Issued at: 2026-07-27
Updated at: 2026-07-28
Synopsis
Important: kernel-rt security update
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables
fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)
* kernel: xfrm single-frag length not properly limited
* kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)
* kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)
Affected products
Rocky Linux 8 x86_64
Fixes
2406712
2492277
2492437
CVEs
CVE-2025-40026
CVE-2026-52993
CVE-2026-53059
Affected packages
Rocky Linux 8 x86_64 - NFV
kernel-rt-0:4.18.0-553.147.1.rt7.488.el8_10.src.rpm
kernel-rt-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-core-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-core-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-debuginfo-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-devel-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debuginfo-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-kvm-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-modules-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-modules-extra-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-devel-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-kvm-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-modules-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-modules-extra-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
Rocky Linux 8 x86_64 - RT
kernel-rt-0:4.18.0-553.147.1.rt7.488.el8_10.src.rpm
kernel-rt-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-core-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-core-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-debuginfo-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-devel-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debuginfo-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-modules-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-debug-modules-extra-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-devel-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-kvm-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-modules-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm
kernel-rt-modules-extra-0:4.18.0-553.147.1.rt7.488.el8_10.x86_64.rpm