Linux · Security advisory · September 2, 2026

RLSA-2026:61887: kernel security update

RLSA-2026:61887, released September 2, 2026, fixes 34 CVEs in kernel (version 0:6.12.0-211.50.1.el10_2). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
34
5 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0080
56th percentile

Priority of the 34 CVEs

Patch now 0 Urgent 5 High 29 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelrocky 100:6.12.0-211.50.1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-72130 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers n... 9.8 0.0080 None reported
Urgent CVE-2026-72069 linux: In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in... 9.8 0.0073 None reported
Urgent CVE-2026-63800 pNFS: Fix use-after-free in pnfs_update_layout() 9.8 0.0064 None reported
Urgent CVE-2026-68166 userfaultfd: prevent registration of special VMAs 9.8 0.0021 None reported
Urgent CVE-2026-53053 iommu/amd: Fix clone_alias() to use the original device's devid 9.8 0.0013 None reported
High CVE-2026-64320 nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page 9.1 0.0080 None reported
High CVE-2026-53399 nfsd: release layout stid on setlease failure 9.8 0.0066 None reported
High CVE-2026-23003 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k... 8.8 0.0055 None reported
High CVE-2026-53392 NFSv4/flexfiles: reject zero filehandle version count 8.8 0.0053 None reported
High CVE-2026-53397 nfsd: fix posix_acl leak on SETACL decode failure 8.8 0.0053 None reported
High CVE-2026-53391 NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr 8.8 0.0052 None reported
High CVE-2026-64384 smb: client: fix change notify replay double-free 9.8 0.0046 None reported
High CVE-2026-53026 kernel: In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in nfsd4_a... 8.8 0.0043 None reported
High CVE-2026-64136 kernel: In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_f... 9.8 0.0041 None reported
High CVE-2026-53196 USB: serial: io_ti: fix heap overflow in get_manuf_info() 8.8 0.0027 None reported
High CVE-2026-68480 x86/bugs: Make Safe-RET robust against interrupt injection 8.8 0.0023 None reported
High CVE-2026-64490 linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the... 8.8 0.0019 None reported
High CVE-2025-21834 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0018 None reported
High CVE-2026-64276 Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count 8.8 0.0017 None reported
High CVE-2026-64277 Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count 8.8 0.0017 None reported
High CVE-2026-64304 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths... 8.8 0.0017 None reported
High CVE-2026-68086 mm/khugepaged: write all dirty file folios when collapsing 8.8 0.0015 None reported
High CVE-2026-64298 NFSv4: include MAY_WRITE in open permission mask for O_TRUNC 8.8 0.0015 None reported
High CVE-2026-64018 kernel: In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-... 9.3 0.0014 None reported
High CVE-2026-64438 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in ad... 8.8 0.0014 None reported
Showing 1 to 25 of 34 1Next