The Red Hat kernel-rt security update fixes five vulnerabilities: CVE-2026-43027 addresses netfilter nf_conntrack_helper cleanup; CVE-2026-43499 corrects rtmutex waiter removal logic; CVE-2026-46113 and CVE-2026-53359 fix KVM x86 shadow paging use-after-free issues caused by unexpected guest frame numbers and roles; CVE-2026-53166 prevents a NULL pointer dereference in futex requeue during self-deadlock. These fixes improve kernel stability and security for real-time Linux workloads. The update applies to Red Hat Enterprise Linux 9.2 variants and requires a system reboot.

The vulnerabilities could lead to kernel crashes, use-after-free memory corruption, and null pointer dereferences, potentially affecting system stability and security on affected Red Hat Enterprise Linux 9.2 systems running the kernel-rt packages. No known exploits in the wild have been reported. The issues impact kernel components responsible for network connection tracking, real-time mutex handling, KVM virtualization shadow paging, and futex requeue operations.

Red Hat has released an official security update for kernel-rt packages in Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and Extended Life Cycle 9.2. Applying this update and rebooting the system is required to remediate the vulnerabilities. Refer to the Red Hat advisory RHSA-2026:39983 and the update instructions at https://access.redhat.com/articles/11258 for detailed guidance. No additional mitigation actions are indicated by the vendor.