Linux · Rocky Linux · Security advisory · October 6, 2026

RLSA-2026:75746: kernel-rt security update

RLSA-2026:75746, released October 6, 2026, fixes 29 CVEs in kernel-rt (version 0:4.18.0-553.171.1.rt7.512.el8_10). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
29
3 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0071
54th percentile

Priority of the 29 CVEs

Patch now 0 Urgent 3 High 26 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-rtrocky 80:4.18.0-553.171.1.rt7.512.el8_10

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-89972 nvme: add missing SRCU grace period in error path9.8 0.0071 None reported
Urgent CVE-2025-39994 media: tuner: xc5000: Fix use-after-free in xc5000_release9.8 0.0016 None reported
Urgent CVE-2025-40242 gfs2: Fix unlikely race in gdlm_put_lock9.8 0.0016 None reported
High CVE-2026-74746 netfilter: flowtable: publish GC-visible tuple last9.8 0.0054 None reported
High CVE-2026-63994 kernel-default: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).9.8 0.0051 None reported
High CVE-2026-74669 ipvs: clear IPv4 options after rebasing tunnel ICMP errors9.8 0.0051 None reported
High CVE-2026-63992 kernel-default: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).9.1 0.0051 None reported
High CVE-2026-74744 ipvlan: inherit needed_headroom and needed_tailroom from phy_dev9.8 0.0051 None reported
High CVE-2026-97417 netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()8.8 0.0049 None reported
High CVE-2026-89481 nvme-tcp: fix host memory disclosure on R2T for a read command8.8 0.0043 None reported
High CVE-2026-53049 kernel: kernel: gfs2: add some missing log locking9.8 0.0039 None reported
High CVE-2026-74569 netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()9.8 0.0039 None reported
High CVE-2022-50756 linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix mempool alloc size Convert the ma...8.8 0.0020 None reported
High CVE-2023-54048 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Prevent handling any completions a...8.8 0.0020 None reported
High CVE-2026-45856 kernel-64kb: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (bsc#1266720).8.8 0.0019 None reported
High CVE-2026-45861 gfs2: Fix slab-use-after-free in qd_put8.8 0.0019 None reported
High CVE-2026-72255 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)8.8 0.0018 None reported
High CVE-2026-90227 nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()8.8 0.0017 None reported
High CVE-2026-53270 ipvs: clear the svc scheduler ptr early on edit9.8 0.0016 None reported
High CVE-2026-72052 bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)8.8 0.0015 None reported
High CVE-2026-63829 net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink8.8 0.0015 None reported
High CVE-2026-68432 vxlan: require CAP_NET_ADMIN in the device netns for changelink8.8 0.0015 None reported
High CVE-2026-23105 kernel-64kb: net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (bsc#1257775).8.8 0.0015 None reported
High CVE-2026-52972 crypto: af_alg - Cap AEAD AD length to 0x800000008.8 0.0014 None reported
High CVE-2026-63794 KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path8.8 0.0014 None reported
Showing 1 to 25 of 29 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.