[Apollo] Advisories Statistics light light Login

RLSA-2026:72624

Security Mirrored from RHSA-2026:72624
Issued at: 2026-09-30
Updated at: 2026-09-30

Advisory content derived from Red Hat RHSA-2026:72624, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: kernel security, bug fix, and enhancement update



Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CVE-2026-46076)

* kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942)

* kernel: KVM: arm64: Reassign nested_mmus array behind mmu_lock (CVE-2026-46317)

* kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341)

* kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556)

* kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)

* kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522)

* kernel: perf: Reject exited events as group leaders (CVE-2026-74753)

* kernel: nvme-tcp: reject a read that transferred too few bytes (CVE-2026-89480)

* kernel: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (CVE-2026-89775)

Bug Fix(es) and Enhancement(s):

* KVM: s390: Limit adapter indicator access to mapped page [rhel-10.2.z] (JIRA:Rocky Linux-188661)

* crypto: xxhash64 should not be fips approved [rhel-10.2.z] (JIRA:Rocky Linux-254943)

* kata-tdx TD vCPU stuck at reset vector (EIP=0xFFF0) on Intel Xeon 6 (Granite Rapids / Sierra Forest) ? guest never executes. (10.2.z) (JIRA:Rocky Linux-260402)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 riscv64 Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2481992 2482104 2486976 2495938 2508319 2513356 2524423 2524434 2532095 2535049

CVEs

CVE-2026-45942 CVE-2026-46076 CVE-2026-46317 CVE-2026-53341 CVE-2026-64556 CVE-2026-68299 CVE-2026-74753 CVE-2026-80522 CVE-2026-89480 CVE-2026-89775

Affected packages

Rocky Linux 10 ppc64le - CRB

kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.ppc64le.rpm libperf-debuginfo-0:6.12.0-211.61.1.el10_2.ppc64le.rpm libperf-0:6.12.0-211.61.1.el10_2.ppc64le.rpm

Rocky Linux 10 ppc64le - BaseOS

kernel-debug-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-tools-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-debuginfo-common-ppc64le-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-modules-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-modules-extra-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-debug-core-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-debug-debuginfo-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-0:6.12.0-211.61.1.el10_2.src.rpm kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-core-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-debuginfo-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-tools-debuginfo-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-modules-core-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch.rpm kernel-tools-libs-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-debug-modules-0:6.12.0-211.61.1.el10_2.ppc64le.rpm

Rocky Linux 10 aarch64 - RT

kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-debug-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-debug-modules-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-devel-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-debug-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-debug-devel-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-debuginfo-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-debug-debuginfo-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-debug-modules-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-debug-modules-extra-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-devel-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-modules-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-modules-extra-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-modules-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-debug-debuginfo-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-modules-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-debug-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-debuginfo-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-rt-64k-0:6.12.0-211.61.1.el10_2.aarch64.rpm

Rocky Linux 10 aarch64 - CRB

kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.aarch64.rpm libperf-0:6.12.0-211.61.1.el10_2.aarch64.rpm libperf-debuginfo-0:6.12.0-211.61.1.el10_2.aarch64.rpm

Rocky Linux 10 aarch64 - BaseOS

kernel-64k-debug-debuginfo-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-modules-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-modules-extra-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-debug-debuginfo-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-debug-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-debug-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-uki-virt-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-debug-modules-extra-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-debug-modules-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-modules-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-tools-libs-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-tools-debuginfo-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-debug-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-modules-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-0:6.12.0-211.61.1.el10_2.src.rpm kernel-64k-debug-modules-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-debuginfo-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-debug-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-tools-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-debuginfo-common-aarch64-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-modules-core-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-modules-extra-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch.rpm kernel-debuginfo-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-debug-modules-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-0:6.12.0-211.61.1.el10_2.aarch64.rpm

Rocky Linux 10 s390x - AppStream

kernel-zfcpdump-devel-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-zfcpdump-devel-matched-0:6.12.0-211.61.1.el10_2.s390x.rpm rv-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-doc-0:6.12.0-211.61.1.el10_2.noarch.rpm python3-perf-debuginfo-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-debug-devel-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-devel-0:6.12.0-211.61.1.el10_2.s390x.rpm python3-perf-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-devel-matched-0:6.12.0-211.61.1.el10_2.s390x.rpm perf-debuginfo-0:6.12.0-211.61.1.el10_2.s390x.rpm perf-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.s390x.rpm rtla-0:6.12.0-211.61.1.el10_2.s390x.rpm

Rocky Linux 10 ppc64le - AppStream

rtla-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-doc-0:6.12.0-211.61.1.el10_2.noarch.rpm kernel-debug-devel-0:6.12.0-211.61.1.el10_2.ppc64le.rpm rv-0:6.12.0-211.61.1.el10_2.ppc64le.rpm perf-debuginfo-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.ppc64le.rpm python3-perf-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-devel-0:6.12.0-211.61.1.el10_2.ppc64le.rpm python3-perf-debuginfo-0:6.12.0-211.61.1.el10_2.ppc64le.rpm kernel-devel-matched-0:6.12.0-211.61.1.el10_2.ppc64le.rpm perf-0:6.12.0-211.61.1.el10_2.ppc64le.rpm

Rocky Linux 10 x86_64 - AppStream

kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-doc-0:6.12.0-211.61.1.el10_2.noarch.rpm python3-perf-debuginfo-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64.rpm python3-perf-0:6.12.0-211.61.1.el10_2.x86_64.rpm perf-debuginfo-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64.rpm rv-0:6.12.0-211.61.1.el10_2.x86_64.rpm rtla-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64.rpm perf-0:6.12.0-211.61.1.el10_2.x86_64.rpm

Rocky Linux 10 aarch64 - AppStream

perf-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-debug-devel-matched-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-debug-devel-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-doc-0:6.12.0-211.61.1.el10_2.noarch.rpm perf-debuginfo-0:6.12.0-211.61.1.el10_2.aarch64.rpm python3-perf-debuginfo-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-debug-devel-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-devel-0:6.12.0-211.61.1.el10_2.aarch64.rpm python3-perf-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-devel-matched-0:6.12.0-211.61.1.el10_2.aarch64.rpm rv-0:6.12.0-211.61.1.el10_2.aarch64.rpm rtla-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-devel-matched-0:6.12.0-211.61.1.el10_2.aarch64.rpm kernel-64k-devel-0:6.12.0-211.61.1.el10_2.aarch64.rpm

Rocky Linux 10 s390x - BaseOS

kernel-modules-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-zfcpdump-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-zfcpdump-modules-extra-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-tools-debuginfo-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-debug-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-zfcpdump-modules-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-debug-debuginfo-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-zfcpdump-debuginfo-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-debug-modules-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-modules-core-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-debug-core-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-core-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-0:6.12.0-211.61.1.el10_2.src.rpm kernel-zfcpdump-core-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-debuginfo-common-s390x-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-tools-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-debuginfo-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch.rpm kernel-modules-extra-0:6.12.0-211.61.1.el10_2.s390x.rpm kernel-zfcpdump-modules-core-0:6.12.0-211.61.1.el10_2.s390x.rpm

Rocky Linux 10 x86_64 - BaseOS

kernel-core-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-debuginfo-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-tools-debuginfo-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-debug-debuginfo-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-0:6.12.0-211.61.1.el10_2.src.rpm kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-debuginfo-common-x86_64-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch.rpm kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64.rpm

Rocky Linux 10 x86_64 - NFV

kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debug-debuginfo-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debuginfo-0:6.12.0-211.61.1.el10_2.x86_64.rpm

Rocky Linux 10 x86_64 - RT

kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debug-debuginfo-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-rt-debuginfo-0:6.12.0-211.61.1.el10_2.x86_64.rpm

Rocky Linux 10 riscv64 - AppStream

kernel-doc-0:6.12.0-211.61.1.el10_2.noarch.rpm

Rocky Linux 10 x86_64 - CRB

libperf-0:6.12.0-211.61.1.el10_2.x86_64.rpm libperf-debuginfo-0:6.12.0-211.61.1.el10_2.x86_64.rpm kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64.rpm

Rocky Linux 10 s390x - CRB

libperf-0:6.12.0-211.61.1.el10_2.s390x.rpm libperf-debuginfo-0:6.12.0-211.61.1.el10_2.s390x.rpm

Rocky Linux 10 riscv64 - BaseOS

kernel-0:6.12.0-211.61.1.el10_2.src.rpm kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch.rpm