Rocky Linux 10 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_65334)

critical Nessus Plugin ID 353741

Synopsis

The Rocky Linux host is missing one or more security updates.

Description

The Rocky Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_65334 advisory.

* kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133)

* kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334)

* kernel: Bluetooth: virtio_bt: clamp rx length before skb_put (CVE-2026-46123)

* kernel: Bluetooth: serialize accept_q access (CVE-2026-52918)

* kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091)

* kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CVE-2026-53072)

* kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (CVE-2026-52947)

* kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256)

* kernel: wifi: nl80211: reject oversized EMA RNR lists (CVE-2026-53182)

* kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CVE-2026-53209)

* kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254)

* kernel: vfio/pci: Clean up DMABUFs before disabling function (CVE-2026-53322)

* kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975)

* kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015)

* kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947)

* kernel: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CVE-2026-63944)

* kernel: Bluetooth: ISO: fix UAF in iso_recv_frame (CVE-2026-63946)

* kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (CVE-2026-64117)

* kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (CVE-2026-64037)

* kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113)

* kernel: vfio/pci: Check BAR resources before exporting a DMABUF (CVE-2026-64042)

* kernel: accel/qaic: Add overflow check to remap_pfn_range during mmap (CVE-2026-64051)

* kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (CVE-2026-64255)

* kernel: wifi: mac80211: fix MLE defragmentation (CVE-2026-64515)

* kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)

* kernel: wifi: mt76: mt7925: fix crash in reset link replay (CVE-2026-68307)

* kernel: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (CVE-2026-68193)

* kernel: dm-verity: fix buffer overflow in FEC calculation (CVE-2026-72098)

* kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129)

Bug Fix(es) and Enhancement(s):

* rtla-timerlat-top doesn't stop properly when threshold is reached on multiple CPUs at once [rhel-10.2.z] (JIRA:Rocky Linux-193027)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages based on the guidance in CIQ advisory crlsa-2026_65334.

Plugin Details

Severity: Critical

ID: 353741

File Name: ciq_rocky_linux_10_crlsa-2026_65334.nasl

Version: 1.1

Type: Local

Family: Rocky Linux Local Security Checks

Published: 10/1/2026

Updated: 10/1/2026

Supported Sensors: Nessus Agent, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 96.59

Vendor

Vendor Severity: Unknown

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-72129

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party

Exploit Ease: No known exploits are available

Patch Publication Date: 9/10/2026

Vulnerability Publication Date: 4/7/2026

Reference Information

CVE: CVE-2026-43133, CVE-2026-43334, CVE-2026-46123, CVE-2026-52918, CVE-2026-52947, CVE-2026-53072, CVE-2026-53091, CVE-2026-53182, CVE-2026-53209, CVE-2026-53254, CVE-2026-53256, CVE-2026-53322, CVE-2026-63944, CVE-2026-63946, CVE-2026-63947, CVE-2026-63975, CVE-2026-64015, CVE-2026-64037, CVE-2026-64042, CVE-2026-64051, CVE-2026-64113, CVE-2026-64117, CVE-2026-64255, CVE-2026-64515, CVE-2026-68193, CVE-2026-68307, CVE-2026-68409, CVE-2026-72098, CVE-2026-72129

Detections

Analytics