Critical Vulnerabilities in Rocky Linux Affecting Multiple Components

Rocky Linux has released multiple security updates addressing critical vulnerabilities across various components, including 389-ds-base, HPLIP, and dracut. The vulnerabilities include a denial-of-service (DoS) issue in 389-ds-base (CVE-2026-8631) and critical privilege escalation vulnerabilities in HPLIP and dracut (CVE-2026-31669). These vulnerabilities affect Rocky Linux versions 8 and 10, with potential for remote exploitation. Administrators are urged to apply the patches immediately to mitigate risks. The updates were published on June 19, 2026, and include detailed CVSS scores for each vulnerability. The vulnerabilities have been confirmed and are considered high risk due to their potential impact on system integrity and availability.

Key Points: • Multiple critical vulnerabilities identified in Rocky Linux components. • CVE-2026-8631 and CVE-2026-31669 pose significant risks of DoS and privilege escalation. • Immediate patching is recommended for affected systems to prevent exploitation.