Linuxsecurity Critical Vulnerabilities in Rocky Linux Affecting Multiple Components
Article Content
- •Multiple critical vulnerabilities identified in Rocky Linux components.
- •CVE-2026-8631 and CVE-2026-31669 pose significant risks of DoS and privilege escalation.
- •Immediate patching is recommended for affected systems to prevent exploitation.
Rocky Linux has released multiple security updates addressing critical vulnerabilities across various components, including 389-ds-base, HPLIP, and dracut. The vulnerabilities include a denial-of-service (DoS) issue in 389-ds-base (CVE-2026-8631) and critical privilege escalation vulnerabilities in HPLIP and dracut (CVE-2026-31669). These vulnerabilities affect Rocky Linux versions 8 and 10, with potential for remote exploitation. Administrators are urged to apply the patches immediately to mitigate risks. The updates were published on June 19, 2026, and include detailed CVSS scores for each vulnerability. The vulnerabilities have been confirmed and are considered high risk due to their potential impact on system integrity and availability.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (860)
Following this threat?
Track Red Hat and CVE-2026-31669 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access… 
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…