RLSA-2026:92209

Dashboard / Vulnerabilities / RLSA-2026:92209

RLSA-2026:92209

Summary: Important: kernel security, bug fix, and enhancement update

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288) * kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289) * kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011) * kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222) Bug Fix(es) and Enhancement(s): * ipv4: ip_gre: make ipgre_header() robust (rhel-8.10.z) (JIRA:Rocky Linux-271135) * ip6_gre: make ip6gre_header() robust (rhel-8.10.z) (JIRA:Rocky Linux-271136) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://errata.rockylinux.org/RLSA-2026:92209, https://bugzilla.redhat.com/show_bug.cgi?id=2516526, https://bugzilla.redhat.com/show_bug.cgi?id=2516657, https://bugzilla.redhat.com/show_bug.cgi?id=2535227, https://bugzilla.redhat.com/show_bug.cgi?id=2546385, https://access.redhat.com/errata/RHSA-2026:92209