Issued at: 2026-10-15
Updated at: 2026-10-15
Advisory content derived from Red Hat RHSA-2026:82806, © Red Hat, Inc., used under CC BY 4.0, with modifications.
Synopsis
Important: kernel-rt security update
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)
* kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)
* kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236)
* kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278)
* kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)
* kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108)
* kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887)
* kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.