RLSA-2026:0793
RLSA-2026:0793 · Important: kernel security update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/xe: Make dma-fences compliant with the safe access rules (CVE-2025-38703) * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933) * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277) * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.8 · Élevée · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel Rocky Linux:9
- Plages de versions concernées
- ECOSYSTEM: < 0:5.14.0-611.24.1.el9_7
Mettez à jour vers 0:5.14.0-611.24.1.el9_7
Sources originales
- https://errata.rockylinux.org/RLSA-2026:0793
- https://bugzilla.redhat.com/show_bug.cgi?id=2393157
- https://bugzilla.redhat.com/show_bug.cgi?id=2401432
- https://bugzilla.redhat.com/show_bug.cgi?id=2419954
- https://bugzilla.redhat.com/show_bug.cgi?id=2422788
- https://bugzilla.redhat.com/show_bug.cgi?id=2422801
- https://osv.dev/vulnerability/RLSA-2026:0793