Issued at: 2026-11-05
Updated at: 2026-11-05
Advisory content derived from Red Hat RHSA-2026:95212, © Red Hat, Inc., used under CC BY 4.0, with modifications.
Synopsis
Important: kernel security, bug fix, and enhancement update
Description
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929)
* kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (CVE-2026-64541)
* kernel: sctp: clear new_transport when removing a peer (CVE-2026-74586)
* kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (CVE-2026-80864)
* kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (CVE-2026-80863)
* kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488)
Bug Fix(es) and Enhancement(s):
* Rocky Linux8.10 - s390/smp: Remove conditional emergency signal usage (JIRA:Rocky Linux-298849)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.