This advisory covers a set of security fixes for the Red Hat Enterprise Linux 8 kernel-rt packages, which provide the Real Time Linux Kernel. The vulnerabilities addressed include a slab-use-after-free in __inet_lookup_established (CVE-2026-31669), a double free via VMA splitting in xen/privcmd (CVE-2026-31787), a buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786), validation issues in wifi brcmfmac bsscfg indices (CVE-2026-43110), strict checking of maximum actions in netfilter flowtable (CVE-2026-43329), a potential use-after-free in Bluetooth SSP passkey handlers (CVE-2026-46056), and fixes in wifi mac80211 components (CVE-2026-46125, CVE-2026-46152). The advisory references Red Hat's errata RHSA-2026:26427 and provides detailed package updates for affected architectures. The update is classified as important and requires rebooting the system after installation.

The vulnerabilities affect the Linux kernel-rt packages in Red Hat Enterprise Linux 8, potentially allowing attackers to exploit use-after-free, double free, buffer overflow, and validation flaws in kernel components. These issues could lead to system instability, denial of service, or privilege escalation depending on the specific flaw. The advisory rates the overall security impact as important (high severity). No known exploits in the wild have been reported at the time of this advisory.

Red Hat has released an official security update for the kernel-rt packages in Red Hat Enterprise Linux 8 that addresses these vulnerabilities. Users should apply the update as described in the Red Hat advisory RHSA-2026:26427 and reboot their systems to ensure the fixes take effect. Detailed update instructions are available at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.