RHSA-2026:99031 - Security Advisory

Topic

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

• kernel: drm/amdkfd: hold event_mutex while checkpointing CRIU events (CVE-2026-74446)
• kernel: drm/amdkfd: fix SMI event cross-process information leak (CVE-2026-97422)
• kernel: drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (CVE-2026-97427)
• kernel: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (CVE-2026-97497)
• kernel: drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (CVE-2026-97494)
• kernel: drm/amdkfd: Check bounds on allocate_doorbell (CVE-2026-97495)
• kernel: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS (CVE-2026-97493)
• kernel: drm/amdgpu: fix buffer overflow during vBIOS update (CVE-2026-97425)
• kernel: net/smc: protect clcsock lifetime in smc_getname (CVE-2026-99032)
• kernel: kernel: Denial of Service via use-after-free race condition in SCSI tape driver (CVE-2026-99156)

Bug Fix(es) and Enhancement(s):

• soft lockup occurs during iomap_finish_ioends (JIRA:RHEL-258946)
• gfs2: BUG during withdraw [RHEL-8] (JIRA:RHEL-298310)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Red Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.

Because of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.

Affected Products

• Red Hat Enterprise Linux for Real Time 8 x86_64
• Red Hat Enterprise Linux for Real Time for NFV 8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64

Fixes

• BZ - 2516963 - CVE-2026-74446 kernel: drm/amdkfd: hold event_mutex while checkpointing CRIU events
• BZ - 2540407 - CVE-2026-97422 kernel: drm/amdkfd: fix SMI event cross-process information leak
• BZ - 2540425 - CVE-2026-97427 kernel: drm/amd/pm: bound pp_dpm_set_pp_table() memcpy
• BZ - 2540435 - CVE-2026-97497 kernel: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id
• BZ - 2540448 - CVE-2026-97494 kernel: drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw
• BZ - 2540464 - CVE-2026-97495 kernel: drm/amdkfd: Check bounds on allocate_doorbell
• BZ - 2540475 - CVE-2026-97493 kernel: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS
• BZ - 2540532 - CVE-2026-97425 kernel: drm/amdgpu: fix buffer overflow during vBIOS update
• BZ - 2559710 - CVE-2026-99032 kernel: net/smc: protect clcsock lifetime in smc_getname
• BZ - 2562680 - CVE-2026-99156 kernel: kernel: Denial of Service via use-after-free race condition in SCSI tape driver

CVEs

• CVE-2026-74446
• CVE-2026-97422
• CVE-2026-97425
• CVE-2026-97427
• CVE-2026-97493
• CVE-2026-97494
• CVE-2026-97495
• CVE-2026-97497
• CVE-2026-99032
• CVE-2026-99156

References

• https://access.redhat.com/security/updates/classification/#moderate