RLSA-2026:71700

Synopsis

Important: kernel security, bug fix, and enhancement update

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323)

* kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539)

* kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230)

* kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204)

* kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199)

* kernel: drm/amdgpu/userq: fix access to stale wptr mapping (CVE-2026-46311)

* kernel: netfilter: nf_queue: hold bridge skb->dev while queued (CVE-2026-52912)

* kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CVE-2026-53203)

* kernel: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CVE-2026-53290)

* kernel: drm/virtio: use uninterruptible resv lock for plane updates (CVE-2026-64098)

* kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121)

* kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108)

* kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CVE-2026-68257)

* kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CVE-2026-68267)

* kernel: drm/xe: Hold a dma-buf reference for imported BOs (CVE-2026-68266)

* kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273)

* kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714)

Bug Fix(es) and Enhancement(s):

* MADVISE i/o size in Rocky Linux 9 additionally limited by read_ahead_kb - Was addressed in Rocky Linux8 via Rocky Linux-22476 [rhel-9.8.z] (JIRA:Rocky Linux-260938)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2419883 2461575 2482533 2482543 2482649 2486470 2492105 2492798 2493739 2502536 2513233 2513361 2513372 2513414 2513429 2513434 2525436

CVEs

CVE-2025-40323 CVE-2026-31539 CVE-2026-46199 CVE-2026-46204 CVE-2026-46230 CVE-2026-46311 CVE-2026-52912 CVE-2026-53203 CVE-2026-53290 CVE-2026-64098 CVE-2026-68108 CVE-2026-68121 CVE-2026-68257 CVE-2026-68266 CVE-2026-68267 CVE-2026-68273 CVE-2026-80714

Affected packages

Rocky Linux 9 aarch64 - BaseOS

kernel-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-0:5.14.0-687.52.1.el9_8.src.rpm kernel-64k-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-debug-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-debug-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-debug-debuginfo-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-debuginfo-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-debug-modules-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-debug-modules-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-debug-modules-extra-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-modules-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-modules-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-modules-extra-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-abi-stablelists-0:5.14.0-687.52.1.el9_8.noarch.rpm kernel-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-debug-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-debug-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-debug-debuginfo-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-debuginfo-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-debuginfo-common-aarch64-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-debug-modules-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-debug-modules-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-debug-modules-extra-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-modules-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-modules-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-modules-extra-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-tools-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-tools-debuginfo-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-tools-libs-0:5.14.0-687.52.1.el9_8.aarch64.rpm

Rocky Linux 9 ppc64le - BaseOS

kernel-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-0:5.14.0-687.52.1.el9_8.src.rpm kernel-abi-stablelists-0:5.14.0-687.52.1.el9_8.noarch.rpm kernel-core-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-debug-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-debug-core-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-debug-debuginfo-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-debuginfo-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-debuginfo-common-ppc64le-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-debug-modules-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-debug-modules-core-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-debug-modules-extra-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-modules-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-modules-core-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-modules-extra-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-tools-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-tools-debuginfo-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-tools-libs-0:5.14.0-687.52.1.el9_8.ppc64le.rpm

Rocky Linux 9 s390x - BaseOS

kernel-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-0:5.14.0-687.52.1.el9_8.src.rpm kernel-abi-stablelists-0:5.14.0-687.52.1.el9_8.noarch.rpm kernel-core-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-debug-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-debug-core-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-debug-debuginfo-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-debuginfo-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-debuginfo-common-s390x-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-debug-modules-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-debug-modules-core-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-debug-modules-extra-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-modules-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-modules-core-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-modules-extra-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-tools-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-tools-debuginfo-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-zfcpdump-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-zfcpdump-core-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-zfcpdump-debuginfo-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-zfcpdump-modules-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-zfcpdump-modules-core-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-zfcpdump-modules-extra-0:5.14.0-687.52.1.el9_8.s390x.rpm

Rocky Linux 9 x86_64 - BaseOS

kernel-0:5.14.0-687.52.1.el9_8.src.rpm kernel-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-abi-stablelists-0:5.14.0-687.52.1.el9_8.noarch.rpm kernel-core-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-core-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-debuginfo-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debuginfo-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debuginfo-common-x86_64-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-modules-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-modules-core-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-modules-extra-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-uki-virt-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-modules-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-modules-core-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-modules-extra-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-tools-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-tools-debuginfo-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-tools-libs-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-uki-virt-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-uki-virt-addons-0:5.14.0-687.52.1.el9_8.x86_64.rpm

Rocky Linux 9 aarch64 - AppStream

kernel-64k-debug-devel-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-debug-devel-matched-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-devel-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-64k-devel-matched-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-debug-devel-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-debug-devel-matched-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-devel-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-devel-matched-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-doc-0:5.14.0-687.52.1.el9_8.noarch.rpm perf-0:5.14.0-687.52.1.el9_8.aarch64.rpm perf-debuginfo-0:5.14.0-687.52.1.el9_8.aarch64.rpm python3-perf-0:5.14.0-687.52.1.el9_8.aarch64.rpm python3-perf-debuginfo-0:5.14.0-687.52.1.el9_8.aarch64.rpm rtla-0:5.14.0-687.52.1.el9_8.aarch64.rpm rv-0:5.14.0-687.52.1.el9_8.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

kernel-debug-devel-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-debug-devel-matched-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-devel-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-devel-matched-0:5.14.0-687.52.1.el9_8.ppc64le.rpm kernel-doc-0:5.14.0-687.52.1.el9_8.noarch.rpm perf-0:5.14.0-687.52.1.el9_8.ppc64le.rpm perf-debuginfo-0:5.14.0-687.52.1.el9_8.ppc64le.rpm python3-perf-0:5.14.0-687.52.1.el9_8.ppc64le.rpm python3-perf-debuginfo-0:5.14.0-687.52.1.el9_8.ppc64le.rpm rtla-0:5.14.0-687.52.1.el9_8.ppc64le.rpm rv-0:5.14.0-687.52.1.el9_8.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

kernel-debug-devel-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-debug-devel-matched-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-devel-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-devel-matched-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-doc-0:5.14.0-687.52.1.el9_8.noarch.rpm kernel-zfcpdump-devel-0:5.14.0-687.52.1.el9_8.s390x.rpm kernel-zfcpdump-devel-matched-0:5.14.0-687.52.1.el9_8.s390x.rpm perf-0:5.14.0-687.52.1.el9_8.s390x.rpm perf-debuginfo-0:5.14.0-687.52.1.el9_8.s390x.rpm python3-perf-0:5.14.0-687.52.1.el9_8.s390x.rpm python3-perf-debuginfo-0:5.14.0-687.52.1.el9_8.s390x.rpm rtla-0:5.14.0-687.52.1.el9_8.s390x.rpm rv-0:5.14.0-687.52.1.el9_8.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

kernel-debug-devel-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-debug-devel-matched-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-devel-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-devel-matched-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-doc-0:5.14.0-687.52.1.el9_8.noarch.rpm perf-0:5.14.0-687.52.1.el9_8.x86_64.rpm perf-debuginfo-0:5.14.0-687.52.1.el9_8.x86_64.rpm python3-perf-0:5.14.0-687.52.1.el9_8.x86_64.rpm python3-perf-debuginfo-0:5.14.0-687.52.1.el9_8.x86_64.rpm rtla-0:5.14.0-687.52.1.el9_8.x86_64.rpm rv-0:5.14.0-687.52.1.el9_8.x86_64.rpm

Rocky Linux 9 aarch64 - RT

kernel-rt-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-debug-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-debug-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-debug-debuginfo-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-debug-devel-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-debuginfo-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-debug-modules-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-debug-modules-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-debug-modules-extra-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-devel-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-modules-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-modules-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-64k-modules-extra-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-debug-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-debug-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-debug-debuginfo-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-debug-devel-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-debuginfo-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-debug-modules-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-debug-modules-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-debug-modules-extra-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-devel-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-modules-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-modules-core-0:5.14.0-687.52.1.el9_8.aarch64.rpm kernel-rt-modules-extra-0:5.14.0-687.52.1.el9_8.aarch64.rpm

Rocky Linux 9 x86_64 - NFV

kernel-rt-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-core-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-core-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-debuginfo-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-devel-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debuginfo-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-modules-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-modules-core-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-modules-extra-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-devel-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-modules-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-modules-core-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-modules-extra-0:5.14.0-687.52.1.el9_8.x86_64.rpm

Rocky Linux 9 x86_64 - RT

kernel-rt-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-core-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-core-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-debuginfo-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-devel-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debuginfo-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-modules-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-modules-core-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-debug-modules-extra-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-devel-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-modules-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-modules-core-0:5.14.0-687.52.1.el9_8.x86_64.rpm kernel-rt-modules-extra-0:5.14.0-687.52.1.el9_8.x86_64.rpm

Rocky Linux 9 aarch64 - CRB

kernel-tools-libs-devel-0:5.14.0-687.52.1.el9_8.aarch64.rpm libperf-0:5.14.0-687.52.1.el9_8.aarch64.rpm libperf-debuginfo-0:5.14.0-687.52.1.el9_8.aarch64.rpm

Rocky Linux 9 ppc64le - CRB

kernel-tools-libs-devel-0:5.14.0-687.52.1.el9_8.ppc64le.rpm libperf-0:5.14.0-687.52.1.el9_8.ppc64le.rpm libperf-debuginfo-0:5.14.0-687.52.1.el9_8.ppc64le.rpm

Rocky Linux 9 x86_64 - CRB

kernel-tools-libs-devel-0:5.14.0-687.52.1.el9_8.x86_64.rpm libperf-0:5.14.0-687.52.1.el9_8.x86_64.rpm libperf-debuginfo-0:5.14.0-687.52.1.el9_8.x86_64.rpm

Rocky Linux 9 s390x - CRB

libperf-0:5.14.0-687.52.1.el9_8.s390x.rpm libperf-debuginfo-0:5.14.0-687.52.1.el9_8.s390x.rpm