Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:38492

Опубликовано: 14 июл. 2026
Источник: rocky
Оценка: Important

Описание

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

  • kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499)

  • kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 10

НаименованиеАрхитектураРелизRPM
kernel-64k-debugaarch64211.33.1.el10_2kernel-64k-debug-6.12.0-211.33.1.el10_2.aarch64.rpm
kernel-debug-coreaarch64211.33.1.el10_2kernel-debug-core-6.12.0-211.33.1.el10_2.aarch64.rpm
kernel-uki-virt-addonsaarch64211.33.1.el10_2kernel-uki-virt-addons-6.12.0-211.33.1.el10_2.aarch64.rpm
kernel-debug-modules-extraaarch64211.33.1.el10_2kernel-debug-modules-extra-6.12.0-211.33.1.el10_2.aarch64.rpm
kernelaarch64211.33.1.el10_2kernel-6.12.0-211.33.1.el10_2.aarch64.rpm
kernel-modules-coreaarch64211.33.1.el10_2kernel-modules-core-6.12.0-211.33.1.el10_2.aarch64.rpm
kernel-uki-virtaarch64211.33.1.el10_2kernel-uki-virt-6.12.0-211.33.1.el10_2.aarch64.rpm
kernel-debug-modulesaarch64211.33.1.el10_2kernel-debug-modules-6.12.0-211.33.1.el10_2.aarch64.rpm
kernel-64k-modules-extraaarch64211.33.1.el10_2kernel-64k-modules-extra-6.12.0-211.33.1.el10_2.aarch64.rpm
kernel-64k-coreaarch64211.33.1.el10_2kernel-64k-core-6.12.0-211.33.1.el10_2.aarch64.rpm

Показывать по

Связанные уязвимости

oracle-oval
27 дней назад

ELSA-2026-38492: kernel security update (IMPORTANT)

CVSS3: 4.7
ubuntu
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resize race A General Protection Fault occurs in write_page() during array resize: RIP: 0010:write_page+0x22b/0x3c0 [md_mod] This is a use-after-free race between bitmap_daemon_work() and __bitmap_resize(). The daemon iterates over `bitmap->storage.filemap` without locking, while the resize path frees that storage via md_bitmap_file_unmap(). `quiesce()` does not stop the md thread, allowing concurrent access to freed pages. Fix by holding `mddev->bitmap_info.mutex` during the bitmap update.

CVSS3: 4.7
redhat
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resize race A General Protection Fault occurs in write_page() during array resize: RIP: 0010:write_page+0x22b/0x3c0 [md_mod] This is a use-after-free race between bitmap_daemon_work() and __bitmap_resize(). The daemon iterates over `bitmap->storage.filemap` without locking, while the resize path frees that storage via md_bitmap_file_unmap(). `quiesce()` does not stop the md thread, allowing concurrent access to freed pages. Fix by holding `mddev->bitmap_info.mutex` during the bitmap update.

CVSS3: 4.7
nvd
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resize race A General Protection Fault occurs in write_page() during array resize: RIP: 0010:write_page+0x22b/0x3c0 [md_mod] This is a use-after-free race between bitmap_daemon_work() and __bitmap_resize(). The daemon iterates over `bitmap->storage.filemap` without locking, while the resize path frees that storage via md_bitmap_file_unmap(). `quiesce()` does not stop the md thread, allowing concurrent access to freed pages. Fix by holding `mddev->bitmap_info.mutex` during the bitmap update.

CVSS3: 4.7
debian
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: m ...