RLSA-2026:0759
RLSA-2026:0759 · Important: kernel security update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smb: client: Fix use-after-free in cifs_fill_dirent (CVE-2025-38051) * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933) * kernel: drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CVE-2023-53552) * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096) * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.1 · Élevée · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel Rocky Linux:8
- Plages de versions concernées
- ECOSYSTEM: < 0:4.18.0-553.94.1.el8_10
Mettez à jour vers 0:4.18.0-553.94.1.el8_10
Sources originales
- https://errata.rockylinux.org/RLSA-2026:0759
- https://bugzilla.redhat.com/show_bug.cgi?id=2373329
- https://bugzilla.redhat.com/show_bug.cgi?id=2401432
- https://bugzilla.redhat.com/show_bug.cgi?id=2401514
- https://bugzilla.redhat.com/show_bug.cgi?id=2407333
- https://bugzilla.redhat.com/show_bug.cgi?id=2422836
- https://osv.dev/vulnerability/RLSA-2026:0759