Critical Security Update for Kernel Package: Addressing TOCTOU and Hash Offset Vulnerabilities
Summary
ALSA-2026:75576: Important: kernel security, bug fix, and enhancement update. Affects kernel versions < 6.12.0-211.62.1.el10_2. Fixed in 6.12.0-211.62.1.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel package is a fundamental component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential services such as process management, memory management, and device control. The kernel's stability and security are paramount, as vulnerabilities can lead to system crashes, unauthorized access, and data breaches. The recent vulnerabilities identified in the kernel package highlight critical issues that need immediate attention.
Vulnerability Detail
The vulnerabilities identified in the kernel package include a Time-of-Check to Time-of-Use (TOCTOU) issue related to the mana network driver, which allows an attacker to exploit a double-fetch of the hwc_msg_id from a Direct Memory Access (DMA) buffer (CVE-2026-64034). Additionally, a flaw in the dm-integrity subsystem could lead to incorrect hash offsets being incremented twice (CVE-2026-72099). These vulnerabilities can potentially allow attackers to manipulate memory and gain unauthorized access to sensitive data, posing significant risks to system integrity and security.
How To Fix
Minimum fixed version
6.12.0-211.62.1.el10_2
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected components or disable the mana network driver until the kernel is updated. This can be done by blacklisting the driver in the system configuration.
Conclusion
The vulnerabilities identified in the kernel package represent significant security risks that require immediate attention. By updating to the latest patched version, users can protect their systems from potential exploitation. Utilizing tools like Vulert can further enhance security by providing real-time monitoring for open-source vulnerabilities.
See every vulnerability recorded for kernel →
FAQ
The TOCTOU vulnerability can allow attackers to exploit timing issues, potentially leading to unauthorized access to system resources and sensitive data.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If immediate updates are not possible, consider implementing temporary workarounds such as limiting access to the affected components or disabling the mana network driver.
While specific exploits may not be publicly available, the nature of the vulnerabilities suggests that they could be exploited by attackers with sufficient knowledge of the system.
It is advisable to regularly check for kernel updates and security patches, ideally on a weekly basis, to ensure your system remains secure.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
