{"id":"RLSA-2026:82806","summary":"Important: kernel-rt security update","details":"The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)\n\n* kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)\n\n* kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236)\n\n* kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278)\n\n* kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)\n\n* kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108)\n\n* kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound (CVE-2026-80887)\n\n* kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","modified":"2026-10-15T12:45:06.514708135Z","published":"2026-10-15T12:13:35.368950Z","upstream":["CVE-2026-31678","CVE-2026-63920","CVE-2026-68108","CVE-2026-68236","CVE-2026-68278","CVE-2026-68409","CVE-2026-80887","CVE-2026-89811"],"database_specific":{"license_url":"https://creativecommons.org/licenses/by/4.0/","source_advisory":"RHSA-2026:82806","license":"CC-BY-4.0"},"references":[{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:82806"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2461761"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502330"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513148"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513287"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513299"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513361"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2528788"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535309"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82806"}],"affected":[{"package":{"name":"kernel-rt","ecosystem":"Rocky Linux:8","purl":"pkg:rpm/rocky-linux/kernel-rt?distro=rocky-linux-8&epoch=0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-553.173.1.rt7.514.el8_10"}],"database_specific":{"yum_repository":"NFV"}}],"database_specific":{"source":"https://storage.googleapis.com/resf-osv-data/RLSA-2026:82806.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"credits":[{"name":"Rocky Enterprise Software Foundation"},{"name":"Red Hat"}]}