ALSA-2026:98100: Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330) kernel: Linux kernel: PPP over L2TP Use-After-Free vulnerability (CVE-2026-68398) kernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123) kernel: Bluetooth: mgmt: fix UAF in pair command cancellation (CVE-2026-74510) kernel: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (CVE-2026-80842) kernel: ALSA: seq: midi: Serialize input teardown with eventinput (CVE-2026-90207) kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (CVE-2026-98116) kernel: s390/boot: Avoid IPL parameter append past command line (CVE-2026-98403) kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses (CVE-2026-99152) kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU (CVE-2026-99153)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/kernel-rtto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
almalinux/kernel-rt-coreto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
almalinux/kernel-rt-debugto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
almalinux/kernel-rt-debug-coreto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
almalinux/kernel-rt-debug-develto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
almalinux/kernel-rt-debug-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
almalinux/kernel-rt-debug-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
almalinux/kernel-rt-develto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
almalinux/kernel-rt-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10 - Upgrade
Upgrade
almalinux/kernel-rt-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-553.185.1.rt7.526.el8_10
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Which installed packages are covered by this update?
The update covers kernel-rt, kernel-rt-core, kernel-rt-devel, and the kernel-rt debug, debug-core, debug-devel, debug-modules, and debug-modules-extra packages.
Which enabled kernel subsystems are specifically relevant when prioritizing this update?
The listed fixes affect PPP over L2TP, Open vSwitch, Bluetooth management, bridge multicast handling, ALSA sequencer and PCM handling, s390 boot processing, iSCSI management responses and Reject PDUs, and SMC TCP ULP support.
Does the update address denial-of-service conditions as well as use-after-free issues?
Yes. It includes fixes for denial of service caused by unvalidated task data in iSCSI management responses and unvalidated task tags in iSCSI Reject PDUs.