RLSA-2026:13578
RLSA-2026:13578 · Important: kernel-rt security update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: nvme: avoid double free special payload (CVE-2024-41073) * kernel: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (CVE-2025-40252) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 8.1 · Élevée · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel-rt Rocky Linux:8
- Plages de versions concernées
- ECOSYSTEM: < 0:4.18.0-553.123.1.rt7.464.el8_10
Mettez à jour vers 0:4.18.0-553.123.1.rt7.464.el8_10
Sources originales
- https://errata.rockylinux.org/RLSA-2026:13578
- https://bugzilla.redhat.com/show_bug.cgi?id=2301637
- https://bugzilla.redhat.com/show_bug.cgi?id=2418875
- https://bugzilla.redhat.com/show_bug.cgi?id=2424886
- https://bugzilla.redhat.com/show_bug.cgi?id=2453803
- https://bugzilla.redhat.com/show_bug.cgi?id=2454844
- https://bugzilla.redhat.com/show_bug.cgi?id=2460538
- https://osv.dev/vulnerability/RLSA-2026:13578