RLSA-2026:75746: kernel-rt security update

RLSA-2026:75746, released October 6, 2026, fixes 29 CVEs in kernel-rt (version 0:4.18.0-553.171.1.rt7.512.el8_10). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

3 rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0071

53rd percentile

Priority of the 29 CVEs

Patch now 0
                                Urgent 3
                                High 26
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel-rt	rocky 8	0:4.18.0-553.171.1.rt7.512.el8_10

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-89972	nvme: add missing SRCU grace period in error path	9.8	0.0071	None reported
Urgent	CVE-2025-39994	media: tuner: xc5000: Fix use-after-free in xc5000_release	9.8	0.0016	None reported
Urgent	CVE-2025-40242	gfs2: Fix unlikely race in gdlm_put_lock	9.8	0.0016	None reported
High	CVE-2026-74746	netfilter: flowtable: publish GC-visible tuple last	9.8	0.0054	None reported
High	CVE-2026-63994	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	9.8	0.0051	None reported
High	CVE-2026-74669	ipvs: clear IPv4 options after rebasing tunnel ICMP errors	9.8	0.0051	None reported
High	CVE-2026-63992	kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system	9.1	0.0051	None reported
High	CVE-2026-74744	ipvlan: inherit needed_headroom and needed_tailroom from phy_dev	9.8	0.0051	None reported
High	CVE-2026-97417	netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()	8.8	0.0049	None reported
High	CVE-2026-89481	nvme-tcp: fix host memory disclosure on R2T for a read command	8.8	0.0043	None reported
High	CVE-2026-53049	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	9.8	0.0039	None reported
High	CVE-2026-74569	netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()	9.8	0.0039	None reported
High	CVE-2022-50756	linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix mempool alloc size Convert the ma...	8.8	0.0020	None reported
High	CVE-2023-54048	kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer...	8.8	0.0020	None reported
High	CVE-2026-45856	linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it i...	8.8	0.0019	None reported
High	CVE-2026-45861	gfs2: Fix slab-use-after-free in qd_put	8.8	0.0019	None reported
High	CVE-2026-72255	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	8.8	0.0018	None reported
High	CVE-2026-90227	nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()	8.8	0.0017	None reported
High	CVE-2026-53270	ipvs: clear the svc scheduler ptr early on edit	9.8	0.0016	None reported
High	CVE-2026-72052	linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the devic...	8.8	0.0015	None reported
High	CVE-2026-63829	net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink	8.8	0.0015	None reported
High	CVE-2026-68432	vxlan: require CAP_NET_ADMIN in the device netns for changelink	8.8	0.0015	None reported
High	CVE-2026-23105	linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: qfq: Use cl_is_active to determine wh...	8.8	0.0015	None reported
High	CVE-2026-52972	crypto: af_alg - Cap AEAD AD length to 0x80000000	8.8	0.0014	None reported
High	CVE-2026-63794	KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path	8.8	0.0014	None reported

Also fixes CVE-2026-89972

ELSA-2026-76738
kernel, kernel-abi-stablelists, kernel-core and 27 more on ol 10
ALSA-2026:76738
kernel, kernel-64k, kernel-64k-core and 72 more on almalinux 10
RHSA-2026:76738
kernel on RHEL 10
ELSA-2026-500572
kernel-uek, kernel-uek-core, kernel-uek-debug and 32 more on ol 10, ol 9
ELSA-2026-76739
kernel, kernel-abi-stablelists, kernel-core and 26 more on ol 9
RHSA-2026:76739
kernel, kernel-64k, kernel-64k-core and 69 more on RHEL 9
RLSA-2026:75747
kernel on rocky 8
RHSA-2026:75746
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8

Vendor advisory

https://errata.rockylinux.org/RLSA-2026:75746

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/rlsa-2026-75746">RLSA-2026:75746 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.