Moderate Kernel Security Update: Rocky Linux Kernel Vulnerabilities
Summary
RLSA-2026:6632: Moderate: kernel security update. Affects kernel versions < 0:6.12.0-124.49.1.el10_1. Fixed in 0:6.12.0-124.49.1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel package is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. In Rocky Linux 10, the kernel is crucial for system stability and performance. However, recent vulnerabilities have been identified that could compromise system security and functionality.
Vulnerability Detail
The vulnerabilities in the Rocky Linux kernel include a use-after-free issue in the ECVF vports unload process, leading to denial of service (CVE-2025-38109). Additionally, there are local denial of service and memory leak vulnerabilities in the DAMON sysfs (CVE-2026-23144), and a use-after-free in the bonding module that could result in system crashes or arbitrary code execution (CVE-2026-23171). Other vulnerabilities include a use-after-free in the iscsi target, error recovery issues in the macvlan module, and potential memory corruption in the net/sched subsystem. These vulnerabilities could allow attackers to exploit the system, leading to crashes, data leaks, or unauthorized access.
How To Fix
Minimum fixed version
0:6.12.0-124.49.1.el10_1
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to vulnerable components or disable specific features that may be exploited until the kernel is updated. However, this is not a permanent solution and should only be used until the patch is applied.
Conclusion
In summary, the recent vulnerabilities in the Rocky Linux kernel pose serious security risks that could lead to system instability and unauthorized access. It is crucial to update to the patched version to mitigate these risks. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for kernel →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to arbitrary code execution or crashes.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
The vulnerabilities could lead to system crashes, unauthorized access, data leaks, and denial of service, compromising the overall security and functionality of the system.
It is not recommended to continue using the affected kernel version, as it poses significant security risks. Updating to the patched version is essential for maintaining system security.
If you encounter issues after updating the kernel, you can revert to the previous kernel version using the GRUB menu during boot. It's advisable to back up your data before making any changes.
References
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
