[Apollo] Advisories Statistics light light Login

RLSA-2026:57252

Security Mirrored from RHSA-2026:57252
Issued at: 2026-08-21
Updated at: 2026-08-21

Advisory content derived from Red Hat RHSA-2026:57252, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: kernel security, bug fix, and enhancement update



Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)

* kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)

* kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)

* kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)

* kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)

* kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)

* kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)

* kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)

* kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)

* kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)

* kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)

* kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)

* kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)

* kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)

* kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)

* kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)

* kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)

* kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)

* kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)

* kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)

* kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)

* kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)

* kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)

* kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)

* kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)

* kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

* kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:Rocky Linux-181065)

* vhost: reset the vring metadata cache on vring reconfiguration [rhel-9.8.z] (JIRA:Rocky Linux-224549)

* cifs: smb1 directory listings from xp server returning EINVAL and EIO [rhel-9.8.z] (JIRA:Rocky Linux-235811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2467135 2467156 2467202 2482113 2482124 2482614 2492403 2492719 2492768 2492788 2495941 2495950 2502188 2502321 2502361 2502422 2502443 2502463 2502589 2506790 2507042 2507135 2507216 2508504 2513373 2513470

CVEs

CVE-2026-43206 CVE-2026-43233 CVE-2026-43237 CVE-2026-45878 CVE-2026-45991 CVE-2026-46120 CVE-2026-52991 CVE-2026-53136 CVE-2026-53143 CVE-2026-53189 CVE-2026-53329 CVE-2026-53356 CVE-2026-53374 CVE-2026-63879 CVE-2026-63884 CVE-2026-63888 CVE-2026-63952 CVE-2026-64007 CVE-2026-64048 CVE-2026-64219 CVE-2026-64379 CVE-2026-64382 CVE-2026-64386 CVE-2026-64560 CVE-2026-68343 CVE-2026-68388

Affected packages

Rocky Linux 9 aarch64 - RT

kernel-rt-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-debug-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-debug-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-debug-debuginfo-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-debug-devel-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-debuginfo-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-debug-modules-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-debug-modules-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-debug-modules-extra-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-devel-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-modules-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-modules-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-64k-modules-extra-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-debug-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-debug-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-debug-debuginfo-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-debug-devel-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-debuginfo-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-debug-modules-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-debug-modules-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-debug-modules-extra-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-devel-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-modules-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-modules-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-rt-modules-extra-0:5.14.0-687.41.1.el9_8.aarch64.rpm

Rocky Linux 9 x86_64 - RT

kernel-rt-core-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-debug-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-debug-core-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-debug-debuginfo-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-debug-devel-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-debuginfo-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-debug-modules-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-debug-modules-core-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-debug-modules-extra-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-devel-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-modules-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-modules-core-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-modules-extra-0:5.14.0-687.41.1.el9_8.x86_64.rpm

Rocky Linux 9 aarch64 - BaseOS

kernel-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-0:5.14.0-687.41.1.el9_8.src.rpm kernel-64k-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-debug-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-debug-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-debug-debuginfo-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-debuginfo-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-debug-modules-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-debug-modules-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-debug-modules-extra-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-modules-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-modules-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-modules-extra-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-abi-stablelists-0:5.14.0-687.41.1.el9_8.noarch.rpm kernel-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-debug-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-debug-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-debug-debuginfo-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-debuginfo-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-debuginfo-common-aarch64-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-debug-modules-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-debug-modules-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-debug-modules-extra-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-modules-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-modules-core-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-modules-extra-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-tools-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-tools-debuginfo-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-tools-libs-0:5.14.0-687.41.1.el9_8.aarch64.rpm

Rocky Linux 9 ppc64le - BaseOS

kernel-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-0:5.14.0-687.41.1.el9_8.src.rpm kernel-abi-stablelists-0:5.14.0-687.41.1.el9_8.noarch.rpm kernel-core-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-debug-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-debug-core-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-debug-debuginfo-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-debuginfo-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-debuginfo-common-ppc64le-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-debug-modules-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-debug-modules-core-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-debug-modules-extra-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-modules-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-modules-core-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-modules-extra-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-tools-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-tools-debuginfo-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-tools-libs-0:5.14.0-687.41.1.el9_8.ppc64le.rpm

Rocky Linux 9 s390x - BaseOS

kernel-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-0:5.14.0-687.41.1.el9_8.src.rpm kernel-abi-stablelists-0:5.14.0-687.41.1.el9_8.noarch.rpm kernel-core-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-debug-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-debug-core-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-debug-debuginfo-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-debuginfo-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-debuginfo-common-s390x-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-debug-modules-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-debug-modules-core-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-debug-modules-extra-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-modules-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-modules-core-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-modules-extra-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-tools-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-tools-debuginfo-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-zfcpdump-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-zfcpdump-core-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-zfcpdump-debuginfo-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-zfcpdump-modules-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-zfcpdump-modules-core-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-zfcpdump-modules-extra-0:5.14.0-687.41.1.el9_8.s390x.rpm

Rocky Linux 9 aarch64 - AppStream

kernel-64k-debug-devel-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-debug-devel-matched-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-devel-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-64k-devel-matched-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-debug-devel-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-debug-devel-matched-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-devel-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-devel-matched-0:5.14.0-687.41.1.el9_8.aarch64.rpm kernel-doc-0:5.14.0-687.41.1.el9_8.noarch.rpm perf-0:5.14.0-687.41.1.el9_8.aarch64.rpm perf-debuginfo-0:5.14.0-687.41.1.el9_8.aarch64.rpm python3-perf-0:5.14.0-687.41.1.el9_8.aarch64.rpm python3-perf-debuginfo-0:5.14.0-687.41.1.el9_8.aarch64.rpm rtla-0:5.14.0-687.41.1.el9_8.aarch64.rpm rv-0:5.14.0-687.41.1.el9_8.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

kernel-debug-devel-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-debug-devel-matched-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-devel-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-devel-matched-0:5.14.0-687.41.1.el9_8.ppc64le.rpm kernel-doc-0:5.14.0-687.41.1.el9_8.noarch.rpm perf-0:5.14.0-687.41.1.el9_8.ppc64le.rpm perf-debuginfo-0:5.14.0-687.41.1.el9_8.ppc64le.rpm python3-perf-0:5.14.0-687.41.1.el9_8.ppc64le.rpm python3-perf-debuginfo-0:5.14.0-687.41.1.el9_8.ppc64le.rpm rtla-0:5.14.0-687.41.1.el9_8.ppc64le.rpm rv-0:5.14.0-687.41.1.el9_8.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

kernel-debug-devel-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-debug-devel-matched-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-devel-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-devel-matched-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-doc-0:5.14.0-687.41.1.el9_8.noarch.rpm kernel-zfcpdump-devel-0:5.14.0-687.41.1.el9_8.s390x.rpm kernel-zfcpdump-devel-matched-0:5.14.0-687.41.1.el9_8.s390x.rpm perf-0:5.14.0-687.41.1.el9_8.s390x.rpm perf-debuginfo-0:5.14.0-687.41.1.el9_8.s390x.rpm python3-perf-0:5.14.0-687.41.1.el9_8.s390x.rpm python3-perf-debuginfo-0:5.14.0-687.41.1.el9_8.s390x.rpm rtla-0:5.14.0-687.41.1.el9_8.s390x.rpm rv-0:5.14.0-687.41.1.el9_8.s390x.rpm

Rocky Linux 9 x86_64 - NFV

kernel-rt-debug-debuginfo-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-rt-debuginfo-0:5.14.0-687.41.1.el9_8.x86_64.rpm

Rocky Linux 9 aarch64 - CRB

kernel-tools-libs-devel-0:5.14.0-687.41.1.el9_8.aarch64.rpm libperf-0:5.14.0-687.41.1.el9_8.aarch64.rpm libperf-debuginfo-0:5.14.0-687.41.1.el9_8.aarch64.rpm

Rocky Linux 9 ppc64le - CRB

kernel-tools-libs-devel-0:5.14.0-687.41.1.el9_8.ppc64le.rpm libperf-0:5.14.0-687.41.1.el9_8.ppc64le.rpm libperf-debuginfo-0:5.14.0-687.41.1.el9_8.ppc64le.rpm

Rocky Linux 9 s390x - CRB

libperf-0:5.14.0-687.41.1.el9_8.s390x.rpm libperf-debuginfo-0:5.14.0-687.41.1.el9_8.s390x.rpm

Rocky Linux 9 x86_64 - BaseOS

kernel-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-core-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-debug-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-debug-core-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-debug-debuginfo-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-debuginfo-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-debuginfo-common-x86_64-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-debug-modules-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-debug-modules-core-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-debug-modules-extra-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-debug-uki-virt-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-modules-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-modules-core-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-modules-extra-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-tools-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-tools-debuginfo-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-tools-libs-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-uki-virt-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-uki-virt-addons-0:5.14.0-687.41.1.el9_8.x86_64.rpm

Rocky Linux 9 x86_64 - AppStream

kernel-debug-devel-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-debug-devel-matched-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-devel-0:5.14.0-687.41.1.el9_8.x86_64.rpm kernel-devel-matched-0:5.14.0-687.41.1.el9_8.x86_64.rpm perf-0:5.14.0-687.41.1.el9_8.x86_64.rpm perf-debuginfo-0:5.14.0-687.41.1.el9_8.x86_64.rpm python3-perf-0:5.14.0-687.41.1.el9_8.x86_64.rpm python3-perf-debuginfo-0:5.14.0-687.41.1.el9_8.x86_64.rpm rtla-0:5.14.0-687.41.1.el9_8.x86_64.rpm rv-0:5.14.0-687.41.1.el9_8.x86_64.rpm

Rocky Linux 9 x86_64 - CRB

kernel-tools-libs-devel-0:5.14.0-687.41.1.el9_8.x86_64.rpm libperf-0:5.14.0-687.41.1.el9_8.x86_64.rpm libperf-debuginfo-0:5.14.0-687.41.1.el9_8.x86_64.rpm