RLSA-2026:13577

Synopsis

Important: kernel security update

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: nvme: avoid double free special payload (CVE-2024-41073)

* kernel: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (CVE-2025-40252)

* kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)

* kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)

* kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)

* kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2301637 2418875 2424886 2453803 2454844 2460538

CVEs

CVE-2024-41073 CVE-2025-40252 CVE-2025-68724 CVE-2026-23401 CVE-2026-31402 CVE-2026-31431

Affected packages

Rocky Linux 8 aarch64 - BaseOS

bpftool-0:4.18.0-553.123.1.el8_10.aarch64.rpm bpftool-debuginfo-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-0:4.18.0-553.123.1.el8_10.src.rpm kernel-abi-stablelists-0:4.18.0-553.123.1.el8_10.noarch.rpm kernel-core-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-debug-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-debug-core-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-debug-debuginfo-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-debug-devel-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-debuginfo-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-debuginfo-common-aarch64-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-debug-modules-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-debug-modules-extra-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-devel-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-doc-0:4.18.0-553.123.1.el8_10.noarch.rpm kernel-modules-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-modules-extra-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-tools-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-tools-debuginfo-0:4.18.0-553.123.1.el8_10.aarch64.rpm kernel-tools-libs-0:4.18.0-553.123.1.el8_10.aarch64.rpm perf-0:4.18.0-553.123.1.el8_10.aarch64.rpm perf-debuginfo-0:4.18.0-553.123.1.el8_10.aarch64.rpm python3-perf-0:4.18.0-553.123.1.el8_10.aarch64.rpm python3-perf-debuginfo-0:4.18.0-553.123.1.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - BaseOS

bpftool-0:4.18.0-553.123.1.el8_10.x86_64.rpm bpftool-debuginfo-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-0:4.18.0-553.123.1.el8_10.src.rpm kernel-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-abi-stablelists-0:4.18.0-553.123.1.el8_10.noarch.rpm kernel-core-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-debug-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-debug-core-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-debug-debuginfo-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-debug-devel-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-debuginfo-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-debuginfo-common-x86_64-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-debug-modules-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-debug-modules-extra-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-devel-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-doc-0:4.18.0-553.123.1.el8_10.noarch.rpm kernel-modules-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-modules-extra-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-tools-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-tools-debuginfo-0:4.18.0-553.123.1.el8_10.x86_64.rpm kernel-tools-libs-0:4.18.0-553.123.1.el8_10.x86_64.rpm perf-0:4.18.0-553.123.1.el8_10.x86_64.rpm perf-debuginfo-0:4.18.0-553.123.1.el8_10.x86_64.rpm python3-perf-0:4.18.0-553.123.1.el8_10.x86_64.rpm python3-perf-debuginfo-0:4.18.0-553.123.1.el8_10.x86_64.rpm

Rocky Linux 8 aarch64 - PowerTools

kernel-tools-libs-devel-0:4.18.0-553.123.1.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - PowerTools

kernel-tools-libs-devel-0:4.18.0-553.123.1.el8_10.x86_64.rpm