Red Hat Real Time Kernel Update Fixes 23 CVEs
Tech GuruQuick Answer
Red Hat RHSA-2026:93047 fixes 23 vulnerabilities in the RHEL Real Time 9.2 E4S kernel. Inventory subscribed RT and NFV systems, install the signed kernel-rt build, plan and complete the required reboot, validate latency-sensitive workloads and boot fallback, and retain evidence.
Confirm Scope And Apply The Supported Remediation
What to do now: Inventory RHEL Real Time E4S and NFV E4S 9.2 systems, active and installed kernels, subscriptions, secure-boot state, latency-sensitive workloads, owners, and reboot windows. Match the exact 9.2 E4S product stream and package; do not infer applicability to ordinary RHEL kernels or treat package installation as active until reboot. Install kernel-rt-5.14.0-284.200.1.rt14.485.el9_2 from the supported Red Hat repository and reboot through approved change control. Confirm the running kernel after reboot, test real-time latency, networking, storage and NFV workloads, verify fallback entries and monitoring, and retain package and reboot evidence.
Last verified: 2026-10-30 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.
Scope And Authority
| Product scope | Red Hat Enterprise Linux Real Time E4S and Real Time for NFV E4S 9.2 |
|---|---|
| Advisory | RHSA-2026:93047 |
| CVEs | CVE-2022-50315, CVE-2025-68745, CVE-2026-43020, CVE-2026-43450, CVE-2026-43493, CVE-2026-46149, CVE-2026-52972, CVE-2026-53224, CVE-2026-53246, CVE-2026-63802, CVE-2026-63831, CVE-2026-63920, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63993, CVE-2026-64017, CVE-2026-64319, CVE-2026-72098, CVE-2026-72243, CVE-2026-74641, CVE-2026-80792, CVE-2026-89846 |
| Authoritative release date | 2026-10-30 13:08:29 UTC |
| Authority revision date | 2026-10-30 13:13:41 UTC |
| Affected versions | Advisory-listed kernel-rt packages on the RHEL Real Time E4S and NFV E4S 9.2 streams before kernel-rt-5.14.0-284.200.1.rt14.485.el9_2. |
| Fixed version | kernel-rt-0:5.14.0-284.200.1.rt14.485.el9_2.src |
| CVSS base score | 4.5-7.8 (CVSS v3.1; CVE-specific) |
| CVSS severity | Medium to High |
| Exploitation status | Red Hat does not state that these vulnerabilities are being maliciously exploited.; no exploitation claim is inferred. |
What Changed
Red Hat issued an Important kernel-rt update addressing 23 CVEs plus bug fixes and enhancements for the 9.2 E4S streams.
What To Validate Now
- Inventory. Inventory RHEL Real Time E4S and NFV E4S 9.2 systems, active and installed kernels, subscriptions, secure-boot state, latency-sensitive workloads, owners, and reboot windows.
- Establish applicability. Match the exact 9.2 E4S product stream and package; do not infer applicability to ordinary RHEL kernels or treat package installation as active until reboot.
- Remediate. Install kernel-rt-5.14.0-284.200.1.rt14.485.el9_2 from the supported Red Hat repository and reboot through approved change control.
- Validate. Confirm the running kernel after reboot, test real-time latency, networking, storage and NFV workloads, verify fallback entries and monitoring, and retain package and reboot evidence.
- Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.
Operational Cautions
Kernel remediation requires a reboot and can affect drivers, latency and NFV behavior. Stage critical systems, preserve a supported fallback kernel, and coordinate availability.
Evidence To Retain
- Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
- UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
- Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.
Related TechGeeks Resources
Authoritative References
Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.
