RLSA-2026:87805
RLSA-2026:87805 · Important: kernel security, bug fix, and enhancement update
Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CVE-2025-22063) * kernel: calipso: Don't call calipso functions for AF_INET sk. (CVE-2025-38147) * kernel: ALSA: hda/cs35l41: Fix firmware load work teardown (CVE-2026-64481) * kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299) * kernel: ovl: check access to copy_file_range source with src mounter creds (CVE-2026-68448) * kernel: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CVE-2026-80530) * kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536) Bug Fix(es) and Enhancement(s): * RTLA segfaults on freed memory access on double SIGINT [rhel-9.8.z] (JIRA:Rocky Linux-193029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.8 · Высокий · Есть исправление
- Опубликовано
- Обновлено
Стек: system
Затронутые продукты и версии
kernel Rocky Linux:9
- Затронутые диапазоны версий
- ECOSYSTEM: < 0:5.14.0-687.60.1.el9_8
Обновитесь до 0:5.14.0-687.60.1.el9_8
Первоисточники
- https://errata.rockylinux.org/RLSA-2026:87805
- https://bugzilla.redhat.com/show_bug.cgi?id=2360273
- https://bugzilla.redhat.com/show_bug.cgi?id=2376106
- https://bugzilla.redhat.com/show_bug.cgi?id=2507038
- https://bugzilla.redhat.com/show_bug.cgi?id=2513245
- https://bugzilla.redhat.com/show_bug.cgi?id=2513356
- https://bugzilla.redhat.com/show_bug.cgi?id=2514462
- https://bugzilla.redhat.com/show_bug.cgi?id=2524492
- https://bugzilla.redhat.com/show_bug.cgi?id=2524501
- https://access.redhat.com/errata/RHSA-2026:87805
- https://osv.dev/vulnerability/RLSA-2026:87805