{"id":"ALSA-2026:83159","summary":"Important: kernel-rt security, bug fix, and enhancement update","details":"The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.  \n\nSecurity Fix(es):  \n\n  * kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377)\n  * kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)\n  * kernel: net/sched: cls_route: fix fastmap use-after-free on filter (CVE-2026-74583)\n  * kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)\n  * kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)\n  * kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)\n  * kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036)\n  * kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228)\n  * kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * powerpc/pseries: pci - logic bug in SR-IOV enable (JIRA:AlmaLinux-240146)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-10-15T10:30:05.250211516Z","published":"2026-10-14T00:00:00Z","related":["CVE-2026-68377","CVE-2026-72262","CVE-2026-74583","CVE-2026-74641","CVE-2026-74705","CVE-2026-89526","CVE-2026-90036","CVE-2026-93228","CVE-2026-93262"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:83159"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-68377"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-72262"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-74583"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-74641"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-74705"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-89526"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-90036"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-93228"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-93262"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2513277"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2516575"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2521054"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2521436"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2521498"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2532309"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2535158"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2540230"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2540323"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-83159.html"}],"affected":[{"package":{"name":"kernel-rt","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/kernel-rt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.174.1.rt7.515.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83159.json"}},{"package":{"name":"kernel-rt-core","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/kernel-rt-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.174.1.rt7.515.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83159.json"}},{"package":{"name":"kernel-rt-debug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/kernel-rt-debug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.174.1.rt7.515.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83159.json"}},{"package":{"name":"kernel-rt-debug-core","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/kernel-rt-debug-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.174.1.rt7.515.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83159.json"}},{"package":{"name":"kernel-rt-debug-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/kernel-rt-debug-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.174.1.rt7.515.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83159.json"}},{"package":{"name":"kernel-rt-debug-modules","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/kernel-rt-debug-modules"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.174.1.rt7.515.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83159.json"}},{"package":{"name":"kernel-rt-debug-modules-extra","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/kernel-rt-debug-modules-extra"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.174.1.rt7.515.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83159.json"}},{"package":{"name":"kernel-rt-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/kernel-rt-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.174.1.rt7.515.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83159.json"}},{"package":{"name":"kernel-rt-modules","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/kernel-rt-modules"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.174.1.rt7.515.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83159.json"}},{"package":{"name":"kernel-rt-modules-extra","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/kernel-rt-modules-extra"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.174.1.rt7.515.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:83159.json"}}],"schema_version":"1.9.0"}