Rocky Linux 8.6 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc (ciqsa-2026_1678)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261678 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 8.6 Compliant. It addresses 1 CVE: CVE-2026-46333. Tenable has extracted the preceding...

PT-2026-122013

In the Linux kernel, the following vulnerability has been resolved: dm: fix reading free memory in do resume When do resume calls dm table get modenew map, the call is done without holding any locks it only holds a reference to the md. It may be possible that another concurrent ioctl on the same...

PT-2026-121990

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Reject concurrent BIS listener setup iso sock listen drops the socket lock before calling iso listen bis to preserve the hdev-lock ordering. Two concurrent listen calls on the same broadcast socket can therefore...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 6.19 through 7.2. It stems from ext4’s failure to disable large folios on encrypted inodes; enabling the encrypt feature after mounting can bypass this check. Writing encrypted data may result in a null pointer dereference and a kernel cras...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because the vb2videounregisterdevice function is not utilized when removing the video-i2c driver; as a result, the vb2 queue may fail to disconnect properly before...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.0; it arises when performing a Store Status operation while holding a spinlock, potentially writing to user space and causing a crash...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.8. It arises when the mt7915e module responsible for MT7916 is uninstalled without first disabling the rx napi prior to terminating it; this may lead to system instability...

PT-2026-121915

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Clean up locking This cleans up several issues with locking behavior, including RCU accesses not being guarded behind a lock...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.8. It stems from pvrvmgpuvaremap within drm/imagination failing to release GEM references obtained from split parts when remapping occurs. These split parts are then incorrectly linked to vmbo of a new object, resulting in reference leaks...

PT-2026-122004

In the Linux kernel, the following vulnerability has been resolved: net: team: stop reusing skb after queue override A nonzero dev queue xmit result does not return ownership of the skb. When an override port's qdisc drops it, the queue override helper used to try another port or the mode transmi...

PT-2026-121872

In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bm seq comparison wrap-safe Once the 32-bit seq wraps, a newer bm seq can look smaller than old, so .. covert to wrap-safe calculate way...

PT-2026-121930

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: account non-AQL frames per peer rather than per link The driver increments wcid-non aql packets when a frame goes to the hardware queue. The completion path decrements the counter again. For an MLO peer, the hardware...

PT-2026-121996

In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices ch readconfig looks up the scsi device of every data transfer element whose SCSI id the changer reports in READ ELEMENT STATUS, and stores it in ch-dt. scsi device...

PT-2026-121904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the EDAC/altera component. In the altr edac a10 device add and altr portb setup functions, the error path frees the dci structure before releasing the...

PT-2026-122050

In the Linux kernel, the following vulnerability has been resolved: ipv4: stop exception dump when nexthop group shrinks Commit 4ce5dc9316de "inet: switch inet dump fib to RCU protection" allowed IPv4 FIB dumps to run concurrently with nexthop replacement. fib dump info fnhe uses fib info num pat...

PT-2026-121911

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Drop unnecessary PMD page copy when freeing On a box with a discrete GPU, lockdep reports a possible deadlock as soon as kswapd shrinks the TTM page pool. The immediate cause is an x86 commit that added an mmap read lock ...

PT-2026-121845

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102 gsp oneinit, the booter constructor needs device-sec2 to access the SEC2 falcon. Without the .sec2 entr...

PT-2026-121842

In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG on unknown typed-extent type vxfs bmap typed handles four typed-extent types and calls BUG in its default case, so an on-disk typed extent with any other type value crashes the kernel. It is reachable from...

PT-2026-121865

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/mlx5 HWS component where deleting a table that has a miss table created via the mlx5hws table set default miss function does not properly remove the table from...

PT-2026-121897

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copied seq double-counting When a BPF stream verdict program redirects an skb back to the same socket self-redirect with BPF F INGRESS, sk psock verdict apply calls tcp eat skb which advances tcp...