RLSA-2026:99135: Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: USB: serial: ioti: fix heap overflow in getmanufinfo() (CVE-2026-53196)
kernel: net/iucv: fix use-after-free of a severed iucvpath (CVE-2026-68140)
kernel: sctp: avoid authenable sysctl UAF during netns teardown (CVE-2026-68162)
kernel: s390/zcrypt: Validate length for CCA AES cipher key requests (CVE-2026-68452)
kernel: s390/zcrypt: Validate length for CCA ECC private key requests (CVE-2026-68451)
kernel: sunrpc: pin svcxprt across the asynchronous TLS handshake callback (CVE-2026-72222)
kernel: sunrpc: wait for in-flight TLS handshake callback when cancel loses race (CVE-2026-72221)
kernel: nvmet-tcp: check return value of nvmettcpsetqueuesock (CVE-2026-74385)
kernel: sctp: keep chunk->transport in step with the list it is queued on (CVE-2026-74588)
kernel: sctp: clear newtransport when removing a peer (CVE-2026-74586)
kernel: sctp: validate cookie AUTH state before use (CVE-2026-74752)
kernel: mptcp: options: reset DSS fields in case of unexpected size (CVE-2026-80586)
kernel: s390/vfioccw: Cancel existing workqueues (CVE-2026-80553)
kernel: powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak (CVE-2026-80571)
kernel: s390/qeth: validate user buffer length in SNMP and ARP query ioctls (CVE-2026-80584)
kernel: ipv6: fix use-after-free in ip6finishoutput2() (CVE-2026-80792)
kernel: net/smc: fix use-after-free of the LLC qentry in smcllcsrvaddlink() (CVE-2026-80981)
kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalescet2() (CVE-2026-89633)
kernel: sctp: stop processing a packet once its association is deleted (CVE-2026-89479)
kernel: s390/vfio-ap: Fix missing lock required to access list of apmatrixmdev objects (CVE-2026-89956)
kernel: ALSA: seq: midi: Serialize input teardown with eventinput (CVE-2026-90207)
kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (CVE-2026-98116)
kernel: smb: client: validate absolute native symlink targets before NT fixups (CVE-2026-98318)
kernel: ipv4: validate checksumstart before completing checksum (CVE-2026-99999)
kernel: net/sched: actct: fix helper UAF due to extensions realloc (CVE-2026-98442)
kernel: ALSA: ua101: reject mismatched capture/playback packet sizes (CVE-2026-98741)
kernel: net/smc: protect clcsock lifetime in smcgetname (CVE-2026-99032)
kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses (CVE-2026-99152)
kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU (CVE-2026-99153)
Bug Fix(es) and Enhancement(s):
[Rocky Linux9.9z] watchdog: System panics during reboot when pretimeout is disabled (0) (JIRA:Rocky Linux-255218)
RT scheduler livelock: migrate-disabled task at pushable-list head causes repeated RT push/stopper retries, starving a critical RT task (remaining issue after CVE-2026-45919 fix in 94894c9c477e) [rhel-9.9.z] (JIRA:Rocky Linux-256280)
MADVISE i/o size in Rocky Linux 9 additionally limited by readaheadkb - Was addressed in Rocky Linux8 via Rocky Linux-22476 [rhel-9.9.z] (JIRA:Rocky Linux-259532)
trychargememcg() refactor in kernel 5.14.0-687.36.1 causes premature memcg OOM with GiB of clean page cache present [rhel-9.9.z] (JIRA:Rocky Linux-269061)
Rocky Linux9.4 - kernel: CPU hotplug unsupported by CPUMF [rhel-9.9.z] (JIRA:Rocky Linux-270893)
Accel-DSA: dmaengine: idxd: kernel oops on unbind [rhel-9.9.z] (JIRA:Rocky Linux-274411)
afunix: Fix peek then tail dereference UAF in unixstreamdatawait() [rhel-9.9] (JIRA:Rocky Linux-275410)
Kernel panic after stopping retis capture [rhel-9.9.z] (JIRA:Rocky Linux-275457)
Hard lockup experienced with repro from Rocky Linux-282072 [rhel-9.9.z] (JIRA:Rocky Linux-290031)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/kernelto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64kto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-debugto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-develto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-modulesto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-modules-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-debug-modules-extrato a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-develto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-devel-matchedto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-modulesto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-modules-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-64k-modules-extrato a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debugto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debug-develto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debuginfo-common-aarch64to a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debug-modules-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-develto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-devel-matchedto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-modulesto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-modules-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rtto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64kto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debugto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debug-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debug-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debug-develto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debug-modulesto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debug-modules-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-debug-modules-extrato a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-develto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-modulesto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-modules-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-64k-modules-extrato a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-debug-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-debug-modules-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-develto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-modules-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-toolsto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/libperfto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/libperf-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/perfto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/perf-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/python3-perfto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/rtlato a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/rtla-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/rvto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/rv-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debuginfo-common-ppc64leto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debuginfo-common-s390xto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdumpto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-develto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-devel-matchedto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-modulesto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-modules-coreto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-zfcpdump-modules-extrato a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debuginfo-common-x86_64to a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-debug-uki-virtto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-uki-virtto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-uki-virt-addonsto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-abi-stableliststo a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9 - Upgrade
Upgrade
rocky-linux/kernel-docto a version that resolves this vulnerability.Fixed in 0:5.14.0-741.22.1.el9_9
Event History
Child vulnerabilities
Contains the following vulnerabilities.
- CVE-2026-53196
- CVE-2026-68140
- CVE-2026-68162
- CVE-2026-68451
- CVE-2026-68452
- CVE-2026-72221
- CVE-2026-72222
- CVE-2026-74385
- CVE-2026-74586
- CVE-2026-74588
- CVE-2026-74752
- CVE-2026-80553
- CVE-2026-80571
- CVE-2026-80584
- CVE-2026-80586
- CVE-2026-80792
- CVE-2026-80981
- CVE-2026-89479
- CVE-2026-89633
- CVE-2026-89956
- CVE-2026-90207
- CVE-2026-98116
- CVE-2026-98318
- CVE-2026-98442
- CVE-2026-98741
- CVE-2026-99032
- CVE-2026-99152
- CVE-2026-99153
- CVE-2026-99999
Frequently Asked Questions
What level of access does the advisory’s severity assessment indicate an attacker needs?
The severity vector indicates network-reachable attack conditions, low privileges required, and no user interaction required. It rates confidentiality, integrity, and availability impact as high.
Which Rocky Linux package variants are covered by this advisory?
The listed packages include kernel, kernel-64k, kernel-64k-core, and their debug, debuginfo, devel, and devel-matched variants.