Rocky Linux 9 x86_64 NFV https://rockylinux.org Recently updated packages for Rocky Linux 9 x86_64 NFV Mon, 14 Sep 2026 06:03:06 AM GMT DNF kernel-rt-debug-modules-core-5.14.0-687.46.1.el9_8.x86_64 Thu, 10 Sep 2026 02:06:02 PM GMT 7ce23f05437d79c6319f64a113bb05bf1c115af5362695da41ba363919c0c3e2 https://dl.rockylinux.org/pub/rocky/9/NFV/x86_64/os/Packages/k/kernel-rt-debug-modules-core-5.14.0-687.46.1.el9_8.x86_64.rpm

kernel-rt-debug-modules-core - Core kernel modules to match the core kernel<br />

This package provides essential kernel modules for the core kernel package.

Change Log:

<pre>Thu, 10 Sep 2026 GMT - Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.46.1 - Replace sbat with Rocky Linux sbat (label) - Change bug tracker URL (label) - Ensure appended release in sbat is removed Thu, 03 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.46.1.el9_8] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter-&gt;p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] Wed, 02 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.45.1.el9_8] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} ...</pre> kernel-rt-modules-5.14.0-687.46.1.el9_8.x86_64 Thu, 10 Sep 2026 02:06:02 PM GMT 811503d5f3dc80dcee35927db1e4340cddc67b4147b6445be66379f71611e486 https://dl.rockylinux.org/pub/rocky/9/NFV/x86_64/os/Packages/k/kernel-rt-modules-5.14.0-687.46.1.el9_8.x86_64.rpm

kernel-rt-modules - kernel modules to match the core kernel<br />

This package provides commonly used kernel modules for the core kernel package.

Change Log:

<pre>Thu, 10 Sep 2026 GMT - Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.46.1 - Replace sbat with Rocky Linux sbat (label) - Change bug tracker URL (label) - Ensure appended release in sbat is removed Thu, 03 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.46.1.el9_8] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter-&gt;p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] Wed, 02 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.45.1.el9_8] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} ...</pre> kernel-rt-core-5.14.0-687.46.1.el9_8.x86_64 Thu, 10 Sep 2026 02:06:02 PM GMT 54ddd9b5c48c71b14aafcb23c09f5fb0acc2f1b23b0bb1760d5bfc9c7a175b92 https://dl.rockylinux.org/pub/rocky/9/NFV/x86_64/os/Packages/k/kernel-rt-core-5.14.0-687.46.1.el9_8.x86_64.rpm

kernel-rt-core - The Linux kernel compiled with PREEMPT_RT enabled<br />

This package includes a version of the Linux kernel compiled with PREEMPT_RT<br /> (real-time preemption support).

Change Log:

<pre>Thu, 10 Sep 2026 GMT - Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.46.1 - Replace sbat with Rocky Linux sbat (label) - Change bug tracker URL (label) - Ensure appended release in sbat is removed Thu, 03 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.46.1.el9_8] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter-&gt;p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] Wed, 02 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.45.1.el9_8] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} ...</pre> kernel-rt-debug-devel-5.14.0-687.46.1.el9_8.x86_64 Thu, 10 Sep 2026 02:06:02 PM GMT 747cd76236552c235ddc6297c7b62aab0d908f77ba106ac1a50390f12236bf1c https://dl.rockylinux.org/pub/rocky/9/NFV/x86_64/os/Packages/k/kernel-rt-debug-devel-5.14.0-687.46.1.el9_8.x86_64.rpm

kernel-rt-debug-devel - Development package for building kernel modules to match the kernel<br />

This package provides kernel headers and makefiles sufficient to build modules<br /> against the kernel package.

Change Log:

<pre>Thu, 10 Sep 2026 GMT - Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.46.1 - Replace sbat with Rocky Linux sbat (label) - Change bug tracker URL (label) - Ensure appended release in sbat is removed Thu, 03 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.46.1.el9_8] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter-&gt;p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] Wed, 02 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.45.1.el9_8] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} ...</pre> kernel-rt-debug-modules-extra-5.14.0-687.46.1.el9_8.x86_64 Thu, 10 Sep 2026 02:06:02 PM GMT dfb3f47547097332e02874d990bb426ec169928d7d41bbd189d939c5d1d75f16 https://dl.rockylinux.org/pub/rocky/9/NFV/x86_64/os/Packages/k/kernel-rt-debug-modules-extra-5.14.0-687.46.1.el9_8.x86_64.rpm

kernel-rt-debug-modules-extra - Extra kernel modules to match the kernel<br />

This package provides less commonly used kernel modules for the kernel package.

Change Log:

<pre>Thu, 10 Sep 2026 GMT - Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.46.1 - Replace sbat with Rocky Linux sbat (label) - Change bug tracker URL (label) - Ensure appended release in sbat is removed Thu, 03 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.46.1.el9_8] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter-&gt;p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] Wed, 02 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.45.1.el9_8] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} ...</pre> kernel-rt-modules-core-5.14.0-687.46.1.el9_8.x86_64 Thu, 10 Sep 2026 02:06:02 PM GMT 865110f2a6be963a05dbdcb84ecbd917da93bc3f72e479a165427eaecccd56c5 https://dl.rockylinux.org/pub/rocky/9/NFV/x86_64/os/Packages/k/kernel-rt-modules-core-5.14.0-687.46.1.el9_8.x86_64.rpm

kernel-rt-modules-core - Core kernel modules to match the core kernel<br />

This package provides essential kernel modules for the core kernel package.

Change Log:

<pre>Thu, 10 Sep 2026 GMT - Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.46.1 - Replace sbat with Rocky Linux sbat (label) - Change bug tracker URL (label) - Ensure appended release in sbat is removed Thu, 03 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.46.1.el9_8] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter-&gt;p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] Wed, 02 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.45.1.el9_8] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} ...</pre> kernel-rt-debug-5.14.0-687.46.1.el9_8.x86_64 Thu, 10 Sep 2026 02:06:02 PM GMT d1bd68eb2be4c9151a83fe362f5e52a718cd45f1428e8162629c53e3c3a20e59 https://dl.rockylinux.org/pub/rocky/9/NFV/x86_64/os/Packages/k/kernel-rt-debug-5.14.0-687.46.1.el9_8.x86_64.rpm

kernel-rt-debug - kernel meta-package for the rt-debug kernel<br />

The meta-package for the rt-debug kernel

Change Log:

<pre>Thu, 10 Sep 2026 GMT - Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.46.1 - Replace sbat with Rocky Linux sbat (label) - Change bug tracker URL (label) - Ensure appended release in sbat is removed Thu, 03 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.46.1.el9_8] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter-&gt;p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] Wed, 02 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.45.1.el9_8] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} ...</pre> kernel-rt-debug-modules-5.14.0-687.46.1.el9_8.x86_64 Thu, 10 Sep 2026 02:06:02 PM GMT b02144d84609a8f35b542647d72e4cece96f25d7d1778b43365e6528dda0a781 https://dl.rockylinux.org/pub/rocky/9/NFV/x86_64/os/Packages/k/kernel-rt-debug-modules-5.14.0-687.46.1.el9_8.x86_64.rpm

kernel-rt-debug-modules - kernel modules to match the core kernel<br />

This package provides commonly used kernel modules for the core kernel package.

Change Log:

<pre>Thu, 10 Sep 2026 GMT - Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.46.1 - Replace sbat with Rocky Linux sbat (label) - Change bug tracker URL (label) - Ensure appended release in sbat is removed Thu, 03 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.46.1.el9_8] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter-&gt;p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] Wed, 02 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.45.1.el9_8] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} ...</pre> kernel-rt-devel-5.14.0-687.46.1.el9_8.x86_64 Thu, 10 Sep 2026 02:06:02 PM GMT 3e9f8c6f7035325b3ae77dfbdbc24d4835168fd7c10300f9a931b2c85b7fa83b https://dl.rockylinux.org/pub/rocky/9/NFV/x86_64/os/Packages/k/kernel-rt-devel-5.14.0-687.46.1.el9_8.x86_64.rpm

kernel-rt-devel - Development package for building kernel modules to match the kernel<br />

This package provides kernel headers and makefiles sufficient to build modules<br /> against the kernel package.

Change Log:

<pre>Thu, 10 Sep 2026 GMT - Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.46.1 - Replace sbat with Rocky Linux sbat (label) - Change bug tracker URL (label) - Ensure appended release in sbat is removed Thu, 03 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.46.1.el9_8] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter-&gt;p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] Wed, 02 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.45.1.el9_8] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} ...</pre> kernel-rt-5.14.0-687.46.1.el9_8.x86_64 Thu, 10 Sep 2026 02:06:02 PM GMT 0c7c946828927b28efe5d99b48282ecedb0455af6f8d556dc8531302b08d34ea https://dl.rockylinux.org/pub/rocky/9/NFV/x86_64/os/Packages/k/kernel-rt-5.14.0-687.46.1.el9_8.x86_64.rpm

kernel-rt - kernel meta-package for the rt kernel<br />

The meta-package for the rt kernel

Change Log:

<pre>Thu, 10 Sep 2026 GMT - Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.46.1 - Replace sbat with Rocky Linux sbat (label) - Change bug tracker URL (label) - Ensure appended release in sbat is removed Thu, 03 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.46.1.el9_8] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter-&gt;p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] Wed, 02 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.45.1.el9_8] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} ...</pre> kernel-rt-modules-extra-5.14.0-687.46.1.el9_8.x86_64 Thu, 10 Sep 2026 02:06:02 PM GMT 89b0f49aab2ca05bfb8fcbf112e7d9b5035447c83101696a19983ca601e9236f https://dl.rockylinux.org/pub/rocky/9/NFV/x86_64/os/Packages/k/kernel-rt-modules-extra-5.14.0-687.46.1.el9_8.x86_64.rpm

kernel-rt-modules-extra - Extra kernel modules to match the kernel<br />

This package provides less commonly used kernel modules for the kernel package.

Change Log:

<pre>Thu, 10 Sep 2026 GMT - Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.46.1 - Replace sbat with Rocky Linux sbat (label) - Change bug tracker URL (label) - Ensure appended release in sbat is removed Thu, 03 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.46.1.el9_8] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter-&gt;p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] Wed, 02 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.45.1.el9_8] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} ...</pre> kernel-rt-debug-core-5.14.0-687.46.1.el9_8.x86_64 Thu, 10 Sep 2026 02:06:02 PM GMT 8c63be01ef3940838146b1d4eea6bd629ebf3e6f80d94a448b976795d399e8cc https://dl.rockylinux.org/pub/rocky/9/NFV/x86_64/os/Packages/k/kernel-rt-debug-core-5.14.0-687.46.1.el9_8.x86_64.rpm

kernel-rt-debug-core - The Linux kernel compiled with PREEMPT_RT enabled<br />

This package includes a version of the Linux kernel compiled with PREEMPT_RT<br /> (real-time preemption support) and has numerous debugging options enabled.<br /> It should only be installed when trying to gather additional information<br /> on kernel bugs, as some of these options impact performance noticably.

Change Log:

<pre>Thu, 10 Sep 2026 GMT - Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.46.1 - Replace sbat with Rocky Linux sbat (label) - Change bug tracker URL (label) - Ensure appended release in sbat is removed Thu, 03 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.46.1.el9_8] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter-&gt;p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] Wed, 02 Sep 2026 GMT - CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.45.1.el9_8] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} ...</pre>