The 6.19.14-107 update contains a fix for a SKBFL_SHARED_FRAG page-cache corruption vulnerability.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-32ae3b7199 2026-05-21 03:17:14.913959+00:00 -------------------------------------------------------------------------------- Name : kernel Product : Fedora 42 Version : 6.19.14 Release : 107.fc42 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package -------------------------------------------------------------------------------- Update Information: The 6.19.14-107 update contains a fix for a SKBFL_SHARED_FRAG page-cache corruption vulnerability. -------------------------------------------------------------------------------- ChangeLog: * Tue May 19 2026 Justin M. Forbes [6.19.14-107] - Revert "redhat/kernel.spec.template: Fix indentation of uki-virt generation code" (Justin M. Forbes) - Revert "redhat/kernel.spec.template: Simplify uki-virt signing" (Justin M. Forbes) - Revert "redhat/kernel.spec.template: Add kernel-uki-dtbloader sub-package" (Justin M. Forbes) - Revert "redhat/kernel.spec.template: Make -uki-dtbloader provide kernel-core-uname-r" (Justin M. Forbes) * Tue May 19 2026 Justin M. Forbes [6.19.14-7] - net: gro: don't copy frags between mixed zcopy skbs (Sabrina Dubroca) - Turn on auto bumping for remainder of F42 (Justin M. Forbes) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2479833 - kernel: Linux kernel: SKBFL_SHARED_FRAG page-cache corruption PoC [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2479833 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-32ae3b7199' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
The 7.0.9-104/204 kernels contain a fix for a SKBFL_SHARED_FRAG page-cache corruption vulnerability as well as some mitigations for PinTheft. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-3f85a4eba7 2026-05-21 01:26:51.960484+00:00 -------------------------------------------------------------------------------- Name : kernel Product : Fedora 43 Version : 7.0.9 Release : 104.fc43 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package -------------------------------------------------------------------------------- Update Information: The 7.0.9-104/204 kernels contain a fix for a SKBFL_SHARED_FRAG page-cache corruption vulnerability as well as some mitigations for PinTheft -------------------------------------------------------------------------------- ChangeLog: * Tue May 19 2026 Justin M. Forbes [7.0.9-4] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (David Howells) - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (David Howells) - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (David Howells) * Tue May 19 2026 Justin M. Forbes [7.0.9-3] - net: gro: don't copy frags between mixed zcopy skbs (Sabrina Dubroca) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2479833 - kernel: Linux kernel: SKBFL_SHARED_FRAG page-cache corruption PoC [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2479833 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3f85a4eba7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed withthe Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2019:2808-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:2808 Issue date: 2019-09-17 CVE Names: CVE-2019-5489 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server (v. 5 ELS) - i386, noarch, s390x, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * Kernel: page cache side channel attacks (CVE-2019-5489) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1664110 - CVE-2019-5489 Kernel: page cache side channel attacks 6. Package List: Red Hat Enterprise Linux Server (v. 5ELS): Source: kernel-2.6.18-439.el5.src.rpm i386: kernel-2.6.18-439.el5.i686.rpm kernel-PAE-2.6.18-439.el5.i686.rpm kernel-PAE-debuginfo-2.6.18-439.el5.i686.rpm kernel-PAE-devel-2.6.18-439.el5.i686.rpm kernel-debug-2.6.18-439.el5.i686.rpm kernel-debug-debuginfo-2.6.18-439.el5.i686.rpm kernel-debug-devel-2.6.18-439.el5.i686.rpm kernel-debuginfo-2.6.18-439.el5.i686.rpm kernel-debuginfo-common-2.6.18-439.el5.i686.rpm kernel-devel-2.6.18-439.el5.i686.rpm kernel-headers-2.6.18-439.el5.i386.rpm kernel-xen-2.6.18-439.el5.i686.rpm kernel-xen-debuginfo-2.6.18-439.el5.i686.rpm kernel-xen-devel-2.6.18-439.el5.i686.rpm noarch: kernel-doc-2.6.18-439.el5.noarch.rpm s390x: kernel-2.6.18-439.el5.s390x.rpm kernel-debug-2.6.18-439.el5.s390x.rpm kernel-debug-debuginfo-2.6.18-439.el5.s390x.rpm kernel-debug-devel-2.6.18-439.el5.s390x.rpm kernel-debuginfo-2.6.18-439.el5.s390x.rpm kernel-debuginfo-common-2.6.18-439.el5.s390x.rpm kernel-devel-2.6.18-439.el5.s390x.rpm kernel-headers-2.6.18-439.el5.s390x.rpm kernel-kdump-2.6.18-439.el5.s390x.rpm kernel-kdump-debuginfo-2.6.18-439.el5.s390x.rpm kernel-kdump-devel-2.6.18-439.el5.s390x.rpm x86_64: kernel-2.6.18-439.el5.x86_64.rpm kernel-debug-2.6.18-439.el5.x86_64.rpm kernel-debug-debuginfo-2.6.18-439.el5.x86_64.rpm kernel-debug-devel-2.6.18-439.el5.x86_64.rpm kernel-debuginfo-2.6.18-439.el5.x86_64.rpm kernel-debuginfo-common-2.6.18-439.el5.x86_64.rpm kernel-devel-2.6.18-439.el5.x86_64.rpm kernel-headers-2.6.18-439.el5.x86_64.rpm kernel-xen-2.6.18-439.el5.x86_64.rpm kernel-xen-debuginfo-2.6.18-439.el5.x86_64.rpm kernel-xen-devel-2.6.18-439.el5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2019-5489 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXYMQCNzjgjWX9erEAQgRjhAAmv0xpiDhew4eUoDNnw0jGoCivTvPabf+ 9nqyjJ6GMbyGjoIo3w+jomxjoDtp4Zis8tkTuwfXbbmxCt1YwXKd85g6or7T2uRG xbi54GCz1Xl+kOVYvzBnk01As7fHfm9tcF0TL6ZTwOv8ciGCV/Y9rpaRbwKV15t6 l+zsjFt0S4YjFSD4xMIxGWJxqZOUTzIQRQ7zqnRfXkq8hnNGrO9AnMuJfDdfvS8G 2ra7hMzb0ZWbrQEDmuJgBjXi1mNXXMZdbejsDn2SyifDHQethtmTH/FFvvCNYRP9 OthMbFMeQFn+q9t2bctDEtfeW5grfDLHAFsrdqpNZkAqDcQmxyZhmf2kSJOoS2iO nsl3scYqOwFdEcI2va8EoVv6ziEGoP3VCelRR67kl8kAqygkbtJx+oiQpYBUjVuw y2BEhHATFml8VfWnoP1kXEM4wrb2yxC5EqOti8/YBZCSCuE4xYsezHbrejTxwEbA 7pPvZuXJF+1uYYu1UEyY4O4/7+kqloPHNdrP123S8RV1Ugxp+9T4wIhmFQLm7fhp LuXwKLGMiSe3kcxrmo5wmpmnTKMVh1vBsiEmwo6kQlTp49dEULs+rzfcdQauqUvz VDCassS4piF1GdNt1PRcaGm/yydIsMmvwOg95qmhPGh0x4iyQpV34KAj0SD9TSUT nX3Gl2+ZMgk=d0D/ -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Get the latest Linux and open source security news straight to your inbox.