Red Hat Product Errata RHSA-2026:35904 - Security Advisory Issued: 2026-07-06 Updated: 2026-07-06 RHSA-2026:35904 - Security Advisory Overview Updated Packages Synopsis Important: kernel-rt security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Fixes BZ - 2422699 - CVE-2025-68183 kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr BZ - 2455334 - CVE-2026-31408 kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold BZ - 2467228 - CVE-2026-43198 kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() BZ - 2482588 - CVE-2026-46189 kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path BZ - 2482654 - CVE-2026-46135 kernel: nvmet-tcp: fix race between ICReq handling and queue teardown CVEs CVE-2025-68183 CVE-2026-31408 CVE-2026-43198 CVE-2026-46135 CVE-2026-46189 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM kernel-rt-5.14.0-284.179.1.rt14.464.el9_2.src.rpm SHA-256: 1d93ed58639f3dd8bda6dd759f560ace37a2716aad5aa9ee41876ab21beae011 x86_64 kernel-rt-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 2ce07b00f8e57f89b69ad5ececc35bf1228bfb842b7607ad850e8fe3fec5b6a1 kernel-rt-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 2ce07b00f8e57f89b69ad5ececc35bf1228bfb842b7607ad850e8fe3fec5b6a1 kernel-rt-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 837a77c4aac794f68984e2d5c003fd3babdde4b87580b2bca4707f3dede97d7f kernel-rt-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 837a77c4aac794f68984e2d5c003fd3babdde4b87580b2bca4707f3dede97d7f kernel-rt-debug-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 8fb55e34ec5ecc919d7502687f5c39240e56c7f9437f54f8687817886f9a30e5 kernel-rt-debug-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 8fb55e34ec5ecc919d7502687f5c39240e56c7f9437f54f8687817886f9a30e5 kernel-rt-debug-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 016951117b0d70fb604ecd60722e957fe39936cdd9976720e605ac66ed50563c kernel-rt-debug-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 016951117b0d70fb604ecd60722e957fe39936cdd9976720e605ac66ed50563c kernel-rt-debug-debuginfo-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 34bac48bc42f73bb3b3cc9d9daff831dcca5b529a7528dc041313bc0f5de0b96 kernel-rt-debug-debuginfo-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 34bac48bc42f73bb3b3cc9d9daff831dcca5b529a7528dc041313bc0f5de0b96 kernel-rt-debug-devel-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: a1e414a0b90a935a180c40732bb83e95829588375e24632dba25f5015624ecc3 kernel-rt-debug-devel-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: a1e414a0b90a935a180c40732bb83e95829588375e24632dba25f5015624ecc3 kernel-rt-debug-kvm-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: ff5338090d2ceba69ca5619db52acf14bb74b6aacc9d63522e7689154c19ae87 kernel-rt-debug-modules-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 4115f20da1d15a57149bf54b2516e78105713c14a1f717e4aa13966ec60b93a7 kernel-rt-debug-modules-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 4115f20da1d15a57149bf54b2516e78105713c14a1f717e4aa13966ec60b93a7 kernel-rt-debug-modules-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: afed19b505bda5561b5fbcf6d3134eec2ab403851a53b729f61b802ac4bd5aca kernel-rt-debug-modules-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: afed19b505bda5561b5fbcf6d3134eec2ab403851a53b729f61b802ac4bd5aca kernel-rt-debug-modules-extra-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: c9fd95f5921496eae6e4ce6cfeea6967b284b48cbccb143d1109f2550ea0a29e kernel-rt-debug-modules-extra-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: c9fd95f5921496eae6e4ce6cfeea6967b284b48cbccb143d1109f2550ea0a29e kernel-rt-debuginfo-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 4208eb1af32938678d76a5e91d96712d32acf788dc44c23d85777932e9d7c8d8 kernel-rt-debuginfo-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 4208eb1af32938678d76a5e91d96712d32acf788dc44c23d85777932e9d7c8d8 kernel-rt-debuginfo-common-x86_64-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 9d16db2444ae4f81fcdbb31a18c572778bd4937c6096fa03783ef4b26d5bf5f3 kernel-rt-debuginfo-common-x86_64-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 9d16db2444ae4f81fcdbb31a18c572778bd4937c6096fa03783ef4b26d5bf5f3 kernel-rt-devel-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 1ca69d02d58e63bf21e7870e2ca6fb7c108f5cee2eae9a6434fe31d72634e504 kernel-rt-devel-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 1ca69d02d58e63bf21e7870e2ca6fb7c108f5cee2eae9a6434fe31d72634e504 kernel-rt-kvm-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: b7689faa6ddd1c98025d10c881177b06f13df79d97f4d5c061dda4ee878225c3 kernel-rt-modules-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: b246d12c63c26f8b83966e70b0ace4f59a180f1aafeb1a4360d2e2b63b760b07 kernel-rt-modules-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: b246d12c63c26f8b83966e70b0ace4f59a180f1aafeb1a4360d2e2b63b760b07 kernel-rt-modules-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: c1d73e2e49fbd7ddd3db452b7c39b16c82fbdd0a4094d77985116ea78ef91141 kernel-rt-modules-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: c1d73e2e49fbd7ddd3db452b7c39b16c82fbdd0a4094d77985116ea78ef91141 kernel-rt-modules-extra-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 12467c8442ec4a2742f9c16dcdbdbc398adbfea287e89ed2b62e2fa27ef161dc kernel-rt-modules-extra-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 12467c8442ec4a2742f9c16dcdbdbc398adbfea287e89ed2b62e2fa27ef161dc Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 SRPM kernel-rt-5.14.0-284.179.1.rt14.464.el9_2.src.rpm SHA-256: 1d93ed58639f3dd8bda6dd759f560ace37a2716aad5aa9ee41876ab21beae011 x86_64 kernel-rt-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 2ce07b00f8e57f89b69ad5ececc35bf1228bfb842b7607ad850e8fe3fec5b6a1 kernel-rt-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 2ce07b00f8e57f89b69ad5ececc35bf1228bfb842b7607ad850e8fe3fec5b6a1 kernel-rt-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 837a77c4aac794f68984e2d5c003fd3babdde4b87580b2bca4707f3dede97d7f kernel-rt-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 837a77c4aac794f68984e2d5c003fd3babdde4b87580b2bca4707f3dede97d7f kernel-rt-debug-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 8fb55e34ec5ecc919d7502687f5c39240e56c7f9437f54f8687817886f9a30e5 kernel-rt-debug-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 8fb55e34ec5ecc919d7502687f5c39240e56c7f9437f54f8687817886f9a30e5 kernel-rt-debug-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 016951117b0d70fb604ecd60722e957fe39936cdd9976720e605ac66ed50563c kernel-rt-debug-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 016951117b0d70fb604ecd60722e957fe39936cdd9976720e605ac66ed50563c kernel-rt-debug-debuginfo-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 34bac48bc42f73bb3b3cc9d9daff831dcca5b529a7528dc041313bc0f5de0b96 kernel-rt-debug-debuginfo-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 34bac48bc42f73bb3b3cc9d9daff831dcca5b529a7528dc041313bc0f5de0b96 kernel-rt-debug-devel-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: a1e414a0b90a935a180c40732bb83e95829588375e24632dba25f5015624ecc3 kernel-rt-debug-devel-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: a1e414a0b90a935a180c40732bb83e95829588375e24632dba25f5015624ecc3 kernel-rt-debug-kvm-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: ff5338090d2ceba69ca5619db52acf14bb74b6aacc9d63522e7689154c19ae87 kernel-rt-debug-modules-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 4115f20da1d15a57149bf54b2516e78105713c14a1f717e4aa13966ec60b93a7 kernel-rt-debug-modules-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: 4115f20da1d15a57149bf54b2516e78105713c14a1f717e4aa13966ec60b93a7 kernel-rt-debug-modules-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: afed19b505bda5561b5fbcf6d3134eec2ab403851a53b729f61b802ac4bd5aca kernel-rt-debug-modules-core-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm SHA-256: afed19b505bda5561b5fbcf6d3134eec2ab403851a53b729f61b802ac4bd5aca kernel-rt-debug-modules-extra-5.14.0-284.179.1.rt14.464.el9_2.x86_64.rpm