Skip to content
OpenAdvisories
High RLSA-2026:66355 1 CVE

Important: kernel security update

Published Sep 11, 2026 · Updated Sep 11, 2026

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 10 kernel 0:6.12.0-211.54.1.el10_2

Vulnerabilities 1

  • Critical 9.8

    net: bridge: stop fast-leave after deleting a port group

    In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group br_multicast_leave_group() iterates mp->ports with pp = &p->next in its fast-leave path. After br_multicast_del_pg() removes p, contin…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2517046
  • advisory
    https://access.redhat.com/errata/RHSA-2026:66355