RLSA-2026:93414: Critical: kernel security update
Published Nov 3, 2026
·Updated
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: ipv4: free inetopt and ireqopt after an RCU grace period (CVE-2026-98432)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
1 affected componentFixes available
rocky-linux/kernel<0:4.18.0-553.182.1.el8_10
0:4.18.0-553.182.1.el8_10
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.182.1.el8_10
Event History
Nov 3, 2026
Advisory Published
via OSV·12:01 PM
Data Sourced
via OSV·12:01 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of attacker access is required to exploit this issue?
The CVSS vector indicates network-based exploitation with low attack complexity. It does not require prior privileges or user interaction, and successful exploitation can affect confidentiality, integrity, and availability.