ALSA-2026:91565: Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
kernel: tcp: restrict SOATTACHFILTER to priv users (CVE-2026-53236) kernel: fuse: re-lock request before replacing page cache folio (CVE-2026-53388) kernel: net: shaper: rework the VALID marking (again) (CVE-2026-64027) kernel: net/handshake: hand off the pinned file reference to acceptdoit (CVE-2026-63979) kernel: net/handshake: Drain pending requests at net namespace exit (CVE-2026-63978) kernel: afunix: Fix UAF read of tail->len in unixstreamdatawait() (CVE-2026-64109) kernel: net/handshake: Take a long-lived file reference at submit (CVE-2026-64523) kernel: net: gro: fix double aggregation of flush-marked skbs (CVE-2026-68136) kernel: net/packet: avoid fanout hook re-registration after unregister (CVE-2026-68338) kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083) kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CVE-2026-74515) kernel: net: smc: fix splice entry lifetime imbalance in smcrxsplice (CVE-2026-74631) kernel: usb: usbfs: fix use-after-free of usbdevice in usbdevrelease() (CVE-2026-80824) kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CVE-2026-89638) kernel: vfio/pci: clear vdev->msiperm after freeing it on init failure (CVE-2026-89777) kernel: md/raid5-ppl: fix use-after-free in ppldoflush() (CVE-2026-93262)
Bug Fix(es) and Enhancement(s):
x86/microcode: Add platform mask to Intel microcode "old" list [AlmaLinux-10] [almalinux-10.2.z] (JIRA:AlmaLinux-212778) net: NULL pointer deref kernel panic in fib6walkcontinue under heavy VRF churn [almalinux-10.2.z] (JIRA:AlmaLinux-245489) backport fixes for lockdep issues reported with rt-debug [almalinux-10.2.z] (JIRA:AlmaLinux-259937)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/kernelto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64kto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-debugto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-debug-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-debug-develto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-debug-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-debug-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-debug-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-develto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-devel-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-64k-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-abi-stableliststo a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-cross-headersto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-debugto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-debug-develto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-debug-devel-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-debug-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-debug-uki-virtto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-develto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-devel-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-docto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-headersto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-modules-extra-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rtto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-64kto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-64k-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-64k-debugto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-64k-debug-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-64k-debug-develto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-64k-debug-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-64k-debug-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-64k-debug-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-64k-develto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-64k-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-64k-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-64k-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-debug-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-develto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-toolsto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-tools-libs-develto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-uki-virtto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-uki-virt-addonsto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-zfcpdumpto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-zfcpdump-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-zfcpdump-develto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-zfcpdump-devel-matchedto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-zfcpdump-modulesto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-zfcpdump-modules-coreto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/kernel-zfcpdump-modules-extrato a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/libperfto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/perfto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/python3-perfto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/rtlato a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2 - Upgrade
Upgrade
almalinux/rvto a version that resolves this vulnerability.Fixed in 6.12.0-211.69.1.el10_2
Event History
Child vulnerabilities
Contains the following vulnerabilities.