RLSA-2026:93911: Moderate: kernel security update
Published Nov 4, 2026
·Updated
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: ethtool: cmis: require exact CDB reply length (CVE-2026-63996)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
1 affected componentFixes available
rocky-linux/kernel<0:6.12.0-211.73.1.el10_2
0:6.12.0-211.73.1.el10_2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/kernelto a version that resolves this vulnerability.Fixed in 0:6.12.0-211.73.1.el10_2
Event History
Nov 4, 2026
Advisory Published
via OSV·09:10 AM
Data Sourced
via OSV·09:10 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
2
What could a successful exploit affect?
The advisory rates confidentiality, integrity, and availability impacts as high.