Red Hat RHEL 8 Kernel Updates Fix 29 Vulnerabilities

P1 — VALIDATE AND UPDATEMedium to High · 4.7 / 5.8 / 5.9 / 7.0 / 7.1 / 7.5 / 7.8 / 8.8 (CVSS v3.1)EXPLOITATION: NOT STATED

Quick Answer

Red Hat published RHSA-2026:75746 and RHSA-2026:75747 for RHEL 8 standard and Real Time Linux kernel packages. Match entitled systems to the advisory scope, install kernel 4.18.0-553.171.1.el8_10 / kernel-rt 4.18.0-553.171.1.rt7.512.el8_10, reboot into the updated kernel, validate dependent operations, and retain change evidence.

Validate Linux kernel Scope And Apply The Red Hat Fix

What to do now: Inventory RHEL 8 standard and Real Time Linux kernel packages, confirm the exact entitled branch and installed build, apply the advisory-listed content and reboot through change control, validate representative services, and document exceptions.

Open the authoritative advisory

Last verified: 2026-10-05 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.

Scope And Authority

Product scopeRHEL 8 standard and Real Time Linux kernel packages
AdvisoryRHSA-2026:75746 / RHSA-2026:75747
CVEsCVE-2022-50756, CVE-2023-54048, CVE-2025-39994, CVE-2025-40242, CVE-2026-23105, CVE-2026-45856, CVE-2026-45861, CVE-2026-46319, CVE-2026-52972, CVE-2026-53049, CVE-2026-53230, CVE-2026-53270, CVE-2026-63794, CVE-2026-63829, CVE-2026-63992, CVE-2026-63994, CVE-2026-68432, CVE-2026-72052, CVE-2026-72255, CVE-2026-74516, CVE-2026-74569, CVE-2026-74669, CVE-2026-74744, CVE-2026-74746, CVE-2026-80921, CVE-2026-89481, CVE-2026-89972, CVE-2026-90227, CVE-2026-97417
Authoritative release date2026-10-05 11:10:00 UTC
Authority revision date2026-10-05 14:07:59 UTC
Affected versionsThe supported RHEL 8 standard and Real Time Linux kernel packages builds identified as affected in the advisory product-status relationships.
Fixed versionkernel 4.18.0-553.171.1.el8_10 / kernel-rt 4.18.0-553.171.1.rt7.512.el8_10
CVSS base score4.7 / 5.8 / 5.9 / 7.0 / 7.1 / 7.5 / 7.8 / 8.8 (CVSS v3.1)
CVSS severityMedium to High
Exploitation statusNot stated by the authority; no exploitation claim is inferred.

What Changed

Red Hat published supported Linux kernel replacement content for the advisory-listed CVEs and product branches.

What To Validate Now

  1. Inventory. Locate RHEL 8 standard and Real Time Linux kernel packages; record the installed build, repository and entitlement, owner, exposure, dependencies, and maintenance group.
  2. Establish applicability. Compare every system with the product and package relationships in RHSA-2026:75746 and RHSA-2026:75747. Do not infer applicability from the component name or CVSS rating alone.
  3. Remediate. Install kernel 4.18.0-553.171.1.el8_10 / kernel-rt 4.18.0-553.171.1.rt7.512.el8_10 from the supported Red Hat channel for the exact branch. Reboot into the updated kernel.
  4. Validate. Confirm the installed running kernel, exercise representative Linux kernel functions and recovery paths, monitor for regressions, and record the result.
  5. Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.

Operational Cautions

The replacement kernel requires a controlled reboot. Validate standard or Real Time branch selection, modules, latency-sensitive workloads, clustering, and rollback. Preserve pre-change versions, logs, installation output, validation evidence, and any rollback decision.

Evidence To Retain

  • Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
  • UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
  • Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.

Related TechGeeks Resources

Authoritative References

Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.