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2502447 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2502589 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2507135 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2513470 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:57254 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published21 Aug 2026
Updated27 Aug 2026
First seen27 Aug 2026
Sources
RLSA-2026:57254 · OSV
Track software like this
Free during beta