RLSA-2026:77690

Security

Mirrored from RHSA-2026:77690

Issued at: 2026-10-09

Updated at: 2026-10-09

Advisory content derived from Red Hat RHSA-2026:77690, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: kernel security, bug fix, and enhancement update

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)

* kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360)

* kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)

* kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398)

* kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)

* kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035)

* kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)

* kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317)

* kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)

* kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)

* kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690)

* kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669)

* kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)

* kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (CVE-2026-89676)

* kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663)

* kernel: nfsd: fix UAF in async copy cancel and shutdown (CVE-2026-89675)

Bug Fix(es) and Enhancement(s):

* mlxbf_bootctl: driver update to Linux v6.16 [Nvidia 10.2.z FEAT] (JIRA:Rocky Linux-212709)

* [GNR-D] missing interfaces tspll_cfg [rhel-10.2] (JIRA:Rocky Linux-273805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64

Rocky Linux 10 ppc64le

Rocky Linux 10 riscv64

Rocky Linux 10 s390x

Rocky Linux 10 x86_64

Fixes

2436771

2497032

2499742

2502222

2502411

2502476

2502593

2516705

2521498

2524431

2532103

2532111

2532218

2532219

2532231

2532272

CVEs

CVE-2026-23103

CVE-2026-53360

CVE-2026-53365

CVE-2026-53398

CVE-2026-63970

CVE-2026-64035

CVE-2026-64115

CVE-2026-72317

CVE-2026-74705

CVE-2026-74744

CVE-2026-89530

CVE-2026-89663

CVE-2026-89669

CVE-2026-89675

CVE-2026-89676

CVE-2026-89690

Affected packages

Rocky Linux 10 s390x - AppStream

rv-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-devel-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-doc-0:6.12.0-211.64.1.el10_2.noarch.rpm

python3-perf-debuginfo-0:6.12.0-211.64.1.el10_2.s390x.rpm

perf-debuginfo-0:6.12.0-211.64.1.el10_2.s390x.rpm

perf-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-debug-devel-matched-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-devel-matched-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-debug-devel-0:6.12.0-211.64.1.el10_2.s390x.rpm

python3-perf-0:6.12.0-211.64.1.el10_2.s390x.rpm

rtla-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-zfcpdump-devel-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-zfcpdump-devel-matched-0:6.12.0-211.64.1.el10_2.s390x.rpm

Rocky Linux 10 aarch64 - RT

kernel-rt-modules-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-debug-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-debuginfo-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-devel-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-debug-debuginfo-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-debug-modules-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-debug-modules-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-modules-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-modules-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-debug-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-debug-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-debug-modules-extra-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-debug-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-debug-modules-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-modules-extra-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-debug-debuginfo-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-modules-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-debug-modules-extra-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-debug-devel-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-modules-extra-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-debug-modules-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-debuginfo-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-64k-devel-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-rt-debug-devel-0:6.12.0-211.64.1.el10_2.aarch64.rpm

Rocky Linux 10 s390x - BaseOS

kernel-core-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-modules-extra-matched-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-zfcpdump-debuginfo-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-modules-extra-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-zfcpdump-modules-core-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-debuginfo-common-s390x-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-debug-modules-extra-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-debug-debuginfo-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-abi-stablelists-0:6.12.0-211.64.1.el10_2.noarch.rpm

kernel-zfcpdump-modules-extra-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-modules-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-debug-modules-core-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-modules-core-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-zfcpdump-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-zfcpdump-core-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-0:6.12.0-211.64.1.el10_2.src.rpm

kernel-zfcpdump-modules-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-debuginfo-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-tools-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-debug-core-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-debug-modules-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-debug-0:6.12.0-211.64.1.el10_2.s390x.rpm

kernel-tools-debuginfo-0:6.12.0-211.64.1.el10_2.s390x.rpm

Rocky Linux 10 aarch64 - BaseOS

kernel-tools-debuginfo-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-debug-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-debug-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-debug-modules-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-debug-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-debug-modules-extra-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-debug-debuginfo-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-debuginfo-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-debug-modules-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-tools-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-modules-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-abi-stablelists-0:6.12.0-211.64.1.el10_2.noarch.rpm

kernel-debug-modules-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-modules-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-debuginfo-common-aarch64-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-debug-modules-extra-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-modules-extra-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-tools-libs-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-0:6.12.0-211.64.1.el10_2.src.rpm

kernel-modules-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-debug-debuginfo-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-uki-virt-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-modules-extra-matched-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-uki-virt-addons-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-modules-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-modules-extra-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-debug-modules-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-debug-core-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-debuginfo-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-0:6.12.0-211.64.1.el10_2.aarch64.rpm

Rocky Linux 10 ppc64le - BaseOS

kernel-modules-extra-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-debug-modules-core-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-core-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-debug-modules-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-tools-libs-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-debug-modules-extra-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-modules-core-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-debuginfo-common-ppc64le-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-abi-stablelists-0:6.12.0-211.64.1.el10_2.noarch.rpm

kernel-tools-debuginfo-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-modules-extra-matched-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-0:6.12.0-211.64.1.el10_2.src.rpm

kernel-modules-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-tools-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-debug-debuginfo-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-debug-core-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-debuginfo-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-debug-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

Rocky Linux 10 x86_64 - NFV

kernel-rt-debug-modules-extra-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-core-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debug-devel-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-modules-extra-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debug-modules-core-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-modules-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-devel-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debug-core-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-modules-core-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debug-debuginfo-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debug-modules-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debug-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debuginfo-0:6.12.0-211.64.1.el10_2.x86_64.rpm

Rocky Linux 10 x86_64 - RT

kernel-rt-debug-modules-extra-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-devel-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-core-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debug-devel-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-modules-extra-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debug-modules-core-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-modules-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debug-core-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-modules-core-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debug-debuginfo-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debug-modules-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debug-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-rt-debuginfo-0:6.12.0-211.64.1.el10_2.x86_64.rpm

Rocky Linux 10 aarch64 - AppStream

kernel-devel-matched-0:6.12.0-211.64.1.el10_2.aarch64.rpm

python3-perf-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-debug-devel-matched-0:6.12.0-211.64.1.el10_2.aarch64.rpm

python3-perf-debuginfo-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-debug-devel-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-devel-matched-0:6.12.0-211.64.1.el10_2.aarch64.rpm

rtla-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-doc-0:6.12.0-211.64.1.el10_2.noarch.rpm

perf-debuginfo-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-devel-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-debug-devel-matched-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-devel-0:6.12.0-211.64.1.el10_2.aarch64.rpm

perf-0:6.12.0-211.64.1.el10_2.aarch64.rpm

rv-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-64k-debug-devel-0:6.12.0-211.64.1.el10_2.aarch64.rpm

Rocky Linux 10 ppc64le - AppStream

kernel-debug-devel-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

perf-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-doc-0:6.12.0-211.64.1.el10_2.noarch.rpm

rtla-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

python3-perf-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

perf-debuginfo-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

python3-perf-debuginfo-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-devel-matched-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-debug-devel-matched-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

rv-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-devel-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

Rocky Linux 10 x86_64 - BaseOS

kernel-uki-virt-addons-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-debuginfo-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-debug-modules-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-modules-extra-matched-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-debug-modules-extra-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-modules-core-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-debug-modules-core-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-abi-stablelists-0:6.12.0-211.64.1.el10_2.noarch.rpm

kernel-tools-libs-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-debug-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-debug-debuginfo-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-modules-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-debuginfo-common-x86_64-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-tools-debuginfo-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-0:6.12.0-211.64.1.el10_2.src.rpm

kernel-core-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-uki-virt-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-debug-core-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-debug-uki-virt-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-tools-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-modules-extra-0:6.12.0-211.64.1.el10_2.x86_64.rpm

Rocky Linux 10 ppc64le - CRB

libperf-debuginfo-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

libperf-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

kernel-tools-libs-devel-0:6.12.0-211.64.1.el10_2.ppc64le.rpm

Rocky Linux 10 x86_64 - AppStream

kernel-debug-devel-matched-0:6.12.0-211.64.1.el10_2.x86_64.rpm

rtla-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-doc-0:6.12.0-211.64.1.el10_2.noarch.rpm

kernel-debug-devel-0:6.12.0-211.64.1.el10_2.x86_64.rpm

perf-debuginfo-0:6.12.0-211.64.1.el10_2.x86_64.rpm

python3-perf-debuginfo-0:6.12.0-211.64.1.el10_2.x86_64.rpm

perf-0:6.12.0-211.64.1.el10_2.x86_64.rpm

python3-perf-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-devel-matched-0:6.12.0-211.64.1.el10_2.x86_64.rpm

rv-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-devel-0:6.12.0-211.64.1.el10_2.x86_64.rpm

Rocky Linux 10 x86_64 - CRB

libperf-debuginfo-0:6.12.0-211.64.1.el10_2.x86_64.rpm

kernel-tools-libs-devel-0:6.12.0-211.64.1.el10_2.x86_64.rpm

libperf-0:6.12.0-211.64.1.el10_2.x86_64.rpm

Rocky Linux 10 riscv64 - AppStream

kernel-doc-0:6.12.0-211.64.1.el10_2.noarch.rpm

Rocky Linux 10 riscv64 - BaseOS

kernel-abi-stablelists-0:6.12.0-211.64.1.el10_2.noarch.rpm

kernel-0:6.12.0-211.64.1.el10_2.src.rpm

Rocky Linux 10 s390x - CRB

libperf-debuginfo-0:6.12.0-211.64.1.el10_2.s390x.rpm

libperf-0:6.12.0-211.64.1.el10_2.s390x.rpm

Rocky Linux 10 aarch64 - CRB

libperf-debuginfo-0:6.12.0-211.64.1.el10_2.aarch64.rpm

kernel-tools-libs-devel-0:6.12.0-211.64.1.el10_2.aarch64.rpm

libperf-0:6.12.0-211.64.1.el10_2.aarch64.rpm