Moderate Kernel Security Update: Vulnerabilities in Rocky Linux Kernel Package
Summary
RLSA-2026:6053: Moderate: kernel security update. Affects kernel versions < 0:6.12.0-124.47.1.el10_1. Fixed in 0:6.12.0-124.47.1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel package is a fundamental component of the Rocky Linux operating system, serving as the core interface between the hardware and software. It manages system resources, hardware interactions, and provides essential services for all other software applications. The kernel is critical for system stability and security, making it vital to address any vulnerabilities that may arise.
Vulnerability Detail
The vulnerabilities identified in the kernel package include a privilege escalation or denial of service due to a use-after-free error in the nf_tables_addchain() function (CVE-2026-23231) and a double free vulnerability in the qla2xxx driver, which can lead to denial of service and potential privilege escalation (CVE-2025-71238). These vulnerabilities can allow an attacker to gain elevated privileges or disrupt system operations, posing significant risks to system integrity and security.
How To Fix
Minimum fixed version
0:6.12.0-124.47.1.el10_1
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users may consider limiting access to the affected functionalities or disabling certain kernel features until the update can be applied. However, the most effective solution is to apply the patch as soon as possible.
Conclusion
In summary, the kernel package in Rocky Linux has been identified with critical vulnerabilities that could lead to privilege escalation or denial of service. It is essential to update to the latest patched version to mitigate these risks. Users are encouraged to monitor their systems and apply updates promptly.
See every vulnerability recorded for kernel →
FAQ
The CVSS score for the vulnerabilities is 7.5, indicating a moderate severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The vulnerabilities can lead to privilege escalation, allowing unauthorized users to gain elevated access, or cause denial of service, disrupting system operations.
Continuing to use the affected kernel version poses security risks. It is strongly advised to update to the patched version as soon as possible.
The Rocky Enterprise Software Foundation and Red Hat are responsible for addressing these vulnerabilities through security updates and patches.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
