RLSA-2026:45115

Synopsis

Important: kernel security update

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)

* kernel: xfrm single-frag length not properly limited

* kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

* kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)

Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2406712 2492277 2492437

CVEs

CVE-2025-40026 CVE-2026-52993 CVE-2026-53059

Affected packages

Rocky Linux 8 aarch64 - BaseOS

bpftool-0:4.18.0-553.147.1.el8_10.aarch64.rpm bpftool-debuginfo-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-0:4.18.0-553.147.1.el8_10.src.rpm kernel-abi-stablelists-0:4.18.0-553.147.1.el8_10.noarch.rpm kernel-core-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-debug-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-debug-core-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-debug-debuginfo-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-debug-devel-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-debuginfo-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-debuginfo-common-aarch64-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-debug-modules-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-debug-modules-extra-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-devel-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-doc-0:4.18.0-553.147.1.el8_10.noarch.rpm kernel-modules-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-modules-extra-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-tools-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-tools-debuginfo-0:4.18.0-553.147.1.el8_10.aarch64.rpm kernel-tools-libs-0:4.18.0-553.147.1.el8_10.aarch64.rpm perf-0:4.18.0-553.147.1.el8_10.aarch64.rpm perf-debuginfo-0:4.18.0-553.147.1.el8_10.aarch64.rpm python3-perf-0:4.18.0-553.147.1.el8_10.aarch64.rpm python3-perf-debuginfo-0:4.18.0-553.147.1.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - BaseOS

bpftool-0:4.18.0-553.147.1.el8_10.x86_64.rpm bpftool-debuginfo-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-0:4.18.0-553.147.1.el8_10.src.rpm kernel-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-abi-stablelists-0:4.18.0-553.147.1.el8_10.noarch.rpm kernel-core-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-debug-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-debug-core-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-debug-debuginfo-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-debug-devel-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-debuginfo-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-debuginfo-common-x86_64-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-debug-modules-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-debug-modules-extra-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-devel-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-doc-0:4.18.0-553.147.1.el8_10.noarch.rpm kernel-modules-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-modules-extra-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-tools-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-tools-debuginfo-0:4.18.0-553.147.1.el8_10.x86_64.rpm kernel-tools-libs-0:4.18.0-553.147.1.el8_10.x86_64.rpm perf-0:4.18.0-553.147.1.el8_10.x86_64.rpm perf-debuginfo-0:4.18.0-553.147.1.el8_10.x86_64.rpm python3-perf-0:4.18.0-553.147.1.el8_10.x86_64.rpm python3-perf-debuginfo-0:4.18.0-553.147.1.el8_10.x86_64.rpm

Rocky Linux 8 aarch64 - PowerTools

kernel-tools-libs-devel-0:4.18.0-553.147.1.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - PowerTools

kernel-tools-libs-devel-0:4.18.0-553.147.1.el8_10.x86_64.rpm