RXSA-2026:13577
RXSA-2026:13577 · Important: kernel security update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nvme: avoid double free special payload (CVE-2024-41073) * kernel: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (CVE-2025-40252) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 8.1 · Élevée · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel Rocky Linux:8
- Plages de versions concernées
- ECOSYSTEM: < 0:4.18.0-553.123.1.el8_10.cloud.0.1
Mettez à jour vers 0:4.18.0-553.123.1.el8_10.cloud.0.1
Sources originales
- https://errata.rockylinux.org/RXSA-2026:13577
- https://bugzilla.redhat.com/show_bug.cgi?id=2301637
- https://bugzilla.redhat.com/show_bug.cgi?id=2418875
- https://bugzilla.redhat.com/show_bug.cgi?id=2424886
- https://bugzilla.redhat.com/show_bug.cgi?id=2453803
- https://bugzilla.redhat.com/show_bug.cgi?id=2454844
- https://bugzilla.redhat.com/show_bug.cgi?id=2460538
- https://bugzilla.redhat.com/show_bug.cgi?id=2467022
- https://osv.dev/vulnerability/RXSA-2026:13577