A critical update for the Red Hat Enterprise Linux 8 kernel-rt addresses two vulnerabilities: CVE-2026-46300 ("Fragnesia"), a variant of the Dirty Frag flaw in ESP/XFRM leading to local privilege escalation, and CVE-2026-46333, which allows an unprivileged user to read root-owned files. The CVSS score for CVE-2026-46333 is 5.5 (Medium). The fix is contained in kernel-rt packages version 4.18.0-553.125.1.rt7.466.el8_10, and a system reboot is required for the update to take effect.
Red Hat Product Errata RHSA-2026:19664 - Security Advisory Issued: 2026-05-20 Updated: 2026-05-20 RHSA-2026:19664 - Security Advisory Overview Updated Packages Synopsis Important: kernel-rt security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for Real Time 8 x86_64 Red Hat Enterprise Linux for Real Time for NFV 8 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Fixes BZ - 2477015 - CVE-2026-46300 kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel BZ - 2477802 - CVE-2026-46333 kernel: Read root-owned files as an unprivileged user CVEs CVE-2026-46300 CVE-2026-46333 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for Real Time 8 SRPM kernel-rt-4.18.0-553.125.1.rt7.466.el8_10.src.rpm SHA-256: 4d95768c79464d4882eea08f408c76bc65b0612dd8b37daadb4b0ed233902d98 x86_64 kernel-rt-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 110c3d66e346c2c45117a3babe8a0862bf630e7c67e126ac25103652986edd28 kernel-rt-core-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 18894456e41225227cf5b3023853fc625fdbff643fab0b6547abd59a16aee9bd kernel-rt-debug-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 0709790dcfad22e082105fdaebdd22112073d9fe61f27b18f2cf1fd476ef15fb kernel-rt-debug-core-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: aac582b0dd7f1b7484d212b096c93729cf6058ce9e5b15249c50d835fefbe9c0 kernel-rt-debug-debuginfo-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: acc954c25e8a6492226557e561a57b9e7faf8a0635772115bbe0a0a0dce0df7f kernel-rt-debug-devel-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 51a97836569231847961371acc541b02e64979ec8755e8a2034cbcd846740da9 kernel-rt-debug-modules-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 8ba675617ca7362c6522916a58f0b3d044b98e66fe9363eaafe0b7356bc38306 kernel-rt-debug-modules-extra-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 981fffe626914331bc77962bf9254621d4c58ff9891d2bcc60b256c7eec760f5 kernel-rt-debuginfo-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 873cc7acc5ceaf67cdbb0bbc6302e1d22dfa12f51cc6380ae047a0521d609e3b kernel-rt-debuginfo-common-x86_64-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: dc54de4945c704fb8e027f37ea1e8e47d358af482dd387739cc3f9a2186126bf kernel-rt-devel-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: cb1498ab59c306190f3bee180bc57ba95d94e48eefacc9db6ae8773fb037ee39 kernel-rt-modules-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: d3572dbe62522fe9e104354820535259a11fed84ce5915e01df59e8597c8a6bb kernel-rt-modules-extra-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 691cf7dc11e7bb0bb6fee74906f797cb443397b9741973e6e0474a56ae741ea6 Red Hat Enterprise Linux for Real Time for NFV 8 SRPM kernel-rt-4.18.0-553.125.1.rt7.466.el8_10.src.rpm SHA-256: 4d95768c79464d4882eea08f408c76bc65b0612dd8b37daadb4b0ed233902d98 x86_64 kernel-rt-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 110c3d66e346c2c45117a3babe8a0862bf630e7c67e126ac25103652986edd28 kernel-rt-core-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 18894456e41225227cf5b3023853fc625fdbff643fab0b6547abd59a16aee9bd kernel-rt-debug-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 0709790dcfad22e082105fdaebdd22112073d9fe61f27b18f2cf1fd476ef15fb kernel-rt-debug-core-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: aac582b0dd7f1b7484d212b096c93729cf6058ce9e5b15249c50d835fefbe9c0 kernel-rt-debug-debuginfo-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: acc954c25e8a6492226557e561a57b9e7faf8a0635772115bbe0a0a0dce0df7f kernel-rt-debug-devel-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 51a97836569231847961371acc541b02e64979ec8755e8a2034cbcd846740da9 kernel-rt-debug-kvm-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 09c5866a01adf7a6643f5c4b7af8dd0e5a853231b95bb4ee7ae1c2bf6a43cfba kernel-rt-debug-modules-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 8ba675617ca7362c6522916a58f0b3d044b98e66fe9363eaafe0b7356bc38306 kernel-rt-debug-modules-extra-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 981fffe626914331bc77962bf9254621d4c58ff9891d2bcc60b256c7eec760f5 kernel-rt-debuginfo-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 873cc7acc5ceaf67cdbb0bbc6302e1d22dfa12f51cc6380ae047a0521d609e3b kernel-rt-debuginfo-common-x86_64-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: dc54de4945c704fb8e027f37ea1e8e47d358af482dd387739cc3f9a2186126bf kernel-rt-devel-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: cb1498ab59c306190f3bee180bc57ba95d94e48eefacc9db6ae8773fb037ee39 kernel-rt-kvm-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: b399fa1650913f9cd1993c3c32b0403ab4d310cc9b8d825502eb1a31eb6bff71 kernel-rt-modules-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: d3572dbe62522fe9e104354820535259a11fed84ce5915e01df59e8597c8a6bb kernel-rt-modules-extra-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 691cf7dc11e7bb0bb6fee74906f797cb443397b9741973e6e0474a56ae741ea6 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM kernel-rt-4.18.0-553.125.1.rt7.466.el8_10.src.rpm SHA-256: 4d95768c79464d4882eea08f408c76bc65b0612dd8b37daadb4b0ed233902d98 x86_64 kernel-rt-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 110c3d66e346c2c45117a3babe8a0862bf630e7c67e126ac25103652986edd28 kernel-rt-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 110c3d66e346c2c45117a3babe8a0862bf630e7c67e126ac25103652986edd28 kernel-rt-core-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 18894456e41225227cf5b3023853fc625fdbff643fab0b6547abd59a16aee9bd kernel-rt-core-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 18894456e41225227cf5b3023853fc625fdbff643fab0b6547abd59a16aee9bd kernel-rt-debug-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 0709790dcfad22e082105fdaebdd22112073d9fe61f27b18f2cf1fd476ef15fb kernel-rt-debug-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 0709790dcfad22e082105fdaebdd22112073d9fe61f27b18f2cf1fd476ef15fb kernel-rt-debug-core-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: aac582b0dd7f1b7484d212b096c93729cf6058ce9e5b15249c50d835fefbe9c0 kernel-rt-debug-core-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: aac582b0dd7f1b7484d212b096c93729cf6058ce9e5b15249c50d835fefbe9c0 kernel-rt-debug-debuginfo-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: acc954c25e8a6492226557e561a57b9e7faf8a0635772115bbe0a0a0dce0df7f kernel-rt-debug-debuginfo-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: acc954c25e8a6492226557e561a57b9e7faf8a0635772115bbe0a0a0dce0df7f kernel-rt-debug-devel-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 51a97836569231847961371acc541b02e64979ec8755e8a2034cbcd846740da9 kernel-rt-debug-devel-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 51a97836569231847961371acc541b02e64979ec8755e8a2034cbcd846740da9 kernel-rt-debug-kvm-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 09c5866a01adf7a6643f5c4b7af8dd0e5a853231b95bb4ee7ae1c2bf6a43cfba kernel-rt-debug-modules-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 8ba675617ca7362c6522916a58f0b3d044b98e66fe9363eaafe0b7356bc38306 kernel-rt-debug-modules-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 8ba675617ca7362c6522916a58f0b3d044b98e66fe9363eaafe0b7356bc38306 kernel-rt-debug-modules-extra-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 981fffe626914331bc77962bf9254621d4c58ff9891d2bcc60b256c7eec760f5 kernel-rt-debug-modules-extra-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 981fffe626914331bc77962bf9254621d4c58ff9891d2bcc60b256c7eec760f5 kernel-rt-debuginfo-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 873cc7acc5ceaf67cdbb0bbc6302e1d22dfa12f51cc6380ae047a0521d609e3b kernel-rt-debuginfo-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: 873cc7acc5ceaf67cdbb0bbc6302e1d22dfa12f51cc6380ae047a0521d609e3b kernel-rt-debuginfo-common-x86_64-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: dc54de4945c704fb8e027f37ea1e8e47d358af482dd387739cc3f9a2186126bf kernel-rt-debuginfo-common-x86_64-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: dc54de4945c704fb8e027f37ea1e8e47d358af482dd387739cc3f9a2186126bf kernel-rt-devel-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: cb1498ab59c306190f3bee180bc57ba95d94e48eefacc9db6ae8773fb037ee39 kernel-rt-devel-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: cb1498ab59c306190f3bee180bc57ba95d94e48eefacc9db6ae8773fb037ee39 kernel-rt-kvm-4.18.0-553.125.1.rt7.466.el8_10.x86_64.rpm SHA-256: b399fa1650913f9cd1993c3c32b0403ab4d310cc9b8d825502eb1a31eb6bff71 kernel-rt-modules-4.18.0-553.125.1.rt7.466.el8_10.