Skip to content
Heist/ feed
UnratedFix available

Important: kernel security, bug fix, and enhancement update

Type: advisorySource: OSV1 source record

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CVE-2026-46076) * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942) * kernel: KVM: arm64: Reassign nested_mmus array behind mmu_lock (CVE-2026-46317) * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341) * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299) * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522) * kernel: perf: Reject exited events as group leaders (CVE-2026-74753) * kernel: nvme-tcp: reject a read that transferred too few bytes (CVE-2026-89480) * kernel: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (CVE-2026-89775) Bug Fix(es) and Enhancement(s): * KVM: s390: Limit adapter indicator access to mapped page [rhel-10.2.z] (JIRA:Rocky Linux-188661) * crypto: xxhash64 should not be fips approved [rhel-10.2.z] (JIRA:Rocky Linux-254943) * kata-tdx TD vCPU stuck at reset vector (EIP=0xFFF0) on Intel Xeon 6 (Granite Rapids / Sierra Forest) ? guest never executes. (10.2.z) (JIRA:Rocky Linux-260402) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) l

Announced Source revision 1
Original source ↗

RLSA-2026:72624

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:RLSA-2026:72624

kernel

Source reference: /affected/0/package/name

Affected versions
Not stated in this record
Fixed versions
0:6.12.0-211.61.1.el10_2

Source reference: /affected/0/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:6.12.0-211.61.1.el10_2"
          }
        ],
        "database_specific": {
          "yum_repository": "BaseOS"
        }
      }
    ],
    "package": {
      "name": "kernel",
      "purl": "pkg:rpm/rocky-linux/kernel?distro=rocky-linux-10&epoch=0",
      "ecosystem": "Rocky Linux:10"
    },
    "database_specific": {
      "source": "https://storage.googleapis.com/resf-osv-data/RLSA-2026:72624.json"
    }
  }
]

Publisher severity

No explicit severity was provided.

Event
#37672 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement