I installed latest updates, but exploit still works.

root@rocky9:~# dnf changelog kernel | grep 46243 - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} The above clearly shows that it is in the changelog. Full info from changelog as to which kernel version: * Tue Jun 02 12:00:00 AM 2026 CKI KW…

Rocky Linux 9.7 is no longer the latest. The latest is 9.8. Update your system. Also, considering that CVE was reported 2 days ago, even if it hasn’t been fixed then it’s hardly surprising because time is required to patch and release. I suggest you wait a bit longer before posting in future bec…

Well, the vulnerability was publicly disclosed one week ago with PoC publicly available CIFSwitch: a non-universal Linux local root vulnerability · Hey, it's Asim , it’s only CVE number was assigned two days ago. There is also fix merged to the kernel code Making sure you're not a bot! for weeks. Co…

[image] iwalker: CVE was reported 2 days ago What does the “Public on May 26, 2026” on Red Hat CVE list mean: cve-details ? From that we can gather that Rocky 8, 9, and 10 are affected and no fix is available yet. RH security bulletin (also dated May 26) suggests mitigation: RHSB-2026-005 C…

Thansk, @jlehtone ! Yeah, I know the mitigation, unfortunately in our case we do need SMB mounts :smiling_face_with_tear:

[image] jlehtone: What does the “Public on May 26, 2026” on Red Hat CVE list mean: cve-details ? I was going by this: NVD - CVE-2026-46243 as the RH one wasn’t appearing in my google results. Note, the dates there shows 3 days ago, hence what I posted.

To be fair, both RH pages have been updated June 3, 2026, (yesterday). Perhaps they started as minimal stubs and got more (discoverable) content within last three days.

Maybe it’s worth adding that AlmaLinux had a blog post titled “CIFSwitch (CVE-2026-46243) Patches Released” on 28 May.

[image] PF92: Maybe it’s worth adding that AlmaLinux had a blog post titled “CIFSwitch (CVE-2026-46243) Patches Released” on 28 May. Although released in the Almalinux testing repository so in reality no different than Rocky or RHEL not having it as it’s not in their official baseos or appstr…

Btw, I ended up restricting unpriviliged user namespaces as a mitigation. This way I still can use SMB mounts (hard requirement for me), but do not risk living with LPE. My way echo "user.max_user_namespaces=0" | sudo tee /etc/sysctl.d/99-disable-userns.conf > /dev/null sudo sysctl --system Then …

I think the updates for AlmaLinux were released in the testing repo on 28 May and then released in the default repos on 2 June. The vulnerability itself was also made public on 28 May with this mailing list message: https://www.openwall.com/lists/oss-security/2026/05/28/2 I’m aware of the main diff…

Is CVE-2026-46243 fixed in RockyLInux 9.7?

Rocky Linux Help & Support

iwalker June 5, 2026, 4:53pm 14

Actually, just read on mattermost channels, the CIF’s switch has been pushed to the security repo, so people should see it shortly if they have it enabled.

Topic		Replies	Views
Fragnesia - CVE-2026-46300 Rocky Linux Help & Support	32	4572	June 5, 2026
Any news on when a fixed release for Januscape (CVE-2026-53359), the KVM/x86 guest-to-host escape vulnerability, will be available? Rocky Linux Help & Support	34	1419	July 16, 2026
CVE-2026-31431 - Copy Fail - Linux kernel crypto vulnerability Rocky Linux Help & Support	108	26398	May 10, 2026
Rocky 8.10 - CVE-2025-38352 Rocky Linux Help & Support rocky-linux-8	23	1985	September 22, 2025
Availability of a kernel fix for RefluXFS vulnerability CVE-2026-64600 on Rocky Linux 9.8 Rocky Linux Help & Support rocky-linux-9	5	412	July 29, 2026

Is CVE-2026-46243 fixed in RockyLInux 9.7?

Related topics