kernel-rt security, bug fix, and enhancement update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

BIT-TOMCAT-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, from 9.0.42 through...

BIT-TOMCAT-2026-53434 Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector

Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue affects Apache Tomcat: from 11.0.0 through 11.0.22, from 10.1.0 through 10.1.55, from 9.0.83 through 9.0.118. Users are recommended to upgrade to version 11.0.23,...

RLSA-2026:61586 Moderate: tar security, bug fix, and enhancement update

The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fixes: tar: tar: Hidden file injection via crafted archives CVE-2026-5704 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape CVE-2026-18477 tar: tar:...

PT-2026-90217

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ring-buffer component. The ring buffer subbuf order set function can clear cpu buffer-free page without proper synchronization. To prevent races with ring...

PT-2026-90223

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/ucma component where the ucma write cm event function fails to acquire the handler lock. This allows ucma migrate id to change the ctx-file reference...

PT-2026-90480

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Rust implementation of the device resource management devres system. This occurs when two execution paths attempt to revoke a Devres concurrently: the driv...

CVE-2026-89461: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: synchronize work cancellation on suspend max17040work requeues itself after every poll. canceldelayedwork only cancels a pending instance and does not wait for a callback that is already running. If syste...

ROS-20260911-73-0095

The vulnerability of the DataTransfer component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTM...

ROS-20260911-73-0135

The vulnerability of the Updater component in the Google Chrome browser for MacOS operating systems is due to a race condition. Exploiting this vulnerability allows an attacker to bypass the sandboxing mechanism by using a specially created HTML page...

PT-2026-90007

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description A race condition in the document value layer allows concurrent server threads to operate on the same internal memory without synchronization, causing memory corruption. An authenticate...

PT-2026-90431

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the NFS localio component when the nfs uuid add file function races with nfs uuid put during the teardown of uuid-net. In this scenario, the system returns...

PT-2026-90482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pidfd ioctl function where PIDFD GET NAMESPACE ioctls perform a filesystem credentials ptrace access check without holding the target task's exec update lock. This...

CVE-2026-89503: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ringbufferallocreadpage ringbufferallocreadpage is racy with ringbuffersubbuforderset, it can allocate a reader page with an outdated order. This isn't a big issue, the user can still...

CVE-2026-89501: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpubuffer::lock when resizing a subbuf Because, ringbuffersubbuforderset can clear cpubuffer-freepage, hold cpubuffer-lock to prevent races with ringbufferallocreadpage and ringbufferfreereadpage...

CVE-2026-89520: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's picknexttask operates on all sibling rqs under one acquisition of the shared core-wide lock. A -picktask that releases the rq lock leaves every...

PT-2026-90062

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel within the virtio vsock implementation. The virtio vsock remove function stops virtqueues and flushes work items before freeing the...

PT-2026-90391

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the nfsd component during async copy cancel and shutdown operations. A race condition occurs between a teardown caller such as OFFLOAD CANCEL, nfsd4...

PT-2026-90420

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfsd copy file range function where the dst-f wb err value is sampled into the since variable after the copy loop. Because the nfsd file cache reuses a single file...

PT-2026-96474

In the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass after ptrace with TSYNC Sashiko review pointed out the following issue. If a thread is stopped in syscall trace enter for ptrace, another thread can install a seccomp filter with SECCOMP FILTER FLAG TSYN...