ALSA-2026:90365: Important: kernel security, bug fix, and enhancement update

Q: Which systems are within the stated package scope?

The advisory lists AlmaLinux kernel packages, including kernel, kernel-64k, and several 64k debug, devel, and modules variants. Systems using those packages should be reviewed.

Q: Can affected kernel versions be identified from this advisory data alone?

No. The provided data does not include affected or fixed package version numbers, so it cannot by itself determine whether a specific installed kernel build is vulnerable.

Q: Does the available information identify a configuration-based workaround?

No workaround, required configuration, or exploit precondition is provided. The available data only identifies the affected package families and the included CVE fixes.

Published Oct 26, 2026

Updated

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: udp: Deal with race between UDP socket address change and rehash (CVE-2024-57974) kernel: fuse: re-lock request before replacing page cache folio (CVE-2026-53388) kernel: net/handshake: hand off the pinned file reference to acceptdoit (CVE-2026-63979) kernel: net/handshake: Drain pending requests at net namespace exit (CVE-2026-63978) kernel: fuse: re-lock request before returning from fusereffolio() (CVE-2026-64266) kernel: net/handshake: Take a long-lived file reference at submit (CVE-2026-64523) kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476) kernel: selinux: avoid sksocket dereference in selinuxsctpbindconnect() (CVE-2026-72242) kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CVE-2026-74515) kernel: usb: usbfs: fix use-after-free of usbdevice in usbdevrelease() (CVE-2026-80824) kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CVE-2026-89638) kernel: vfio/pci: clear vdev->msiperm after freeing it on init failure (CVE-2026-89777) kernel: md/raid5-ppl: fix use-after-free in ppldoflush() (CVE-2026-93262) kernel: KEYS: encrypted: fix integer overflow of databloblen (CVE-2026-98222) kernel: netfilter: flowtable: hold reference on ct until flow is released (CVE-2026-98320)

Bug Fix(es) and Enhancement(s):

kernel panic at cryptoxor+0x2 after a number of out-of-bounds read and use-after-free read (JIRA:AlmaLinux-257205)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

74 affected componentsFixes available

almalinux/kernel<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-debug<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-debug-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-debug-devel<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-debug-devel-matched<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-debug-modules<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-debug-modules-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-debug-modules-extra<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-devel<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-devel-matched<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-modules<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-modules-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-64k-modules-extra<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-abi-stablelists<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-cross-headers<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-debug<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-debug-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-debug-devel<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-debug-devel-matched<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-debug-modules<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-debug-modules-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-debug-modules-extra<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-debug-uki-virt<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-devel<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-devel-matched<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-doc<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-headers<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-modules<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-modules-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-modules-extra<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-64k<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-64k-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-64k-debug<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-64k-debug-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-64k-debug-devel<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-64k-debug-modules<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-64k-debug-modules-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-64k-debug-modules-extra<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-64k-devel<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-64k-modules<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-64k-modules-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-64k-modules-extra<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-debug<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-debug-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-debug-devel<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-debug-modules<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-debug-modules-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-debug-modules-extra<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-devel<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-modules<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-modules-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-rt-modules-extra<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-tools<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-tools-libs<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-tools-libs-devel<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-uki-virt<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-uki-virt-addons<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-zfcpdump<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-zfcpdump-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-zfcpdump-devel<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-zfcpdump-devel-matched<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-zfcpdump-modules<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-zfcpdump-modules-core<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/kernel-zfcpdump-modules-extra<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/libperf<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/perf<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/python3-perf<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/rtla<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

almalinux/rv<5.14.0-687.61.1.el9_8

5.14.0-687.61.1.el9_8

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade almalinux/kernel to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-debug to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-debug-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-debug-devel to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-debug-devel-matched to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-debug-modules to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-debug-modules-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-debug-modules-extra to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-devel to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-devel-matched to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-modules to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-modules-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-64k-modules-extra to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-abi-stablelists to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-cross-headers to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-debug to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-debug-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-debug-devel to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-debug-devel-matched to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-debug-modules to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-debug-modules-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-debug-modules-extra to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-debug-uki-virt to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-devel to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-devel-matched to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-doc to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-headers to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-modules to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-modules-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-modules-extra to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-64k to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-64k-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-64k-debug to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-64k-debug-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-64k-debug-devel to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-64k-debug-modules to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-64k-debug-modules-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-64k-debug-modules-extra to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-64k-devel to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-64k-modules to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-64k-modules-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-64k-modules-extra to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-debug to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-debug-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-debug-devel to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-debug-modules to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-debug-modules-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-debug-modules-extra to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-devel to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-modules to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-modules-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-rt-modules-extra to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-tools to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-tools-libs to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-tools-libs-devel to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-uki-virt to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-uki-virt-addons to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-zfcpdump to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-zfcpdump-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-zfcpdump-devel to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-zfcpdump-devel-matched to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-zfcpdump-modules to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-zfcpdump-modules-core to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/kernel-zfcpdump-modules-extra to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/libperf to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/perf to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/python3-perf to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/rtla to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8
Upgrade
Upgrade almalinux/rv to a version that resolves this vulnerability.
Fixed in 5.14.0-687.61.1.el9_8

Event History

Oct 26, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which systems are within the stated package scope?

The advisory lists AlmaLinux kernel packages, including kernel, kernel-64k, and several 64k debug, devel, and modules variants. Systems using those packages should be reviewed.

Can affected kernel versions be identified from this advisory data alone?

No. The provided data does not include affected or fixed package version numbers, so it cannot by itself determine whether a specific installed kernel build is vulnerable.

Does the available information identify a configuration-based workaround?

No workaround, required configuration, or exploit precondition is provided. The available data only identifies the affected package families and the included CVE fixes.

ALSA-2026:90365: Important: kernel security, bug fix, and enhancement update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems are within the stated package scope?

Can affected kernel versions be identified from this advisory data alone?

Does the available information identify a configuration-based workaround?

Company

Resources

Contact

Frequently Asked Questions

Which systems are within the stated package scope?

Can affected kernel versions be identified from this advisory data alone?

Does the available information identify a configuration-based workaround?