Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Linux Kernel Update Fixes Multiple Security Risks

published 3 months ago

Summary

This Linux kernel update addresses multiple security vulnerabilities that could allow an attacker to execute malicious code, read sensitive information, or cause a system crash. It is recommended to install the latest kernel update to ensure the security and stability of your Linux system.

What to do

Update rocky kernel to version 0:4.18.0-553.147.1.el8_10.cloud.0.1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Rocky Linux:8	rocky	kernel	< 0:4.18.0-553.147.1.el8_10.cloud.0.1 Fix: upgrade to 0:4.18.0-553.147.1.el8_10.cloud.0.1

Original advisory text

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)

* kernel: xfrm single-frag length not properly limited

* kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059)

* kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)

References

https://errata.rockylinux.org/RXSA-2026:45115 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2406712 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492277 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492437 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.0 High

Timeline

Published27 Jul 2026

Updated27 Jul 2026

First seen27 Jul 2026

Sources

RXSA-2026:45115 · OSV

Track software like this

Free during beta