Loading story…
Rocky Enterprise Software Foundation published two Rocky Linux product errata advisories, RLSA-2026:8075 and RLSA-2026:8352, through its official errata portal. Both entries were listed as product advisories and appeared without a public synopsis, limiting immediate visibility into the affected packages, severity, or remediation details.
The advisories indicate ongoing Rocky Linux security and maintenance update activity, but the available records do not disclose the underlying vulnerabilities or software components involved. Organizations using Rocky Linux should review the full errata entries in the vendor portal and validate whether systems require updated packages associated with RLSA-2026:8075 or RLSA-2026:8352.
See real exploitation activity before you spend the cycle.
10 events from the most recent confirmed update back to the earliest known activity.
Rocky Enterprise Software Foundation published product advisory RLSA-2026:8888. No synopsis or additional technical details were provided in the reference.
Rocky Enterprise Software Foundation published product advisory RLSA-2026:8841. No synopsis or additional technical details were provided in the reference.
Rocky Enterprise Software Foundation published product advisory RLSA-2026:8469. No synopsis or additional technical details were provided in the reference.
Rocky Enterprise Software Foundation published product advisory RLSA-2026:8459. No synopsis or additional technical details were provided in the reference.
Rocky Enterprise Software Foundation published product advisory RLSA-2026:8470. No synopsis or additional technical details were provided in the reference.
Rocky Enterprise Software Foundation published product advisory RLSA-2026:8473. No synopsis or additional technical details were provided in the reference.
Rocky Enterprise Software Foundation published product advisory RLSA-2026:8468. No synopsis or additional technical details were provided in the reference.
Rocky Enterprise Software Foundation published product advisory RLSA-2026:8492. No synopsis or additional technical details were provided in the reference.
Rocky Enterprise Software Foundation published product advisory RLSA-2026:8352. No synopsis or additional technical details were provided in the reference.
Rocky Enterprise Software Foundation published product advisory RLSA-2026:8075. No synopsis or additional technical details were provided in the reference.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
10 references tracked. Mallory keeps watching after this page renders.
errata.rockylinux.org
Open sourceerrata.rockylinux.org
Open sourceerrata.rockylinux.org
Open sourceerrata.rockylinux.org
Open sourceerrata.rockylinux.org
Open sourceerrata.rockylinux.org
Open sourceerrata.rockylinux.org
Open sourceerrata.rockylinux.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat issued security advisories covering **Linux kernel vulnerabilities** that affect multiple products, including **Red Hat Enterprise Linux (RHEL)**, **RHEL Server**, **RHEL for Real Time**, and **Red Hat CodeReady Linux Builder** across several versions and platforms. A related notice from the Canadian Centre for Cyber Security summarized advisories published during the reporting period and directed administrators to review Red Hat's official guidance. The available notices do not provide specific `CVE` identifiers, exploitation details, or attribution, but they emphasize that affected organizations should identify impacted systems and apply the relevant Red Hat updates. The advisories are presented as routine but important remediation guidance for enterprises running Red Hat-based environments where kernel-level flaws could affect system security and stability.
Jul 20, 2026
Red Hat released a series of **kernel** and **kernel-rt** security advisories affecting **RHEL 7 ELS, RHEL 8, RHEL 9, and RHEL 10** product streams, including AUS, EUS, SAP Solutions, Telecommunications, Extended Life Cycle, and Extended Update Support channels. The updates fix clusters of vulnerabilities across networking, storage, memory management, and filesystem components, with repeated remediation for flaws such as `CVE-2026-23270` in traffic control `act_ct`, `CVE-2026-31419` in the bonding driver, `CVE-2026-43163` in `md/bitmap`, and multiple libceph, netfilter, RDMA, SMB, IPv6, SCTP, ALSA, and BPF issues. Red Hat rated several advisories **Important** and some **Critical**, citing impacts that include denial of service, memory corruption, out-of-bounds reads, use-after-free conditions, and possible local privilege escalation. The advisories span updated kernel builds including `3.10.0-1160.151.1.el7`, `4.18.0-305.197.1.el8_4`, `4.18.0-477.150.1.el8_8`, `4.18.0-553.132.1.el8_10`, `5.14.0-284.176.1.el9_2`, `5.14.0-427.127.1.el9_4`, `5.14.0-570.119.1.el9_6`, and `6.12.0-55.82.1.el10_0`, and Red Hat said affected systems must be **rebooted** after patching. One separately documented flaw, `CVE-2025-71116`, was traced to libceph `decode_pool()` parsing of malformed `osdmap` data, allowing an authenticated remote Ceph OSD or monitor to crash a client kernel; Red Hat said the issue was fixed with explicit bounds checks and advised preventing the `libceph` module from loading where Ceph is not used.
Aug 25, 2026
The Canadian Centre for Cyber Security issued two notices warning that Red Hat had published multiple security advisories for vulnerabilities affecting several products, with a particular focus on **Linux kernel** updates. The affected offerings include **Red Hat CodeReady Linux Builder**, **Red Hat Enterprise Linux**, **Red Hat Enterprise Linux Server**, and **Red Hat Enterprise Linux for Real Time** across multiple versions and platforms. The first notice, `AV26-318`, covered Red Hat advisories released between March 30 and April 5, while the second, `AV26-341`, covered advisories published between April 6 and 12. In both cases, the Cyber Centre urged users and administrators to review the referenced Red Hat advisories and apply the necessary updates to address the disclosed vulnerabilities.
Jul 2, 2026