Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
Linux Kernel Update for Rocky Linux 9.4 and 9.8
published 2 months ago
Summary
This update fixes security issues and bugs in the Linux kernel, which could allow attackers to access sensitive information or cause system crashes. Affected systems should be updated to the latest kernel version to ensure security and stability. Users should apply this update as soon as possible.
What to do
- Update rocky kernel to version 0:5.14.0-687.36.1.el9_8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Rocky Linux:9 | rocky | kernel |
< 0:5.14.0-687.36.1.el9_8 Fix: upgrade to 0:5.14.0-687.36.1.el9_8
|
Original advisory text
Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415)
* kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)
Bug Fix(es) and Enhancement(s):
* kernel panics caused by NULL pointer dereferences within octeon_ep_vf [rhel-9.8.z] (JIRA:Rocky Linux-186331)
* [Rocky Linux 9.4] Kernel memory reclaim bug [rhel-9.8.z] (JIRA:Rocky Linux-211058)
* Bond network interface is not coming up with MTU 9000 while vPMEM is enabled [rhel-9.8.z] (JIRA:Rocky Linux-215575)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415)
* kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)
Bug Fix(es) and Enhancement(s):
* kernel panics caused by NULL pointer dereferences within octeon_ep_vf [rhel-9.8.z] (JIRA:Rocky Linux-186331)
* [Rocky Linux 9.4] Kernel memory reclaim bug [rhel-9.8.z] (JIRA:Rocky Linux-211058)
* Bond network interface is not coming up with MTU 9000 while vPMEM is enabled [rhel-9.8.z] (JIRA:Rocky Linux-215575)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://errata.rockylinux.org/RLSA-2026:51035 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2454320 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2468228 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published7 Aug 2026
Updated7 Aug 2026
First seen7 Aug 2026
Sources
RLSA-2026:51035 · OSV
Track software like this
Free during beta