Issued at: 2026-11-13
Updated at: 2026-11-14
Advisory content derived from Red Hat RHSA-2026:99031, © Red Hat, Inc., used under CC BY 4.0, with modifications.
Synopsis
Moderate: kernel-rt security, bug fix, and enhancement update
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: drm/amdkfd: hold event_mutex while checkpointing CRIU events (CVE-2026-74446)
* kernel: drm/amdkfd: fix SMI event cross-process information leak (CVE-2026-97422)
* kernel: drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (CVE-2026-97427)
* kernel: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (CVE-2026-97497)
* kernel: drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (CVE-2026-97494)
* kernel: drm/amdkfd: Check bounds on allocate_doorbell (CVE-2026-97495)
* kernel: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS (CVE-2026-97493)
* kernel: drm/amdgpu: fix buffer overflow during vBIOS update (CVE-2026-97425)
* kernel: net/smc: protect clcsock lifetime in smc_getname (CVE-2026-99032)
* kernel: kernel: Denial of Service via use-after-free race condition in SCSI tape driver (CVE-2026-99156)
Bug Fix(es) and Enhancement(s):
* soft lockup occurs during iomap_finish_ioends (JIRA:Rocky Linux-258946)
* gfs2: BUG during withdraw [Rocky Linux-8] (JIRA:Rocky Linux-298310)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.