Linux · Security advisory · June 27, 2026

RLSA-2026:30129: kernel security update

RLSA-2026:30129, released June 27, 2026, fixes 8 CVEs in kernel (version 0:6.12.0-211.28.1.el10_2). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
8
2 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0060
48th percentile

Priority of the 8 CVEs

Patch now 0 Urgent 2 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelrocky 100:6.12.0-211.28.1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-45898 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by remo... 9.8 0.0053 None reported
Urgent CVE-2026-31636 linux: In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix RESPONSE authenticator parser OOB rea... 9.1 0.0044 None reported
High CVE-2026-43414 scsi: qla2xxx: Completely fix fcport double free 9.8 0.0060 None reported
High CVE-2026-46135 nvmet-tcp: fix race between ICReq handling and queue teardown 9.8 0.0040 None reported
High CVE-2026-43198 tcp: fix potential race in tcp_v6_syn_recv_sock() 9.8 0.0030 None reported
High CVE-2026-43038 kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... 9.8 0.0026 None reported
High CVE-2026-46145 kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko point... 7.8 0.0015 None reported
High CVE-2026-46117 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in... 7.8 0.0014 None reported
Showing 1 to 8 of 8 1