Issued at: 2026-10-31
Updated at: 2026-10-31
Advisory content derived from Red Hat RHSA-2026:92209, © Red Hat, Inc., used under CC BY 4.0, with modifications.
Synopsis
Important: kernel security, bug fix, and enhancement update
Description
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288)
* kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289)
* kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)
* kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222)
Bug Fix(es) and Enhancement(s):
* ipv4: ip_gre: make ipgre_header() robust (rhel-8.10.z) (JIRA:Rocky Linux-271135)
* ip6_gre: make ip6gre_header() robust (rhel-8.10.z) (JIRA:Rocky Linux-271136)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.