RLSA-2026:99015: Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: drm/amdkfd: hold eventmutex while checkpointing CRIU events (CVE-2026-74446)
kernel: drm/amdkfd: fix SMI event cross-process information leak (CVE-2026-97422)
kernel: drm/amd/pm: bound ppdpmsetpptable() memcpy (CVE-2026-97427)
kernel: drm/amdkfd: Check bounds for allocatesdmaqueue restoresdmaid (CVE-2026-97497)
kernel: drm/amdgpu: validate and share PSP fwpribuf copies via pspcopyfw (CVE-2026-97494)
kernel: drm/amdkfd: Check bounds on allocatedoorbell (CVE-2026-97495)
kernel: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS (CVE-2026-97493)
kernel: drm/amdgpu: fix buffer overflow during vBIOS update (CVE-2026-97425)
kernel: net/smc: protect clcsock lifetime in smcgetname (CVE-2026-99032)
kernel: kernel: Denial of Service via use-after-free race condition in SCSI tape driver (CVE-2026-99156)
Bug Fix(es) and Enhancement(s):
soft lockup occurs during iomapfinishioends (JIRA:Rocky Linux-258946)
gfs2: BUG during withdraw [Rocky Linux-8] (JIRA:Rocky Linux-298310)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/kernel-debugto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/python3-perfto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/bpftoolto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/bpftool-debuginfoto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-coreto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-debug-develto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-debuginfo-common-x86_64to a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-develto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-modulesto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-toolsto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/perfto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/perf-debuginfoto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-debuginfo-common-aarch64to a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-abi-stableliststo a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10 - Upgrade
Upgrade
rocky-linux/kernel-docto a version that resolves this vulnerability.Fixed in 0:4.18.0-553.186.1.el8_10
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Who is most directly exposed to the listed security issues?
The affected packages are Rocky Linux kernel packages and related tools listed in the advisory. Several fixes are in AMD GPU and AMD KFD/compute-driver code, while other fixes affect the SMC networking subsystem and the SCSI tape driver.
What level of access does an attacker need according to the severity vector?
The supplied vector indicates local attack access, low attack complexity, low privileges required, and no user interaction. It also indicates high impact to confidentiality, integrity, and availability.
Which types of flaws are identified in this update?
The advisory classifies the issues as buffer overflow, use-after-free, and race condition weaknesses. The listed fixes include bounds checks, a bounded memcpy, a vBIOS-update buffer-overflow fix, event information-leak handling, and a SCSI tape-driver use-after-free race fix.
Are non-security reliability fixes included?
Yes. The update also addresses a soft lockup during iomap_finish_ioends and a GFS2 BUG during withdraw on Rocky Linux 8.