Skip to content
Heist/ feed
HighFix available

Moderate: kernel security, bug fix, and enhancement update

Type: advisorySource: OSV1 source record

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856) * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794) * kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775) Bug Fix(es) and Enhancement(s): * Backport of protocol attribute to IP addresses (IFA_PROTO) [rhel-9.8.z] (JIRA:Rocky Linux-169936) * try_charge_memcg() refactor in kernel 5.14.0-687.36.1 causes premature memcg OOM with GiB of clean page cache present [rhel-9.8.z] (JIRA:Rocky Linux-269060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Announced Source revision 1
Original source ↗

RLSA-2026:74438

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:RLSA-2026:74438

kernel

Source reference: /affected/0/package/name

Affected versions
Not stated in this record
Fixed versions
0:5.14.0-687.54.1.el9_8

Source reference: /affected/0/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:5.14.0-687.54.1.el9_8"
          }
        ],
        "database_specific": {
          "yum_repository": "BaseOS"
        }
      }
    ],
    "package": {
      "name": "kernel",
      "purl": "pkg:rpm/rocky-linux/kernel?distro=rocky-linux-9&epoch=0",
      "ecosystem": "Rocky Linux:9"
    },
    "database_specific": {
      "source": "https://storage.googleapis.com/resf-osv-data/RLSA-2026:74438.json"
    }
  }
]
Related CVEs
CVE-2026-45856

Source reference: /upstream

CVE-2026-63794

Source reference: /upstream

CVE-2026-80775

Source reference: /upstream

Publisher severity

high

Source reference: /severity/0/score

Linked CVE context

These ratings describe the referenced vulnerabilities and products. They are not a severity rating for every application using this dependency.

CVE-2026-45856 · High

Linux, Linux

Event
#75218 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement