Rocky Linux BugTracker - Issues

0012211: SELinux regression in selinux-policy-42.1.7-1.el10_1.1 causes systemd AVC denial (init_t capability2 mac_admin) and breaks syste

Fri, 06 Mar 2026 09:22:06 +0000

After upgrading to selinux-policy-42.1.7-1.el10_1.1 on Rocky Linux 10.1, SELinux starts denying the mac_admin capability for systemd (init_t). This results in repeated AVC denials and causes system services to malfunction. In our environment this manifests as failures when managing services (for example via systemctl or automation tools such as Ansible).

Downgrading SELinux policy packages to 42.1.7-1.el10 resolves the issue immediately.

Working versions:

selinux-policy-42.1.7-1.el10.noarch
selinux-policy-targeted-42.1.7-1.el10.noarch
systemd-257-13.el10.rocky.0.1.x86_64
dbus-broker-36-4.el10.x86_64

Broken versions:

selinux-policy-42.1.7-1.el10_1.1.noarch
selinux-policy-targeted-42.1.7-1.el10_1.1.noarch

0012112: Raspberry Pi, Rocky Linux 10 image fails to boot on Pi-4 Model B

Wed, 04 Mar 2026 08:33:19 +0000

The image "Rocky-10-SBC-RaspberryPi.latest.aarch64.raw.xz" available as of 21-Feb-2026 as a download from the Rocky Linux website fails to boot on a Raspberry Pi-4 Model B with 8GB RAM when written to a 32GB SD-card.

At boot the Raspberry boot loader display is presented for approx. 500ms, followed by the colourful, rainbow-like, Raspberry splash screen. Nothing else is ever shown on the display and RL fails to boot. The Pi motherboard has two LED's. Red has continuous illumination, the green flashes seven times, pauses momentarily and then repeats the pattern.

The Rocky Linux 10 README for the Raspberry Pi image identifies that it has been tested (and presumably works) with a Pi 4:

"This image is always available at: https://dl.rockylinux.org/pub/rocky/10/images/aarch64/Rocky-10-SBC-RaspberryPi.latest.aarch64.raw.xz
They have been tested on Raspberry Pi 4 and 5.
Rocky Linux 10 WILL NOT WORK on a Raspberry Pi 1 or 2 (1.1 or earlier) as they are 32-bit only, and Rocky Linux only supports arm64 (aarch64).
Rocky Linux 10 WILL NOT WORK on a Raspberry Pi 3 due to lack of MBR on the images."

0012180: Trusted Domain Authentication samba 4.22 Rocky 9.7

Tue, 03 Mar 2026 18:30:50 +0000

Samba 4.22.4-12.el9_7 doesn't seem to contain the regression anymore for CVE-2025-49716 netlogon hardening fix

- **OS**: Rocky Linux 9.7 (Blue Onyx)
- **Samba Version**: samba-4.22.4-12.el9_7.x86_64
- **Configuration**: Domain member server joined to DOMAIN-A.COM with forest transitive trust to DOMAIN-B.COM
- **idmap backend**: ad (for DOMAIN-B), sss (for DOMAIN-A)

After upgrading from Rocky Linux 9.6 (samba-4.21.3-14.el9_6) to Rocky Linux 9.7 (samba-4.22.4-12.el9_7), NTLM challenge/response authentication fails for users from the trusted domain DOMAIN-B.COM with `NT_STATUS_WRONG_PASSWORD`. Plaintext authentication works correctly.

[log.wb-DOMAIN-B] cm_connect_netlogon_transport: get_secure_channel_type gave SEC_CHAN_NULL for DOMAIN-B
[log.wb-DOMAIN-B] cli_rpc_pipe_open_noauth: opened pipe netlogon to machine DC01.domain-b.com and bound anonymously
[log.winbindd] lm_resp: DATA_BLOB length=0
[log.winbindd] nt_resp: DATA_BLOB length=0
[log.winbindd] result: NT_STATUS_WRONG_PASSWORD

No `netr_LogonSamLogon` calls found in logs - winbind not attempting netlogon authentication for trusted domain challenge/response.

0012179: Security update for CVE-2025-14104 missing for Rocky 9.7 util-linux package

Tue, 03 Mar 2026 16:23:31 +0000

The security updates for CVE-2025-14104 were provided as following:

- el8: [util-linux-0:2.32.1-48.el8_10] via RHSA-2026:1852 (2026-02-04) <-- This was made available on 2026-02-05
- el9: [util-linux-0:2.37.4-21.el9_7] via RHSA-2026:1913 (2026-02-04) <-- Still missing (not the same as util-linux-0:2.37.4-21.el9)

The https://errata.rockylinux.org/RLSA-2026:1913 does not appear to denote the correct version for this security update. It references util-linux-0:2.37.4-21.el9 (which was released 2025-05-03 and does not contain the security fix in question (refer to additional information for first 10 lines of changelogs).

Can this security update be made available for the Rocky el9.7 release?

0012178: [Account Services] Data hash table of rotation spam in DMESG

Tue, 03 Mar 2026 14:29:43 +0000

Please update this package as sometimes it is nearly impossible find info directly in the dmesg
please refer to
https://github.com/systemd/systemd/commit/afc47ee2af456d12670df862457dcc7f6b864d79

0011287: cannot update to 9.7 from 9.6

Mon, 02 Mar 2026 01:08:26 +0000

I am trying to update from 9.6 to 9.7 and hitting an error which I want to run by you to see if you know it and what the best solution is. I don't understand enough to be able to know where your "try to add" suggestions of --allowerasing, --skip-broken, and/or --nobest is appropriate

0012079: 10.x devel repository mirrors not working

Thu, 26 Feb 2026 06:57:05 +0000

Enabling the "Devel" repository for 10.0 and 10.x fails. It stopped working sometime in the last couple of months or so.

A similar bug was previously reported for 9.x: https://bugs.rockylinux.org/view.php?id=3268

Note that this is in the context of building a custom Docker image within a GitHub Actions workflow, based on rockylinux/rockylinux from Docker Hub.

0012046: Rocky Linux Boot gives text full of squares on the console ( screen ) after the kernel update to Latest ( 4.18.0-553.104.1 )

Sat, 21 Feb 2026 18:26:29 +0000

We updated the kernel version from kernel-4.18.0-553.97.1.el8_10 to kernel-4.18.0-553.104.1.el8_10.

Then, Booting the rocky server gives white squares full on screen for few seconds.

Please let us know , if this issue is known or tracked , if tracked please give more details on it .

Thanks.

0012013: CVE-2025-7425 missing from Rocky8 errata

Mon, 16 Feb 2026 05:05:47 +0000

Was fixed some time ago in Redhat 8: https://access.redhat.com/security/cve/cve-2025-7425 (August 2025)
Rocky 9 has picked up the fix: https://errata.rockylinux.org/RLSA-2025:12447

Current builds show #12 27.72 libxml2 x86_64 2.9.7-21.el8_10.3 baseos 697 k

0011980: On Rocky Linux 9, perl-DBD-MySQL-4.053-1.el9.0.1.x86_64 has a hard runtime dependency on libmysqlclient.so.21

Sat, 07 Feb 2026 20:14:07 +0000

On Rocky Linux 9, perl-DBD-MySQL-4.053-1.el9.0.1.x86_64 has a hard runtime dependency on libmysqlclient.so.21 -
This makes perl-DBD-MySQL incompatible with Percona Server packages - (percona-server-shared) which obsolete mysql-libs.

On RHEL 9, perl-DBD-MySQL is available in a build (4.050-13.el9) which uses mariadb-connector-c and does not require libmysqlclient.so.21, and therefore works correctly with Percona Server.

As a result, percona-xtrabackup-84 cannot be installed on Rocky 9 when Percona Server is present, while the same setup works on RHEL 9.

Please consider rebuilding perl-DBD-MySQL on Rocky 9 against mariadb-connector-c (as in RHEL), or providing a compatible build as this differs from RHEL spec / behavior.

0011947: AWS & GCP NIC PMDs missing from RPM on ARM

Tue, 03 Feb 2026 09:01:08 +0000

On AWS the c7gn and c8gn are the most cost effective instance types to use with DPDK as a virtual network appliance and both use Graviton ARM cores. The current DPDK RPM only enables the ENA driver on x86-64 and not on ARM. Same issue with the GCP gve driver.

0011914: WSL Image Cannot Execute Windows Binaries By Default

Wed, 28 Jan 2026 20:22:30 +0000

After installing the Rocky 10 WSL image it cannot execute Windows binaries by default. Trying to do so will fail with the following error:

[user@host ~]$ ssh.exe
-bash: /mnt/c/WINDOWS/System32/OpenSSH/ssh.exe: cannot execute binary file: Exec format error

This is a known issue when systemd is enabled in a WSL issue and there is a resolution as seen here: https://serverfault.com/a/1141563

sudo sh -c 'echo :WSLInterop:M::MZ::/init:PF > /usr/lib/binfmt.d/WSLInterop.conf'
sudo systemctl restart systemd-binfmt

Given the WSL image enables systemd by default, it would be good to include the above file in the image. Failing that, it would be good to mention this in the documentation at https://docs.rockylinux.org/10/guides/interoperability/import_rocky_to_wsl/

0011881: The AWS marketplace AMIs of Rocky Linux 9 with LVM (Official) is outdated

Tue, 27 Jan 2026 07:34:10 +0000

Please update the AWS Marketplace offering of Rocky Linux 9 with LVM (Official) to current release 9.7. (https://rockylinux.org/news/rocky-linux-9-7-ga-release)

0011848: The AWS marketplace AMIs of Rocky 9 and 10 lack support for p4de instances while p4d instances are supported

Mon, 26 Jan 2026 10:40:22 +0000

Please add support for AWS EC2 p4de instances in AWS Marketplace. p4d instances are already supported, but p4de offers more GPU memory (80GB per GPU) which is required for some ML applications.

0011815: kernel-debuginfo-rpm for initial Rocky Linux 9.4 kernel (5.14.0-427.13.1) missing from official rocky repository

Thu, 22 Jan 2026 20:49:57 +0000

Hi:
The initial release of Rocky Linux 9.4 ships with the following kernel version:5.14.0-427.13.1.el9_4.x86_64
However, the corresponding kernel-debuginfo RPM for this exact kernel version is missing from the official Rocky Linux repository. I checked the official Rocky Linux 9.4 vault repository:https://dl.rockylinux.org/vault/rocky/9.4/BaseOS/x86_64/debug/tree/Packages/k/, In this directory, the lowest available kernel-debuginfo RPM version is: kernel-debuginfo-5.14.0-427.16.1.el9_4.x86_64.rpm. Because the debuginfo RPM matching the initial 9.4 kernel is missing, it is not possible to analyze vmcore files using the crash utility and vmlinux on systems running:

For comparison:
- Rocky Linux 9.3 provides kernel-debuginfo RPMs for its initial kernel release
- Rocky Linux 9.5 also provides kernel-debuginfo RPMs for its initial kernel release
Only Rocky Linux 9.4 appears to be missing the kernel-debuginfo RPM for its first released kernel version.

Please upload kernel-debuginfo-5.14.0-427.13.1.el9_4.x86_64. RPM in the official Rocky Linux repository

Thank you for your help.

0011782: liboath 2.6.12-1 doesn't work if usersfile contains $HOME or $USER

Tue, 20 Jan 2026 10:41:53 +0000

Dear Maintainer,

Due to CVE-2024-47191 liboath now drops privileges if the OTP token (the "usersfile" given in the pam configuration) is set to a path containing "$HOME" or "$USER".

The default lockfile location is "/var/lock/pam_oath.lock", which is writable only by root. On an OTP check, the process is to drop privileges, then ask for OTP, and if the OTP is okay to modify the "usersfile" (by creatting first an exclusive lock).

If the lock can"t be created, OTP fails.

I can specify a lockfile manually, but I can't use "$HOME" or "$USER" so each user's lockfile is independent from one user to another.

0011749: On Rocky Linux 10.1, the postfix package (postfix-3.8.5-8.el10.x86_64) was built against OpenSSL 3.2.x headers

Sun, 18 Jan 2026 16:20:47 +0000

### Summary
On Rocky Linux 10.1, the postfix package (postfix-3.8.5-8.el10.x86_64) was built against OpenSSL 3.2.x headers but at runtime uses OpenSSL 3.5.1, causing:

warning: run-time library vs. compile-time header version mismatch: OpenSSL 3.5.1 may not be compatible with OpenSSL 3.2.0

This warning appears each time SMTP/TLS is negotiated in Postfix logs.

0011716: System enters a boot loop when a systemd service uses StandardError=journal+console and writes to stderr.

Tue, 13 Jan 2026 16:05:15 +0000

If a systemd service file contains StandardError=journal+console and something is written to stderr, the system enters a boot loop. Occasionally, the system starts normally.
If the service file contains only StandardError=journal, the system starts normally.
I selected the “Kernel” category because this issue occurs only with the following kernel versions:

5.14.0-611.16.1.el9_7.x86_64
5.14.0-611.11.1.el9_7.x86_64

With kernel 5.14.0-570.52.1.el9_6.x86_64, everything works as expected.

I did not find anything useful in the log files, but "ipmitool sel list" shows the following output:

4c | 01/13/2026 | 13:40:17 | Processor #0x97 | IERR | Asserted
4d | 01/13/2026 | 13:40:17 | Critical Interrupt | Bus Uncorrectable error | Asserted
4e | 01/13/2026 | 13:40:17 | Processor | Configuration Error | Asserted

System:

Processor:
processor : 0
vendor_id : GenuineIntel
cpu family : 6
model : 143
model name : Intel(R) Xeon(R) Gold 5412U
stepping : 8
microcode : 0x2b000643
cpu MHz : 800.000
cache size : 46080 KB
physical id : 0
siblings : 48
core id : 0
cpu cores : 24
apicid : 0
initial apicid : 0
fpu : yes
fpu_exception : yes
cpuid level : 32
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc art arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf tsc_known_freq pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm abm 3dnowprefetch cpuid_fault epb cat_l3 cat_l2 cdp_l3 intel_ppin cdp_l2 ssbd mba ibrs ibpb stibp ibrs_enhanced tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 avx2 smep bmi2 erms invpcid cqm rdt_a avx512f avx512dq rdseed adx smap avx512ifma clflushopt clwb intel_pt avx512cd sha_ni avx512bw avx512vl xsaveopt xsavec xgetbv1 xsaves cqm_llc cqm_occup_llc cqm_mbm_total cqm_mbm_local split_lock_detect user_shstk avx_vnni avx512_bf16 wbnoinvd dtherm ida arat pln pts hwp hwp_act_window hwp_epp hwp_pkg_req vnmi avx512vbmi umip pku ospke waitpkg avx512_vbmi2 gfni vaes vpclmulqdq avx512_vnni avx512_bitalg tme avx512_vpopcntdq la57 rdpid bus_lock_detect cldemote movdiri movdir64b enqcmd fsrm md_clear serialize tsxldtrk pconfig arch_lbr ibt amx_bf16 avx512_fp16 amx_tile amx_int8 flush_l1d arch_capabilities
vmx flags : vnmi preemption_timer posted_intr invvpid ept_x_only ept_ad ept_1gb ept_5level flexpriority apicv tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapic_reg vid ple shadow_vmcs pml ept_violation_ve ept_mode_based_exec tsc_scaling usr_wait_pause notify_vm_exiting ipi_virt
bugs : spectre_v1 spectre_v2 spec_store_bypass swapgs eibrs_pbrsb bhi spectre_v2_user vmscape
bogomips : 4200.00
clflush size : 64
cache_alignment : 64
address sizes : 52 bits physical, 57 bits virtual
power management:

0011683: OS crash issue

Tue, 13 Jan 2026 04:12:29 +0000

The system experiences multiple crashes, with VMCORE logs recorded.
RIP: 0010:__mmu_notifier_arch_invalidate_secondary_tlbs+0x2c/0x80

[ 8.765045] AMD64 EDAC driver v3.5.0
[ 8.771340] intel_rapl_common: Found RAPL domain package
[ 8.771345] intel_rapl_common: Found RAPL domain core
[ 8.772886] intel_rapl_common: Found RAPL domain package
[ 8.772891] intel_rapl_common: Found RAPL domain core
[ 8.773102] AMD Address Translation Library initialized
[ 9.115443] EXT4-fs (nvme0n1): 30 orphan inodes deleted
[ 9.115450] EXT4-fs (nvme0n1): recovery complete
[ 9.117255] EXT4-fs (nvme0n1): mounted filesystem 0eea9178-8b7f-4f5e-9ad5-f399b74e275b r/w with ordered data mode. Quota mode: none.
[ 9.746179] mlx5_core 0000:41:00.0 eth0: renamed from enp65s0f0np0
[ 10.022264] Process accounting resumed
[ 10.840137] mlx5_core 0000:41:00.1 enp65s0f1np1: Link down
[ 11.403156] mlx5_core 0000:41:00.0 eth0: Link up
[ 11.737393] overlayfs: idmapped layers are currently not supported
[ 16.522600] mlx5_core 0000:41:00.1: mlx5_query_module_id:315:(pid 4852): query_mcia_reg failed: status: 0x3
[ 17.325568] Warning: Unmaintained driver is detected: nft_compat
[ 17.476105] block dm-0: the capability attribute has been deprecated.
[ 19.584361] systemd-journald[2533]: Time jumped backwards, rotating.
[ 23.960483] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information.
[ 23.960487] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
[ 23.960488] TECH PREVIEW: WireGuard may not be fully supported.
Please review provided documentation for limitations.
[ 25.601606] Warning: Unmaintained driver is detected: ip_set
[ 96.515359] mlx5_core 0000:41:00.1: mlx5_query_mcia:399:(pid 29217): query_mcia_reg failed: status: 0x3
[ 96.515686] mlx5_core 0000:41:00.1 enp65s0f1np1: mlx5e_get_module_eeprom_by_page: mlx5_query_module_eeprom_by_page failed:0xfffffffb
[ 96.516191] mlx5_core 0000:41:00.1: mlx5_query_mcia:399:(pid 29217): query_mcia_reg failed: status: 0x3
[ 96.516484] mlx5_core 0000:41:00.1 enp65s0f1np1: mlx5e_get_module_eeprom_by_page: mlx5_query_module_eeprom_by_page failed:0xfffffffb
[ 202.217367] BUG: unable to handle page fault for address: ffffd880fecc0000
[ 202.217578] #PF: supervisor write access in kernel mode
[ 202.217730] #PF: error_code(0x0002) - not-present page
[ 202.217897] PGD 10003e067 P4D 10003e067 PUD 0
[ 202.218028] Oops: 0002 [#1] PREEMPT SMP NOPTI
[ 202.218155] CPU: 107 PID: 37544 Comm: python Kdump: loaded Tainted: G X ------- --- 5.14.0-427.42.1.el9_4.x86_64 #1
[ 202.218504] Hardware name: Dell Inc. PowerEdge R7525/0W2KKX, BIOS 2.21.1 09/24/2025
[ 202.218728] RIP: 0010:__memcg_kmem_charge_page+0x191/0x270
[ 202.218891] Code: 15 00 00 e9 c1 fe ff ff 65 48 8b 04 25 80 26 03 00 48 8b b8 30 15 00 00 e9 03 ff ff ff e8 27 26 da ff 48 8b 43 10 a8 03 75 36 <65> 48 ff 00 e8 06 6f da ff e9 3e ff ff ff e8 0c 26 da ff 48 8b 43
[ 202.219442] RSP: 0000:ffffb9818731fce0 EFLAGS: 00010246
[ 202.219596] RAX: 00003b1f00000000 RBX: ffff9da62374f000 RCX: 0000000000000000
[ 202.219809] RDX: ffff9ca5d28c1d00 RSI: 0000000000400dc0 RDI: ffff9ca5d28c1d00
[ 202.220024] RBP: 0000000000400dc0 R08: ffff9d61fecf9dd8 R09: 0000000000000000
[ 202.220234] R10: ffff9d61fecf9dc0 R11: 0000000000000018 R12: ffffde0d2c6c9b80
[ 202.220443] R13: ffffde0d2c6c9b80 R14: ffff9da48e3757c0 R15: 0000000000000001
[ 202.220654] FS: 00007fbf17fff640(0000) GS:ffff9d61fecc0000(0000) knlGS:0000000000000000
[ 202.220893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 202.221061] CR2: ffffd880fecc0000 CR3: 0000000d9d2b4002 CR4: 0000000000770ee0
[ 202.221269] PKRU: 55555554
[ 202.221349] Call Trace:
[ 202.221423]
[ 202.221484] ? show_trace_log_lvl+0x1c4/0x2df
[ 202.221615] ? show_trace_log_lvl+0x1c4/0x2df
[ 202.221744] ? __alloc_pages+0x11a/0x250
[ 202.221861] ? __die_body.cold+0x8/0xd
[ 202.221974] ? page_fault_oops+0x134/0x170
[ 202.222097] ? kernelmode_fixup_or_oops+0x84/0x110
[ 202.222244] ? exc_page_fault+0xa8/0x150
[ 202.222374] ? asm_exc_page_fault+0x22/0x30
[ 202.222506] ? __memcg_kmem_charge_page+0x191/0x270
[ 202.222649] __alloc_pages+0x11a/0x250
[ 202.222760] pte_alloc_one+0x15/0x60
[ 202.222865] __do_huge_pmd_anonymous_page+0xc6/0x500
[ 202.223014] __handle_mm_fault+0x661/0x670
[ 202.230385] ? nohz_balancer_kick+0x1f2/0x250
[ 202.237798] handle_mm_fault+0xcd/0x290
[ 202.245140] do_user_addr_fault+0x1b4/0x6a0
[ 202.252516] ? sched_clock_cpu+0x9/0xc0
[ 202.259775] exc_page_fault+0x62/0x150
[ 202.266864] asm_exc_page_fault+0x22/0x30
[ 202.273801] RIP: 0033:0x7fc02c5aa330
[ 202.280932] Code: c1 e8 03 42 0f b6 04 00 d3 f8 83 e0 01 48 8b 4f 10 0f 28 c1 84 c0 74 0a 4a 8d 04 3a f3 42 0f 10 04 a0 49 83 c4 01 49 83 c5 04 41 0f 11 45 fc 49 39 cc 7d 45 49 8b 46 18 48 85 c0 75 b4 48 8b
[ 202.295178] RSP: 002b:00007fbf17ffead0 EFLAGS: 00010202
[ 202.301995] RAX: 00007fbb6c00d340 RBX: 0000000000000000 RCX: 00000000010d02cf
[ 202.308825] RDX: 00007fbb6c00d340 RSI: 00007fb4df7555d0 RDI: 0000563048a11030
[ 202.315357] RBP: 00007fbf17ffeb10 R08: 00007fbf3025b660 R09: 0000000000000000
[ 202.321952] R10: 000000000000000a R11: c501b175607c8479 R12: 000000000042aa8d
[ 202.328551] R13: 00007fb4e0800004 R14: 0000563049b29690 R15: 0000000000000000
[ 202.335102]
[ 202.341644] Modules linked in: xt_CT xt_multiport ipt_rpfilter ip_set_hash_ip ip_set_hash_net ip_set veth wireguard(X) ip6_udp_tunnel udp_tunnel curve25519_x86_64 libcurve25519_generic binfmt_misc nf_conntrack_netlink xt_addrtype xt_statistic xt_nat xt_MASQUERADE xt_mark ipt_REJECT nf_reject_ipv4 nft_chain_nat nf_nat dummy xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_comment nft_compat nft_counter nf_tables libcrc32c nfnetlink overlay dell_rbu amd_atl intel_rapl_msr intel_rapl_common dell_wmi amd64_edac edac_mce_amd ledtrig_audio sparse_keymap rfkill video vfat kvm_amd ipmi_ssif mlx5_ib fat dcdbas kvm ib_uverbs i2c_algo_bit dell_smbios irqbypass drm_shmem_helper dell_wmi_descriptor rapl wmi_bmof drm_kms_helper pcspkr ib_core acpi_ipmi syscopyarea sysfillrect sysimgblt fb_sys_fops ipmi_si ptdma i2c_piix4 k10temp ipmi_devintf ipmi_msghandler acpi_power_meter br_netfilter bridge stp llc fuse drm auth_rpcgss sunrpc ext4 mbcache jbd2 sd_mod sg mlx5_core mlxfw ahci nvme
[ 202.341702] crct10dif_pclmul libahci psample crc32_pclmul nvme_core crc32c_intel libata tg3 tls ghash_clmulni_intel nvme_common ccp t10_pi pci_hyperv_intf sp5100_tco wmi dm_mirror dm_region_hash dm_log dm_mod
[ 202.414594] CR2: ffffd880fecc0000

0011650: system crashes when copying files from USB stick formated as exFAT

Thu, 08 Jan 2026 12:07:05 +0000

system crashes and reboots when copying files from USB stick formated as exFAT to home directory

0011617: grep terminates with "Terminated" on Rocky Linux 9

Wed, 07 Jan 2026 15:12:08 +0000

Description: When using the grep command on certain system log files (particularly /var/log/messages), the command unexpectedly terminates with the message "Terminated" before completing its operation. This occurs consistently regardless of the search pattern.

0011584: Ghostscript 9.27-17.el8_10 horribly outdated and multiple CVE Vulnerabilities

Sat, 03 Jan 2026 00:17:16 +0000

GhostScript needs to be upgraded to version 10.05.0 or above.

All NVD Base Score 9.8

CVE-2025-27837
CVE-2025-27831
CVE-2025-27836
CVE-2025-27837
CVE-2025-27831
CVE-2025-27836

0011551: Postfix parameter defaults using unsupported map types

Mon, 29 Dec 2025 13:55:37 +0000

A couple Postfix parameter defaults use unsupported btree/hash map types:

[root@rocky10 ~]# postconf -d | grep btree
address_verify_map = btree:$data_directory/verify_cache
postscreen_cache_map = btree:$data_directory/postscreen_cache

[root@rocky10 ~]# postconf -d | grep hash
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
default_database_type = hash

[root@rocky10 ~]# postconf -m
cdb
cidr
environ
fail
inline
internal
ldap
lmdb
memcache
mysql
pcre
pgsql
pipemap
proxy
randmap
regexp
socketmap
sqlite
static
tcp
texthash
unionmap
unix

Reference: https://www.mail-archive.com/postfix-users@postfix.org/msg107023.html

0011518: libsss_idp.so missing from package sssd-idp

Fri, 19 Dec 2025 22:47:15 +0000

This seems likely to be a tag along of rocky 9, the package sssd-idp is included in both variants but is only in 9 to supply the `oidc_client` package as a dependency, in 10 however its supposed to both supply that helper and an sssd module for enabling entra and keycloak based authentication to the underlying system. This is done via the file /usr/lib64/sssd/libsss_idp.so. You'll find this include for example on the package version from fedora 43+.

On os variants before rhel 10 / fedora 43 this module build is skipped with the line: https://github.com/SSSD/sssd/blob/87e72fd01387b67e2b9b2aecdae32abe3cfe781f/contrib/sssd.spec.in#L5 but this appears to be getting enforced for rocky 10.1 as well when it shouldn't be.

0011485: The errata page product dropdown missing RockyLinux10

Thu, 18 Dec 2025 15:44:02 +0000

In this page: https://errata.rockylinux.org/ the product dropdown selector is missing Rocky Linux 10 option even though there are errata shown for this version.