RLSA-2026:82806
RLSA-2026:82806 · Important: kernel-rt security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920) * kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236) * kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278) * kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409) * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108) * kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887) * kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.8 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-rt Rocky Linux:8
- Affected ranges
- ECOSYSTEM: < 0:4.18.0-553.173.1.rt7.514.el8_10
Update to 0:4.18.0-553.173.1.rt7.514.el8_10
Original sources
- https://errata.rockylinux.org/RLSA-2026:82806
- https://bugzilla.redhat.com/show_bug.cgi?id=2461761
- https://bugzilla.redhat.com/show_bug.cgi?id=2502330
- https://bugzilla.redhat.com/show_bug.cgi?id=2513148
- https://bugzilla.redhat.com/show_bug.cgi?id=2513287
- https://bugzilla.redhat.com/show_bug.cgi?id=2513299
- https://bugzilla.redhat.com/show_bug.cgi?id=2513361
- https://bugzilla.redhat.com/show_bug.cgi?id=2528788
- https://bugzilla.redhat.com/show_bug.cgi?id=2535309
- https://access.redhat.com/errata/RHSA-2026:82806
- https://osv.dev/vulnerability/RLSA-2026:82806