RLSA-2026:93413: Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: Kernel: Denial of Service in network socket error handling (CVE-2026-22977)
kernel: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (CVE-2026-46174)
kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191)
kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability (CVE-2026-68398)
kernel: mptcp: pm: userspace: fix use-after-free in getlocalid (CVE-2026-68169)
kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283)
kernel: mptcp: options: reset DSS fields in case of unexpected size (CVE-2026-80586)
kernel: entry: Fix seccomp bypass after ptrace with TSYNC (CVE-2026-89603)
kernel: KVM: nVMX: Always flush vpid02 on first use (CVE-2026-89932)
kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)
kernel: virtio-fs: avoid double-free on failed queue setup (CVE-2026-93827)
kernel: smb: client: bound dirent name against end of SMB response in cifsfilldir (CVE-2026-93787)
kernel: KEYS: encrypted: fix integer overflow of databloblen (CVE-2026-98222)
kernel: xfrm: hold netdevice reference under RCU in bundle creation (CVE-2026-98364)
kernel: ipv4: free inetopt and ireqopt after an RCU grace period (CVE-2026-98432)
kernel: nvmet-auth: fix out-of-bounds write in nvmetauthchallenge() (CVE-2026-98725)
Bug Fix(es) and Enhancement(s):
ipv4: ipgre: make ipgreheader() robust (rhel-10.2.z) (JIRA:Rocky Linux-270702)
ip6gre: make ip6greheader() robust (rhel-10.2.z) (JIRA:Rocky Linux-270721)
Rocky Linux is missing support for conntrack zone filtering in dump/delete requests (10.4) [rhel-10.2.z] (JIRA:Rocky Linux-291348)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/kernelto a version that resolves this vulnerability.Fixed in 0:6.12.0-211.72.1.el10_2
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Which systems should be assessed for exposure?
Assess Rocky Linux systems using the rocky-linux/kernel package. The advisory does not provide affected or fixed kernel version ranges, so version-specific exposure cannot be determined from the available data.
Does the stated severity indicate a remotely exploitable issue without credentials or user interaction?
The advisory's CVSS vector is AV:N/AC:L/PR:N/UI:N, indicating network access, low attack complexity, no required privileges, and no user interaction for the issue represented by that score. The advisory is rated critical at 9.8.
Is this advisory limited to one kernel subsystem or vulnerability type?
No. It covers multiple CVEs across areas including network socket handling, PPP over L2TP, MPTCP, TIPC, seccomp, KVM, iSCSI, virtio-fs, SMB, and encrypted keys. The listed CWE categories include Integer Overflow and Use After Free.