Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Rocky Linux kernel could be exploited for code execution
published 26 days ago
Summary
The core part of Rocky Linux, the kernel, contains several bugs that could let an attacker cause a system crash or run unauthorized code. These problems affect network communication components and can be triggered during normal operations. Apply the latest kernel update as soon as possible to protect your systems.
What to do
- Update rocky kernel to version 0:4.18.0-553.172.1.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Rocky Linux:8 | rocky | kernel |
< 0:4.18.0-553.172.1.el8_10 Fix: upgrade to 0:4.18.0-553.172.1.el8_10
|
Original advisory text
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)
* kernel: packet: use consistent hard_header_len in non-ring send paths ()
* kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582)
* kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115)
* kernel: packet: use consistent hard_header_len in non-ring send paths ()
* kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582)
* kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://errata.rockylinux.org/RLSA-2026:77498 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2502593 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2519475 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2532218 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:77498 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published9 Oct 2026
Updated9 Oct 2026
First seen9 Oct 2026
Sources
RLSA-2026:77498 · OSV
Track software like this
Free during beta