ALSA-2026:88477: Important: kernel security, bug fix, and enhancement update

Published Oct 22, 2026
·
Updated

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: calipso: Don't call calipso functions for AFINET sk. (CVE-2025-38147) kernel: ipv4: raw: reject IPHDRINCL packets with ihl < 5 (CVE-2026-64114) kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ismdev slot (CVE-2026-64048) kernel: ALSA: hda/cs35l41: Fix firmware load work teardown (CVE-2026-64481) kernel: fuse: re-lock request before returning from fusereffolio() (CVE-2026-64266) kernel: ipv4: fib: free fibalias with kfreercu() on insert error path (CVE-2026-64572) kernel: drm/amd/display: set newstream to NULL after release (CVE-2026-68236) kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202) kernel: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CVE-2026-68278) kernel: drm/amdgpu: fix lifetime issue of amdgpuvmgettaskinfopasid() (CVE-2026-68245) kernel: ovl: check access to copyfilerange source with src mounter creds (CVE-2026-68448) kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536) kernel: inet: frags: strip GSO state from fragments before reassembly (CVE-2026-80590) kernel: drm/vmwgfx: use checkaddoverflow for shader size+offset bound (CVE-2026-80887) kernel: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (CVE-2026-89791) kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (CVE-2026-89811) kernel: perf: Fix addrfilterranges lifetime (CVE-2026-93817) kernel: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS (CVE-2026-97493)

Bug Fix(es) and Enhancement(s):

Backport request: bonding: only set speed/duplex to unknown, if getting speed failed [almalinux-10.2.z] (JIRA:AlmaLinux-179066) RTLA segfaults on freed memory access on double SIGINT [almalinux-10.2.z] (JIRA:AlmaLinux-193031)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade almalinux/kernel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  2. Upgrade

    Upgrade almalinux/kernel-64k to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  3. Upgrade

    Upgrade almalinux/kernel-64k-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  4. Upgrade

    Upgrade almalinux/kernel-64k-debug to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  5. Upgrade

    Upgrade almalinux/kernel-64k-debug-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  6. Upgrade

    Upgrade almalinux/kernel-64k-debug-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  7. Upgrade

    Upgrade almalinux/kernel-64k-debug-devel-matched to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  8. Upgrade

    Upgrade almalinux/kernel-64k-debug-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  9. Upgrade

    Upgrade almalinux/kernel-64k-debug-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  10. Upgrade

    Upgrade almalinux/kernel-64k-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  11. Upgrade

    Upgrade almalinux/kernel-64k-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  12. Upgrade

    Upgrade almalinux/kernel-64k-devel-matched to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  13. Upgrade

    Upgrade almalinux/kernel-64k-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  14. Upgrade

    Upgrade almalinux/kernel-64k-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  15. Upgrade

    Upgrade almalinux/kernel-64k-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  16. Upgrade

    Upgrade almalinux/kernel-abi-stablelists to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  17. Upgrade

    Upgrade almalinux/kernel-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  18. Upgrade

    Upgrade almalinux/kernel-cross-headers to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  19. Upgrade

    Upgrade almalinux/kernel-debug to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  20. Upgrade

    Upgrade almalinux/kernel-debug-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  21. Upgrade

    Upgrade almalinux/kernel-debug-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  22. Upgrade

    Upgrade almalinux/kernel-debug-devel-matched to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  23. Upgrade

    Upgrade almalinux/kernel-debug-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  24. Upgrade

    Upgrade almalinux/kernel-debug-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  25. Upgrade

    Upgrade almalinux/kernel-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  26. Upgrade

    Upgrade almalinux/kernel-debug-uki-virt to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  27. Upgrade

    Upgrade almalinux/kernel-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  28. Upgrade

    Upgrade almalinux/kernel-devel-matched to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  29. Upgrade

    Upgrade almalinux/kernel-doc to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  30. Upgrade

    Upgrade almalinux/kernel-headers to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  31. Upgrade

    Upgrade almalinux/kernel-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  32. Upgrade

    Upgrade almalinux/kernel-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  33. Upgrade

    Upgrade almalinux/kernel-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  34. Upgrade

    Upgrade almalinux/kernel-modules-extra-matched to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  35. Upgrade

    Upgrade almalinux/kernel-rt to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  36. Upgrade

    Upgrade almalinux/kernel-rt-64k to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  37. Upgrade

    Upgrade almalinux/kernel-rt-64k-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  38. Upgrade

    Upgrade almalinux/kernel-rt-64k-debug to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  39. Upgrade

    Upgrade almalinux/kernel-rt-64k-debug-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  40. Upgrade

    Upgrade almalinux/kernel-rt-64k-debug-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  41. Upgrade

    Upgrade almalinux/kernel-rt-64k-debug-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  42. Upgrade

    Upgrade almalinux/kernel-rt-64k-debug-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  43. Upgrade

    Upgrade almalinux/kernel-rt-64k-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  44. Upgrade

    Upgrade almalinux/kernel-rt-64k-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  45. Upgrade

    Upgrade almalinux/kernel-rt-64k-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  46. Upgrade

    Upgrade almalinux/kernel-rt-64k-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  47. Upgrade

    Upgrade almalinux/kernel-rt-64k-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  48. Upgrade

    Upgrade almalinux/kernel-rt-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  49. Upgrade

    Upgrade almalinux/kernel-rt-debug to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  50. Upgrade

    Upgrade almalinux/kernel-rt-debug-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  51. Upgrade

    Upgrade almalinux/kernel-rt-debug-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  52. Upgrade

    Upgrade almalinux/kernel-rt-debug-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  53. Upgrade

    Upgrade almalinux/kernel-rt-debug-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  54. Upgrade

    Upgrade almalinux/kernel-rt-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  55. Upgrade

    Upgrade almalinux/kernel-rt-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  56. Upgrade

    Upgrade almalinux/kernel-rt-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  57. Upgrade

    Upgrade almalinux/kernel-rt-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  58. Upgrade

    Upgrade almalinux/kernel-rt-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  59. Upgrade

    Upgrade almalinux/kernel-tools to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  60. Upgrade

    Upgrade almalinux/kernel-tools-libs to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  61. Upgrade

    Upgrade almalinux/kernel-tools-libs-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  62. Upgrade

    Upgrade almalinux/kernel-uki-virt to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  63. Upgrade

    Upgrade almalinux/kernel-uki-virt-addons to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  64. Upgrade

    Upgrade almalinux/kernel-zfcpdump to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  65. Upgrade

    Upgrade almalinux/kernel-zfcpdump-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  66. Upgrade

    Upgrade almalinux/kernel-zfcpdump-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  67. Upgrade

    Upgrade almalinux/kernel-zfcpdump-devel-matched to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  68. Upgrade

    Upgrade almalinux/kernel-zfcpdump-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  69. Upgrade

    Upgrade almalinux/kernel-zfcpdump-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  70. Upgrade

    Upgrade almalinux/kernel-zfcpdump-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  71. Upgrade

    Upgrade almalinux/libperf to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  72. Upgrade

    Upgrade almalinux/perf to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  73. Upgrade

    Upgrade almalinux/python3-perf to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  74. Upgrade

    Upgrade almalinux/rtla to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2
  75. Upgrade

    Upgrade almalinux/rv to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.68.1.el10_2

Event History

Oct 22, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203