RLSA-2026:95367: Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: writeback: fix race between cgroupwritebackumount() and inodeswitchwbs() (CVE-2026-64378)
kernel: sunrpc: pin svcxprt across the asynchronous TLS handshake callback (CVE-2026-72222)
kernel: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (CVE-2026-72221)
kernel: fs/resctrl: Fix use-after-free during unmount (CVE-2026-72080)
kernel: sctp: clear newtransport when removing a peer (CVE-2026-74586)
kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488)
kernel: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (CVE-2026-90315)
kernel: kernel: xfs: Unauthorized data modification via improper file size exchange handling (CVE-2026-98974)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/kernelto a version that resolves this vulnerability.Fixed in 0:6.12.0-211.74.1.el10_2
Event History
Child vulnerabilities
Contains the following vulnerabilities.