Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

The advisory covers security fixes for multiple kernel vulnerabilities in Red Hat Enterprise Linux 8 Real Time kernel-rt packages. Notable fixes include CVE-2024-56602 addressing a dangling socket pointer in ieee802154_create(), CVE-2026-46120 fixing use of cached network pointers in ip6erspan_changelink(), and CVE-2026-63888 resolving CRC overread and double-free in iscsi target handling. Additional fixes address race conditions, memory management, and SMB client mode masking. The update also resolves NIC stalls caused by allocation failures. The advisory recommends applying the update and rebooting the system to mitigate these issues.

The vulnerabilities fixed could lead to system instability, memory corruption, and potential security breaches due to dangling pointers, race conditions, and improper memory handling in kernel components. These issues affect the Real Time Linux Kernel used in environments requiring precise timing and determinism, potentially impacting system reliability and security if left unpatched.

A security update for the kernel-rt packages is available from Red Hat. Systems should apply the update promptly and reboot to ensure the fixes take effect. Red Hat treats all kernel errata as security-relevant and strongly advises against delaying updates to reduce exposure to these vulnerabilities.