# RLSA-2026:64775: kernel security update

RLSA-2026:64775, released September 9, 2026, fixes 22 CVEs in kernel (version 0:6.12.0-211.52.1.el10_2). None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/rlsa-2026-64775
- Platform: Linux
- Released: Sep 9, 2026
- Priority: Urgent (Closes CVE-2026-64319, rated Critical)
- CVEs: 22, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://errata.rockylinux.org/RLSA-2026:64775

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | rocky 10 | 0:6.12.0-211.52.1.el10_2 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-64319](https://patchblox.com/security/data/cve/CVE-2026-64319.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet-auth: validate reply message payload bound... | 9.1 | 0.0056 |  |
| [CVE-2026-46266](https://patchblox.com/security/data/cve/CVE-2026-46266.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  inet: RAW sockets using IPPROTO_RAW MUST drop in... | 9.1 | 0.0047 |  |
| [CVE-2026-53075](https://patchblox.com/security/data/cve/CVE-2026-53075.md) | Urgent | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 |  |
| [CVE-2026-53228](https://patchblox.com/security/data/cve/CVE-2026-53228.md) | High | ipv6: sit: reload inner IPv6 header after GSO offloads | 9.8 | 0.0058 |  |
| [CVE-2026-63993](https://patchblox.com/security/data/cve/CVE-2026-63993.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after s... | 9.8 | 0.0051 |  |
| [CVE-2026-46306](https://patchblox.com/security/data/cve/CVE-2026-46306.md) | High | flow_dissector: do not dissect PPPoE PFC frames | 8.1 | 0.0045 |  |
| [CVE-2026-53235](https://patchblox.com/security/data/cve/CVE-2026-53235.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: add pskb_may_pull() to skb_gro_receive_list... | 7.8 | 0.0044 |  |
| [CVE-2026-64597](https://patchblox.com/security/data/cve/CVE-2026-64597.md) | High | smb: client: fix double-free in SMB2_close() replay | 9.8 | 0.0036 |  |
| [CVE-2025-38004](https://patchblox.com/security/data/cve/CVE-2025-38004.md) | High | can: bcm: add locking for bcm_op runtime updates | 7.8 | 0.0028 |  |
| [CVE-2026-53275](https://patchblox.com/security/data/cve/CVE-2026-53275.md) | High | ipv6: mcast: Fix use-after-free when processing MLD queries | 8.8 | 0.0026 |  |
| [CVE-2026-64287](https://patchblox.com/security/data/cve/CVE-2026-64287.md) | High | KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU | 8.2 | 0.0018 |  |
| [CVE-2026-64265](https://patchblox.com/security/data/cve/CVE-2026-64265.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fuse: clear intr_entry in fuse_resend and fuse_r... | 7.8 | 0.0017 |  |
| [CVE-2026-64563](https://patchblox.com/security/data/cve/CVE-2026-64563.md) | High | rhashtable: clear stale iter->p on table restart | 8.1 | 0.0017 |  |
| [CVE-2026-43339](https://patchblox.com/security/data/cve/CVE-2026-43339.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... | 8.1 | 0.0016 |  |
| [CVE-2026-52933](https://patchblox.com/security/data/cve/CVE-2026-52933.md) | High | io_uring/poll: fix signed comparison in io_poll_get_ownership() | 7.8 | 0.0015 |  |
| [CVE-2026-53223](https://patchblox.com/security/data/cve/CVE-2026-53223.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue sk... | 8.1 | 0.0014 |  |
| [CVE-2026-46015](https://patchblox.com/security/data/cve/CVE-2026-46015.md) | High | tcp: call sk_data_ready() after listener migration | 8.1 | 0.0014 |  |
| [CVE-2026-23442](https://patchblox.com/security/data/cve/CVE-2026-23442.md) | High | ipv6: add NULL checks for idev in SRv6 paths | 7.8 | 0.0013 |  |
| [CVE-2026-64002](https://patchblox.com/security/data/cve/CVE-2026-64002.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports... | 8.8 | 0.0013 |  |
| [CVE-2026-31503](https://patchblox.com/security/data/cve/CVE-2026-31503.md) | High | udp: Fix wildcard bind conflict check when using hash2 | 7.8 | 0.0013 |  |
| [CVE-2026-53259](https://patchblox.com/security/data/cve/CVE-2026-53259.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: anycast: insert aca into global hash under... | 7.8 | 0.0012 |  |
| [CVE-2026-53277](https://patchblox.com/security/data/cve/CVE-2026-53277.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table wal... | 8.8 | 0.0011 |  |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.