p PatchFirst

RLSA-2026:91565

RLSA-2026:91565 · Important: kernel security, bug fix, and enhancement update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tcp: restrict SO_ATTACH_FILTER to priv users (CVE-2026-53236) * kernel: fuse: re-lock request before replacing page cache folio (CVE-2026-53388) * kernel: net: shaper: rework the VALID marking (again) (CVE-2026-64027) * kernel: net/handshake: hand off the pinned file reference to accept_doit (CVE-2026-63979) * kernel: net/handshake: Drain pending requests at net namespace exit (CVE-2026-63978) * kernel: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() (CVE-2026-64109) * kernel: net/handshake: Take a long-lived file reference at submit (CVE-2026-64523) * kernel: net: gro: fix double aggregation of flush-marked skbs (CVE-2026-68136) * kernel: net/packet: avoid fanout hook re-registration after unregister (CVE-2026-68338) * kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083) * kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CVE-2026-74515) * kernel: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (CVE-2026-74631) * kernel: usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CVE-2026-80824) * kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CVE-2026-89638) * kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure (CVE-2026-89777) * kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262) Bug Fix(es) and Enhancement(s): * x86/microcode: Add platform mask to Intel microcode "old" list [Rocky Linux-10] [rhel-10.2.z] (JIRA:Rocky Linux-212778) * net: NULL pointer deref kernel panic in fib6_walk_continue under heavy VRF churn [rhel-10.2.z] (JIRA:Rocky Linux-245489) * backport fixes for lockdep issues reported with rt-debug [rhel-10.2.z] (JIRA:Rocky Linux-259937) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 8.8 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • kernel Rocky Linux:10

    Affected ranges
    • ECOSYSTEM: < 0:6.12.0-211.69.1.el10_2

    Update to 0:6.12.0-211.69.1.el10_2

Original sources

Check your server →