Issued at: 2026-10-24
Updated at: 2026-10-24
Advisory content derived from Red Hat RHSA-2026:87805, © Red Hat, Inc., used under CC BY 4.0, with modifications.
Synopsis
Important: kernel security, bug fix, and enhancement update
Description
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CVE-2025-22063)
* kernel: calipso: Don't call calipso functions for AF_INET sk. (CVE-2025-38147)
* kernel: ALSA: hda/cs35l41: Fix firmware load work teardown (CVE-2026-64481)
* kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202)
* kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)
* kernel: ovl: check access to copy_file_range source with src mounter creds (CVE-2026-68448)
* kernel: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CVE-2026-80530)
* kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536)
Bug Fix(es) and Enhancement(s):
* RTLA segfaults on freed memory access on double SIGINT [rhel-9.8.z] (JIRA:Rocky Linux-193029)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.