Red Hat Product Errata RHSA-2026:27812 - Security Advisory Issued: 2026-06-22 Updated: 2026-06-22 RHSA-2026:27812 - Security Advisory Overview Updated Packages Synopsis Important: kernel-rt security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for Real Time 8 x86_64 Red Hat Enterprise Linux for Real Time for NFV 8 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Fixes BZ - 2482025 - CVE-2026-46054 kernel: selinux: fix overlayfs mmap() and mprotect() access checks CVEs CVE-2026-46054 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for Real Time 8 SRPM kernel-rt-4.18.0-553.137.1.rt7.478.el8_10.src.rpm SHA-256: c4010480cad294653ddcd988541d0f9e52d229a8d4af3e2f2252d43163482106 x86_64 kernel-rt-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: f589f45183fbe48c6757b3bae7d3f7717b20eb2972456366b7da07d0fdeb56a8 kernel-rt-core-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 8d6c2899a2f2fc00ed76aaed49e9a5fde122ea86767c142e3c7d6a05a2174724 kernel-rt-debug-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 2abdd0eb83bedb381f2cfed8058932414f29ceb917720704fe654cffb067531d kernel-rt-debug-core-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 9490e04f070effa9302012c0708db644bf6e0075e1b9a23168d00b56b9ddb7f3 kernel-rt-debug-debuginfo-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 46c02c5f6f549b0c2c491c3ff3864ef3fe014ee01874a3d65cac2bf390a9c062 kernel-rt-debug-devel-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 10ccc76a1d6fffb5bd0dc100e67cbfc7da721db46cb9d895d40ed7d07c527087 kernel-rt-debug-modules-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 205ee17e00b40c59d1f9a1a69b1a7224979953ebe7e0a05ffbbfbd2ee411716e kernel-rt-debug-modules-extra-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 98bdad6fb3d01184a28cf5f747407786a6bba3b9c5bb608887addbaba380c300 kernel-rt-debuginfo-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 710d7aa83544386797d178e45bd1c6d8ddbc8e29ae5bb0fd96097fcad4791762 kernel-rt-debuginfo-common-x86_64-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: e39b70d40420d5a3a5b100295b9e63d0870fb015d717855a135c406b964bcc9d kernel-rt-devel-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: ae71cc76589cab411e4cdc499a5eaef300d04d47ec0417fe412f461d56fc9f16 kernel-rt-modules-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: f0143e1b7848ba65ec3a79e32ae613c1b1be98a15c21d116d2acd1ea423f748a kernel-rt-modules-extra-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 6c838d73da0d35f50f412c51348dc7922c1ec3b91f1fcb359c1cdf01a3856bc4 Red Hat Enterprise Linux for Real Time for NFV 8 SRPM kernel-rt-4.18.0-553.137.1.rt7.478.el8_10.src.rpm SHA-256: c4010480cad294653ddcd988541d0f9e52d229a8d4af3e2f2252d43163482106 x86_64 kernel-rt-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: f589f45183fbe48c6757b3bae7d3f7717b20eb2972456366b7da07d0fdeb56a8 kernel-rt-core-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 8d6c2899a2f2fc00ed76aaed49e9a5fde122ea86767c142e3c7d6a05a2174724 kernel-rt-debug-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 2abdd0eb83bedb381f2cfed8058932414f29ceb917720704fe654cffb067531d kernel-rt-debug-core-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 9490e04f070effa9302012c0708db644bf6e0075e1b9a23168d00b56b9ddb7f3 kernel-rt-debug-debuginfo-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 46c02c5f6f549b0c2c491c3ff3864ef3fe014ee01874a3d65cac2bf390a9c062 kernel-rt-debug-devel-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 10ccc76a1d6fffb5bd0dc100e67cbfc7da721db46cb9d895d40ed7d07c527087 kernel-rt-debug-kvm-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 138906eda3b6938e231b699198f8105c7b33a002616ff87338bb3b1a8d4ac9cd kernel-rt-debug-modules-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 205ee17e00b40c59d1f9a1a69b1a7224979953ebe7e0a05ffbbfbd2ee411716e kernel-rt-debug-modules-extra-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 98bdad6fb3d01184a28cf5f747407786a6bba3b9c5bb608887addbaba380c300 kernel-rt-debuginfo-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 710d7aa83544386797d178e45bd1c6d8ddbc8e29ae5bb0fd96097fcad4791762 kernel-rt-debuginfo-common-x86_64-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: e39b70d40420d5a3a5b100295b9e63d0870fb015d717855a135c406b964bcc9d kernel-rt-devel-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: ae71cc76589cab411e4cdc499a5eaef300d04d47ec0417fe412f461d56fc9f16 kernel-rt-kvm-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 1006a3d7749c7f38fc947aa49834ec1e765760f2fd9e98483c031c4d05e7601f kernel-rt-modules-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: f0143e1b7848ba65ec3a79e32ae613c1b1be98a15c21d116d2acd1ea423f748a kernel-rt-modules-extra-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 6c838d73da0d35f50f412c51348dc7922c1ec3b91f1fcb359c1cdf01a3856bc4 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM kernel-rt-4.18.0-553.137.1.rt7.478.el8_10.src.rpm SHA-256: c4010480cad294653ddcd988541d0f9e52d229a8d4af3e2f2252d43163482106 x86_64 kernel-rt-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: f589f45183fbe48c6757b3bae7d3f7717b20eb2972456366b7da07d0fdeb56a8 kernel-rt-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: f589f45183fbe48c6757b3bae7d3f7717b20eb2972456366b7da07d0fdeb56a8 kernel-rt-core-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 8d6c2899a2f2fc00ed76aaed49e9a5fde122ea86767c142e3c7d6a05a2174724 kernel-rt-core-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 8d6c2899a2f2fc00ed76aaed49e9a5fde122ea86767c142e3c7d6a05a2174724 kernel-rt-debug-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 2abdd0eb83bedb381f2cfed8058932414f29ceb917720704fe654cffb067531d kernel-rt-debug-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 2abdd0eb83bedb381f2cfed8058932414f29ceb917720704fe654cffb067531d kernel-rt-debug-core-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 9490e04f070effa9302012c0708db644bf6e0075e1b9a23168d00b56b9ddb7f3 kernel-rt-debug-core-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 9490e04f070effa9302012c0708db644bf6e0075e1b9a23168d00b56b9ddb7f3 kernel-rt-debug-debuginfo-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 46c02c5f6f549b0c2c491c3ff3864ef3fe014ee01874a3d65cac2bf390a9c062 kernel-rt-debug-debuginfo-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 46c02c5f6f549b0c2c491c3ff3864ef3fe014ee01874a3d65cac2bf390a9c062 kernel-rt-debug-devel-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 10ccc76a1d6fffb5bd0dc100e67cbfc7da721db46cb9d895d40ed7d07c527087 kernel-rt-debug-devel-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 10ccc76a1d6fffb5bd0dc100e67cbfc7da721db46cb9d895d40ed7d07c527087 kernel-rt-debug-kvm-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 138906eda3b6938e231b699198f8105c7b33a002616ff87338bb3b1a8d4ac9cd kernel-rt-debug-modules-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 205ee17e00b40c59d1f9a1a69b1a7224979953ebe7e0a05ffbbfbd2ee411716e kernel-rt-debug-modules-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 205ee17e00b40c59d1f9a1a69b1a7224979953ebe7e0a05ffbbfbd2ee411716e kernel-rt-debug-modules-extra-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 98bdad6fb3d01184a28cf5f747407786a6bba3b9c5bb608887addbaba380c300 kernel-rt-debug-modules-extra-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 98bdad6fb3d01184a28cf5f747407786a6bba3b9c5bb608887addbaba380c300 kernel-rt-debuginfo-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 710d7aa83544386797d178e45bd1c6d8ddbc8e29ae5bb0fd96097fcad4791762 kernel-rt-debuginfo-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 710d7aa83544386797d178e45bd1c6d8ddbc8e29ae5bb0fd96097fcad4791762 kernel-rt-debuginfo-common-x86_64-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: e39b70d40420d5a3a5b100295b9e63d0870fb015d717855a135c406b964bcc9d kernel-rt-debuginfo-common-x86_64-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: e39b70d40420d5a3a5b100295b9e63d0870fb015d717855a135c406b964bcc9d kernel-rt-devel-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: ae71cc76589cab411e4cdc499a5eaef300d04d47ec0417fe412f461d56fc9f16 kernel-rt-devel-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: ae71cc76589cab411e4cdc499a5eaef300d04d47ec0417fe412f461d56fc9f16 kernel-rt-kvm-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 1006a3d7749c7f38fc947aa49834ec1e765760f2fd9e98483c031c4d05e7601f kernel-rt-modules-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: f0143e1b7848ba65ec3a79e32ae613c1b1be98a15c21d116d2acd1ea423f748a kernel-rt-modules-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: f0143e1b7848ba65ec3a79e32ae613c1b1be98a15c21d116d2acd1ea423f748a kernel-rt-modules-extra-4.18.0-553.137.1.rt7.478.el8_10.x86_64.rpm SHA-256: 6c838d73da0d35f50f412c51348dc7922c1ec3b91f1fcb359c
This Important security update for the kernel-rt packages in Red Hat Enterprise Linux 8 addresses CVE-2026-46054, a vulnerability in the SELinux subsystem where incorrect access checks for overlayfs `mmap()` and `mprotect()` operations could be exploited. The specific fixed kernel version is kernel-rt-4.18.0-553.137.1.rt7.478.el8_10, and a system reboot is required for the update to take effect.