Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
Linux Kernel Update Fixes Multiple Security Risks
published 4 months ago
Summary
This update addresses multiple security issues in the Linux kernel, including potential use-after-free vulnerabilities, out-of-bounds reads, and double frees. These issues could allow an attacker to gain unauthorized access or disrupt system services. It is recommended to apply this update to ensure the security and stability of your system.
What to do
- Update rocky kernel to version 0:4.18.0-553.132.1.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Rocky Linux:8 | rocky | kernel |
< 0:4.18.0-553.132.1.el8_10 Fix: upgrade to 0:4.18.0-553.132.1.el8_10
|
Original advisory text
Critical: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858)
* kernel: smc: Fix use-after-free in tcp_write_timer_handler() (CVE-2023-53781)
* kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
* kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)
* kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)
* kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
* kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)
* kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
* kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)
* kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)
* kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)
* kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* kernel: geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858)
* kernel: smc: Fix use-after-free in tcp_write_timer_handler() (CVE-2023-53781)
* kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
* kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)
* kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)
* kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
* kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)
* kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
* kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)
* kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)
* kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)
* kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://errata.rockylinux.org/RLSA-2026:25121 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2351619 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2420279 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2424881 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2432389 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2432400 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2451218 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2461471 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2461480 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2464351 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2464397 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2467234 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2482166 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2482532 Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published12 Jun 2026
Updated12 Jun 2026
First seen12 Jun 2026
Sources
RLSA-2026:25121 · OSV
Track software like this
Free during beta