RLSA-2026:95212

Dashboard / Vulnerabilities / RLSA-2026:95212

RLSA-2026:95212

Summary: Important: kernel security, bug fix, and enhancement update

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929) * kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (CVE-2026-64541) * kernel: sctp: clear new_transport when removing a peer (CVE-2026-74586) * kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (CVE-2026-80864) * kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (CVE-2026-80863) * kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488) Bug Fix(es) and Enhancement(s): * Rocky Linux8.10 - s390/smp: Remove conditional emergency signal usage (JIRA:Rocky Linux-298849) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://errata.rockylinux.org/RLSA-2026:95212, https://bugzilla.redhat.com/show_bug.cgi?id=2492108, https://bugzilla.redhat.com/show_bug.cgi?id=2507721, https://bugzilla.redhat.com/show_bug.cgi?id=2521419, https://bugzilla.redhat.com/show_bug.cgi?id=2528646, https://bugzilla.redhat.com/show_bug.cgi?id=2528665, https://bugzilla.redhat.com/show_bug.cgi?id=2532407, https://access.redhat.com/errata/RHSA-2026:95212