RLSA-2026:97873: Important: kernel security, bug fix, and enhancement update

Q: Which installed packages should be checked when assessing whether this advisory applies?

Check for the Rocky Linux kernel package variants listed in the advisory: kernel, kernel-core, kernel-debug, kernel-debug-core, kernel-debug-debuginfo, kernel-debug-devel, kernel-debug-devel-matched, and kernel-rt-debug.

Q: What vulnerability classes are identified for this update?

The advisory identifies Buffer Overflow and Use After Free weaknesses. The listed fixes also include issues affecting networking, USB, thermal, SCTP, iSER, bridge multicast, and virtio-vsock kernel components.

Published Nov 13, 2026

Updated

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CVE-2025-22063)

kernel: can: bcm: add locking for bcmop runtime updates (CVE-2025-38004)

kernel: calipso: Don't call calipso functions for AFINET sk. (CVE-2025-38147)

kernel: thermal: core: Fix thermal zone device registration error path (CVE-2026-43332)

kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929)

kernel: IB/isert: Reject login PDUs shorter than ISERHEADERSLEN (CVE-2026-53176)

kernel: net/sched: actapi: use RCU with deferred freeing for action lifecycle (CVE-2026-53264)

kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)

kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899)

kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032)

kernel: usb: typec: tcpm: bound altmodedesc[] per iteration in svdmconsumemodes() (CVE-2026-63962)

kernel: net: mana: Fix TOCTOU double-fetch of hwcmsgid from DMA buffer (CVE-2026-64034)

kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)

kernel: net: mana: validate rxreqidx to prevent out-of-bounds array access (CVE-2026-64018)

kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035)

kernel: idpf: fix readdevclklock spinlock init in idpfptpinit() (CVE-2026-64162)

kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)

kernel: ALSA: hda/cs35l41: Fix firmware load work teardown (CVE-2026-64481)

kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)

kernel: fuse: re-lock request before returning from fusereffolio() (CVE-2026-64266)

kernel: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path (CVE-2026-64303)

kernel: writeback: fix race between cgroupwritebackumount() and inodeswitchwbs() (CVE-2026-64378)

kernel: drm/amd/display: set newstream to NULL after release (CVE-2026-68236)

kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293)

kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202)

kernel: Linux kernel: Denial of Service due to use-after-free in acttunnelkey (CVE-2026-68377)

kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278)

kernel: vmxnet3: fix BUGON in vmxnet3gethdrlen() for Geneve packets (CVE-2026-68299)

kernel: drm/amdgpu: fix lifetime issue of amdgpuvmgettaskinfopasid() (CVE-2026-68245)

kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083)

kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289)

kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283)

kernel: Bluetooth: hcisync: Fix advertising data UAFs (CVE-2026-74509)

kernel: Bluetooth: mgmt: fix UAF in pair command cancellation (CVE-2026-74510)

kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CVE-2026-74515)

kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)

kernel: xfs: fix exchange-range reflink flag clearing issue with INO1WRITTEN (CVE-2026-80530)

kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536)

kernel: drm/vmwgfx: use checkaddoverflow for shader size+offset bound (CVE-2026-80887)

kernel: smb: client: reject a tree connect response whose byte count is too small (CVE-2026-89631)

kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985)

kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488)

kernel: entry: Fix seccomp bypass after ptrace with TSYNC (CVE-2026-89603)

kernel: vfio/pci: clear vdev->msiperm after freeing it on init failure (CVE-2026-89777)

kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)

kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811)

kernel: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (CVE-2026-90315)

kernel: perf: Fix addrfilterranges lifetime (CVE-2026-93817)

kernel: virtio-fs: avoid double-free on failed queue setup (CVE-2026-93827)

kernel: kernel: strparser: use-after-free via msgtimerwork rearm after strpdone() cancellation ()

kernel: xfrm: hold netdevice reference under RCU in bundle creation (CVE-2026-98364)

kernel: exec: Cleanup POSIX timers right after dethread() (CVE-2026-98260)

kernel: netfilter: flowtable: hold reference on ct until flow is released (CVE-2026-98320)

kernel: ipv4: free inetopt and ireqopt after an RCU grace period (CVE-2026-98432)

kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (CVE-2026-98466)

kernel: nvmet-auth: fix out-of-bounds write in nvmetauthchallenge() (CVE-2026-98725)

kernel: kernel: xfs: Unauthorized data modification via improper file size exchange handling (CVE-2026-98974)

Bug Fix(es) and Enhancement(s):

Rocky Linux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [rhel-9.9.z] (JIRA:Rocky Linux-254109)

Backport request: bonding: only set speed/duplex to unknown, if getting speed failed [rhel-9.9] (JIRA:Rocky Linux-174325)

[Rocky Linux-9.9] gfp: include GFPNOWARN in GFPNOWAIT (JIRA:Rocky Linux-249621)

gfs2: Get rid of sdasyncglockwait [rhel-9.9.z] (JIRA:Rocky Linux-254079)

TLS-related kernel panics in kernel-5.14.0-741.10.1.el99 and higher (JIRA:Rocky Linux-283336)

Rocky Linux is missing support for conntrack zone filtering in dump/delete requests (9.10) [rhel-9.9.z] (JIRA:Rocky Linux-291353)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

91 affected componentsFixes available

rocky-linux/kernel-rt-debug<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debug<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debug-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debug-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debug-devel<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debug-devel-matched<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debuginfo-common-x86_64<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debug-modules<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debug-modules-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debug-modules-extra<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debug-uki-virt<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-devel<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-devel-matched<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-modules<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-modules-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-modules-extra<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-debug-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-debug-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-debug-devel<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-debug-modules<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-debug-modules-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-debug-modules-extra<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-devel<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-modules<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-modules-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-modules-extra<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-tools<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-tools-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-tools-libs<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-tools-libs-devel<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-uki-virt<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-uki-virt-addons<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/libperf<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/libperf-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/perf<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/perf-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/python3-perf<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/python3-perf-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/rtla<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/rtla-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/rv<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/rv-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debuginfo-common-ppc64le<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-debug<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-debug-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-debug-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-debug-devel<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-debug-devel-matched<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-debug-modules<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-debug-modules-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-debug-modules-extra<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-devel<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-devel-matched<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-modules<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-modules-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-64k-modules-extra<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debuginfo-common-aarch64<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-debug<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-debug-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-debug-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-debug-devel<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-debug-modules<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-debug-modules-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-debug-modules-extra<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-devel<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-modules<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-modules-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-rt-64k-modules-extra<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-debuginfo-common-s390x<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-zfcpdump<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-zfcpdump-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-zfcpdump-debuginfo<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-zfcpdump-devel<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-zfcpdump-devel-matched<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-zfcpdump-modules<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-zfcpdump-modules-core<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-zfcpdump-modules-extra<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-abi-stablelists<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

rocky-linux/kernel-doc<0:5.14.0-741.20.1.el9_9

0:5.14.0-741.20.1.el9_9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade rocky-linux/kernel-rt-debug to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debug to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debug-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debug-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debug-devel to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debug-devel-matched to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debuginfo-common-x86_64 to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debug-modules to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debug-modules-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debug-modules-extra to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debug-uki-virt to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-devel to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-devel-matched to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-modules to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-modules-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-modules-extra to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-debug-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-debug-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-debug-devel to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-debug-modules to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-debug-modules-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-debug-modules-extra to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-devel to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-modules to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-modules-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-modules-extra to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-tools to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-tools-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-tools-libs to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-tools-libs-devel to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-uki-virt to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-uki-virt-addons to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/libperf to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/libperf-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/perf to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/perf-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/python3-perf to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/python3-perf-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/rtla to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/rtla-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/rv to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/rv-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debuginfo-common-ppc64le to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-debug to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-debug-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-debug-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-debug-devel to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-debug-devel-matched to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-debug-modules to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-debug-modules-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-debug-modules-extra to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-devel to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-devel-matched to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-modules to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-modules-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-64k-modules-extra to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debuginfo-common-aarch64 to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-debug to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-debug-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-debug-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-debug-devel to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-debug-modules to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-debug-modules-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-debug-modules-extra to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-devel to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-modules to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-modules-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-rt-64k-modules-extra to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-debuginfo-common-s390x to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-zfcpdump to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-zfcpdump-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-zfcpdump-debuginfo to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-zfcpdump-devel to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-zfcpdump-devel-matched to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-zfcpdump-modules to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-zfcpdump-modules-core to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-zfcpdump-modules-extra to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-abi-stablelists to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9
Upgrade
Upgrade rocky-linux/kernel-doc to a version that resolves this vulnerability.
Fixed in 0:5.14.0-741.20.1.el9_9

Event History

Nov 13, 2026

Advisory Published

via OSV·06:05 AM

Data Sourced

via OSV·06:05 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which installed packages should be checked when assessing whether this advisory applies?

Check for the Rocky Linux kernel package variants listed in the advisory: kernel, kernel-core, kernel-debug, kernel-debug-core, kernel-debug-debuginfo, kernel-debug-devel, kernel-debug-devel-matched, and kernel-rt-debug.

What vulnerability classes are identified for this update?

The advisory identifies Buffer Overflow and Use After Free weaknesses. The listed fixes also include issues affecting networking, USB, thermal, SCTP, iSER, bridge multicast, and virtio-vsock kernel components.

RLSA-2026:97873: Important: kernel security, bug fix, and enhancement update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which installed packages should be checked when assessing whether this advisory applies?

What vulnerability classes are identified for this update?

Company

Resources

Contact