RXSA-2026:13565
RXSA-2026:13565 · Important: kernel security update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.8 · Élevée · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel Rocky Linux:9
- Plages de versions concernées
- ECOSYSTEM: < 0:5.14.0-611.54.1.el9_7.cloud.1.0
Mettez à jour vers 0:5.14.0-611.54.1.el9_7.cloud.1.0
Sources originales
- https://errata.rockylinux.org/RXSA-2026:13565
- https://bugzilla.redhat.com/show_bug.cgi?id=2439852
- https://bugzilla.redhat.com/show_bug.cgi?id=2448745
- https://bugzilla.redhat.com/show_bug.cgi?id=2454844
- https://bugzilla.redhat.com/show_bug.cgi?id=2460538
- https://bugzilla.redhat.com/show_bug.cgi?id=2467022
- https://osv.dev/vulnerability/RXSA-2026:13565