RXSA-2026:13565

Synopsis

Important: kernel security update

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)

* kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)

* kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)

* kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 SIG Cloud aarch64 Rocky Linux 9 SIG Cloud x86_64

Fixes

2439852 2448745 2454844 2460538 2467022

CVEs

CVE-2026-23136 CVE-2026-23270 CVE-2026-31402 CVE-2026-31431 CVE-2026-43077

Affected packages

Rocky Linux 9 SIG Cloud aarch64 - cloud-kernel

kernel-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-0:5.14.0-611.54.1.el9_7.cloud.1.0.src.rpm kernel-64k-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-core-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-debug-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-debug-core-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-debug-devel-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-debug-devel-matched-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-debug-modules-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-debug-modules-core-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-debug-modules-extra-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-devel-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-devel-matched-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-modules-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-modules-core-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-64k-modules-extra-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-abi-stablelists-0:5.14.0-611.54.1.el9_7.cloud.1.0.noarch.rpm kernel-core-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-debug-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-debug-core-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-debug-debuginfo-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-debug-devel-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-debug-devel-matched-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-debuginfo-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-debug-modules-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-debug-modules-core-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-debug-modules-extra-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-devel-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-devel-matched-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-doc-0:5.14.0-611.54.1.el9_7.cloud.1.0.noarch.rpm kernel-modules-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-modules-core-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-modules-extra-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-tools-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-tools-debuginfo-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-tools-libs-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm kernel-tools-libs-devel-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm perf-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm perf-debuginfo-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm python3-perf-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm python3-perf-debuginfo-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm rtla-0:5.14.0-611.54.1.el9_7.cloud.1.0.aarch64.rpm

Rocky Linux 9 SIG Cloud x86_64 - cloud-common

kernel-0:5.14.0-611.54.1.el9_7.cloud.1.0.src.rpm

Rocky Linux 9 SIG Cloud x86_64 - cloud-kernel

kernel-0:5.14.0-611.54.1.el9_7.cloud.1.0.src.rpm kernel-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-abi-stablelists-0:5.14.0-611.54.1.el9_7.cloud.1.0.noarch.rpm kernel-core-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-debug-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-debug-core-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-debug-debuginfo-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-debug-devel-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-debug-devel-matched-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-debuginfo-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-debug-modules-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-debug-modules-core-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-debug-modules-extra-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-devel-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-devel-matched-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-doc-0:5.14.0-611.54.1.el9_7.cloud.1.0.noarch.rpm kernel-modules-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-modules-core-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-modules-extra-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-tools-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-tools-debuginfo-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-tools-libs-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm kernel-tools-libs-devel-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm perf-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm perf-debuginfo-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm python3-perf-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm python3-perf-debuginfo-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm rtla-0:5.14.0-611.54.1.el9_7.cloud.1.0.x86_64.rpm

Rocky Linux 9 SIG Cloud aarch64 - cloud-common

kernel-0:5.14.0-611.54.1.el9_7.cloud.1.0.src.rpm