RLSA-2026:13578
RLSA-2026:13578 · Important: kernel-rt security update
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: nvme: avoid double free special payload (CVE-2024-41073) * kernel: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (CVE-2025-40252) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 8.1 · Hoch · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
kernel-rt Rocky Linux:8
- Betroffene Versionsbereiche
- ECOSYSTEM: < 0:4.18.0-553.123.1.rt7.464.el8_10
Auf 0:4.18.0-553.123.1.rt7.464.el8_10 aktualisieren
Originalquellen
- https://errata.rockylinux.org/RLSA-2026:13578
- https://bugzilla.redhat.com/show_bug.cgi?id=2301637
- https://bugzilla.redhat.com/show_bug.cgi?id=2418875
- https://bugzilla.redhat.com/show_bug.cgi?id=2424886
- https://bugzilla.redhat.com/show_bug.cgi?id=2453803
- https://bugzilla.redhat.com/show_bug.cgi?id=2454844
- https://bugzilla.redhat.com/show_bug.cgi?id=2460538
- https://osv.dev/vulnerability/RLSA-2026:13578