RLSA-2026:87375: Rocky Linux 8 kernel security update addresses multiple flaws
Summary
RLSA-2026:87375: Multiple kernel security flaws can allow local attackers to compromise confidentiality, integrity, and availability through affected kernel components. Affects kernel versions < 0:4.18.0-553.177.1.el8_10. Fixed in 0:4.18.0-553.177.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel package for the Rocky Linux:8 ecosystem provides the Linux kernel, the core of the operating system. It manages system resources and provides interfaces between hardware and software. Kernel packages are used across Rocky Linux systems to support processes, memory, networking, filesystems, and device drivers.
Vulnerability Detail
The flaws can affect confidentiality, integrity, and availability when a local attacker with low privileges triggers vulnerable kernel behavior. The issues span IPv4 raw packet handling and fragmentation, FUSE request locking, IPv4 route insertion, ALSA queue timer cleanup, XFS log-item bitmap bounds checking, and VFIO PCI initialization cleanup. The advisory lists seven related CVEs; individual impact details are not published in the supplied record.
How To Fix
Minimum fixed version
0:4.18.0-553.177.1.el8_10
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
AI-generated workaround (not vendor-documented): Restrict local access to affected Rocky Linux:8 systems and limit untrusted users' ability to run workloads that exercise kernel networking, filesystem, audio, or device features. This reduces exposure but does not replace applying the fixed kernel version.
Conclusion
Upgrade the Rocky Linux:8 kernel to the minimum fixed version, 0:4.18.0-553.177.1.el8_10. The advisory covers multiple kernel components, and the supplied record does not provide a package-specific upgrade command. Apply the fixed version through your established system update process. Vulert monitors the dependencies in a manifest file like package-lock.json and alerts when a new vulnerability affects them; check an application at https://vulert.com/scanner.
See every vulnerability recorded for kernel →
FAQ
The kernel is affected from the beginning of the ecosystem range until 0:4.18.0-553.177.1.el8_10.
The kernel flaws can compromise confidentiality, integrity, and availability when triggered by a local attacker with low privileges.
The minimum fixed kernel version is 0:4.18.0-553.177.1.el8_10; the supplied input includes no upgrade command.
Restrict local access and limit untrusted users' ability to exercise affected kernel features until the fixed version can be applied.
Manually inspect the system's installed kernel package and version. Vulert can scan a manifest or SBOM and monitor the dependency at Vulert Scanner.
References
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
