{
  "document" : {
    "aggregate_severity" : {
      "namespace" : "https://access.redhat.com/security/updates/classification/",
      "text" : "Important"
    },
    "category" : "csaf_security_advisory",
    "csaf_version" : "2.0",
    "distribution" : {
      "text" : "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "en",
    "notes" : [ {
      "category" : "summary",
      "text" : "An update for kernel-rt is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
      "title" : "Topic"
    }, {
      "category" : "general",
      "text" : "The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929)\n\n* kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (CVE-2026-64541)\n\n* kernel: sctp: clear new_transport when removing a peer (CVE-2026-74586)\n\n* kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (CVE-2026-80864)\n\n* kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (CVE-2026-80863)\n\n* kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488)\n\nBug Fix(es) and Enhancement(s):\n\n* RHEL8.10 - s390/smp: Remove conditional emergency signal usage (JIRA:RHEL-298849)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
      "title" : "Details"
    }, {
      "category" : "legal_disclaimer",
      "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
      "title" : "Terms of Use"
    } ],
    "publisher" : {
      "category" : "vendor",
      "contact_details" : "https://access.redhat.com/security/team/contact/",
      "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name" : "Red Hat Product Security",
      "namespace" : "https://www.redhat.com"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "https://access.redhat.com/errata/RHSA-2026:95100",
      "url" : "https://access.redhat.com/errata/RHSA-2026:95100"
    }, {
      "category" : "external",
      "summary" : "https://access.redhat.com/security/updates/classification/#important",
      "url" : "https://access.redhat.com/security/updates/classification/#important"
    }, {
      "category" : "external",
      "summary" : "2492108",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2492108"
    }, {
      "category" : "external",
      "summary" : "2507721",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2507721"
    }, {
      "category" : "external",
      "summary" : "2521419",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2521419"
    }, {
      "category" : "external",
      "summary" : "2528646",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2528646"
    }, {
      "category" : "external",
      "summary" : "2528665",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2528665"
    }, {
      "category" : "external",
      "summary" : "2532407",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2532407"
    }, {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95100.json"
    } ],
    "title" : "Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update",
    "tracking" : {
      "current_release_date" : "2026-11-09T16:42:10+00:00",
      "generator" : {
        "date" : "2026-11-09T16:42:10+00:00",
        "engine" : {
          "name" : "Red Hat SDEngine",
          "version" : "5.4.5"
        }
      },
      "id" : "RHSA-2026:95100",
      "initial_release_date" : "2026-11-04T12:29:42+00:00",
      "revision_history" : [ {
        "date" : "2026-11-04T12:29:42+00:00",
        "number" : "1",
        "summary" : "Initial version"
      }, {
        "date" : "2026-11-04T12:29:42+00:00",
        "number" : "2",
        "summary" : "Last updated version"
      }, {
        "date" : "2026-11-09T16:42:10+00:00",
        "number" : "3",
        "summary" : "Last generated version"
      } ],
      "status" : "final",
      "version" : "3"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_name",
          "name" : "Red Hat Enterprise Linux NFV (v. 8)",
          "product" : {
            "name" : "Red Hat Enterprise Linux NFV (v. 8)",
            "product_id" : "NFV-8.10.0.Z.MAIN.EUS",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redhat:enterprise_linux:8::nfv"
            }
          }
        }, {
          "category" : "product_name",
          "name" : "Red Hat Enterprise Linux RT (v. 8)",
          "product" : {
            "name" : "Red Hat Enterprise Linux RT (v. 8)",
            "product_id" : "RT-8.10.0.Z.MAIN.EUS",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redhat:enterprise_linux:8::realtime"
            }
          }
        } ],
        "category" : "product_family",
        "name" : "Red Hat Enterprise Linux"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src",
          "product" : {
            "name" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src",
            "product_id" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt@4.18.0-553.184.1.rt7.525.el8_10?arch=src"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "src"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-core@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-debug@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-debug-core@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-debug-devel@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-debug-kvm@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-debug-modules@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-debug-modules-extra@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-devel@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-kvm@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-modules@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-modules-extra@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-debug-debuginfo@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-debuginfo@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
          "product" : {
            "name" : "kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_id" : "kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
            "product_identification_helper" : {
              "purl" : "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@4.18.0-553.184.1.rt7.525.el8_10?arch=x86_64"
            }
          }
        } ],
        "category" : "architecture",
        "name" : "x86_64"
      } ],
      "category" : "vendor",
      "name" : "Red Hat"
    } ],
    "relationships" : [ {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src"
      },
      "product_reference" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux NFV (v. 8)",
        "product_id" : "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "NFV-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src"
      },
      "product_reference" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    }, {
      "category" : "default_component_of",
      "full_product_name" : {
        "name" : "kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64 as a component of Red Hat Enterprise Linux RT (v. 8)",
        "product_id" : "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64"
      },
      "product_reference" : "kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64",
      "relates_to_product_reference" : "RT-8.10.0.Z.MAIN.EUS"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-52929",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-06-24T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2492108"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's SCTP stream scheduler. When transient outgoing streams are denied and torn down, the kernel fails to reclaim scheduler-specific metadata before an algorithm switch (e.g., WFQ to PRIO). The orphaned state - including internal accounting fields - becomes reachable through the new scheduler's accessors, allowing an unprivileged local attacker to read arbitrary kernel memory and corrupt kernel objects via SCTP_STREAM_SCHEDULER_VALUE socket options. This can be leveraged for local privilege escalation to full root capabilities. A failed exploitation attempt may also crash the kernel, resulting in a Denial of Service (DoS).",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: sctp: stream: fully roll back denied add-stream state",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-52929"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2492108",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2492108"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-52929",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-52929"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-52929",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-52929"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026062432-CVE-2026-52929-63ee@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026062432-CVE-2026-52929-63ee@gregkh/T"
    } ],
    "release_date" : "2026-06-24T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-04T12:29:42+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
      "product_ids" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95100"
    }, {
      "category" : "workaround",
      "details" : "To mitigate this issue, prevent the `sctp` kernel module from loading. Create a file named `/etc/modprobe.d/disable-sctp.conf` with the following content:\n\n```\ninstall sctp /bin/true\nblacklist sctp\n```\n\nAfter creating the file, regenerate the initramfs and reboot the system for the changes to take effect. Applications or services that rely on the SCTP protocol cannot use this mitigation and should prioritize applying the fix.",
      "product_ids" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.8,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "kernel: sctp: stream: fully roll back denied add-stream state"
  }, {
    "cve" : "CVE-2026-64541",
    "cwe" : {
      "id" : "CWE-416",
      "name" : "Use After Free"
    },
    "discovery_date" : "2026-07-27T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2507721"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's Shared Memory Communications over RDMA (SMC-R) subsystem. A race condition allows a network socket to be released and freed while incoming messages are still being processed, leading to a use-after-free condition. A local attacker interacting with active SMC-R sessions can exploit this flaw to cause a kernel panic, resulting in a system crash and Denial of Service (DoS).",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as having a Moderate impact because exploitation requires a local user to interact with active Shared Memory Communications over RDMA (SMC-R) connections, primarily resulting in a denial of service via a kernel panic. The issue cannot be triggered remotely without established SMC sessions, and SMC protocols are not utilized in default Red Hat Enterprise Linux deployments without specialized RDMA hardware and explicit configuration. As a result, the blast radius is confined to systems actively running SMC-R workloads.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-64541"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2507721",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2507721"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-64541",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-64541"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64541",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-64541"
    }, {
      "category" : "external",
      "summary" : "https://kernelcve.org/list/?q=CVE-2026-64541",
      "url" : "https://kernelcve.org/list/?q=CVE-2026-64541"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026072735-CVE-2026-64541-21ef@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026072735-CVE-2026-64541-21ef@gregkh/T"
    } ],
    "release_date" : "2026-07-27T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-04T12:29:42+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
      "product_ids" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95100"
    }, {
      "category" : "workaround",
      "details" : "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
      "product_ids" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 5.9,
        "baseSeverity" : "MEDIUM",
        "confidentialityImpact" : "NONE",
        "integrityImpact" : "NONE",
        "privilegesRequired" : "NONE",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
        "version" : "3.1"
      },
      "products" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket"
  }, {
    "cve" : "CVE-2026-74586",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-08-22T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2521419"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. An authenticated remote SCTP peer can trigger a use-after-free vulnerability by adding and then immediately removing a transport within the same ASCONF chunk. This can lead to a system crash, resulting in a denial of service.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: sctp: clear new_transport when removing a peer",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "An SCTP use-after-free can occur when an authenticated remote peer sends an ASCONF chunk that adds a new transport and then removes it with a wildcard DEL-IP operation. The removed transport can remain referenced by `asoc->new_transport` and later be attached to a queued HEARTBEAT without a valid transport reference. After RCU frees the transport, subsequent ASCONF_ACK processing can reach `sctp_outq_select_transport()` and dereference the freed object. The upstream reproducer reliably triggered a KASAN slab-use-after-free while reading `transport->state`.\n\nExploitation requires an existing SCTP association with an authenticated peer capable of ASCONF dynamic address reconfiguration and a specific multi-stage sequence, increasing practical attack complexity. For CVSS, `AV:N` reflects that the trigger originates from a remote SCTP peer, while `PR:L` reflects the required authenticated peer context rather than arbitrary unauthenticated network access.\n\nThe demonstrated impact is a kernel use-after-free read that can cause a kernel crash and denial of service. Confidentiality or integrity impact is possible as a paranoid worst case because a freed kernel networking object is accessed, but should not be considered confirmed impact.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-74586"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2521419",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2521419"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-74586",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-74586"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-74586",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-74586"
    }, {
      "category" : "external",
      "summary" : "https://lore.kernel.org/linux-cve-announce/2026082212-CVE-2026-74586-9beb@gregkh/T",
      "url" : "https://lore.kernel.org/linux-cve-announce/2026082212-CVE-2026-74586-9beb@gregkh/T"
    } ],
    "release_date" : "2026-08-22T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-04T12:29:42+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
      "product_ids" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95100"
    }, {
      "category" : "workaround",
      "details" : "To mitigate this issue on systems where the SCTP protocol is not needed, prevent the sctp kernel module from loading:\n\n1. Add the module configuration to prevent loading:\n# echo \"install sctp /bin/true\" > /etc/modprobe.d/sctp-disable.conf\n\n2. Unload the module from the active system if loaded:\n# modprobe -r sctp\n\nWarning: If the sctp module is currently in use, unloading will fail and a system reboot will be required to apply the changes. Disabling this module will cause any applications requiring SCTP networking functionality to fail.",
      "product_ids" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "NETWORK",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.5,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: sctp: clear new_transport when removing a peer"
  }, {
    "cve" : "CVE-2026-80863",
    "cwe" : {
      "id" : "CWE-787",
      "name" : "Out-of-bounds Write"
    },
    "discovery_date" : "2026-09-04T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2528665"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's RDMA/rxe component. A local user could exploit a memory corruption vulnerability in the `free_rd_atomic_resources()` function by updating the `max_dest_rd_atomic` value before the old array is properly freed, leading to an out-of-bounds write. This issue can cause a system crash, resulting in a denial of service (DoS).",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources()",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "An OOB write in RDMA/RXE free_rd_atomic_resources can occur because qp attr max_dest_rd_atomic is updated before the old rd atomic resources array is freed. The free path then uses the new larger bound while walking the old smaller allocation, which can write past the kmalloc object and corrupt slab memory. The issue is not directly network reachable because the triggering operation is a local uverbs control path rather than inbound RDMA traffic.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-80863"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2528665",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2528665"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-80863",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-80863"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-80863",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-80863"
    }, {
      "category" : "external",
      "summary" : "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80863.mbox",
      "url" : "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80863.mbox"
    } ],
    "release_date" : "2026-09-04T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-04T12:29:42+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
      "product_ids" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95100"
    }, {
      "category" : "workaround",
      "details" : "To mitigate this issue, prevent module rdma_rxe from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
      "product_ids" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "LOW",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.3,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "LOW",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources()"
  }, {
    "cve" : "CVE-2026-80864",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-09-04T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2528646"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) subsystem, specifically within the rxe component. A local, unprivileged user could exploit a race condition during a queue pair modification operation. This could lead to a use-after-free vulnerability, allowing the attacker to cause a system crash and resulting in a Denial of Service (DoS).",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp",
      "title" : "Vulnerability summary"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-80864"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2528646",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2528646"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-80864",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-80864"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-80864",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-80864"
    }, {
      "category" : "external",
      "summary" : "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80864.mbox",
      "url" : "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80864.mbox"
    } ],
    "release_date" : "2026-09-04T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-04T12:29:42+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
      "product_ids" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95100"
    }, {
      "category" : "workaround",
      "details" : "To mitigate this issue, prevent the rdma_rxe kernel module from being loaded.\n\n1. Create a configuration file in /etc/modprobe.d to disable loading of the module:\n# echo \"install rdma_rxe /bin/true\" > /etc/modprobe.d/disable-rdma_rxe.conf\n\n2. If the module is currently loaded, attempt to unload it:\n# modprobe -r rdma_rxe\n\nCaveats:\nDisabling this module prevents the creation and operation of software RDMA over Converged Ethernet (Soft-RoCE) devices. Applications requiring rdma_rxe will fail to initialize. If the module is currently in active use and cannot be unloaded dynamically, a system reboot is required to ensure the module is fully disabled.",
      "product_ids" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Moderate"
    } ],
    "title" : "kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp"
  }, {
    "cve" : "CVE-2026-89488",
    "cwe" : {
      "id" : "CWE-825",
      "name" : "Expired Pointer Dereference"
    },
    "discovery_date" : "2026-09-11T00:00:00+00:00",
    "ids" : [ {
      "system_name" : "Red Hat Bugzilla ID",
      "text" : "2532407"
    } ],
    "notes" : [ {
      "category" : "description",
      "text" : "A flaw was found in the Linux kernel's Open vSwitch (OVS) component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking (CT) limit state after it has been freed, leading to a slab-use-after-free condition. This vulnerability could potentially lead to a denial of service.",
      "title" : "Vulnerability description"
    }, {
      "category" : "summary",
      "text" : "kernel: openvswitch: Fix CT limit teardown use-after-free",
      "title" : "Vulnerability summary"
    }, {
      "category" : "other",
      "text" : "This vulnerability is rated as Important severity because an unprivileged local attacker can induce a race condition resulting in a kernel crash (denial of service) or potential arbitrary code execution with kernel privileges, elevating the risk beyond a Moderate flaw. Exploitation requires the ability to instantiate unprivileged namespaces on systems where the openvswitch subsystem is actively processing connection-tracking flows. Standard enterprise deployments that do not load the Open vSwitch module or do not permit unprivileged user namespace creation are not exposed to this flaw.",
      "title" : "Statement"
    }, {
      "category" : "general",
      "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
      "title" : "CVSS score applicability"
    } ],
    "product_status" : {
      "fixed" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    },
    "references" : [ {
      "category" : "self",
      "summary" : "Canonical URL",
      "url" : "https://access.redhat.com/security/cve/CVE-2026-89488"
    }, {
      "category" : "external",
      "summary" : "RHBZ#2532407",
      "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2532407"
    }, {
      "category" : "external",
      "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-89488",
      "url" : "https://www.cve.org/CVERecord?id=CVE-2026-89488"
    }, {
      "category" : "external",
      "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-89488",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-89488"
    }, {
      "category" : "external",
      "summary" : "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89488.mbox",
      "url" : "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89488.mbox"
    } ],
    "release_date" : "2026-09-11T00:00:00+00:00",
    "remediations" : [ {
      "category" : "vendor_fix",
      "date" : "2026-11-04T12:29:42+00:00",
      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.",
      "product_ids" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ],
      "restart_required" : {
        "category" : "none"
      },
      "url" : "https://access.redhat.com/errata/RHSA-2026:95100"
    }, {
      "category" : "workaround",
      "details" : "To mitigate this vulnerability, prevent the openvswitch kernel module from loading on systems where Open vSwitch is not required:\n\n1. Create a modprobe configuration file to disable the module:\n```\necho \"install openvswitch /bin/true\" > /etc/modprobe.d/disable-openvswitch.conf\n```\n\n2. If the module is already loaded, unload it:\n```\nmodprobe -r openvswitch\n```\n\nWarning: Unloading the module or applying this configuration may require restarting services or rebooting the system if the module is currently in use.\n\nCaveat: Disabling the openvswitch module will prevent Open vSwitch from functioning and will break network connectivity in environments that depend on it, such as OpenShift Container Platform clusters utilizing OVN-Kubernetes or OpenShift SDN.",
      "product_ids" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    } ],
    "scores" : [ {
      "cvss_v3" : {
        "attackComplexity" : "HIGH",
        "attackVector" : "LOCAL",
        "availabilityImpact" : "HIGH",
        "baseScore" : 7.0,
        "baseSeverity" : "HIGH",
        "confidentialityImpact" : "HIGH",
        "integrityImpact" : "HIGH",
        "privilegesRequired" : "LOW",
        "scope" : "UNCHANGED",
        "userInteraction" : "NONE",
        "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "version" : "3.1"
      },
      "products" : [ "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-kvm-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "NFV-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.src", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-core-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debug-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-debuginfo-common-x86_64-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-devel-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64", "RT-8.10.0.Z.MAIN.EUS:kernel-rt-modules-extra-0:4.18.0-553.184.1.rt7.525.el8_10.x86_64" ]
    } ],
    "threats" : [ {
      "category" : "impact",
      "details" : "Important"
    } ],
    "title" : "kernel: openvswitch: Fix CT limit teardown use-after-free"
  } ]
}