Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:39494

Опубликовано: 15 июл. 2026
Источник: rocky
Оценка: Important

Описание

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)

  • kernel: XFS data corruption using reflink ()

Bug Fix(es) and Enhancement(s):

  • [Exploits (KEV)] kernel: XFS data corruption using reflink [rhel-10.2.z] (JIRA:Rocky Linux-193945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 10

НаименованиеАрхитектураРелизRPM
kernel-modules-extra-matchedaarch64211.34.1.el10_2kernel-modules-extra-matched-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-64k-debug-modulesaarch64211.34.1.el10_2kernel-64k-debug-modules-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-64k-coreaarch64211.34.1.el10_2kernel-64k-core-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-64k-debug-modules-extraaarch64211.34.1.el10_2kernel-64k-debug-modules-extra-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-toolsaarch64211.34.1.el10_2kernel-tools-6.12.0-211.34.1.el10_2.aarch64.rpm
kernelaarch64211.34.1.el10_2kernel-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-64k-modules-coreaarch64211.34.1.el10_2kernel-64k-modules-core-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-modules-extraaarch64211.34.1.el10_2kernel-modules-extra-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-debug-coreaarch64211.34.1.el10_2kernel-debug-core-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-debug-modules-coreaarch64211.34.1.el10_2kernel-debug-modules-core-6.12.0-211.34.1.el10_2.aarch64.rpm

Показывать по

Связанные CVE

Связанные уязвимости

oracle-oval
около 2 месяцев назад

ELSA-2026-39494: kernel security, bug fix, and enhancement update (IMPORTANT)

CVSS3: 7.8
ubuntu
3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer. Use crypto_skcipher_ivsize() to copy only the algorithm's IV length.

CVSS3: 7
redhat
3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer. Use crypto_skcipher_ivsize() to copy only the algorithm's IV length.

CVSS3: 7.8
nvd
3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer. Use crypto_skcipher_ivsize() to copy only the algorithm's IV length.

msrc
3 месяца назад

crypto: ccp - copy IV using skcipher ivsize