ALSA-2026:93436: Important: kernel security update

Q: Which installed components are covered by this update?

The advisory lists bpftool and kernel packages, including kernel-core, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-abi-stablelists, and kernel-cross-headers.

Q: What vulnerability classes are addressed?

The listed fixes include use-after-free issues in AF_UNIX and iSCSI target handling, IPv6 extension-header handling flaws, an SMB client response-boundary issue, insufficient authorization for TIPCv2 netlink mutators, and an skb_zerocopy improper ownership management local privilege-escalation issue.

Q: Does this update address remotely reachable network functionality?

Yes. The fixes involve IPv6, iSCSI target handling, SMB client processing, and TIPCv2 netlink functionality. The advisory does not state which configurations are enabled by default or provide exploit prerequisites for these issues.

Published Nov 2, 2026

Updated

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo() (CVE-2026-63924) kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922) kernel: afunix: Fix UAF read of tail->len in unixstreamdatawait() (CVE-2026-64109) kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083) kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283) kernel: smb: client: bound dirent name against end of SMB response in cifsfilldir (CVE-2026-93787) kernel: ZDI-CAN-33367: Linux Kernel skbuff skbzerocopy Improper Ownership Management Local Privilege Escalation Vulnerability ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

25 affected componentsFixes available

almalinux/bpftool<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-abi-stablelists<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-core<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-cross-headers<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-debug<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-debug-core<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-debug-devel<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-debug-modules<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-debug-modules-extra<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-devel<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-doc<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-headers<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-modules<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-modules-extra<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-tools<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-tools-libs<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-tools-libs-devel<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-zfcpdump<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-zfcpdump-core<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-zfcpdump-devel<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-zfcpdump-modules<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/kernel-zfcpdump-modules-extra<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/perf<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

almalinux/python3-perf<4.18.0-553.181.1.el8_10

4.18.0-553.181.1.el8_10

Event History

Nov 2, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which installed components are covered by this update?

The advisory lists bpftool and kernel packages, including kernel-core, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-abi-stablelists, and kernel-cross-headers.

What vulnerability classes are addressed?

The listed fixes include use-after-free issues in AF_UNIX and iSCSI target handling, IPv6 extension-header handling flaws, an SMB client response-boundary issue, insufficient authorization for TIPCv2 netlink mutators, and an skb_zerocopy improper ownership management local privilege-escalation issue.

Does this update address remotely reachable network functionality?

Yes. The fixes involve IPv6, iSCSI target handling, SMB client processing, and TIPCv2 netlink functionality. The advisory does not state which configurations are enabled by default or provide exploit prerequisites for these issues.

ALSA-2026:93436: Important: kernel security update

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which installed components are covered by this update?

What vulnerability classes are addressed?

Does this update address remotely reachable network functionality?

Company

Resources

Contact

Frequently Asked Questions

Which installed components are covered by this update?

What vulnerability classes are addressed?

Does this update address remotely reachable network functionality?