RLSA-2026:93930: Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: ethtool: coalesce: cap profile updates at NETDIMPARAMSNUMPROFILES (CVE-2026-63987)
kernel: ethtool: cmis: require exact CDB reply length (CVE-2026-63996)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/kernelto a version that resolves this vulnerability.Fixed in 0:5.14.0-687.65.1.el9_8
Event History
Frequently Asked Questions
Does exploitation require remote access or user interaction?
The supplied CVSS vector indicates local access and low privileges are required, and no user interaction is required. It does not indicate a remotely exploitable, unauthenticated attack path.
Which systems are in scope for this update?
The advisory applies to Rocky Linux kernel packages. The listed fixes concern the kernel ethtool coalesce and CMIS components.
How can I determine whether my installed kernel is affected?
This data does not provide affected or fixed kernel version numbers. Compare the installed Rocky Linux kernel package against the package update identified by the advisory.