This Red Hat security advisory addresses multiple vulnerabilities in the kernel-rt packages, including CVE-2026-31669 (slab-use-after-free in mptcp), CVE-2026-31787 (double free in xen/privcmd), CVE-2026-31786 (buffer overflow in xen sys-hypervisor driver), CVE-2026-43110 (validation of bsscfg indices in brcmfmac WiFi driver), CVE-2026-43329 (netfilter flowtable action count check), CVE-2026-46056 (potential use-after-free in Bluetooth SSP passkey handlers), CVE-2026-46152 (code cleanup in mac80211 WiFi driver), and CVE-2026-46125 (station removal on connection prep failure in mac80211). These fixes are included in an update for Red Hat Enterprise Linux 8 Real Time kernels. The advisory recommends applying the update and rebooting the system for the changes to take effect.

The vulnerabilities affect core kernel components related to networking (multipath TCP, netfilter), virtualization (Xen), WiFi drivers, and Bluetooth. Exploitation could lead to memory corruption issues such as use-after-free, double free, and buffer overflow, potentially resulting in system instability, denial of service, or privilege escalation. The advisory rates the overall security impact as Important (high severity). No known exploits in the wild have been reported at this time.

An official security update is available from Red Hat for the kernel-rt packages on Red Hat Enterprise Linux 8 Real Time variants. Users should apply the update as detailed in the Red Hat advisory RHSA-2026:26428 and reboot affected systems to ensure the fixes take effect. No additional mitigation steps are indicated by the vendor.