The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114)
* kernel: fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266)
* kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572)
* kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202)
* kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536)
* kernel: inet: frags: strip GSO state from fragments before reassembly (CVE-2026-80590)
* kernel: vfio/pci:
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935)
* kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)
* kernel: sctp: keep chunk->transport in step with the list it is queued on (CVE-2026-74588)
* kernel: sctp: validate cookie AUTH state before use (CVE-2026-74752)
* kernel: smb: client: reject a tree connect response whose byte count is too small (CVE-2026-89631)
* kernel: sctp: stop processing a packet once its association is deleted (CVE-2026-89479)
*
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377)
* kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)
* kernel: net/sched: cls_route: fix fastmap use-after-free on filter (CVE-2026-74583)
* kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)
* kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)
* kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)
* ke
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)
* kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)
* kernel: drm/amd/display: set new_stream to NULL after release (CVE-2026-68236)
* kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278)
* kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)
* kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108)
* kernel: cifs: validate D
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)
* kernel: packet: use consistent hard_header_len in non-ring send paths ()
* kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582)
* kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References sec
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)
* kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)
* kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)
* kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)
* kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)
* kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs
Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)
* kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)
* kernel: net/liquidio: drop cached VF pci_dev LUT (CVE-2026-72329)
* kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099)
Bug Fix(es) and Enhancement(s):
* [AlmaLinux 8.10] "kernel BUG at lib/list_debug.c:28!": list_add corruption in register_trace_event AlmaLinux 8.10 (JIRA:AlmaLinux-214136)
* request_key_auth u
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323)
* kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942)
* kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230)
* kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204)
* kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199)
* kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875)
* kernel: net: mana: Fix TOCTOU double
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566)
* kernel: netfilter: nf_queue: hold bridge skb->dev while queued (CVE-2026-52912)
* kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121)
* kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714)
* kernel: nvme-tcp: reject a read that transferred too few bytes (CVE-2026-89480)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgme
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964)
* kernel: Linux kernel Bluetooth: Denial of Service via race condition in hidp_session_thread (CVE-2023-54120)
* kernel: Bluetooth: L2CAP: Fix potential user-after-free (CVE-2023-54214)
* kernel: Bluetooth: btusb: revert use of devm_kzalloc in btusb (CVE-2025-71082)
* kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334)
* kernel: iommu/vt-d: Clear Present bit before tearing dow
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
* kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)
* kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)
* kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)
* kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)
* kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)
* kernel: netfilter: xt_policy: fix strict
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)
* kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
* kernel: netfilter: nf_log: validate MAC header was set before dumping it (CVE-2026-52942)
* kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917)
* kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091)
* kernel: netfilter: nf_conntrack_sip: don't u
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling (CVE-2024-57849)
* kernel: smc91x: fix broken irq-context in PREEMPT_RT (CVE-2025-71132)
* kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
* kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)
* kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)
* kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)
* kernel: nfsd: release layout stid on setlease fail
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924)
* kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)
* kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913)
* kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191)
* kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)
* kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602)
* kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
* kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
* kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
* kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
* kernel: scsi: target: iscsi: Bound iscsi_encode_text_output()
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (CVE-2025-39902)
* kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
* kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)
* kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
* kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
* kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
* kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.