ALSA-2026:91565: Important: kernel security, bug fix, and enhancement update

Published Oct 28, 2026
·
Updated

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: tcp: restrict SOATTACHFILTER to priv users (CVE-2026-53236) kernel: fuse: re-lock request before replacing page cache folio (CVE-2026-53388) kernel: net: shaper: rework the VALID marking (again) (CVE-2026-64027) kernel: net/handshake: hand off the pinned file reference to acceptdoit (CVE-2026-63979) kernel: net/handshake: Drain pending requests at net namespace exit (CVE-2026-63978) kernel: afunix: Fix UAF read of tail->len in unixstreamdatawait() (CVE-2026-64109) kernel: net/handshake: Take a long-lived file reference at submit (CVE-2026-64523) kernel: net: gro: fix double aggregation of flush-marked skbs (CVE-2026-68136) kernel: net/packet: avoid fanout hook re-registration after unregister (CVE-2026-68338) kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083) kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CVE-2026-74515) kernel: net: smc: fix splice entry lifetime imbalance in smcrxsplice (CVE-2026-74631) kernel: usb: usbfs: fix use-after-free of usbdevice in usbdevrelease() (CVE-2026-80824) kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CVE-2026-89638) kernel: vfio/pci: clear vdev->msiperm after freeing it on init failure (CVE-2026-89777) kernel: md/raid5-ppl: fix use-after-free in ppldoflush() (CVE-2026-93262)

Bug Fix(es) and Enhancement(s):

x86/microcode: Add platform mask to Intel microcode "old" list [AlmaLinux-10] [almalinux-10.2.z] (JIRA:AlmaLinux-212778) net: NULL pointer deref kernel panic in fib6walkcontinue under heavy VRF churn [almalinux-10.2.z] (JIRA:AlmaLinux-245489) backport fixes for lockdep issues reported with rt-debug [almalinux-10.2.z] (JIRA:AlmaLinux-259937)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

74 affected componentsFixes available
almalinux/kernel<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-debug<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-debug-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-debug-devel<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-debug-devel-matched<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-debug-modules<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-debug-modules-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-debug-modules-extra<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-devel<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-devel-matched<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-modules<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-modules-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-64k-modules-extra<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-abi-stablelists<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-cross-headers<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-debug<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-debug-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-debug-devel<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-debug-devel-matched<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-debug-modules<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-debug-modules-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-debug-modules-extra<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-debug-uki-virt<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-devel<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-devel-matched<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-doc<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-headers<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-modules<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-modules-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-modules-extra<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-modules-extra-matched<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-64k<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-64k-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-64k-debug<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-64k-debug-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-64k-debug-devel<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-64k-debug-modules<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-64k-debug-modules-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-64k-debug-modules-extra<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-64k-devel<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-64k-modules<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-64k-modules-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-64k-modules-extra<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-debug<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-debug-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-debug-devel<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-debug-modules<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-debug-modules-extra<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-devel<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-modules<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-modules-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-rt-modules-extra<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-tools<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-tools-libs<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-tools-libs-devel<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-uki-virt<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-uki-virt-addons<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-zfcpdump<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-zfcpdump-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-zfcpdump-devel<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-zfcpdump-devel-matched<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-zfcpdump-modules<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-zfcpdump-modules-core<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/kernel-zfcpdump-modules-extra<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/libperf<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/perf<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/python3-perf<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/rtla<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2
almalinux/rv<6.12.0-211.69.1.el10_2
6.12.0-211.69.1.el10_2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade almalinux/kernel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  2. Upgrade

    Upgrade almalinux/kernel-64k to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  3. Upgrade

    Upgrade almalinux/kernel-64k-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  4. Upgrade

    Upgrade almalinux/kernel-64k-debug to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  5. Upgrade

    Upgrade almalinux/kernel-64k-debug-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  6. Upgrade

    Upgrade almalinux/kernel-64k-debug-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  7. Upgrade

    Upgrade almalinux/kernel-64k-debug-devel-matched to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  8. Upgrade

    Upgrade almalinux/kernel-64k-debug-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  9. Upgrade

    Upgrade almalinux/kernel-64k-debug-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  10. Upgrade

    Upgrade almalinux/kernel-64k-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  11. Upgrade

    Upgrade almalinux/kernel-64k-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  12. Upgrade

    Upgrade almalinux/kernel-64k-devel-matched to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  13. Upgrade

    Upgrade almalinux/kernel-64k-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  14. Upgrade

    Upgrade almalinux/kernel-64k-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  15. Upgrade

    Upgrade almalinux/kernel-64k-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  16. Upgrade

    Upgrade almalinux/kernel-abi-stablelists to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  17. Upgrade

    Upgrade almalinux/kernel-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  18. Upgrade

    Upgrade almalinux/kernel-cross-headers to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  19. Upgrade

    Upgrade almalinux/kernel-debug to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  20. Upgrade

    Upgrade almalinux/kernel-debug-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  21. Upgrade

    Upgrade almalinux/kernel-debug-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  22. Upgrade

    Upgrade almalinux/kernel-debug-devel-matched to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  23. Upgrade

    Upgrade almalinux/kernel-debug-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  24. Upgrade

    Upgrade almalinux/kernel-debug-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  25. Upgrade

    Upgrade almalinux/kernel-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  26. Upgrade

    Upgrade almalinux/kernel-debug-uki-virt to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  27. Upgrade

    Upgrade almalinux/kernel-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  28. Upgrade

    Upgrade almalinux/kernel-devel-matched to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  29. Upgrade

    Upgrade almalinux/kernel-doc to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  30. Upgrade

    Upgrade almalinux/kernel-headers to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  31. Upgrade

    Upgrade almalinux/kernel-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  32. Upgrade

    Upgrade almalinux/kernel-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  33. Upgrade

    Upgrade almalinux/kernel-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  34. Upgrade

    Upgrade almalinux/kernel-modules-extra-matched to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  35. Upgrade

    Upgrade almalinux/kernel-rt to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  36. Upgrade

    Upgrade almalinux/kernel-rt-64k to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  37. Upgrade

    Upgrade almalinux/kernel-rt-64k-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  38. Upgrade

    Upgrade almalinux/kernel-rt-64k-debug to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  39. Upgrade

    Upgrade almalinux/kernel-rt-64k-debug-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  40. Upgrade

    Upgrade almalinux/kernel-rt-64k-debug-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  41. Upgrade

    Upgrade almalinux/kernel-rt-64k-debug-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  42. Upgrade

    Upgrade almalinux/kernel-rt-64k-debug-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  43. Upgrade

    Upgrade almalinux/kernel-rt-64k-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  44. Upgrade

    Upgrade almalinux/kernel-rt-64k-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  45. Upgrade

    Upgrade almalinux/kernel-rt-64k-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  46. Upgrade

    Upgrade almalinux/kernel-rt-64k-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  47. Upgrade

    Upgrade almalinux/kernel-rt-64k-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  48. Upgrade

    Upgrade almalinux/kernel-rt-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  49. Upgrade

    Upgrade almalinux/kernel-rt-debug to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  50. Upgrade

    Upgrade almalinux/kernel-rt-debug-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  51. Upgrade

    Upgrade almalinux/kernel-rt-debug-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  52. Upgrade

    Upgrade almalinux/kernel-rt-debug-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  53. Upgrade

    Upgrade almalinux/kernel-rt-debug-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  54. Upgrade

    Upgrade almalinux/kernel-rt-debug-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  55. Upgrade

    Upgrade almalinux/kernel-rt-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  56. Upgrade

    Upgrade almalinux/kernel-rt-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  57. Upgrade

    Upgrade almalinux/kernel-rt-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  58. Upgrade

    Upgrade almalinux/kernel-rt-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  59. Upgrade

    Upgrade almalinux/kernel-tools to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  60. Upgrade

    Upgrade almalinux/kernel-tools-libs to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  61. Upgrade

    Upgrade almalinux/kernel-tools-libs-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  62. Upgrade

    Upgrade almalinux/kernel-uki-virt to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  63. Upgrade

    Upgrade almalinux/kernel-uki-virt-addons to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  64. Upgrade

    Upgrade almalinux/kernel-zfcpdump to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  65. Upgrade

    Upgrade almalinux/kernel-zfcpdump-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  66. Upgrade

    Upgrade almalinux/kernel-zfcpdump-devel to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  67. Upgrade

    Upgrade almalinux/kernel-zfcpdump-devel-matched to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  68. Upgrade

    Upgrade almalinux/kernel-zfcpdump-modules to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  69. Upgrade

    Upgrade almalinux/kernel-zfcpdump-modules-core to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  70. Upgrade

    Upgrade almalinux/kernel-zfcpdump-modules-extra to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  71. Upgrade

    Upgrade almalinux/libperf to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  72. Upgrade

    Upgrade almalinux/perf to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  73. Upgrade

    Upgrade almalinux/python3-perf to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  74. Upgrade

    Upgrade almalinux/rtla to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2
  75. Upgrade

    Upgrade almalinux/rv to a version that resolves this vulnerability.

    Fixed in 6.12.0-211.69.1.el10_2

Event History

Oct 28, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203