kernel security, bug fix, and enhancement update

4.18.0-553.158.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

RHEL 8 : kernel (RHSA-2026:59821)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59821 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sctp: purge outqueue on stale...

AlmaLinux 8 : kernel-rt (ALSA-2026:59737)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59737 advisory. kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64 decode...

CentOS 9 : kernel-5.14.0-741.el9

"The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-741.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing...

SUSE SLES15 Security Update : kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3689-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3689-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.13 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:3734-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3734-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes various security issues: The following security issues were fixed:...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_73-default / etc (SUSE-SU-2026:3704-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3704-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3710-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3710-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed:...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_65-default / etc (SUSE-SU-2026:3726-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3726-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.65 fixes various security issues: The following security issues were fixed: -...

ALSA-2026:59723 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ksm: use range-walk function to jump over holes in scangetnextrmapitem CVE-2025-68211 kernel: ip6tunnel: use skbvlaninetprepare in ip6tnlrcv CVE-2026-23003 kernel: netfilter:...

PT-2026-82132

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SCTP implementation where the COOKIE ECHO process restores fixed-size AUTH fields directly from peer-controlled cookie bytes when cookie authentication is disabled...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_70-default / etc (SUSE-SU-2026:3754-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3754-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.70 fixes various security issues: The following security issues were fixed: -...

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64...

SUSE SLES15 Security Update : kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3698-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3698-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: -...

ALSA-2026:59821 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64 decode CVE-2026-63886 kernel: netfilter: conntrack: tcp:...

Linux Distros Unpatched Vulnerability : CVE-2026-74752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIEECHO restores fixed-size AUTH fields directly from peer-controlled...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098739)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098739 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address list lengths in cookie sctpunpackcookie only...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098726 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctprcv A cloned head skb still shares these frag skbs in...

NPM: mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)

NPM: mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment RFC 9260 violation vulnerability discovered by ? in WordPress Npm mediasoup versions = 3.20.0, = 3.20.5...

CVE-2026-55663 mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)

mediasoup is a WebRTC video conferencing system. From version 3.20.0 until 3.20.6 for the npm package and from 0.22.0 until 0.22.5 for the Rust crate, mediasoup's built-in SCTP stack authenticates state cookies using only the hardcoded msworker and 0xAD81 magic values instead of a per-instance...