RLSA-2026:0760
RLSA-2026:0760 · Important: kernel-rt security update
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: smb: client: Fix use-after-free in cifs_fill_dirent (CVE-2025-38051) * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933) * kernel: drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CVE-2023-53552) * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096) * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.1 · Alta · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kernel-rt Rocky Linux:8
- Intervalos de versiones afectados
- ECOSYSTEM: < 0:4.18.0-553.94.1.rt7.435.el8_10
Actualiza a 0:4.18.0-553.94.1.rt7.435.el8_10
Fuentes originales
- https://errata.rockylinux.org/RLSA-2026:0760
- https://bugzilla.redhat.com/show_bug.cgi?id=2373329
- https://bugzilla.redhat.com/show_bug.cgi?id=2401432
- https://bugzilla.redhat.com/show_bug.cgi?id=2401514
- https://bugzilla.redhat.com/show_bug.cgi?id=2407333
- https://bugzilla.redhat.com/show_bug.cgi?id=2422836
- https://osv.dev/vulnerability/RLSA-2026:0760