kernel/SPECS
Andrew Lukoshko 17ac9ff7c7 Fix 8 Important CVEs ahead of RHEL; bump to 687.26.2
Backport upstream stable fixes for RHEL-Affected Important CVEs, closest-to-5.14
stable base, verified zero-fuzz on 687.26.1:
- CVE-2026-53398 nfsd SECINFO_NO_NAME decode error cleanup (1100)
- CVE-2026-53399 nfsd release layout stid on setlease failure (1101)
- CVE-2026-63794 KVM SVM page overflow in sev_dbg_crypt() (1102)
- CVE-2026-63824 KEYS overflow in keyctl_pkey_params_get_2() (1103)
- CVE-2026-63829 net ip_gre require CAP_NET_ADMIN in device netns (1104)
- CVE-2026-64037 wifi iwlwifi mld TSO segmentation explosion (1105)
- CVE-2026-64113 ixgbevf UAF in VEPA multicast source pruning (1106)
- CVE-2026-64191 i2c stub reject block transfers with invalid length (1107)
2026-07-21 19:00:29 +00:00
..
kernel.spec Fix 8 Important CVEs ahead of RHEL; bump to 687.26.2 2026-07-21 19:00:29 +00:00