RockyLinux 8 : kernel (RLSA-2026:77498)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:77498 advisory. kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send...

RockyLinux 8 : kernel-rt (RLSA-2026:77500)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:77500 advisory. kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send...

Oracle Linux 10 : kernel (ELSA-2026-77690)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77690 advisory. - udp: fix potential use-after-free in tunnel segmentation Antoine Tenart RHEL-268127 CVE-2026-74705 - nfsd: defer vfree of compound ops to fix...

Oracle Linux 9 : kernel (ELSA-2026-83156)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83156 advisory. - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry Jan Polensky RHEL-271472 CVE-2026-80985 - net/smc: bound the peer rkey counts in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: svcrdma: Fixed offset arithmetic in readchunkrange The svcrdmareadchunkrange function iterates through the segment list of a Read chunk to create a sub-range starting at the byte offset and spanning length bytes for a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: svcrdma: Fixed pclforeachsegment for empty chunks. When a parsed chunk list contains a chunk whose chsegcount is zero, pclforeachsegment calculates its inclusive upper bound as &chunk-chsegmentschsegcount - 1. Since chsegcount...

kernel: svcrdma: Validate Read chunk positions before reconstruction

A flaw was found in the svcrdma component of the Linux kernel. A remote attacker can exploit this vulnerability by supplying a crafted RPC/RDMA Read chunk position field that is not properly validated against the received inline body length. This can lead to an underflow, exposing adjacent slab...

kernel: svcrdma: Reject Write/Reply chunks with segcount 0

A flaw was found in the Linux kernel's Remote Procedure Call over Remote Direct Memory Access RPC-over-RDMA server component svcrdma. A remote peer can exploit this issue by transmitting a malformed Write or Reply chunk with a segment count of zero. Because the kernel fails to validate that the...

kernel security, bug fix, and enhancement update

4.18.0-553.174.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

MiracleLinux 8 : kernel-4.18.0-553.172.1.el8_10 (AXSA:2026-2054:100)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2054:100 advisory. kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring se...

kernel: svcrdma: Reject Write/Reply chunks with segcount 0

A flaw was found in the Linux kernel's Remote Procedure Call over Remote Direct Memory Access RPC-over-RDMA server component svcrdma. A remote peer can exploit this issue by transmitting a malformed Write or Reply chunk with a segment count of zero. Because the kernel fails to validate that the...

kernel: svcrdma: Validate Read chunk positions before reconstruction

A flaw was found in the svcrdma component of the Linux kernel. A remote attacker can exploit this vulnerability by supplying a crafted RPC/RDMA Read chunk position field that is not properly validated against the received inline body length. This can lead to an underflow, exposing adjacent slab...

kernel: svcrdma: Validate Read chunk positions before reconstruction

A flaw was found in the svcrdma component of the Linux kernel. A remote attacker can exploit this vulnerability by supplying a crafted RPC/RDMA Read chunk position field that is not properly validated against the received inline body length. This can lead to an underflow, exposing adjacent slab...

kernel: svcrdma: Reject Write/Reply chunks with segcount 0

A flaw was found in the Linux kernel's Remote Procedure Call over Remote Direct Memory Access RPC-over-RDMA server component svcrdma. A remote peer can exploit this issue by transmitting a malformed Write or Reply chunk with a segment count of zero. Because the kernel fails to validate that the...

kernel: svcrdma: Validate Read chunk positions before reconstruction

A flaw was found in the svcrdma component of the Linux kernel. A remote attacker can exploit this vulnerability by supplying a crafted RPC/RDMA Read chunk position field that is not properly validated against the received inline body length. This can lead to an underflow, exposing adjacent slab...

kernel: svcrdma: Reject Write/Reply chunks with segcount 0

A flaw was found in the Linux kernel's Remote Procedure Call over Remote Direct Memory Access RPC-over-RDMA server component svcrdma. A remote peer can exploit this issue by transmitting a malformed Write or Reply chunk with a segment count of zero. Because the kernel fails to validate that the...

Oracle Linux 9 : kernel (ELSA-2026-77689)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77689 advisory. - nfsd: defer vfree of compound ops to fix rpcstatus UAF Roberto Bergantinos Corpas RHEL-264950 CVE-2026-89690 - svcrdma: Reject inline replies that...

Oracle Linux 9 : kernel (ELSA-2026-76739)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76739 advisory. - nfsd: defer vfree of compound ops to fix rpcstatus UAF Roberto Bergantinos Corpas RHEL-264950 CVE-2026-89690 - svcrdma: Reject inline replies that...

Oracle Linux 8 : kernel (ELSA-2026-77498)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77498 advisory. - svcrdma: Reject inline replies that overflow the pull-up buffer Roberto Bergantinos Corpas RHEL-187743 CVE-2026-89530 - packet: use consistent...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_77500)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202677500 advisory. kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send path...