RLSA-2026:99133: Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: sctp: avoid authenable sysctl UAF during netns teardown (CVE-2026-68162)
kernel: sctp: keep chunk->transport in step with the list it is queued on (CVE-2026-74588)
kernel: sctp: clear newtransport when removing a peer (CVE-2026-74586)
kernel: sctp: validate cookie AUTH state before use (CVE-2026-74752)
kernel: mptcp: options: reset DSS fields in case of unexpected size (CVE-2026-80586)
kernel: s390/vfioccw: Cancel existing workqueues (CVE-2026-80553)
kernel: powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak (CVE-2026-80571)
kernel: s390/qeth: validate user buffer length in SNMP and ARP query ioctls (CVE-2026-80584)
kernel: net/smc: fix use-after-free of the LLC qentry in smcllcsrvaddlink() (CVE-2026-80981)
kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalescet2() (CVE-2026-89633)
kernel: sctp: stop processing a packet once its association is deleted (CVE-2026-89479)
kernel: i3c: master: svc: bound IBI payload to the requested maxpayloadlen (CVE-2026-80951)
kernel: s390/vfio-ap: Fix missing lock required to access list of apmatrixmdev objects (CVE-2026-89956)
kernel: ALSA: seq: midi: Serialize input teardown with eventinput (CVE-2026-90207)
kernel: smb: client: validate absolute native symlink targets before NT fixups (CVE-2026-98318)
kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses (CVE-2026-99152)
kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU (CVE-2026-99153)
Bug Fix(es) and Enhancement(s):
mpls test multipath fails on 10.3 CTC2 compose (JIRA:Rocky Linux-222766)
Rocky Linux10.0 - kernel: CPU hotplug unsupported by CPUMF [rhel-10.3.z] (JIRA:Rocky Linux-270889)
Backport 6785011f8b16 ("ipv4: validate checksumstart before completing checksum") [rhel-10.3.z] (JIRA:Rocky Linux-280591)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/kernel-rtto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-debug-modules-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-uki-virtto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debugto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-devel-matchedto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debug-uki-virtto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-modules-extra-matchedto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-modules-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/libperfto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debug-develto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/libperf-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/perf-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debug-modules-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/rtlato a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/rv-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-debug-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debuginfo-common-x86_64to a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/python3-perfto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/perfto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-toolsto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernelto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-modulesto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-develto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-modules-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/rtla-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-develto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-uki-virt-addonsto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/rvto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-modules-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debug-modules-extrato a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-modules-extrato a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-develto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-modulesto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-devel-matchedto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debug-develto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-modules-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-modules-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debug-modulesto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-modules-extrato a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-develto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64kto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debug-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debuginfo-common-aarch64to a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-modulesto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-develto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debug-modules-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64kto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-modulesto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debugto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debug-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-debugto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-modules-extrato a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debuginfo-common-ppc64leto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-modules-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-modulesto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-debuginfoto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdumpto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-devel-matchedto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-modules-extrato a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-coreto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-debuginfo-common-s390xto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-develto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-docto a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade
rocky-linux/kernel-abi-stableliststo a version that resolves this vulnerability.Fixed in 0:6.12.0-264.16.1.el10_3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 6785011f8b16
Event History
Child vulnerabilities
Contains the following vulnerabilities.