[Apollo] Advisories Statistics light light Login

RLSA-2026:64775

Security Mirrored from RHSA-2026:64775
Issued at: 2026-09-09
Updated at: 2026-09-10

Advisory content derived from Red Hat RHSA-2026:64775, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: kernel security, bug fix, and enhancement update



Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004)

* kernel: ipv6: add NULL checks for idev in SRv6 paths (CVE-2026-23442)

* kernel: udp: Fix wildcard bind conflict check when using hash2 (CVE-2026-31503)

* kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)

* kernel: tcp: call sk_data_ready() after listener migration (CVE-2026-46015)

* kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)

* kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)

* kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933)

* kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075)

* kernel: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CVE-2026-53277)

* kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228)

* kernel: net: add pskb_may_pull() to skb_gro_receive_list() (CVE-2026-53235)

* kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223)

* kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275)

* kernel: ipv6: anycast: insert aca into global hash under idev->lock (CVE-2026-53259)

* kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)

* kernel: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (CVE-2026-63993)

* kernel: fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (CVE-2026-64265)

* kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319)

* kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287)

* kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563)

* kernel: smb: client: fix double-free in SMB2_close() replay (CVE-2026-64597)

Bug Fix(es) and Enhancement(s):

* Customer needs "netfilter: nfnetlink_queue: optimize verdict lookup with hash table" patch [Rocky Linux 10.2] (JIRA:Rocky Linux-132852)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 riscv64 Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2484456 2370992 2510892 2507041 2460736 2511932 2507096 2492745 2486463 2454807 2492295 2502363 2502369 2492841 2481936 2492725 2492733 2492097 2468102 2492850 2492811 2507129

CVEs

CVE-2025-38004 CVE-2026-23442 CVE-2026-31503 CVE-2026-43339 CVE-2026-46015 CVE-2026-46266 CVE-2026-46306 CVE-2026-52933 CVE-2026-53075 CVE-2026-53223 CVE-2026-53228 CVE-2026-53235 CVE-2026-53259 CVE-2026-53275 CVE-2026-53277 CVE-2026-63993 CVE-2026-64002 CVE-2026-64265 CVE-2026-64287 CVE-2026-64319 CVE-2026-64563 CVE-2026-64597

Affected packages

Rocky Linux 10 x86_64 - BaseOS

kernel-debug-modules-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-tools-debuginfo-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-debug-debuginfo-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-debug-modules-extra-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-tools-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-debug-uki-virt-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-uki-virt-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-debuginfo-common-x86_64-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-0:6.12.0-211.52.1.el10_2.src.rpm kernel-debug-modules-core-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-debug-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-core-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-modules-extra-matched-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-debuginfo-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-modules-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-modules-core-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-tools-libs-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-abi-stablelists-0:6.12.0-211.52.1.el10_2.noarch.rpm kernel-uki-virt-addons-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-debug-core-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-modules-extra-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-0:6.12.0-211.52.1.el10_2.x86_64.rpm

Rocky Linux 10 aarch64 - RT

kernel-rt-modules-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-debug-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-debuginfo-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-modules-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-debug-devel-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-modules-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-debug-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-debug-modules-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-debug-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-devel-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-debug-modules-extra-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-debug-devel-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-debug-debuginfo-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-debug-debuginfo-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-debuginfo-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-modules-extra-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-modules-extra-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-modules-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-debug-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-debug-modules-extra-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-devel-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-64k-debug-modules-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-debug-modules-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-rt-debug-modules-0:6.12.0-211.52.1.el10_2.aarch64.rpm

Rocky Linux 10 aarch64 - AppStream

kernel-64k-debug-devel-matched-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-devel-matched-0:6.12.0-211.52.1.el10_2.aarch64.rpm python3-perf-debuginfo-0:6.12.0-211.52.1.el10_2.aarch64.rpm rtla-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-debug-devel-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-debug-devel-matched-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-devel-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-debug-devel-0:6.12.0-211.52.1.el10_2.aarch64.rpm python3-perf-0:6.12.0-211.52.1.el10_2.aarch64.rpm perf-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-doc-0:6.12.0-211.52.1.el10_2.noarch.rpm kernel-devel-0:6.12.0-211.52.1.el10_2.aarch64.rpm perf-debuginfo-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-devel-matched-0:6.12.0-211.52.1.el10_2.aarch64.rpm rv-0:6.12.0-211.52.1.el10_2.aarch64.rpm

Rocky Linux 10 s390x - BaseOS

kernel-modules-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-zfcpdump-core-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-modules-extra-matched-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-debuginfo-common-s390x-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-tools-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-zfcpdump-modules-extra-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-zfcpdump-debuginfo-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-0:6.12.0-211.52.1.el10_2.src.rpm kernel-zfcpdump-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-zfcpdump-modules-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-debug-modules-extra-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-modules-core-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-tools-debuginfo-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-debug-core-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-zfcpdump-modules-core-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-debug-modules-core-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-debug-modules-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-modules-extra-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-debug-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-abi-stablelists-0:6.12.0-211.52.1.el10_2.noarch.rpm kernel-core-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-debug-debuginfo-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-debuginfo-0:6.12.0-211.52.1.el10_2.s390x.rpm

Rocky Linux 10 x86_64 - CRB

libperf-0:6.12.0-211.52.1.el10_2.x86_64.rpm libperf-debuginfo-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-tools-libs-devel-0:6.12.0-211.52.1.el10_2.x86_64.rpm

Rocky Linux 10 x86_64 - NFV

kernel-rt-modules-core-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-core-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-devel-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-debuginfo-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-modules-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-core-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debuginfo-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-modules-extra-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-devel-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-modules-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-modules-extra-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-modules-core-0:6.12.0-211.52.1.el10_2.x86_64.rpm

Rocky Linux 10 x86_64 - RT

kernel-rt-modules-core-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-core-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-devel-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-debuginfo-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-modules-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-core-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debuginfo-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-modules-extra-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-devel-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-modules-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-modules-extra-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-rt-debug-modules-core-0:6.12.0-211.52.1.el10_2.x86_64.rpm

Rocky Linux 10 ppc64le - AppStream

python3-perf-debuginfo-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-debug-devel-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-debug-devel-matched-0:6.12.0-211.52.1.el10_2.ppc64le.rpm python3-perf-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-devel-0:6.12.0-211.52.1.el10_2.ppc64le.rpm perf-debuginfo-0:6.12.0-211.52.1.el10_2.ppc64le.rpm perf-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-devel-matched-0:6.12.0-211.52.1.el10_2.ppc64le.rpm rtla-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-doc-0:6.12.0-211.52.1.el10_2.noarch.rpm rv-0:6.12.0-211.52.1.el10_2.ppc64le.rpm

Rocky Linux 10 aarch64 - BaseOS

kernel-64k-modules-extra-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-debug-modules-extra-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-debug-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-debug-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-modules-extra-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-tools-libs-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-uki-virt-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-debug-debuginfo-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-debuginfo-common-aarch64-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-debug-modules-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-0:6.12.0-211.52.1.el10_2.src.rpm kernel-tools-debuginfo-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-modules-extra-matched-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-debug-modules-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-debug-modules-extra-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-modules-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-uki-virt-addons-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-debug-modules-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-debug-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-debuginfo-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-modules-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-modules-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-abi-stablelists-0:6.12.0-211.52.1.el10_2.noarch.rpm kernel-tools-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-debug-modules-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-debuginfo-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-debug-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-modules-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-debug-debuginfo-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-0:6.12.0-211.52.1.el10_2.aarch64.rpm kernel-64k-core-0:6.12.0-211.52.1.el10_2.aarch64.rpm

Rocky Linux 10 s390x - AppStream

kernel-debug-devel-0:6.12.0-211.52.1.el10_2.s390x.rpm perf-debuginfo-0:6.12.0-211.52.1.el10_2.s390x.rpm perf-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-debug-devel-matched-0:6.12.0-211.52.1.el10_2.s390x.rpm python3-perf-debuginfo-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-zfcpdump-devel-matched-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-devel-matched-0:6.12.0-211.52.1.el10_2.s390x.rpm rtla-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-doc-0:6.12.0-211.52.1.el10_2.noarch.rpm kernel-zfcpdump-devel-0:6.12.0-211.52.1.el10_2.s390x.rpm python3-perf-0:6.12.0-211.52.1.el10_2.s390x.rpm rv-0:6.12.0-211.52.1.el10_2.s390x.rpm kernel-devel-0:6.12.0-211.52.1.el10_2.s390x.rpm

Rocky Linux 10 ppc64le - BaseOS

kernel-tools-libs-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-modules-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-0:6.12.0-211.52.1.el10_2.src.rpm kernel-debug-modules-extra-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-debug-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-debug-modules-core-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-modules-extra-matched-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-tools-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-debuginfo-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-tools-debuginfo-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-modules-core-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-debug-core-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-core-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-debug-debuginfo-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-abi-stablelists-0:6.12.0-211.52.1.el10_2.noarch.rpm kernel-modules-extra-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-debug-modules-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-debuginfo-common-ppc64le-0:6.12.0-211.52.1.el10_2.ppc64le.rpm

Rocky Linux 10 ppc64le - CRB

libperf-debuginfo-0:6.12.0-211.52.1.el10_2.ppc64le.rpm libperf-0:6.12.0-211.52.1.el10_2.ppc64le.rpm kernel-tools-libs-devel-0:6.12.0-211.52.1.el10_2.ppc64le.rpm

Rocky Linux 10 x86_64 - AppStream

kernel-devel-matched-0:6.12.0-211.52.1.el10_2.x86_64.rpm python3-perf-debuginfo-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-debug-devel-matched-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-debug-devel-0:6.12.0-211.52.1.el10_2.x86_64.rpm python3-perf-0:6.12.0-211.52.1.el10_2.x86_64.rpm rtla-0:6.12.0-211.52.1.el10_2.x86_64.rpm perf-debuginfo-0:6.12.0-211.52.1.el10_2.x86_64.rpm perf-0:6.12.0-211.52.1.el10_2.x86_64.rpm rv-0:6.12.0-211.52.1.el10_2.x86_64.rpm kernel-doc-0:6.12.0-211.52.1.el10_2.noarch.rpm kernel-devel-0:6.12.0-211.52.1.el10_2.x86_64.rpm

Rocky Linux 10 riscv64 - BaseOS

kernel-0:6.12.0-211.52.1.el10_2.src.rpm kernel-abi-stablelists-0:6.12.0-211.52.1.el10_2.noarch.rpm

Rocky Linux 10 aarch64 - CRB

kernel-tools-libs-devel-0:6.12.0-211.52.1.el10_2.aarch64.rpm libperf-debuginfo-0:6.12.0-211.52.1.el10_2.aarch64.rpm libperf-0:6.12.0-211.52.1.el10_2.aarch64.rpm

Rocky Linux 10 s390x - CRB

libperf-0:6.12.0-211.52.1.el10_2.s390x.rpm libperf-debuginfo-0:6.12.0-211.52.1.el10_2.s390x.rpm

Rocky Linux 10 riscv64 - AppStream

kernel-doc-0:6.12.0-211.52.1.el10_2.noarch.rpm