Skip to content
OpenAdvisories
High RLSA-2026:39494 1 CVE

Important: kernel security, bug fix, and enhancement update

Published Jul 15, 2026 · Updated Jul 15, 2026

Ecosystem: Rocky Linux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)

* kernel: XFS data corruption using reflink ()

Bug Fix(es) and Enhancement(s):

* [Exploits (KEV)] kernel: XFS data corruption using reflink [rhel-10.2.z] (JIRA:Rocky Linux-193945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 10 kernel 0:6.12.0-211.34.1.el10_2

Vulnerabilities 1

  • High 7.8
    CVE-2026-53016

    crypto: ccp - copy IV using skcipher ivsize

    In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer w…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2492269