Critical Kernel Security Update for Rocky Linux: Important Vulnerabilities in Kernel Package
Summary
RLSA-2026:9264: Important: kernel security update. Affects kernel versions < 0:6.12.0-124.52.1.el10_1. Fixed in 0:6.12.0-124.52.1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel package is an essential component of the Rocky Linux operating system, serving as the core interface between the hardware and software. It manages system resources, facilitates communication between hardware and applications, and ensures system stability and security. Given its central role, vulnerabilities in the kernel can have severe implications, potentially allowing unauthorized access or system instability.
Vulnerability Detail
This vulnerability stems from two significant issues within the kernel package. The first issue (CVE-2025-39766) involves the net/sched subsystem, where the cake_enqueue function fails to return NET_XMIT_CN when the buffer limit is exceeded. This could lead to unexpected behavior in network traffic management. The second issue (CVE-2025-68741) relates to the improper freeing of a purex item in the qla2xxx SCSI driver, which could result in memory leaks or system crashes. Both vulnerabilities have a CVSS score of 7.3, indicating a high severity level that could lead to critical security breaches.
How To Fix
Minimum fixed version
0:6.12.0-124.52.1.el10_1
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for these vulnerabilities. The best course of action is to apply the security update as soon as it is available.
Conclusion
In summary, the kernel vulnerabilities identified in the Rocky Linux package pose significant risks to system security and stability. It is imperative to update to the latest patched version to mitigate these risks effectively. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities in your software.
See every vulnerability recorded for kernel →
FAQ
These vulnerabilities could potentially allow unauthorized access to system resources, leading to data breaches or system instability.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
The CVSS score for these vulnerabilities is 7.3, indicating a high severity level.
Delaying the update is not recommended, as it may expose your system to potential security risks.
If immediate updates are not possible, ensure that your system is monitored for unusual activity and consider implementing additional security measures.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
