The Red Hat kernel-rt packages for Real Time Linux in RHEL 8 have two important security fixes. CVE-2026-46117 removes a user-triggerable WARN_ON() in the RDMA mana driver function mana_ib_create_qp_rss(), which could lead to kernel instability or denial of service. CVE-2026-53071 addresses a missing channel lock in the Bluetooth l2cap_ecred_reconf_rsp function, which could cause race conditions or memory corruption. The advisory also fixes a kernel deadlock issue related to lock order in vmd_pci_write. These fixes are delivered in an updated kernel-rt package that requires rebooting the system to apply.

The vulnerabilities could lead to kernel instability, potential denial of service, or race conditions affecting system reliability and security on affected Red Hat Enterprise Linux 8 Real Time systems. The WARN_ON() removal prevents user-triggered kernel warnings that may disrupt system operation. The Bluetooth fix prevents possible concurrency issues that could compromise kernel integrity. No known exploits in the wild have been reported at this time.

An updated kernel-rt package is available from Red Hat for Red Hat Enterprise Linux 8 Real Time variants. Applying this update and rebooting the system is required to remediate the vulnerabilities and related bugs. Refer to Red Hat advisory RHSA-2026:42550 and the article https://access.redhat.com/articles/11258 for detailed update instructions. No alternative mitigations are indicated.