ALBA-2026:39332 Copyright 2026 AlmaLinux OS 0 1 None

kernel bug fix and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Bug Fix(es) and Enhancement(s): * XFS data corruption using reflink [almalinux-9.8.z] (JIRA:AlmaLinux-193937) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-modules-5.14.0-687.26.1.el9_8.x86_64.rpm 005e8f74dc860c18ea5d5e1142bf356f249867c19ccb2da8cbca3c02f62a185f kernel-rt-core-5.14.0-687.26.1.el9_8.x86_64.rpm 43ea1b560e584c8be9ad2a3352041f884157d9912a52ea9a3da3a2e0cb499f83 kernel-rt-debug-5.14.0-687.26.1.el9_8.x86_64.rpm 4944e77d2b47f6a8dc332e49c491b9db90c2e58b9f1217a7429a82c44098b764 kernel-rt-devel-5.14.0-687.26.1.el9_8.x86_64.rpm 4c28181904d01fe1678ab618c77109dd8882061485a45d5227eb896ca36f004d kernel-rt-modules-extra-5.14.0-687.26.1.el9_8.x86_64.rpm 6e12a3875575f4a0a1dad5d0baf2775671476800eb18660881b2d7a3e805eaf8 kernel-rt-debug-modules-5.14.0-687.26.1.el9_8.x86_64.rpm 81602de783cc29d44e12bcb2cbb33d8de57535a7b43a7e121219f994ce55ac19 kernel-rt-modules-core-5.14.0-687.26.1.el9_8.x86_64.rpm 87296e2d7db3a5c7c5f8b15e19cdbd8e0960fb8ab338aa5d23ec418da6ab446e kernel-rt-debug-core-5.14.0-687.26.1.el9_8.x86_64.rpm 8eb1755eb05c4381f69add06572a6608c4bbd6f1d687a370914075d5b705dc0d kernel-rt-debug-modules-core-5.14.0-687.26.1.el9_8.x86_64.rpm 927306aeb036e17ad5a729c07e7f0dd44708a64853842045dfe919d1f42762a0 kernel-rt-debug-devel-5.14.0-687.26.1.el9_8.x86_64.rpm ab014727a0ec5aed1b1a811530ade6a84cd88fe63d9511cce6a3d776e2536764 kernel-rt-debug-modules-extra-5.14.0-687.26.1.el9_8.x86_64.rpm efb141d4a5142773db0f05ecb759967d17202d9dfe831a4183dedaf6a83121ce kernel-rt-5.14.0-687.26.1.el9_8.x86_64.rpm fc43557a2075fe192db85d618919cb86a3a04127c9cfb1f6148bb3bdb14fe050 ALSA-2022:5267 Copyright 2022 AlmaLinux OS 0 1 Important

An update for kernel-rt-modules-extra is now available for AlmaLinux 9.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012) * kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729) * kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-1966) * kernel: buffer overflow in IPsec ESP transformation code (CVE-2022-27666) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel-rt: update RT source tree to the latest AlmaLinux-9.0.z1 Batch (BZ#2089492) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_default kernel-rt-debug-modules-extra-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm 02fc0158918e30273b82afc53fac22e69dd28ba3050e46d2b28e56cf70056d8d kernel-rt-devel-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm 5c3a42b7fabaaccb7b15fa5d43d982893613ac4fbea2c147a0263101b278a569 kernel-rt-debug-core-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm 6ec45928bbbfdad22d03a8957f13f63c351b2c48e4e8766745fae57a8c53db3a kernel-rt-modules-extra-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm 7a0ccd9fe5c04bc2c591a17723dad834f29ca031c3ccfc9a9e42594b9444a5ef kernel-rt-core-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm 8ed218996e2991b7dc6e4daa81d88c77178922dafc6f82d464060700073cc6ed kernel-rt-debug-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm a13b1749dcce5802bf77a55621c4109ce184e391e7a162fd18367a1f9c5108cf kernel-rt-debug-kvm-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm a9999f42cf0a40500ec4de44a1a996dae81d9aba5a8ba7d9d3adff532fb04f09 kernel-rt-kvm-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm bb8a24390b05a735df0a1b6a207873c7bf2badacbe7b8e9fe072c869116606f0 kernel-rt-debug-modules-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm be10c8e75bf9b67c081002fce5b7331b0d6bdd1a6e56ea412c44b4552a8ce9d7 kernel-rt-modules-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm e1bd8711e63d6ca50f96aaf45d48bf7f9f11c9ccf685da983b6707c76533bcda kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm ea50dd085d2efd0278c94383f6b761ce10507f35231b1cdc7e204cb6828bd5e5 kernel-rt-debug-devel-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm eba7e7ff0c517fc97dc42d0bf54680eb8df08099195cd45fa1c55741022c1190 ALSA-2022:6002 Copyright 2022 AlmaLinux OS 0 1 Moderate

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * information leak in scsi_ioctl() (CVE-2022-0494) * use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * update RT source tree to the latest AlmaLinux-9.0.z2 Batch (BZ#2105450) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_default kernel-rt-debug-core-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm 116d33fd3a0dd5c999abf1ee4d4e690b4e75ea86fd80b9002edeb8becc0e1341 kernel-rt-debug-modules-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm 1b0e16d636f33d1be271553d4a993472b15d8da2f810c50f785b102ef749c035 kernel-rt-modules-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm 61850b344f050da506f281c851f6b0335b875038f87c42b69e60255006e433aa kernel-rt-debug-modules-extra-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm 6b27adeced04870aa2f31dbc18a6300c318719a87f51d1eb266b08fb519dadba kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm 7117b62db32997376a1254a650b14459fde820b17a75c5e6ea39c2a2533593d9 kernel-rt-debug-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm 79284ec50e9254817704b069c701ce02b0328e0f66f2cddae5d14424c055511a kernel-rt-devel-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm 7ba96c6cd7e9c7da0c5f96151bdbc1d503de636de55f59cc6741af2c544d0a39 kernel-rt-core-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm 89a45aa02cce57a107927d649e0b0cd0cb5231867bcedd857f0048efc60d4962 kernel-rt-kvm-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm 8c5d858f36bd7d9e74bcee226f0c4ca7610ac6171abed75df18ee6107d1e6378 kernel-rt-modules-extra-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm 9d2382b6092e4c4ab7da79d8d0d3ecf017628d80098a525ab1e933d3970c8206 kernel-rt-debug-kvm-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm bb3791f9d6c26492de063af4776acbb93d78d60aff76d99a8fbf98bb28aa575f kernel-rt-debug-devel-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm e385889167a3b8455f7e4e59480da73027dbf237901506f0ba3be367fbc5d311 ALSA-2022:6582 Copyright 2022 AlmaLinux OS 0 1 Important

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: heap overflow in nft_set_elem_init() (CVE-2022-34918) * kernel: vulnerability of buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel-rt: update RT source tree to the latest AlmaLinux-9.0.z3 Batch (BZ#2119577) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_default kernel-rt-devel-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm 05e0cacef674cf2b0dfd1cc09e0efc0e2617d1894ac847073ea6ed983167f313 kernel-rt-debug-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm 090573e278259cf26a105490877354dddceaf1cc9908f6985fe067b6d1f1da9e kernel-rt-debug-core-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm 48501de0d744f4b187b92c7af7749bb94b0360578292fa618ceb9e5577e1a254 kernel-rt-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm 561a7c0a1918a46726749136e46693ed760454bd2fc9ee21082d33450e31dbac kernel-rt-debug-modules-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm 8dc9a03abad39a8a51da61fe1a3ea80a2d20f5461a9630d376f3181bebe297c4 kernel-rt-debug-devel-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm a9c49daf145cbe20bdda8d254886c341254f16414a756ae069d2537866e90218 kernel-rt-core-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm d80eba61ef97b765e93d01fdd5104ff7b96b63962f96dc53c82fe70fada9428e kernel-rt-modules-extra-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm edd7c6b9959e572020a95cc73752ebe154e5041fd4622524c50e435385290f10 kernel-rt-modules-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm f464d927fd6cd58417376747f6c2c8cf4dd4a0d7befb20d0c3a842fe99f1b3c0 kernel-rt-debug-modules-extra-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm f5942ea6b980be844435fc6116e0a70e68d74201eceb953c46de91732f54a5c3 ALSA-2022:7319 Copyright 2022 AlmaLinux OS 0 1 Important

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585) * Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Update RT source tree to the latest AlmaLinux-9.0.z4 Batch (BZ#2123498) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_default kernel-rt-debug-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm 4871c624ca26f06a71131edaa50a639eb6388473d4023d5aff7d9ca10d788391 kernel-rt-core-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm 6702155baf6bb39c0f82345f97a6993e7bb0909b5d2f30a44556eb8e7eea0d28 kernel-rt-debug-modules-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm 9cbdc61b7daa5be70b546814664b2865fd8014ac591d96182b5dcdd9a1dae159 kernel-rt-debug-modules-extra-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm 9ee443ff3885ff2402ba2bb051121a17fc4a14935bc64441893728a8a408166b kernel-rt-modules-extra-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm a3991f08bc2bf98d5780480df3a2fbc1b0eec6af2363159350b90312daf9d256 kernel-rt-debug-devel-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm b6852b3a1cccc8b2271901b3599bef1a46689760449e5fab27feab3aadde3dcc kernel-rt-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm c504aadffc191e2a2ab8299f77a6de78356f4c6788f4f77c7570522c96ad0980 kernel-rt-devel-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm de9ef40ecb358f188fb8c4f0d5cf5d50100cbe9581dc0217286a89b6215b0781 kernel-rt-debug-core-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm ecc44ab950cbb3eec9f15192e6e37ac6b5b8b9e906e3711cbfbd4fa220d253da kernel-rt-modules-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm efeb5eec080b517ffc49c5000802fc719cc351b1a5d45eb8ce8f61bf351b6f6f ALSA-2022:7933 Copyright 2022 AlmaLinux OS 0 1 Moderate

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516) * use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640) * smb2_ioctl_query_info NULL pointer dereference (CVE-2022-0168) * NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617) * swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854) * uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016) * race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048) * use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184) * concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources (CVE-2022-1280) * kernel info leak issue in pfkey_register (CVE-2022-1353) * use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679) * NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852) * fanotify misuses fd_install() which could lead to use-after-free (CVE-2022-1998) * nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586) * openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639) * slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368) * incomplete clean-up of multi-core shared buffers (aka SBDR) (CVE-2022-21123) * incomplete clean-up of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125) * incomplete clean-up in specific special register write operations (aka DRPW) (CVE-2022-21166) * possible to use the debugger to write zero into a location of choice (CVE-2022-21499) * AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900) * AMD: Branch Type Confusion (non-retbleed) (CVE-2022-23825) * Intel: Post-barrier Return Stack Buffer Predictions (CVE-2022-26373) * double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390) * use after free in SUNRPC subsystem (CVE-2022-28893) * use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581) * Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901) * DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946) * nf_tables disallow binding to already bound chain (CVE-2022-39190) * nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_1_default kernel-rt-debug-core-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm 083a6bc434be72042214aea26a0e53719670a57ecab80d3686cc0bacfb26564a kernel-rt-core-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm 29beefdc41073c2e3b01337239579ddfdfba29b59a2b57ae9da1dccbbcd8bba2 kernel-rt-modules-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm 5330dfabc8542eda5cd5ee1636607a50f5c621a1b899797a30af4c6e0afb40b9 kernel-rt-debug-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm 54dde644138a591b22123832d9b1bb4470c92e536b98d7057ec9dd4c0a7488bc kernel-rt-debug-modules-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm 6e76e1e8438b6bf657f93cf017d9fd2efecef0506622cf5f746245a1372a78f8 kernel-rt-devel-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm 7cf46de31efd40cbc6c2b9d704580e29ffe876bc2e3ff91607279a8d5b79b92f kernel-rt-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm c5a131fa62367c9583bad51a70cf5db03e3a2cfe3f4d4fb89ae0264c3cf1e904 kernel-rt-modules-extra-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm df23c4b687ef4b9fdb6fa0e9398d98291641baddcfe6ea4d261360f4a628e755 kernel-rt-debug-modules-extra-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm e6c3683aa8842bcff86a9d3f597bebebf7745d6ca8654721f338b812b6e69dae kernel-rt-debug-devel-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm e756f4c1deca3282592cf69fdf094f3f353e4eb3a04d9f75fe2e54fb7c27a1f7 ALSA-2023:0300 Copyright 2023 AlmaLinux OS 0 1 Important

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959) * kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964) * kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139) * kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945) * kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077) * kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * DELL EMC: System is not booting into RT Kernel with perc12 [kernel-rt] (BZ#2139863) * kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z1 Batch (BZ#2141817) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_1_default kernel-rt-debug-core-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm 0a7850666dba9db542b5ea2b79bf93a19d969c83be4ebd90ea433d63c3175152 kernel-rt-core-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm 4bf08730af33c901e5be9a9fff74ce51534ff7e422009b17892159653ba61d4c kernel-rt-modules-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm 564f016406f8e55cd77f969ab291deab70dad24c52288dc43307180b75239474 kernel-rt-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm 57bb4cb752468ac2f2dcbabddac35df796795f301c9e6bc37ee5e7e2d0f3f0cf kernel-rt-debug-modules-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm 87723b3f45262dc142b53a9909075059e8122a8771ea0f30a44d769706df182d kernel-rt-debug-devel-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm 92eaea611a5f45c63629a46d876b9130780125705b1864f6d9cc4abae2b57f5e kernel-rt-modules-extra-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm 962abe9e03f83231af32ed06f3cf6ed6ffac131992b89f5b5f6b3cbb3ee40f55 kernel-rt-debug-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm ae8187e63c33553c60a6d552cf58303765f472fea78c5a13284f469c8c19e05f kernel-rt-devel-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm d3a9e81e4c2840bdb2c38dcb3e98529423cf00aae7bf7b8245dad8f0b06569ad kernel-rt-debug-modules-extra-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm e000bc13ee0a3c4bfa099a8f623abc5280615670e19fade542454d20d1bd0a49 ALSA-2023:0979 Copyright 2023 AlmaLinux OS 0 1 Important

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564) * kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378) * kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack (CVE-2022-4379) * kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan (CVE-2023-0179) * kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z2 Batch (BZ#2160463) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_1_default kernel-rt-debug-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm 0cfc3def03dec03b23599afd7f1c29ff63e5e008d71c44a42ea59c9fd2223a1e kernel-rt-modules-extra-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm 281a886d05b73d4f16b29130076bca174fb89ea6b9f7a76b7864285bfdaef483 kernel-rt-devel-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm 61713a6114b14367b326710fd5ebc4174aa8dc1780c885315941466af26e9c4a kernel-rt-debug-modules-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm 630b7b7e9ef0789d869be25e4ffa72e5682718266f1ec5a2b88faf02a94f7643 kernel-rt-debug-core-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm 6a29c8005f06ad5ef52aa2ecc02a9d03af89ec029298d26dfac497eac364f8f0 kernel-rt-debug-modules-extra-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm 702f4e9976bb581b1581b4ec5b4b856a61ec1f7c84519928b04120334f029d7e kernel-rt-debug-devel-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm 77097a64ad5b7fb1f529b5d0b60ddb008993de5230daf3b60f6a025c031a0cf9 kernel-rt-core-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm 7929a3cb0ac6edf47fc38195050f659162852119ad0a81baf8a7c46e585146ab kernel-rt-modules-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm 7dbc56b0bec658a15b6a29b53a7e702d620d96fca3c8b3fe91ae52db886bda4d kernel-rt-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm 921fb662e5944b4d9ee844f7b234ad4b837d8b8903c608cf3a47e69b6f022ec3 ALSA-2023:1469 Copyright 2023 AlmaLinux OS 0 1 Important

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744) * ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266) * kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z3 Batch (BZ#2170460) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_1_default kernel-rt-devel-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm 24429bbdfbb7d6c11f96f4e8a1c79c629c6b8167435fc0178a900f3f61ea1727 kernel-rt-debug-devel-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm 2a78129508af1271e0b475659eaa7c1a812ea3c25157702266ae96c5fe235a7d kernel-rt-debug-modules-extra-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm 2b4087ebc0e4ce975c51e978ae03ed27d81ca77a4c4e3a9b4936e45185950daf kernel-rt-modules-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm 3922bb002b6e10ed63ca8268c037e1e553db276910533d4929e4efd7719eef13 kernel-rt-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm 6c12b388834ce27975072118d26735f281e758d6f86633eec4040488c10fe8fd kernel-rt-core-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm c25b049bbbb455c8cfae802648c796aec8f4ba0467893d07c8c7e24d940b9371 kernel-rt-debug-modules-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm d023f203898cc557ccf224f4f8ed1a3fc35158abb39b1160665663df25d01570 kernel-rt-modules-extra-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm dce6da9e3425eab693e56a8cb83fffc445f843353b2229e1f4f381e8a52b1701 kernel-rt-debug-core-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm dcf85d6aa86c566ba56555695fe6b790bf15a6d5cb87d82687e3cd492455d663 kernel-rt-debug-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm ee09ad9594ac8facdecd01ca1b7fb882bc9f1b11906937aad0d1a363f3bd7195 ALSA-2023:1691 Copyright 2023 AlmaLinux OS 0 1 Important

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z3 Batch (BZ#2182066) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_1_default kernel-rt-debug-core-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm 197dd84a443fe9ebd45873adc272091a9a6bd8c9062262de12594cf8aa5d707c kernel-rt-devel-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm 26e59648ec81318d9bd835ec7b92655028057694a2269f00ba8a5fb49c10218e kernel-rt-debug-devel-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm 3a234df0d1a430ef50d0800f35d8796d29ecabdead3a9a55065784b8f6bdb30a kernel-rt-debug-modules-extra-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm 43b1218eed426f7ab1e47eff69164e7c450d0eb23a5c5b85509c76f2c827329e kernel-rt-debug-modules-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm 561b6fb5ecedf13d81c38b188a5a241a4fd4bc07b0edb88d68d10594185337dd kernel-rt-modules-extra-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm 736395f6e27c10faa029740a204e80544c2e8fcc05618cbf7ceb1ebea1ebb532 kernel-rt-core-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm 778dbeff0046d86757ee3eed06b98261c9c94515317befbc07380dfe8ae8c406 kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm a2f17794e8910e088b2f820cfe8e2a9773fdd4c037bc5795b6883322afa000da kernel-rt-debug-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm e008df3e62d7a258ca426991572bceee219518619438430ebf8139abcb446e79 kernel-rt-modules-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm ffceae49933b846fbedf434cc0630e8e2bae8d1b9df0f46d068380e939ef278f ALSA-2023:2148 Copyright 2023 AlmaLinux OS 0 1 Important

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896) * net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461) * hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341) * malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655) * possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462) * KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789) * use-after-free in free_pipe_info() could lead to privilege escalation (CVE-2022-1882) * KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196) * netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663) * race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028) * out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c (CVE-2022-3435) * race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522) * memory leak in ipv6_renew_options() (CVE-2022-3524) * data races around icsk->icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566) * data races around sk->sk_prot (CVE-2022-3567) * memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619) * denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623) * use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625) * USB-accessible buffer overflow in brcmfmac (CVE-2022-3628) * use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (CVE-2022-3640) * Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707) * mptcp: NULL pointer dereference in subflow traversal at disconnect time (CVE-2022-4128) * l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129) * igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141) * lockdown bypass using IMA (CVE-2022-21505) * double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c (CVE-2022-28388) * network backend may cause Linux netfront to use freed SKBs (XSA-405) (CVE-2022-33743) * unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188) * TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189) * u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674) * use-after-free related to leaf anon_vma double reuse (CVE-2022-42703) * use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720) * BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721) * Denial of service in beacon protection for P2P-device (CVE-2022-42722) * memory corruption in usbmon driver (CVE-2022-43750) * NULL pointer dereference in traffic control subsystem (CVE-2022-47929) * NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394) * use-after-free due to race condition in qdisc_graft() (CVE-2023-0590) * use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195) * denial of service in tipc_conn_close (CVE-2023-1382) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_2_default kernel-rt-debug-modules-core-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm 0f09e987aade16f8af6c1e9fa65298f5c3cf0df7fd720914c845b01cabeaf69b kernel-rt-core-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm 1924d99cf1b7314af624a56edf302ac296f00e0ecf8adaef6a52c3dad8428ddc kernel-rt-modules-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm 2b63450d468e187cabb9811c6bab080f2ba3b0435d5d7d25335502d6a41cf7e6 kernel-rt-debug-core-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm 39b40a7c6fd1e1334cfa8cb890ad8dd0ba1b7edb32f305dcedab9dd5a65c965a kernel-rt-debug-devel-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm 3be1a80a34f21f2923bee6b18d8e7c72885b7f325fa21accf9262857b2dc59ad kernel-rt-debug-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm 7d6790befb5635f59abc36a40d0ec81e66fbd5595afa0e718589ca6c9defc83b kernel-rt-debug-modules-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm 8852c8308f662fcd678606dcd841bd70ef311fdbca9956d6728966dd618b8f09 kernel-rt-debug-modules-extra-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm 9882416f7514afd0dee968135853d17b5f5a01cd3db2b8c2b91906516e061ca8 kernel-rt-modules-extra-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm bdd183ddc194ec375da0d7d4a03f082d95124a3a8d7ca21dfeca21d5e21289cc kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm cefd5a49af76681ba5aa5d114b82a043c0541dc007dfe06dd28597025864f88b kernel-rt-modules-core-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm ee1c597a8e5171319c2a6d7f3f2b8d2309cca7c50663e19d5f9092c05deb482b kernel-rt-devel-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm fadb325483c93043e5a3e16c310b13e554e27cd957f926d815a8eed25e42bd9d ALSA-2023:3708 Copyright 2023 AlmaLinux OS 0 1 Important

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events (CVE-2023-2235) * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation (CVE-2023-32233) * Kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002) * kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124) * kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194) * kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference (CVE-2023-28466) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [RT] Single Node Openshift cluster becomes unreachable after running less than 2 hours (BZ#2186853) * kernel-rt: update RT source tree to the latest AlmaLinux-9.2.z1 Batch (BZ#2188313) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_2_default kernel-rt-debug-modules-extra-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm 16ec2fce7651996f3a3de88c35365e8cb85d02913ecdb70ae090fac89c3a8333 kernel-rt-debug-core-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm 43910abc8c5ceb8086c12ea84d7faa21e41a1c73a6ac2cf98927abbb016294d3 kernel-rt-debug-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm 55d8a972ed02da85f322acb8c07ea1764256ce70ac411495f2a425a6bb2371fb kernel-rt-debug-devel-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm 5627f33bd091366351ec1508a4cb43e28bbed408c0c0230e55d48a5344660f90 kernel-rt-debug-modules-core-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm 5a1fc4070e6c2156cbc052791691f7cd2dcd249233b090f060c785eb0ee32b40 kernel-rt-devel-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm 5c8a5bdac984f5eccb4da44be9c2ecd690ce8765873aa1d7ad2291f5118bc7be kernel-rt-modules-extra-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm 7dbf6cf12b72317566adbe84dbed4bb9261db8cd106473d0e60b706dd3510e27 kernel-rt-core-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm 8dccf23c4bbcbf0383217e9d5a46bcc1a394c31482505d4ac3a909a33651850d kernel-rt-modules-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm af5489f0b6da033acabc0e4e8384c09bc488acc0a1a7444335aa73f04485c911 kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm b4ccb088417921462101f49dc102d9f795b189a7b925c5da9f99e7e0a2af5ffb kernel-rt-modules-core-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm b6802bd377ce62531f9e273b5025b7f953adeba3caa0ece154c0349871bb1ee7 kernel-rt-debug-modules-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm c393dc1e20d8d4b78e3446699cadee0cd3dcbfca79fa65a2cce8f0996c6a8415 ALSA-2023:4378 Copyright 2023 AlmaLinux OS 0 1 Important

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090) * kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788) * kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869) * kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458) * kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_2_default kernel-rt-debug-modules-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm 107184266dc3c60a03494d48c8fb878905989bd91d0264fc3f94012d33b5027c kernel-rt-modules-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm 1432081542e90e08240eae6f2a3b53fc55241bcaa781c648cdd888d4a0067f6b kernel-rt-devel-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm 3adc440c143c37e58b9556e489325f627bcf9151df6fdb6b0be8cde80cfca65f kernel-rt-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm 545ca9d209795376ff46d15cae44b23bdb104ff32eaecbde7216ee19f74ff288 kernel-rt-debug-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm 638a43c6ae4f86bf0ccc81f0f1eb06eabd7a49afd11bcc18cfd431025c77898b kernel-rt-modules-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm 8aacbed8cecab285638d8bf55f6f651947452eaead0d9b304febb941276e47d1 kernel-rt-debug-modules-extra-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm 8c61f2d893b2c9fc16aa4ba46f5d40d5e539068d0da5e54caa5b7f046f06a6a0 kernel-rt-debug-modules-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm 99f1e57410cf9b3067b4a0e1c297bb8fd939915ac193914d751e0ca673a2cc3b kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm aae618a108c358df3e1bb54e65b52a52f2c34c994817ad4cd6a4bca5c099d38f kernel-rt-modules-extra-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm d5e814a04443b7022881be9c78a5fbf920bf34b6180bcf33d0eac283a10410f5 kernel-rt-debug-devel-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm e83798e139e8745aca4f193edb000c776f857ba38807267d008851ada228924b kernel-rt-debug-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm f065e57c3a682bcd7d9b6adcd3ac80147fd8ed14c7663270144a2d777a6bf357 ALSA-2023:5091 Copyright 2023 AlmaLinux OS 0 1 Important

kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390) * kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE (CVE-2023-3610) * kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776) * kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004) * kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free (CVE-2023-4147) * kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248) * kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001) * kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637) * hw: amd: Cross-Process Information Leak (CVE-2023-20593) * kernel: bypass of shadow stack protection due to a logic error (CVE-2023-21102) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel-rt: update RT source tree to the latest AlmaLinux-9.2.z3 Batch (BZ#2228482) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_2_default kernel-rt-debug-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm 13b6f1bf17e3573814b877ae2cf2abfda60c6471fdc17ed11f013b3ed14fd0e8 kernel-rt-modules-core-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm 243cfe90c837c69c2fb2705b4f042444b127b4e71a0b3e03b8c4c1180f0a1ebd kernel-rt-debug-modules-extra-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm 2595618f4f9d2b606f5c2de0a79d8437a1b72c78129be17e88ae6583d3e0ac6d kernel-rt-debug-modules-core-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm 2e4308661b34e11609f08cd8424f6fd5ca6dae4ef14a1f3d97d0c49ccfee6567 kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm 34a6bc1423687e4ec97265404a2e43689848eaca86b194bdf2044cf99e42def9 kernel-rt-modules-extra-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm 3b9d1af521a676844700d5f33e0eab67e3a295ba36f95197a8f6d5a3931c64fc kernel-rt-debug-modules-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm 697880be5672a5a53e39f210d6153e8c9295e56854aaba1a9db18ef7441f7fe7 kernel-rt-debug-devel-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm 6d4c88905392f01598726da19d7df641ab6febd1b828685052cbb43dfd3ea0c6 kernel-rt-core-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm 8b4a87d4d8aa5815ed5b8494a4ead92c7a655bd7f337792985f960bdbe4c9a1a kernel-rt-devel-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm 91dc4d0d3ab87eebbd02162c21e6985f7624136b4ad57115cbf622820d0044da kernel-rt-modules-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm d568e45e88f7bbcddc6c82ad2bd7361c5985e226ebaddef28e0088fc9e834312 kernel-rt-debug-core-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm fba4dc518c442f0efeca02036b388570e7594e3ff91ea6d3badaf86b727c71f8 ALSA-2024:10274 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009) * kernel: USB: serial: mos7840: fix crash on resume (CVE-2024-42244) * kernel: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CVE-2024-50226) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_5_default kernel-rt-debug-modules-extra-5.14.0-503.15.1.el9_5.x86_64.rpm 008d93db9657f9e9a4160e43262313ccfce9516f88141fd329d463b296f30006 kernel-rt-modules-5.14.0-503.15.1.el9_5.x86_64.rpm 0ff3bf997285b587614bb5c86d16b96f6ceeacce34836f1b17a15f33a9fc56b8 kernel-rt-devel-5.14.0-503.15.1.el9_5.x86_64.rpm 339c6de9e33d38d13ded96aabf8e67778a611a9c5366115727e52d36ec489be6 kernel-rt-debug-devel-5.14.0-503.15.1.el9_5.x86_64.rpm 39011c521798d75dbed5885182b0a99e28289b5522066b8b4b1971660f2b420a kernel-rt-modules-core-5.14.0-503.15.1.el9_5.x86_64.rpm 55f6d46dbe699e3e5e5e8a05721cda77c1ab7e0d2d6283b0339b28779868b332 kernel-rt-debug-modules-5.14.0-503.15.1.el9_5.x86_64.rpm 59f95c18708809a591bb5a40080a11aa06895e34a1939528694b34a726d834ee kernel-rt-core-5.14.0-503.15.1.el9_5.x86_64.rpm 611832dd27b67585e0572b41a75eeb32c5df35bd455389424bfa97ec79398410 kernel-rt-debug-modules-core-5.14.0-503.15.1.el9_5.x86_64.rpm 80abfc39f0d99db2e3185a0449a310d79a0425c578d6a20933166f65d18e1423 kernel-rt-debug-core-5.14.0-503.15.1.el9_5.x86_64.rpm 9edeaf9f4c8494a563f54793034baf23d87b824213eda217ea4cc7c62d5d5ff2 kernel-rt-debug-5.14.0-503.15.1.el9_5.x86_64.rpm c04f3c1a43e421746c7052e57da410337507a6045d56f519a51eeca003e8268e kernel-rt-5.14.0-503.15.1.el9_5.x86_64.rpm c2a34a3193e72875c5760a44866db5055678d1da4744a9a8bebb3150e3f59c2f kernel-rt-modules-extra-5.14.0-503.15.1.el9_5.x86_64.rpm e655428d9b729ff19a04c0b204b09c6d00a255a54b93729a152d201b167d0ea7 ALSA-2024:10384 Copyright 2024 AlmaLinux OS 0 1 Important

tuned security update

The tuned packages provide a service that tunes system settings according to a selected profile. Security Fix(es): * tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root (CVE-2024-52336) * tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_5_default tuned-profiles-realtime-2.24.0-2.el9_5.alma.1.noarch.rpm 3da522cd5b375c06df9a4fa8297226b17d3f192806176a2ee4382e169d4c473f ALSA-2024:10939 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615) * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854) * kernel: iommu: Restore lost return in iommu_report_device_fault() (CVE-2024-44994) * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018) * kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook (CVE-2024-46695) * kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CVE-2024-49949) * kernel: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CVE-2024-50251) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_5_default kernel-rt-debug-5.14.0-503.16.1.el9_5.x86_64.rpm 06b24ed6ba709c7893aedac6096729badcc56ae6f53c427cd94ff8afc53803c0 kernel-rt-debug-core-5.14.0-503.16.1.el9_5.x86_64.rpm 0d4536f56675f91cc0132d13266c0ec255c362d608650caf4f09290614515d03 kernel-rt-debug-modules-5.14.0-503.16.1.el9_5.x86_64.rpm 1c366f9969e015aacc4e826acd2bebaace9cfa45f4cf1b348a85fae9876af6c9 kernel-rt-modules-core-5.14.0-503.16.1.el9_5.x86_64.rpm 628fb1b5b5adfc64ea58d7b39ab2e0f44c1cd618280d037660ab6248dc29e58f kernel-rt-debug-modules-extra-5.14.0-503.16.1.el9_5.x86_64.rpm 633436808beab986007a0cc9a36f12c70b98f3bb1b0e9a94ff2700afc483a94d kernel-rt-debug-devel-5.14.0-503.16.1.el9_5.x86_64.rpm 6e2e1a39fbed290548976d4dc8403f2c0cc8523ab57d261cdc09d9c6230bc356 kernel-rt-5.14.0-503.16.1.el9_5.x86_64.rpm 6f6fab4634d8fab90d7084b962e405608a0c8f7bec8bb54bffe92b0946f54a67 kernel-rt-modules-extra-5.14.0-503.16.1.el9_5.x86_64.rpm 724d9b2372e05fe224d4ed9785ea8fbdb90eb1d4f3fe165eb07ae1ce0671334f kernel-rt-modules-5.14.0-503.16.1.el9_5.x86_64.rpm 8a1cca8355bdd2740a7e5872b24e5517e2ad820b24a3ef449d55d508fda4bc07 kernel-rt-debug-modules-core-5.14.0-503.16.1.el9_5.x86_64.rpm 91386780259857e916b41cd862573f48bf21cf382eb916f9a1aacfe7910118a1 kernel-rt-core-5.14.0-503.16.1.el9_5.x86_64.rpm d860e61913fbcb0bb214a11193ada27027440ecbe6cae986fa86a6a8d9911ec0 kernel-rt-devel-5.14.0-503.16.1.el9_5.x86_64.rpm f9b6504558aab42eb3db35ea037ff68acb6d545738fb72a78f91bfa927c94805 ALSA-2024:11486 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399) * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564) * kernel: bpf: Fix a kernel verifier crash in stacksafe() (CVE-2024-45020) * kernel: nfsd: ensure that nfsd4_fattr_args.context is zeroed out (CVE-2024-46697) * kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CVE-2024-47675) * kernel: bpf: Fix a sdiv overflow issue (CVE-2024-49888) * kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099) * kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110) * kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125) * kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout (CVE-2024-50124) * kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (CVE-2024-50115) * kernel: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (CVE-2024-50142) * kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister (CVE-2024-50148) * kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192) * kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CVE-2024-50255) * kernel: sched/numa: Fix the potential null pointer dereference in task_numa_work() (CVE-2024-50223) * kernel: bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_5_default kernel-rt-core-5.14.0-503.19.1.el9_5.x86_64.rpm 4f9fbbbc5ae39e198ad05ceea6813b1480b7c00b27c04d9a4da0ad30b99aa148 kernel-rt-modules-core-5.14.0-503.19.1.el9_5.x86_64.rpm 58cab3faad132a2b94921aff5faade01511d0d8283960476e70a8c405aeeb182 kernel-rt-5.14.0-503.19.1.el9_5.x86_64.rpm 6847051197ccd1eae01a22c972a9d4714b44f982624d248014f4ee11f1018b39 kernel-rt-debug-modules-core-5.14.0-503.19.1.el9_5.x86_64.rpm 68d91f65a471a99fe6469da0658b18117ff4d03c102f1605e0e4056a8fb22ac5 kernel-rt-debug-core-5.14.0-503.19.1.el9_5.x86_64.rpm 6b3f31327c3f821d9bf3e76174de296590cc84a976118f1f115822ffef0de69d kernel-rt-modules-5.14.0-503.19.1.el9_5.x86_64.rpm 83cf185c5e2b020d56f2b26c1c7055d2e2cf5ed86c2647e2cbb3c2c6860e58d2 kernel-rt-debug-devel-5.14.0-503.19.1.el9_5.x86_64.rpm 9d8e97272fd4419d39324c5a49d5b883a53b2af5f40271e3341d653092af0d44 kernel-rt-modules-extra-5.14.0-503.19.1.el9_5.x86_64.rpm 9dede13c735ae8ef158ea9f190fd6c8ff6b3ac7d23623005ef1541d8beb4580f kernel-rt-debug-modules-extra-5.14.0-503.19.1.el9_5.x86_64.rpm a597bf9118cf3a04d07052e773200a87a39e85fbb48d0ec2e0bdcfbc94dccf55 kernel-rt-devel-5.14.0-503.19.1.el9_5.x86_64.rpm bb546b2717ee9536ca3c12eb6a01d83480076cd9e2cdf9bb5dc6a17b85f5c6d1 kernel-rt-debug-modules-5.14.0-503.19.1.el9_5.x86_64.rpm d748c2e4f61dec7c44470472da46d99ca93499a7a56040b136045d6daafde084 kernel-rt-debug-5.14.0-503.19.1.el9_5.x86_64.rpm f94917e62737788d67914c1342b6bdee71f866a3510bf9763529313467322523 ALSA-2024:2394 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546) * kernel: multiple use-after-free vulnerabilities (CVE-2024-1086, CVE-2023-3567, CVE-2023-4133, CVE-2023-6932, CVE-2023-39198, CVE-2023-51043, CVE-2023-51779, CVE-2023-51780, CVE-2024-1085, CVE-2024-26582) * kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555) * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480) * kernel: multiple NULL pointer dereference vulnerabilities (CVE-2022-38096, CVE-2023-6622, CVE-2023-6915, CVE-2023-42754, CVE-2023-46862, CVE-2023-52574, CVE-2024-0841, CVE-2023-52448) * kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c (CVE-2022-45934) * kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() (CVE-2023-6040) * kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF (CVE-2023-6531) * kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (CVE-2023-6931) * kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses (CVE-2023-24023) * kernel: irdma: Improper access control (CVE-2023-25775) * Kernel: double free in hci_conn_cleanup of the bluetooth subsystem (CVE-2023-28464) * kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (CVE-2023-28866) * kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl (CVE-2023-31083) * kernel: multiple out-of-bounds read vulnerabilities (CVE-2023-37453, CVE-2023-39189, CVE-2023-39193, CVE-2023-6121, CVE-2023-39194) * kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP (CVE-2023-42756) * kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write (CVE-2023-45863) * kernel: smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434) * kernel: mm/sparsemem: fix race in accessing memory_section->usage (CVE-2023-52489) * kernel: net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522) * kernel: multiple memory leak vulnerabilities (CVE-2023-52529, CVE-2023-52581) * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578) * kernel: net/core: kernel crash in ETH_P_1588 flow dissector (CVE-2023-52580) * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610) * kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (CVE-2024-0565) * kernel: tls: race between async notify and socket close (CVE-2024-26583) * kernel: tls: handle backlogging of crypto requests (CVE-2024-26584) * kernel: tls: race between tx work scheduling and socket close (CVE-2024-26585) * kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586) * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593) * kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602) * kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-26609) * kernel: local dos vulnerability in scatterwalk_copychunks (CVE-2023-6176) * kernel: perf/x86/lbr: Filter vsyscall addresses (CVE-2023-52476) * kernel: netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620) * kernel: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVE-2024-26633) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-modules-extra-5.14.0-427.13.1.el9_4.x86_64.rpm 0574e34786bbb30924da294748c37f082494726f212750e13bc4ba3e4a3ce622 kernel-rt-core-5.14.0-427.13.1.el9_4.x86_64.rpm 39c8d9f081f2fceaed2c3cad6541c98eb746a66163b0e5e60bb6d385b9b36d65 kernel-rt-debug-5.14.0-427.13.1.el9_4.x86_64.rpm 7544d5760c1098484ed469724292dda66711508f72d83b33f1a6933e1ef61194 kernel-rt-debug-modules-5.14.0-427.13.1.el9_4.x86_64.rpm 86befdc43a3ae2e344f57a26f0e5214bc29b0ad61010d635853722ff0b6e9d31 kernel-rt-debug-modules-extra-5.14.0-427.13.1.el9_4.x86_64.rpm 8f8e8620d425cb3aae2a03d77944ec0d4f3a6e5785726fe3741368b703cc0723 kernel-rt-devel-5.14.0-427.13.1.el9_4.x86_64.rpm 980304318c9da859c1f2b3f010f7cd9e3abe5e78724259f133ef592bcb03f800 kernel-rt-modules-core-5.14.0-427.13.1.el9_4.x86_64.rpm a854f7a188c733cfa2473c36a9f86d5846b3f349043f597e2092bf491e0e06b5 kernel-rt-debug-core-5.14.0-427.13.1.el9_4.x86_64.rpm cc250b8ce941aa7fac085df5637a6bd8044b9576c8b17056629ed3ab1ec800a3 kernel-rt-5.14.0-427.13.1.el9_4.x86_64.rpm df0e66a4c9aae650a4fe5725725d4e21738bb8086f85993a1ae7e346612262a4 kernel-rt-debug-modules-core-5.14.0-427.13.1.el9_4.x86_64.rpm e228632bf3103ca70f48470b0deb32770aba0cd2907f33fe86e1d1d9632ca529 kernel-rt-debug-devel-5.14.0-427.13.1.el9_4.x86_64.rpm e30c138ba2961b31fcb20724565192c1d9bf423cba51807d238b6e48c8a010dd kernel-rt-modules-5.14.0-427.13.1.el9_4.x86_64.rpm e9174bb3a42f0287f6764758d40b3a10d66ebc6b8d4717653b9a283edf109217 ALSA-2024:2758 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240) * CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743) Bug Fix(es): * ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:AlmaLinux-27009) * mm/mglru: fix underprotected page cache (JIRA:AlmaLinux-29235) * [EMR] [TBOOT OS] SUT could not go to S3 state with AlmaLinux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:AlmaLinux-29673) * system hangs completely - NMI not possible (JIRA:AlmaLinux-30678) * ice 0000:6f:00.0: PTP failed to get time (JIRA:AlmaLinux-30110) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-debug-modules-core-5.14.0-427.16.1.el9_4.x86_64.rpm 0ca7137938f847d3abbdf53e66f0404da77d041316e7d402e0e14cfcf1aa9e1b kernel-rt-devel-5.14.0-427.16.1.el9_4.x86_64.rpm 185a4b7f4096b55a678a8e2a72b621c77e53124c5bcb30647e1b1738d044020e kernel-rt-debug-5.14.0-427.16.1.el9_4.x86_64.rpm 31a0c58bc6c2d69d074774c5f30259ebd1c03adff6ab25dfc834c606c47df790 kernel-rt-5.14.0-427.16.1.el9_4.x86_64.rpm 39b35cb5404df79535ca49f149593a3a5f5db915fd9f6e6a5010beccbe59d73d kernel-rt-modules-core-5.14.0-427.16.1.el9_4.x86_64.rpm 59423d77b342c445eb748b3dd917b8bcaf9a0413ef4bae8c0ccc1444f034de9b kernel-rt-debug-core-5.14.0-427.16.1.el9_4.x86_64.rpm 63d350fbbd57bcad5b2564999af3ab3208bcc07efacd013eeb997f8d5c6e0ef5 kernel-rt-modules-5.14.0-427.16.1.el9_4.x86_64.rpm 836aae52ecaea7c10f88bd3c619eb19aaf8f53ac883c2a0b1f622f2a4d071a7a kernel-rt-modules-extra-5.14.0-427.16.1.el9_4.x86_64.rpm 97ed41a18d77d0364cfb6a4aa88f6f56a754c165984b5a7dfcf8b96d66a904dd kernel-rt-debug-modules-5.14.0-427.16.1.el9_4.x86_64.rpm ac70bb96a3c2a9c661976ebf81cdf5244f9fe96a3b2fa9b4a2c6d207a7aa3b88 kernel-rt-debug-modules-extra-5.14.0-427.16.1.el9_4.x86_64.rpm bdf0b6c8ff822f9a334b020d9b4c44f67b009c182722b5288b6445a6aec16f68 kernel-rt-core-5.14.0-427.16.1.el9_4.x86_64.rpm d4ea228991bb1ea15c53793b5b643a59c8b2cac0024b3ada122bf9d4d7dd7e3d kernel-rt-debug-devel-5.14.0-427.16.1.el9_4.x86_64.rpm eef3443bbc6b1f60a0b2c67cd4006efe50ccab193d0f1c6e140fdd59476a4e3b ALSA-2024:3306 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643) * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642) * kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673) * kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-core-5.14.0-427.18.1.el9_4.x86_64.rpm 07fcc35c11abd31fa973fc47eb054f3e1bef4fdede8bdb80dfff5f96ac43ecec kernel-rt-5.14.0-427.18.1.el9_4.x86_64.rpm 349a12cdbf9dd5374bdc378d68562e395423f3752883972baa2220cf676efff4 kernel-rt-debug-5.14.0-427.18.1.el9_4.x86_64.rpm 50e344691c8e0bc769c9453310efb952b8c30ca9012cb8e30d26c0e92cf8cc6a kernel-rt-debug-modules-core-5.14.0-427.18.1.el9_4.x86_64.rpm 68e960b7125c09588fe6e6503fe30acb2581f0f4a14f3c25212d286d6f42b6a6 kernel-rt-debug-modules-extra-5.14.0-427.18.1.el9_4.x86_64.rpm 97cb13b0896927e8fbf1e16d2457e7aab579b47df3e13c008ab9ac85977fdfe4 kernel-rt-debug-core-5.14.0-427.18.1.el9_4.x86_64.rpm aef47e4465db044e1a366dff9e044efd4574347f7bd3ed771f1a0e7dd6a4aab2 kernel-rt-modules-core-5.14.0-427.18.1.el9_4.x86_64.rpm ccbd37e033d030d10b4c9f5468321142fdefc8364a04660ec56d6d01dcccaf94 kernel-rt-debug-devel-5.14.0-427.18.1.el9_4.x86_64.rpm ce4afd6618942a49c7c9202e0a471ff8f58ac223bcdb2d33e418490295def0d8 kernel-rt-devel-5.14.0-427.18.1.el9_4.x86_64.rpm dff6c896995432abf5861cdc2d39e9863a0c289f5a01a39b82520a220e6afccc kernel-rt-debug-modules-5.14.0-427.18.1.el9_4.x86_64.rpm e2f7a44408ba8c26494e564d47d49c0a326c92d6892f308d42c37b9705e654a1 kernel-rt-modules-5.14.0-427.18.1.el9_4.x86_64.rpm e470cc541259d14ea599d6c41315698cf55e20852bb480ff38b424778395fedf kernel-rt-modules-extra-5.14.0-427.18.1.el9_4.x86_64.rpm efbe9f0d01fdc6318deb9beabd76b780d8ce3c9641bbe0c737a5298e1b75a166 ALSA-2024:3619 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735) * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-5.14.0-427.20.1.el9_4.x86_64.rpm 0f508e2bf3c5c01b29d3f6d8b04121fedc652f3e049fe1f0a877aca07a72d483 kernel-rt-modules-5.14.0-427.20.1.el9_4.x86_64.rpm 14a48bae3fdcc84a261fa3fda77c4d6d3c56d81f54ad02818033f544efc2bc0f kernel-rt-debug-core-5.14.0-427.20.1.el9_4.x86_64.rpm 210ecb6f263838b8097130af892315322166873e528df05bc0cdad22e9d98c66 kernel-rt-debug-modules-5.14.0-427.20.1.el9_4.x86_64.rpm 385cfaa0e11a1758c782557d9bb0d73209c02931e11cd379e9ef43fcabfc604e kernel-rt-debug-modules-core-5.14.0-427.20.1.el9_4.x86_64.rpm 67207a352e47654f7c84f297ebc261dc088a09030a76667253f1b9267b3ff035 kernel-rt-modules-core-5.14.0-427.20.1.el9_4.x86_64.rpm 7988a48fd375d9c64c7e11f94e6e2bfd1c6cd377c45387be2b37a5a86fb8d4f2 kernel-rt-devel-5.14.0-427.20.1.el9_4.x86_64.rpm 8f8f30d58fec20e96702de8fb689d6795e6d580a5ef6cec92b9f80e69d8dcf25 kernel-rt-core-5.14.0-427.20.1.el9_4.x86_64.rpm 9495151ae0190818253645da94553960db6237bb424bed6a8d997cd01817c824 kernel-rt-modules-extra-5.14.0-427.20.1.el9_4.x86_64.rpm aff50c8b7bbe00ffe8d29e7cee83eadd75affa75b273766d3cda8039dca17db5 kernel-rt-debug-5.14.0-427.20.1.el9_4.x86_64.rpm c3fed4a99fb6ebb65b49af51015f2fdc9edf227c171e814fa777215320a98268 kernel-rt-debug-devel-5.14.0-427.20.1.el9_4.x86_64.rpm c6ea9eb7abcfaf1306f9fdc6732fa953c9ef970788c49e63ae80751f8e456b5a kernel-rt-debug-modules-extra-5.14.0-427.20.1.el9_4.x86_64.rpm f74efac50969925670506b83128bf2853d9f20f2ee2d4fb6f9aead6f6539d16e ALSA-2024:4349 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (CVE-2023-52626) * kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset (CVE-2024-26801) * kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974) * kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393) * kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667) * kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870) * kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960) * kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400) Bug Fix(es): * cifs - kernel panic with cifs_put_smb_ses (JIRA:AlmaLinux-28943) * BUG: unable to handle page fault for address: ff16bf752f593ff8 [almalinux-9.4.z] (JIRA:AlmaLinux-35672) * [HPE 9.4 Bug] Request merge of AMD address translation library patch series [almalinux-9.4.z] (JIRA:AlmaLinux-36220) * [AlmaLinux9] kernel BUG at lib/list_debug.c:51! [almalinux-9.4.z] (JIRA:AlmaLinux-36687) * ice: DPLL-related fixes [almalinux-9.4.z] (JIRA:AlmaLinux-36716) * CNB95: net/sched: update TC core to upstream v6.8 [almalinux-9.4.z] (JIRA:AlmaLinux-37641) * IPv6: SR: backport fixes from upstream [almalinux-9.4.z] (JIRA:AlmaLinux-37669) * [RFE] Backport tmpfs noswap mount option [almalinux-9.4.z] (JIRA:AlmaLinux-38252) * Isolated cores causing issues on latest AlmaLinux9.4 kernel and not functioning as desired. [almalinux-9.4.z] (JIRA:AlmaLinux-38595) * [ice] Add automatic VF reset on Tx MDD events [almalinux-9.4.z] (JIRA:AlmaLinux-39083) * [HPEMC AlmaLinux 9.4 REGRESSION] turbostat: turbostat broken on 10+ sockets. [almalinux-9.4.z] (JIRA:AlmaLinux-34953) * bnx2x: fix crashes in PCI error handling, resource leaks [almalinux-9.4.z] (JIRA:AlmaLinux-43272) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-debug-modules-core-5.14.0-427.24.1.el9_4.x86_64.rpm 049afbe43594a3a2a8485d586f1f54cb79fa05db1911151f7d065351733f608e kernel-rt-5.14.0-427.24.1.el9_4.x86_64.rpm 1edeeed4940358db12e56491b7f0075c13126271c89bfb074883a0495d3ed01b kernel-rt-core-5.14.0-427.24.1.el9_4.x86_64.rpm 3d94d4cd922d8348ef2aae803c7b185f6ef6c6f0f184b1f0c88467a027471c86 kernel-rt-devel-5.14.0-427.24.1.el9_4.x86_64.rpm 6b507b326f5dbb4934260e1478431a7afaae7c24863d16aa85933c029f04c914 kernel-rt-debug-devel-5.14.0-427.24.1.el9_4.x86_64.rpm 779a0a86b1436aab553ce577eff94096912bf5de6114c9e25b9be517fe1126aa kernel-rt-debug-modules-5.14.0-427.24.1.el9_4.x86_64.rpm 91255d315ccb42d07a48f0978df599e704c0ffae030a9c6822a216aa43c1d52e kernel-rt-debug-core-5.14.0-427.24.1.el9_4.x86_64.rpm a542332805131de0dac3187ac04804e6b3ac9afa1e1b71f3f386cce2df926bbb kernel-rt-modules-core-5.14.0-427.24.1.el9_4.x86_64.rpm c1ebd8814dbf6a92350995261312943675b6696ffef06c158e0c1845a4c06d1d kernel-rt-debug-5.14.0-427.24.1.el9_4.x86_64.rpm c2f7a8a30345657018c61c9cde95aac67230f6d70e6ab185d6a9bbd0808848a9 kernel-rt-modules-5.14.0-427.24.1.el9_4.x86_64.rpm d15696ea8ee40c8c271f5cbe061c1a3b2a7e736833e54eab603d4a96856c13b5 kernel-rt-debug-modules-extra-5.14.0-427.24.1.el9_4.x86_64.rpm e0bd661252228e81bebeefcb5332182f44210281bd1d01b1f0e44a584b40a70e kernel-rt-modules-extra-5.14.0-427.24.1.el9_4.x86_64.rpm efcc1468d5717e93d3f8d883a996162a7ff3cf37c1c9c66df87667b55036a2c3 ALSA-2024:4583 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886) * kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (CVE-2021-47548) * kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (CVE-2021-47596) * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627) * kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (CVE-2023-52638) * kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (CVE-2024-26783) * kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (CVE-2024-26858) * kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397) * kernel: nvme: fix reconnection fail due to reserved tag allocation (CVE-2024-27435) * kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958) * kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (CVE-2024-36904) * kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (CVE-2024-38543) * kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586) * kernel: net: micrel: Fix receiving the timestamp in the frame for lan8841 (CVE-2024-38593) * kernel: netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270) * kernel: octeontx2-af: avoid off-by-one read from userspace (CVE-2024-36957) * kernel: blk-cgroup: fix list corruption from resetting io stat (CVE-2024-38663) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-modules-extra-5.14.0-427.26.1.el9_4.x86_64.rpm 365a862ca7d9b5d244cddb59f7325e46adae401ec953592dd7b7fb4a3f98f749 kernel-rt-debug-devel-5.14.0-427.26.1.el9_4.x86_64.rpm 4799f696eb697a7bd1dd7992e2b5eacaa6b4f1df9b986fd0efcd10a9bffd2eb2 kernel-rt-debug-5.14.0-427.26.1.el9_4.x86_64.rpm 4d3472677dd06b5d4ac196ae5d71777fdf47d986512b68215123e12b6ec06a39 kernel-rt-debug-modules-5.14.0-427.26.1.el9_4.x86_64.rpm 5f676f61d4d7f581da5feb84ff5a816d817cbe290229e678d8191748502b298d kernel-rt-debug-core-5.14.0-427.26.1.el9_4.x86_64.rpm 6f0157390ace881f13800058e29e48395bf4f4cc488c0a6c79f39d3f8d95bd4a kernel-rt-modules-5.14.0-427.26.1.el9_4.x86_64.rpm 70ed4f95c722af29c0d7562f14939c9d209ad7a7321220174697ec460022eb13 kernel-rt-debug-modules-core-5.14.0-427.26.1.el9_4.x86_64.rpm 831e450d8e08076d00a1ebc3af1860044a5b2286d94ddca99aa3dcb47bc3e697 kernel-rt-debug-modules-extra-5.14.0-427.26.1.el9_4.x86_64.rpm b3880e67d2bbba2dfaf8900e2de60de1f857bb105cc39094278b73a8ce8ea86b kernel-rt-devel-5.14.0-427.26.1.el9_4.x86_64.rpm b48aad31b790a5275d1dd3b1679f7deada9fe5c7fcc8555c3698e1cf74b2491e kernel-rt-5.14.0-427.26.1.el9_4.x86_64.rpm bc9adcd5ad25f96249042ce284e6b9b30fc1849bebbc938dddd90a07d2d6c5f5 kernel-rt-modules-core-5.14.0-427.26.1.el9_4.x86_64.rpm cac15c8929170fcfc653af1d96e83df29a7a50b4574761a21e450758719b77ab kernel-rt-core-5.14.0-427.26.1.el9_4.x86_64.rpm f6654dcb787453d55339069e077e3eed48a4c74176b7df29e995748e28ebc7b4 ALSA-2024:4928 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned (CVE-2023-52458) * kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (CVE-2024-26773) * kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (CVE-2024-26737) * kernel: dm: call the resume method on internal suspend (CVE-2024-26880) * kernel: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (CVE-2024-26852) * kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982) * kernel: nfp: flower: handle acti_netdevs allocation failure (CVE-2024-27046) * kernel: octeontx2-af: Use separate handlers for interrupts (CVE-2024-27030) * kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() (CVE-2024-35857) * kernel: mlxbf_gige: call request_irq() after NAPI initialized (CVE-2024-35907) * kernel: mlxbf_gige: stop interface during shutdown (CVE-2024-35885) * kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (CVE-2023-52809) * kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (CVE-2021-47459) * kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (CVE-2024-36924) * kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (CVE-2024-36952) * kernel: net: amd-xgbe: Fix skb data length underflow (CVE-2022-48743) * kernel: epoll: be better about file lifetimes (CVE-2024-38580) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-debug-modules-extra-5.14.0-427.28.1.el9_4.x86_64.rpm 0ac92ce4e6e93d5046a6634b2cdc716a1c278133e75d415a21a030fbbaf45924 kernel-rt-modules-5.14.0-427.28.1.el9_4.x86_64.rpm 13ecfe29c6d60f94b68aba09e9cc15688c410fe3eb54e6b7b56fb8713d93cd7f kernel-rt-modules-core-5.14.0-427.28.1.el9_4.x86_64.rpm 1b6857bd723516014891acbc20efb54a07c66f28c2d83f50e9443a3d04f92037 kernel-rt-debug-modules-core-5.14.0-427.28.1.el9_4.x86_64.rpm 1bde4711d42af5316fb86db533b6c7162dc0f416c7483cc1880a5fe0b2667320 kernel-rt-debug-modules-5.14.0-427.28.1.el9_4.x86_64.rpm 383bff16021306e19d10bd3cb65396057774aefa01b495312d46c8606217b10e kernel-rt-debug-5.14.0-427.28.1.el9_4.x86_64.rpm 744ab72880ae24a8bd589b01fb6323a2192e38b386f4ee3dd6525a00c01b319d kernel-rt-debug-core-5.14.0-427.28.1.el9_4.x86_64.rpm 987ae0c3eaa583d32a0c4374970a23eea18e6903c48b45865f2e9e7d46fb68f4 kernel-rt-modules-extra-5.14.0-427.28.1.el9_4.x86_64.rpm 9ab67dc8fe15186c3a45e63ed4d94d5ed83f0839ddf1fdd1801f5fc3db82a5bd kernel-rt-5.14.0-427.28.1.el9_4.x86_64.rpm b65d9a963866219f0eca45f1a1d2a3b0afd4ea3f589ab488c366ef9b4a14d231 kernel-rt-devel-5.14.0-427.28.1.el9_4.x86_64.rpm ccefab87f736e4dcaa9eb2782bb1c6bdb216388ce992421d2c58068fb2d3991d kernel-rt-debug-devel-5.14.0-427.28.1.el9_4.x86_64.rpm fbdf038b409eff5aab108de09c035318d7ceb049b274eee6aa56ce131d2205d9 kernel-rt-core-5.14.0-427.28.1.el9_4.x86_64.rpm fd1a02ae5267bf87538113385320d6eb2ef7e5d9f7f2deb936a383a7930aa790 ALSA-2024:5363 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: phy: (CVE-2024-26600) * kernel: netfilter: multiple flaws (CVE-2024-26808, CVE-2024-27065, CVE-2024-35899, CVE-2024-36005) * kernel: cifs: (CVE-2024-26828) * kernel: wifi: multiple flaws (CVE-2024-26897, CVE-2024-27052, CVE-2024-27049, CVE-2023-52651, CVE-2024-35789, CVE-2024-27434, CVE-2024-35845, CVE-2024-35937, CVE-2024-36941, CVE-2024-36922, CVE-2024-36921, CVE-2024-38575) * kernel: nfs: (CVE-2024-26868) * kernel: igc: (CVE-2024-26853) * kernel: dmaengine/idxd: (CVE-2024-21823) * kernel: ipv6: multiple flaws (CVE-2024-27417, CVE-2024-35969, CVE-2024-36903, CVE-2024-40961) * kernel: vt: (CVE-2024-35823) * kernel: efi: (CVE-2024-35800) * kernel: mlxsw: (CVE-2024-35852) * kernel: eeprom: (CVE-2024-35848) * kernel: ice: (CVE-2024-35911) * kernel: platform/x86: (CVE-2023-52864) * kernel: i40e: (CVE-2024-36020) * kernel: rtnetlink: (CVE-2024-36017) * kernel: net: multiple flaws (CVE-2024-36929, CVE-2024-36971, CVE-2021-47606, CVE-2024-38558, CVE-2024-40928, CVE-2024-40954) * kernel: ipvlan: (CVE-2024-33621) * kernel: tcp: (CVE-2024-37356) * kernel: virtio: (CVE-2024-37353) * kernel: tls: (CVE-2024-36489) * kernel: cxl/region: (CVE-2024-38391) * kernel: bonding: (CVE-2024-39487) * kernel: netns: (CVE-2024-40958) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-debug-5.14.0-427.31.1.el9_4.x86_64.rpm 043eb77edf0322629e38f4f675dbb4fc4e809a6bf0570ec66ffdc4c038f3e94f kernel-rt-5.14.0-427.31.1.el9_4.x86_64.rpm 08d4396fe83a39c63d3ce125e920978c2d03125e2ef00d6870efdde7d82abb5d kernel-rt-debug-modules-extra-5.14.0-427.31.1.el9_4.x86_64.rpm 10708fbc545e2a5c13ffdda81940777e327b4846085b964101c2fb5b8b40794c kernel-rt-debug-modules-5.14.0-427.31.1.el9_4.x86_64.rpm 1f3cb4f4ace303fff5c222793f2a355701383815b78f51d90a1782ea9cb1c4bf kernel-rt-modules-5.14.0-427.31.1.el9_4.x86_64.rpm 3654903eef227d55f4e33dccd68f969bb18cf059d4324d16c7df9e7f5ee799a8 kernel-rt-modules-extra-5.14.0-427.31.1.el9_4.x86_64.rpm 51de7cd2519df91305e6a2e2cf109721c9dff8f0c5fca3665383d477a57ee853 kernel-rt-debug-modules-core-5.14.0-427.31.1.el9_4.x86_64.rpm 6633c16deb3503fb1f68036cf4e298ece3b591d881d94a6876601fba20e948c1 kernel-rt-devel-5.14.0-427.31.1.el9_4.x86_64.rpm 6a169ccd5cbb629d91cc6dbbb03ffcb65e85c622014f2af66ad2f17b60687213 kernel-rt-debug-core-5.14.0-427.31.1.el9_4.x86_64.rpm 6cb3b8f1475500005db8484a9d53fa60a4da3083870c866d73e92614b672c339 kernel-rt-debug-devel-5.14.0-427.31.1.el9_4.x86_64.rpm be95f992b53e44020a2d08d5e82d116b6cbe7e55a46a9a691a31769c6abbf90d kernel-rt-core-5.14.0-427.31.1.el9_4.x86_64.rpm fc918080204b19f9be65cb7bec86a2e1a03f20036f9ee2d454ce516e2e052688 kernel-rt-modules-core-5.14.0-427.31.1.el9_4.x86_64.rpm fe52309ee1fe7135841369c31a1c1028f1f354c3a28361bca13c87f2855980f3 ALSA-2024:5928 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nftables: nft_set_rbtree skip end interval element from gc (CVE-2024-26581) * kernel: netfilter: nft_limit: reject configurations that cause integer overflow (CVE-2024-26668) * kernel: vfio/pci: Lock external INTx masking ops (CVE-2024-26810) * kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CVE-2024-26855) * kernel: x86/xen: Add some null pointer checking to smp.c (CVE-2024-26908) * kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925) * kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020) * kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019) * kernel: netfilter: flowtable: validate pppoe header (CVE-2024-27016) * kernel: netfilter: bridge: confirm multicast packets before passing them up the stack (CVE-2024-27415) * kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info (CVE-2024-35839) * kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898) * kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion (CVE-2024-35897) * kernel: netfilter: validate user input for expected length (CVE-2024-35896) * kernel: netfilter: complete validation of user input (CVE-2024-35962) * kernel: ice: fix LAG and VF lock dependency in ice_reset_vf() (CVE-2024-36003) * kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race (CVE-2023-52771) * kernel: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (CVE-2023-52880) * kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (CVE-2024-36025) * kernel: net/mlx5e: Fix netif state handling (CVE-2024-38608) * kernel: crypto: bcm - Fix pointer arithmetic (CVE-2024-38579) * kernel: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (CVE-2024-38544) * kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (CVE-2024-38540) * kernel: net: bridge: xmit: make sure we have at least eth header len bytes (CVE-2024-38538) * kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (CVE-2024-39476) * kernel: ipv6: fix possible race in __fib6_drop_pcpu_from() (CVE-2024-40905) * kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station (CVE-2024-40911) * kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CVE-2024-40912) * kernel: mm/huge_memory: don't unpoison huge_zero_folio (CVE-2024-40914) * kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CVE-2024-40929) * kernel: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (CVE-2024-40939) * kernel: wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CVE-2024-40941) * kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (CVE-2024-40957) * kernel: scsi: qedi: Fix crash while reading debugfs attribute (CVE-2024-40978) * kernel: tipc: force a dst refcount before doing decryption (CVE-2024-40983) * kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090) * kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091) * kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (CVE-2024-41041) * kernel: NFSv4: Fix memory leak in nfs4_set_security_label (CVE-2024-41076) * kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CVE-2024-42110) * kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment (CVE-2024-42152) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-devel-5.14.0-427.33.1.el9_4.x86_64.rpm 014438060816fd690c767b8fbf9da3f56bd2518175938816580b8dc89e0748d8 kernel-rt-debug-5.14.0-427.33.1.el9_4.x86_64.rpm 028d39c0575d46cd8f9b1e5939f18e16d85159ea8576793a0cd89c99c822e2c4 kernel-rt-debug-core-5.14.0-427.33.1.el9_4.x86_64.rpm 5ed7282f9ea832c901daba67fe283e0401b003772ac4613035b0ccc134043cd6 kernel-rt-modules-extra-5.14.0-427.33.1.el9_4.x86_64.rpm 6f19d9d1f0ccbd2b14b821dc68e8bc54776546f793b4b700266d5372df78ee45 kernel-rt-debug-modules-extra-5.14.0-427.33.1.el9_4.x86_64.rpm 73700915c37499e39f726178eaf0ba99ee44087b888d366a99f84936ef26899f kernel-rt-modules-core-5.14.0-427.33.1.el9_4.x86_64.rpm 76f4ef1f067c400bbf8a6c409ad687440de1e5d10aacee74a290dadf77bde5b4 kernel-rt-debug-devel-5.14.0-427.33.1.el9_4.x86_64.rpm 868b5e35cf9ff4229774c2b862872a56b0abe8fbbb576f45680af7542fa9adfa kernel-rt-debug-modules-core-5.14.0-427.33.1.el9_4.x86_64.rpm 9cfea6793328a65a60ad02938462e320e13504403e725b0c21a4669db2f93195 kernel-rt-debug-modules-5.14.0-427.33.1.el9_4.x86_64.rpm b2e8032390ac813edeb2c6a1bc8c79d8ac10f26966d3566995ef3c8b8155ff64 kernel-rt-5.14.0-427.33.1.el9_4.x86_64.rpm bb7af90bfe740b5ebbc6f5f169708b451b2488092cdff9fd5e8d834137f34612 kernel-rt-modules-5.14.0-427.33.1.el9_4.x86_64.rpm c69a427de47d1ea8f5359d55ad103839702f130722c8ac3f6003eadbc866bbb1 kernel-rt-core-5.14.0-427.33.1.el9_4.x86_64.rpm e4f4322715c8240a20f9815bfd4301fec81d425fa0e9eab4655e9709034c02f7 ALSA-2024:6567 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463) * kernel: nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629) * kernel: mm: cachestat: fix folio read-after-free in cache walk (CVE-2024-26630) * kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (CVE-2024-26720) * kernel: Bluetooth: af_bluetooth: Fix deadlock (CVE-2024-26886) * kernel: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (CVE-2024-26946) * kernel: KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (CVE-2024-35791) * kernel: mm: cachestat: fix two shmem bugs (CVE-2024-35797) * kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems (CVE-2024-35875) * kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000) * kernel: iommufd: Fix missing update of domains_itree after splitting iopt_area (CVE-2023-52801) * kernel: net: fix out-of-bounds access in ops_init (CVE-2024-36883) * kernel: regmap: maple: Fix cache corruption in regcache_maple_drop() (CVE-2024-36019) * kernel: usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619) * kernel: net: bridge: mst: fix vlan use-after-free (CVE-2024-36979) * kernel: scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559) * kernel: xhci: Handle TD clearing for multiple streams case (CVE-2024-40927) * kernel: cxl/region: Fix memregion leaks in devm_cxl_add_region() (CVE-2024-40936) * kernel: net/sched: Fix UAF when resolving a clash (CVE-2024-41040) * kernel: ppp: reject claimed-as-LCP but actually malformed packets (CVE-2024-41044) * kernel: mm: prevent derefencing NULL ptr in pfn_section_valid() (CVE-2024-41055) * kernel: PCI/MSI: Fix UAF in msi_capability_init (CVE-2024-41096) * kernel: xdp: Remove WARN() from __xdp_reg_mem_model() (CVE-2024-42082) * kernel: x86: stop playing stack games in profile_pc() (CVE-2024-42096) * kernel: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (CVE-2024-42102) * kernel: mm: avoid overflows in dirty throttling logic (CVE-2024-42131) * kernel: nvme: avoid double free special payload (CVE-2024-41073) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-debug-core-5.14.0-427.35.1.el9_4.x86_64.rpm 09974c9271b9177dbcc1c063416b82771cceb366de825677a33f833746ef567c kernel-rt-devel-5.14.0-427.35.1.el9_4.x86_64.rpm 27728f700651eb663f96fbc6c97e6447a391dba876256510ade51d8e55316a46 kernel-rt-modules-extra-5.14.0-427.35.1.el9_4.x86_64.rpm 2a2ab29f3deb7b77990d02e948de1b7485deb21ed8f186c4f6317d84c54ddceb kernel-rt-5.14.0-427.35.1.el9_4.x86_64.rpm 31987ae5696de0f99638894eb64ad58164a16734a33d8257f33f813fec3bb5b8 kernel-rt-modules-5.14.0-427.35.1.el9_4.x86_64.rpm 6358badd937067f018a69e0759417e76a97462bec45bb7fd26750bafb21b3656 kernel-rt-debug-5.14.0-427.35.1.el9_4.x86_64.rpm 6a241f76e58cd00eeeb2b721cc3cc80b4d4efe2abde252583050352949f7bc12 kernel-rt-core-5.14.0-427.35.1.el9_4.x86_64.rpm 9f2cd6a8d8b6b90f18d0176920a3fe5efe0593a0c9288df00a69dd5949587c89 kernel-rt-debug-modules-5.14.0-427.35.1.el9_4.x86_64.rpm a361d4e6579c28521eb723e4a98d807a047824f6d8a425f7d2b05eca19fa0648 kernel-rt-modules-core-5.14.0-427.35.1.el9_4.x86_64.rpm e13b806da1ece33728ed72c8ad5de5cdb0f89fb930f5a453a74099695f5d33d1 kernel-rt-debug-modules-core-5.14.0-427.35.1.el9_4.x86_64.rpm e88b0b98fabce264cca3b69c95721173285735f0cb3ad914753e5ea2f62d69a4 kernel-rt-debug-devel-5.14.0-427.35.1.el9_4.x86_64.rpm e8a88db45fde58ea4cac9a706a945411b8f29dca50e70d00c2e4500c2434d0d1 kernel-rt-debug-modules-extra-5.14.0-427.35.1.el9_4.x86_64.rpm f2cc5db518156a39f88005a0c409c730bfa4eb2d07fbe4e98176e3ca332754a9 ALSA-2024:6997 Copyright 2024 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439) * kernel: net/sched: act_mirred: don't override retval if we already lost the skb (CVE-2024-26739) * kernel: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CVE-2024-26947) * kernel: scsi: qla2xxx: Fix command flush on cable pull (CVE-2024-26931) * kernel: scsi: qla2xxx: Fix double free of the ha->vp_map pointer (CVE-2024-26930) * kernel: scsi: qla2xxx: Fix double free of fcport (CVE-2024-26929) * kernel: fork: defer linking file vma until vma is fully initialized (CVE-2024-27022) * kernel: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes (CVE-2024-26991) * kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem (CVE-2024-35895) * kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016) * kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899) * kernel: cpufreq: exit() callback is optional (CVE-2024-38615) * kernel: ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601) * kernel: cppc_cpufreq: Fix possible null pointer dereference (CVE-2024-38573) * kernel: gfs2: Fix potential glock use-after-free on unmount (CVE-2024-38570) * kernel: wifi: nl80211: Avoid address calculations via out of bounds array indexing (CVE-2024-38562) * kernel: Input: cyapa - add missing input core locking to suspend/resume functions (CVE-2023-52884) * kernel: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CVE-2024-40984) * kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071) * kernel: wifi: mt76: replace skb_put with skb_put_zero (CVE-2024-42225) * kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CVE-2024-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-core-5.14.0-427.37.1.el9_4.x86_64.rpm 01bfa3b8ad63aa70f727417911a5c97794dad70497d261372de49f514d6c49da kernel-rt-debug-devel-5.14.0-427.37.1.el9_4.x86_64.rpm 043ab250efa58865e55f74693c93f78294471f349ef1c563037a8524d2968b26 kernel-rt-debug-modules-core-5.14.0-427.37.1.el9_4.x86_64.rpm 07091f094a17f81d82dc58a476f5f34f7e44947ce5a1559d0b72213da7cbfe8e kernel-rt-debug-modules-extra-5.14.0-427.37.1.el9_4.x86_64.rpm 35331aed5b4bafb45a14b4a8aa11471a6e77167788a5f8984b383a5aa282b16c kernel-rt-devel-5.14.0-427.37.1.el9_4.x86_64.rpm 4bd8ff043e59b5dcebaee980f75493226af90b2216ac99a58d787f91702d3d31 kernel-rt-debug-5.14.0-427.37.1.el9_4.x86_64.rpm 653a8c0862ee466c02cdfcdcef64c4b36cbdc7e6d59f3f05dacfda83ed534b20 kernel-rt-modules-extra-5.14.0-427.37.1.el9_4.x86_64.rpm 70e9a95206f19ae115b96f5ea337b562359198b13fb3c8fc450d761344817908 kernel-rt-5.14.0-427.37.1.el9_4.x86_64.rpm 995ec3f6dac756948c6f3b6bd30d7abd9e1d6d06a8d934223c3d3069bd5b91b3 kernel-rt-modules-core-5.14.0-427.37.1.el9_4.x86_64.rpm a77902bf0b15afca520c10ad869d476f619fe4d84c7c229d27c07b9c19922fd5 kernel-rt-debug-modules-5.14.0-427.37.1.el9_4.x86_64.rpm b14e1d75b14c65005e0c2b77926f8d53282a6bcad157090fb0e594ebb463f3a6 kernel-rt-debug-core-5.14.0-427.37.1.el9_4.x86_64.rpm df901053accfeeb26e6d8e3e92c21a55b9ab8f96b1340cd72a89c6e30945cef1 kernel-rt-modules-5.14.0-427.37.1.el9_4.x86_64.rpm e1af73493f6b523d0821dc776dbcb0a2023ab850d4fb359bad35773a6a38ee39 ALSA-2024:8162 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746) * kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403) * kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658) * kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CVE-2024-35989) * kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (CVE-2021-47385) * kernel: mptcp: ensure snd_nxt is properly initialized on connect (CVE-2024-36889) * kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978) * kernel: net/mlx5: Add a timeout to acquire the command queue semaphore (CVE-2024-38556) * kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CVE-2024-39483) * kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502) * kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CVE-2024-40959) * kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush (CVE-2024-42079) * kernel: sched: act_ct: take care of padding in struct zones_ht_key (CVE-2024-42272) * kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error (CVE-2024-42284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-debug-modules-5.14.0-427.40.1.el9_4.x86_64.rpm 0873b14b373700b2ad7719ab7dd59e741ce73904fcca3f4b9bf2c019f68eccc1 kernel-rt-modules-extra-5.14.0-427.40.1.el9_4.x86_64.rpm 1f73cfceee582cc71560e0f9de14f5b5588a84b9b3ea567668b272c05ad1900e kernel-rt-5.14.0-427.40.1.el9_4.x86_64.rpm 26a6cf88548c3154a158c0667b56f6cba11f88341ff8bf9b03d4def600ee353d kernel-rt-devel-5.14.0-427.40.1.el9_4.x86_64.rpm 385ee5d296a64dee8340b67982509c20a0afa8cc3c1628934d19849218dede84 kernel-rt-modules-5.14.0-427.40.1.el9_4.x86_64.rpm 6ec8905e1d4307bba0517fa57e9890b5e25852fd5e86403b330359df73275785 kernel-rt-modules-core-5.14.0-427.40.1.el9_4.x86_64.rpm 859c8f699e0e704a91aed55e4bcea5da4470a8964da8295a590abab928046304 kernel-rt-debug-core-5.14.0-427.40.1.el9_4.x86_64.rpm 9acfb942a74556779351c81311f6cad03ad447a71efdf533b71c20b53eb86df5 kernel-rt-core-5.14.0-427.40.1.el9_4.x86_64.rpm a05cadd6f6c3e072b5c42fed8394978b9cfbeb30014983a995df436329b211af kernel-rt-debug-devel-5.14.0-427.40.1.el9_4.x86_64.rpm b2cbcc20c8b58226beb9edfe0b20bb11e3c350771d8f0ac977bdd0fe0ca22e81 kernel-rt-debug-modules-core-5.14.0-427.40.1.el9_4.x86_64.rpm b30b9736b329b95f77d5e175ca5a370ff8358ccb1a1441a235c9ea01e8dd23e4 kernel-rt-debug-5.14.0-427.40.1.el9_4.x86_64.rpm c267dc718ba0a6ec0fc390436075d73f79bcfd2205d6aaa0c39a64648b661b94 kernel-rt-debug-modules-extra-5.14.0-427.40.1.el9_4.x86_64.rpm f1351dd5f3d511c9c548206def98c6a6e93507213371b41cd2b47e821f6a189d ALSA-2024:8617 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201) * kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640) * kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826) * kernel: af_unix: Fix garbage collector racing against connect() (CVE-2024-26923) * kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del (CVE-2024-26961) * kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935) * kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383) * kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too (CVE-2024-36244) * kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472) * kernel: netfilter: nft_inner: validate mandatory meta and payload (CVE-2024-39504) * kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CVE-2024-40904) * kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931) * kernel: ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960) * kernel: ext4: do not create EA inode under buffer lock (CVE-2024-40972) * kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CVE-2024-40977) * kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (CVE-2024-40995) * kernel: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (CVE-2024-40998) * kernel: netpoll: Fix race condition in netpoll_owner_active (CVE-2024-41005) * kernel: xfs: don't walk off the end of a directory data block (CVE-2024-41013) * kernel: xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014) * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854) * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-debug-core-5.14.0-427.42.1.el9_4.x86_64.rpm 0846133b2b7272cecd82d950e55d74fee00b5aadda42d38032aaa29f83aa0b68 kernel-rt-core-5.14.0-427.42.1.el9_4.x86_64.rpm 20dd61a0ce86b3673e41630b45d0698d82232dddbebd685f902c9a06a7f0c9ca kernel-rt-modules-core-5.14.0-427.42.1.el9_4.x86_64.rpm 2576c3c81d40dd34162be0bb9c32a78c4305f45f495b567aff415993138fd1b2 kernel-rt-debug-modules-extra-5.14.0-427.42.1.el9_4.x86_64.rpm 59796260a746d8c0c5fbb03f7f15ddded7c24856105c9ad0abde491daec55bf8 kernel-rt-debug-5.14.0-427.42.1.el9_4.x86_64.rpm 71fbbdb8553037578d65e253e5337d59884a2c4433519e1dc97ab0a1819d73ca kernel-rt-debug-modules-5.14.0-427.42.1.el9_4.x86_64.rpm a5032b59f57dd30de42c1e90eb3b318f6ad50f51cf70aad85936f60bc3c3d801 kernel-rt-devel-5.14.0-427.42.1.el9_4.x86_64.rpm aa768c4b2714f973035403520c04f479f64a484013e937bd9170138e7e3d233f kernel-rt-modules-extra-5.14.0-427.42.1.el9_4.x86_64.rpm ce9e2bd8f50b4f66dedf276641ffd0984f4aee3d25915a5e4203fdcd9ce5bfb8 kernel-rt-modules-5.14.0-427.42.1.el9_4.x86_64.rpm e3bb584c636b197d8d92f42df40cc0cb4f5becf6d7023262d7b0eb550d48f590 kernel-rt-5.14.0-427.42.1.el9_4.x86_64.rpm f832f6f1e70cd95e0c8244d7f22ac7aa7fba154bb1687116ec4289ed9d9d14e9 kernel-rt-debug-devel-5.14.0-427.42.1.el9_4.x86_64.rpm f93b32de14b7a50540e7b38bc3517dd58938fc08e921b6191124728d456c9165 kernel-rt-debug-modules-core-5.14.0-427.42.1.el9_4.x86_64.rpm feb16c31afd639dc7b5aa22d5ebca056c02d2844055edaaf9a38acc0641c3af7 ALSA-2024:9605 Copyright 2024 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: nexthop: Initialize all fields in dumped nexthops (CVE-2024-42283) * kernel: iommufd: Require drivers to supply the cache_invalidate_user ops (CVE-2024-46824) * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_4_default kernel-rt-debug-5.14.0-503.14.1.el9_5.x86_64.rpm 132bf2b36bbbbc07e4d2f55f3c1ae36e811f3e62a6d027d6c2d43e37986e1561 kernel-rt-core-5.14.0-503.14.1.el9_5.x86_64.rpm 151be011c93212f6a981fdd7d0e0b4c49d9d08831df154e47579eeb884792f54 kernel-rt-devel-5.14.0-503.14.1.el9_5.x86_64.rpm 503645e20fa1db53799712cc133fabc864020d00a4be731350010e2e61febfd9 kernel-rt-modules-extra-5.14.0-503.14.1.el9_5.x86_64.rpm 5146fc88cd3f6e2e7f0785c5ce61bf83e7add34f59e16e978faf4829ee742100 kernel-rt-debug-devel-5.14.0-503.14.1.el9_5.x86_64.rpm 7163005de3ac9968744bcf0da022e63bcd53d6a106c60d33510eed5fb7e2bf0c kernel-rt-modules-5.14.0-503.14.1.el9_5.x86_64.rpm 9098b0c57ae32948a54a9bac162bb5a92867825d76f1537aeec3b8d6bcc50043 kernel-rt-debug-modules-5.14.0-503.14.1.el9_5.x86_64.rpm 9874194932e58dc28ba292751e16aa2ada9dea1e223447dbee3c51778c95f2c5 kernel-rt-debug-modules-core-5.14.0-503.14.1.el9_5.x86_64.rpm a0e80615bfa28c9bc53161fec694d9e0eee8c516f7a5443607ed8d676289b276 kernel-rt-5.14.0-503.14.1.el9_5.x86_64.rpm b0abc2731806bfcf4db883098239e753a9d147596d0edaa2e47bfecf310d240c kernel-rt-debug-modules-extra-5.14.0-503.14.1.el9_5.x86_64.rpm b0e14d98605d345e88b0144406e70639adc68407f99bb37dda6817c22e5f5020 kernel-rt-modules-core-5.14.0-503.14.1.el9_5.x86_64.rpm b55e62805a8d56a58cdc76e7a666d3a3a495b7297933143cf17f65891097ced3 kernel-rt-debug-core-5.14.0-503.14.1.el9_5.x86_64.rpm bafc36530cbcc3a3c746252549cf366c2ac63c4322347bd90254463e75bb6f0a ALSA-2025:0059 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: perf/aux: Fix AUX buffer serialization (CVE-2024-46713) * kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (CVE-2024-50208) * kernel: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CVE-2024-50252) * kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_5_default kernel-rt-debug-core-5.14.0-503.21.1.el9_5.x86_64.rpm 002ffb01c917a8ce5cde60d15535061c8a82070dd3cda6121944eb2d3ed4bfb5 kernel-rt-debug-devel-5.14.0-503.21.1.el9_5.x86_64.rpm 11f58228a1331d32cbfc35e30d99ed88e65e6cc61891a32fbd4900557090abe8 kernel-rt-devel-5.14.0-503.21.1.el9_5.x86_64.rpm 22d1a3a37f5c22cab5ede8e1ae2d25f120382dbea054aeb71d341f90652137a3 kernel-rt-core-5.14.0-503.21.1.el9_5.x86_64.rpm 29483141971d147e553d58a3fc43e81ed43f5b48544e9d47be3a4016cfb4e94e kernel-rt-5.14.0-503.21.1.el9_5.x86_64.rpm 4adf3b43ef60d6f92ce38592fd96c6763f408d9f9db85e46515ab06317dca82f kernel-rt-debug-5.14.0-503.21.1.el9_5.x86_64.rpm 5303b98c055210474ba26c4dde966a89ddb2a40a37e3f5e9bcd5f44275a2db75 kernel-rt-modules-extra-5.14.0-503.21.1.el9_5.x86_64.rpm 690d96ceda46977412bd346f63103df75f98630ed830978573fb03fff95c8d66 kernel-rt-modules-5.14.0-503.21.1.el9_5.x86_64.rpm 7be43b1de272238994b00ebdd3f9e6a8829820244eeaaaf40228e3f515809a8c kernel-rt-debug-modules-5.14.0-503.21.1.el9_5.x86_64.rpm 9b1f13c2e93897d67aba4db77fa3104be2ca53f409b48f5faa83f8b551ce2e3e kernel-rt-debug-modules-core-5.14.0-503.21.1.el9_5.x86_64.rpm dbe214ce25ca5323fec97756682c27f2bf4fd4583ce5a5db05578f8623046a12 kernel-rt-debug-modules-extra-5.14.0-503.21.1.el9_5.x86_64.rpm ed83b67169827b5baf317c5715c61d5f079fd099d073b87f80bfc9de3afb426f kernel-rt-modules-core-5.14.0-503.21.1.el9_5.x86_64.rpm f2e345e2d6b35ce8a9912c46c46a3eda3d0a7889b4fa151359e9c779bc280913 ALSA-2025:0578 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (CVE-2024-50154) * kernel: arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275) * kernel: i40e: fix race condition by adding filter's intermediate sync state (CVE-2024-53088) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_5_default kernel-rt-debug-modules-extra-5.14.0-503.22.1.el9_5.x86_64.rpm 44d82814a39fe2ae0189108fdcbbaf18155d27d434d18e63ed0374a7c533a0a3 kernel-rt-devel-5.14.0-503.22.1.el9_5.x86_64.rpm 5712c06873784d8bb2527105f475b2de5e206f340b33d7b50e3b98249c8454f9 kernel-rt-core-5.14.0-503.22.1.el9_5.x86_64.rpm 7353f99e6932a90bfedab7dea799c9ba68c09fc7670d21ef18d782e3258db1ad kernel-rt-debug-devel-5.14.0-503.22.1.el9_5.x86_64.rpm 7e5beecaed3aff7b564a2247e00b1bbe6ac2eb62d468000368fcb68328f45477 kernel-rt-modules-5.14.0-503.22.1.el9_5.x86_64.rpm 868b914057f766481349424631c8a2f00860517da8d396eab1d73e0d7a5d4840 kernel-rt-debug-5.14.0-503.22.1.el9_5.x86_64.rpm aa7d28dc2698d225ff8c7d83e6664228b42163964eee54ee5c5a7ad2f4015f79 kernel-rt-modules-core-5.14.0-503.22.1.el9_5.x86_64.rpm bc6ee56499e535b9aaf8cade0c70d0d4c3e9d0cf0eb28105a7d55460fa191d01 kernel-rt-debug-modules-5.14.0-503.22.1.el9_5.x86_64.rpm d49f118d682c70537e79bc55b58c2204ad080be219360b5a9a5ceaafeceee2bb kernel-rt-debug-core-5.14.0-503.22.1.el9_5.x86_64.rpm e1d1a85475445ec118fe465cb6be41dc4f452442b94eb538554d1db3e0fcb721 kernel-rt-modules-extra-5.14.0-503.22.1.el9_5.x86_64.rpm f10e24595a2f5edb0745cb87b94e7ab862443f554ef3ad401bcc3dcd9d511000 kernel-rt-debug-modules-core-5.14.0-503.22.1.el9_5.x86_64.rpm f5a9bf6c1abf2a5ac48a7a1f2d0e3eee17414c73fbd9aed865908cffd8acacde kernel-rt-5.14.0-503.22.1.el9_5.x86_64.rpm fc426ed8be41c6242b8c4a571a83be6945cefe1f16d7dd930366898530a15d44 ALSA-2025:10379 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759) * kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CVE-2025-21887) * kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004) * kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CVE-2022-49846) * kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CVE-2025-37799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-modules-5.14.0-570.25.1.el9_6.x86_64.rpm 197b6b3d4ab092501f856d5244f12d225824b2b194e1cd5ebaa29884ea57a758 kernel-rt-core-5.14.0-570.25.1.el9_6.x86_64.rpm 2e59681241ba7d0cb5a391adc8b31ca3de081c2bf65ab424dddfc667f3bdb056 kernel-rt-debug-devel-5.14.0-570.25.1.el9_6.x86_64.rpm 6034383b4e321762148b6a5f12dfaed5a1b197e06a598f4e79c287cfe0a7df8c kernel-rt-devel-5.14.0-570.25.1.el9_6.x86_64.rpm 69d1f96c4145c36b045aa2726e6d22738b5c4f5a1397c6cf8526f49214ee7e7c kernel-rt-debug-modules-5.14.0-570.25.1.el9_6.x86_64.rpm 83ae6a0860daddc08d018f71ec22f4d92fd2853be4581eda9d5a2b9cec079061 kernel-rt-modules-extra-5.14.0-570.25.1.el9_6.x86_64.rpm 901505b411d22bffa3e1e64eeff680f0a11ca24b4abd922086d177c1fb144799 kernel-rt-5.14.0-570.25.1.el9_6.x86_64.rpm 9f5336d088def33c6a56951cd6d9aeb6258990915978bab45ed342eb09467edb kernel-rt-debug-modules-core-5.14.0-570.25.1.el9_6.x86_64.rpm a5109a0f5b25b1c64930ef610a68ac9f49203ed42af922d0d1e8885895dc8878 kernel-rt-modules-core-5.14.0-570.25.1.el9_6.x86_64.rpm b28a2129b066790127b9bde92ff6f7063d739190de402f77b5eb6240595c92c4 kernel-rt-debug-core-5.14.0-570.25.1.el9_6.x86_64.rpm c28ad7403932e4ee5de6117bccac6806d0fc18992c2c1da0c9fcc0c8f7ae0b4c kernel-rt-debug-modules-extra-5.14.0-570.25.1.el9_6.x86_64.rpm cb3128199d54a37542ae3320c007b1286d76eabadd780b10bf58959c9fa34075 kernel-rt-debug-5.14.0-570.25.1.el9_6.x86_64.rpm d15b8d57f2143f695e041ee4803856a16d472ea3e618dec7c28309ef6d334f1c ALSA-2025:10837 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-core-5.14.0-570.26.1.el9_6.x86_64.rpm 05312eb0cdcaaee921257ce80fff036c15e484cd8c79b64e3bc507020d02ba73 kernel-rt-modules-core-5.14.0-570.26.1.el9_6.x86_64.rpm 105ba4ed224bbe3f8837a87b67e6f6faa2348263343d4a0c667c2ca0dfe9f8fa kernel-rt-modules-extra-5.14.0-570.26.1.el9_6.x86_64.rpm 19a5c388484ec8d40390eb852ef6ecb35cbba98604cc95edd5192db59bdfdcb1 kernel-rt-core-5.14.0-570.26.1.el9_6.x86_64.rpm 24f61a0d7c229c1ace51d717f753c4b63bfe7990f7d99befc7f73d0168262a14 kernel-rt-debug-modules-core-5.14.0-570.26.1.el9_6.x86_64.rpm 25ec768086a6b8ebcdd3e575e50454e691ed0d835a5f3a06e9e3cbc6877dfcf3 kernel-rt-debug-5.14.0-570.26.1.el9_6.x86_64.rpm 265bbee838662dc83c3991084e6f0cd37544887a44543d594f6396c69922684e kernel-rt-debug-devel-5.14.0-570.26.1.el9_6.x86_64.rpm 8198b12725ea5079c1364ea32ec725af4f6e674463537b2032200b3a995c3b8e kernel-rt-5.14.0-570.26.1.el9_6.x86_64.rpm 82ad0942b640901da34326a160e653c4c636b2ff18887776154f2c352a35557b kernel-rt-debug-modules-5.14.0-570.26.1.el9_6.x86_64.rpm 94b3624acadb69feeb44e4e6be1117791446c0a4aeaacd4f3b4833d2299b839a kernel-rt-devel-5.14.0-570.26.1.el9_6.x86_64.rpm c4489664a3f465daca3fff656b661b364af68f47830333a79ec01fc98e0f6a64 kernel-rt-debug-modules-extra-5.14.0-570.26.1.el9_6.x86_64.rpm c6edbe5209eabd64b871d453ecbcb4533c33f9a1768ab83410c089617b2f9be8 kernel-rt-modules-5.14.0-570.26.1.el9_6.x86_64.rpm cf8bb9b44930a6dc7e2c3330975ddae3e3a65e5264f100609cfe64cc138a1bf3 ALSA-2025:11411 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002) * kernel: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CVE-2025-38089) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-devel-5.14.0-570.28.1.el9_6.x86_64.rpm 37b046eec7901df4f68d932cd4d13beb8a3dd3140b38d73e0b6918c053960f1b kernel-rt-5.14.0-570.28.1.el9_6.x86_64.rpm 4f8b45a80c9b1e35275da28759f2799a7cf33a8cbe951fef533619ffd600a3d1 kernel-rt-modules-5.14.0-570.28.1.el9_6.x86_64.rpm 5ec615c1793383a0d62cdaf012b942a2ee76a6ff11fc9cdf3c5614436c48e915 kernel-rt-debug-5.14.0-570.28.1.el9_6.x86_64.rpm 645038edad40a84c0b99fddb99f4ffec2026646dd2f36fd2c40ff92458db9aa7 kernel-rt-debug-modules-5.14.0-570.28.1.el9_6.x86_64.rpm 6b2bc2aca5926efd575e28dce8df0b56bee820c596de7a1291056dc9c2b61563 kernel-rt-modules-core-5.14.0-570.28.1.el9_6.x86_64.rpm 8608909f9a08870d954c06f623132d382aa7ede932096b462222b1fb7381f2f9 kernel-rt-core-5.14.0-570.28.1.el9_6.x86_64.rpm 8614e856109fb4e30332198626d99c354189703813c62d637eec4b67df57a729 kernel-rt-modules-extra-5.14.0-570.28.1.el9_6.x86_64.rpm aac48f7724093fe50b515c36e4027ca9d3d085efbce9cfaa1d452b62e98c3187 kernel-rt-debug-modules-core-5.14.0-570.28.1.el9_6.x86_64.rpm af4f1e64300a2ada06a54bd0ae3905be6a0c2519778e55bad2759155b7eeb1ea kernel-rt-debug-core-5.14.0-570.28.1.el9_6.x86_64.rpm dcfa63adb8444bdda091816c9ab1f997c4fad90a50aaf164e52968312ffaf4d8 kernel-rt-debug-devel-5.14.0-570.28.1.el9_6.x86_64.rpm ddd0eaef2a776c32631eecbb5be6e7bfb1f3d7bf8259e6e308b1df1e445b5bd3 kernel-rt-debug-modules-extra-5.14.0-570.28.1.el9_6.x86_64.rpm fd90b65568a2ba32c53b42cd69864b1f6e824b8b55a44e2e80df59eb9339100d ALSA-2025:11861 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980) * kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905) * kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091) * kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121) * kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113) * kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085) * kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797) * kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958) * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086) * kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-devel-5.14.0-570.30.1.el9_6.x86_64.rpm 3329d2dc532c8422c4c30a458b6eb4e3705113686cb956434651f97b8dff8a75 kernel-rt-devel-5.14.0-570.30.1.el9_6.x86_64.rpm 3b0e7f4a8ee10f9b804143fbf39275bd9ffb083c8bfaaec4c29df0225dcb9e67 kernel-rt-debug-5.14.0-570.30.1.el9_6.x86_64.rpm 3e424f7a466863813208046079d291328608f43c6a84f31738df63cc8c8ed30a kernel-rt-5.14.0-570.30.1.el9_6.x86_64.rpm 41817de5423fcf2dbc71c411f6f0213d4a68503d8a884ed8fb43774ea4e54e4c kernel-rt-debug-core-5.14.0-570.30.1.el9_6.x86_64.rpm 44e29b9d98db3f23c717c0acf1a43c0acdac613442e7ebaec8625bd438e40e92 kernel-rt-debug-modules-core-5.14.0-570.30.1.el9_6.x86_64.rpm 63ae0e0469e663557d67f4e8689d16e98b48f22d9b7e7c8e7942ac49e5c7b69d kernel-rt-debug-modules-5.14.0-570.30.1.el9_6.x86_64.rpm 8564f17a64aad24666ea1c378fd682c5215e1d60ce575990d22cb225c2f2856c kernel-rt-modules-extra-5.14.0-570.30.1.el9_6.x86_64.rpm 8a10dafdf9442634b235a7b36887cf7298370ff3fd9f842c1c41d76e3e1f9540 kernel-rt-modules-core-5.14.0-570.30.1.el9_6.x86_64.rpm 99bac70ecc587e859104206062bff130509f39609c20ea2f1af51aadc9980951 kernel-rt-modules-5.14.0-570.30.1.el9_6.x86_64.rpm 9d973f61127a25c504fd2c65286e4354cf6d46100b806ffff69dbc55810b97cd kernel-rt-debug-modules-extra-5.14.0-570.30.1.el9_6.x86_64.rpm c3264eae4a0fb559a4bf41a45b1bbf7aa5b03b3b957e2ae7c54fe7748c9c7764 kernel-rt-core-5.14.0-570.30.1.el9_6.x86_64.rpm f683d6d08b021e04792a9f4a752108cea78c173e345a7f5d82846e67bdc569b6 ALSA-2025:1262 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_5_default kernel-rt-core-5.14.0-503.23.2.el9_5.x86_64.rpm 08b45b503e810cbb22474ff86b65f5204340a0345b722d4e2c8a7d79491daece kernel-rt-devel-5.14.0-503.23.2.el9_5.x86_64.rpm 2ea9f20a883bbbce6da094e94af8f78218638b7b8c42081f2dfaf526676a921f kernel-rt-debug-core-5.14.0-503.23.2.el9_5.x86_64.rpm 351141dce0fec90843e2bc559a21928b6b8b950c48b6ffc7feebe7d614acef78 kernel-rt-5.14.0-503.23.2.el9_5.x86_64.rpm 3ab9a75d974e25e06ff0291e68f3a3f9b08b53514f496367b78142d569eefa63 kernel-rt-modules-5.14.0-503.23.2.el9_5.x86_64.rpm 47e7cc60cf3e980a15e8a2590e5b890ad887ebe8ce873be3e4e0f707ed4c79fc kernel-rt-modules-core-5.14.0-503.23.2.el9_5.x86_64.rpm 5b43cb01ba0bbbfb9bae45763cfc85aea16b08c274577f59e469181876b5ae18 kernel-rt-debug-5.14.0-503.23.2.el9_5.x86_64.rpm 7d82487baca45c60af0db446b862e9ad04a18410fb8ff9093c93bdf59dc5a4a3 kernel-rt-debug-modules-extra-5.14.0-503.23.2.el9_5.x86_64.rpm 86a87699f26d6840b955cf70da9114e54d92f1038b36241c33869e6d88eac4fc kernel-rt-debug-devel-5.14.0-503.23.2.el9_5.x86_64.rpm 8cce7b50718cb426c46d5f3498ffef5ce61b3b794ff202a09ff7329951efe894 kernel-rt-debug-modules-5.14.0-503.23.2.el9_5.x86_64.rpm ab07d8c799c4d482528f324dabb9f4064d0edcf4b3e251bc266eaee1ff8b4ec8 kernel-rt-modules-extra-5.14.0-503.23.2.el9_5.x86_64.rpm b7d4bbae1c0a5787c5b368633ef89b204cc320fd0d853ea0d4f9b32a2ff4c57d kernel-rt-debug-modules-core-5.14.0-503.23.2.el9_5.x86_64.rpm ff455744e8227afb9f94b1b26843e3046b05c6466cec2f886ba02ceb889e3b47 ALSA-2025:12746 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727) * kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928) * kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CVE-2025-21929) * kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962) * kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020) * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788) * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890) * kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052) * kernel: net/sched: fix use-after-free in taprio_dev_notifier (CVE-2025-38087) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-modules-5.14.0-570.32.1.el9_6.x86_64.rpm 309e68e4d153bd93624ee40d050cb52e559993db5fccbb4b316c8498e7561859 kernel-rt-modules-5.14.0-570.32.1.el9_6.x86_64.rpm 461f6a1ed07d8b38eaa53403f171f51411e75cca98cbc851734eb4cb53215b00 kernel-rt-modules-core-5.14.0-570.32.1.el9_6.x86_64.rpm 53e6686e3de5d8a4cf51f8e0b5758ce9d8a834b3abf4b361177a39843776a21a kernel-rt-debug-core-5.14.0-570.32.1.el9_6.x86_64.rpm 715389dd6c390de4ffede4b8d451cae42b4b9bcdfcf2c36811231386ca3db6df kernel-rt-debug-modules-extra-5.14.0-570.32.1.el9_6.x86_64.rpm 72a4bbd3299bf880d29e55795c467e806acca56807791a66901952edc9698771 kernel-rt-debug-devel-5.14.0-570.32.1.el9_6.x86_64.rpm a86e623eba1ff8e7b920b989809d3c238bd89d8192815726b65d6f2661819f1e kernel-rt-modules-extra-5.14.0-570.32.1.el9_6.x86_64.rpm ba607f1f09a386b307865432a538abf4e90e5e58b906b604a68f7b7c944a3c7c kernel-rt-devel-5.14.0-570.32.1.el9_6.x86_64.rpm bf3b4d306444121f733fa879be29440ff00a61bd7f74c4a57d74d7059fce88a6 kernel-rt-debug-modules-core-5.14.0-570.32.1.el9_6.x86_64.rpm c68f8768b11dd430474c2e3b0c9cd7b81b87dfcd9a85d46473c6630e5709b297 kernel-rt-5.14.0-570.32.1.el9_6.x86_64.rpm cc510a4d016f8dc2b024d2801ebd7301a1d348b1abd7eb51adffa1f2983a22ef kernel-rt-core-5.14.0-570.32.1.el9_6.x86_64.rpm cfd4bd8aeef55e63d412c2f43cdd8cd448897fc244fc029a7a15c00b9ea9b2bc kernel-rt-debug-5.14.0-570.32.1.el9_6.x86_64.rpm d7b7f2353e22b270c7ecb493b96e9dd23b24a6b0166d8ecd978d379116ecf422 ALSA-2025:13602 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079) The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079) * kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-modules-extra-5.14.0-570.33.2.el9_6.x86_64.rpm 1a50f43aa4987f1a3fcc10d475fb2c1b0d9cf074509e068598006652498380fe kernel-rt-modules-5.14.0-570.33.2.el9_6.x86_64.rpm 22ca8c3c4e0ea99a2d7d5c21bfa33815786f9d8611bd682bf4dc269374116a81 kernel-rt-debug-devel-5.14.0-570.33.2.el9_6.x86_64.rpm 305c8d6aec62131f402cdb7d78bf48bb501e03a8f3b709b0e58602d19db6b949 kernel-rt-5.14.0-570.33.2.el9_6.x86_64.rpm 3850638a40218c72e4c3a478edc9e3d7f1d5281e4e29eaa359f7a159ff47ec7a kernel-rt-modules-core-5.14.0-570.33.2.el9_6.x86_64.rpm 3e4058fd3c07555542c709d23d615e0a099e6c115a28ced087763361c363114b kernel-rt-debug-5.14.0-570.33.2.el9_6.x86_64.rpm 46a6ddaddb454255b35b508a6f9b5bcb3591fc1eabf603b623b064dc8ccc6501 kernel-rt-debug-modules-core-5.14.0-570.33.2.el9_6.x86_64.rpm 672921e3f651eca4808a54280ad7f6fba54bd4ea4cd33b1d85079548fe8cabfd kernel-rt-debug-modules-extra-5.14.0-570.33.2.el9_6.x86_64.rpm 8c6a6a3a37e1bbcbc011027c119f43760b1947b916647064de360a6a9381ef76 kernel-rt-debug-modules-5.14.0-570.33.2.el9_6.x86_64.rpm 9a0af2adea2a9f1b875f06aab7e2a9e9958bb90012e8319c2b072257d13c4b42 kernel-rt-debug-core-5.14.0-570.33.2.el9_6.x86_64.rpm b0ca62537a605e3cadd01771821ce9f898efba28b7eb0f914830bcdfc54c8d64 kernel-rt-devel-5.14.0-570.33.2.el9_6.x86_64.rpm ecfe95d04f82e78385e9c8f1fbf8ff8a3a57cf36de89461c8a27bde2fa0354ad kernel-rt-core-5.14.0-570.33.2.el9_6.x86_64.rpm f3929e87bc04d2eae53cff7652fa91eb1410f6ede11e69aa728b0792881a105e ALSA-2025:13962 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (CVE-2025-21867) * microcode_ctl: From CVEorg collector (CVE-2024-28956) * kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084) * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085) * kernel: net: fix udp gso skb_segment after pull from frag_list (CVE-2025-38124) * kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159) * kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250) * kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380) * kernel: tls: always refresh the queue when reading sock (CVE-2025-38471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-devel-5.14.0-570.35.1.el9_6.x86_64.rpm 1e3bc78627ca4d92219bd2ad9fc9ff88a9bfe875e26293ea45f049f504f7cccb kernel-rt-debug-modules-5.14.0-570.35.1.el9_6.x86_64.rpm 39c44ae4c8680664fa3b2197b6f655e11309176bfff2ff08adc25d89d1ca70d8 kernel-rt-debug-core-5.14.0-570.35.1.el9_6.x86_64.rpm 3e1e9c603e1549c30932b82c87a2cdff53ee94fec893b8cf76374f92fe38fcd5 kernel-rt-devel-5.14.0-570.35.1.el9_6.x86_64.rpm 7aad58e0181aacfcb57f762805e03d684559d5c278e0684251ec8e2068ba5700 kernel-rt-debug-5.14.0-570.35.1.el9_6.x86_64.rpm 806fc519b947c55dc8165c3b11a5c718d51fa2f0d11a0a22b477c197386293d1 kernel-rt-modules-core-5.14.0-570.35.1.el9_6.x86_64.rpm 88fd480abda8a0e4a777fd10bafdad2c1b634e2277b0e29c3f3deead9fdc68a4 kernel-rt-5.14.0-570.35.1.el9_6.x86_64.rpm a2be8c3dce18063fddb5b573d0a2f9f34c8ae7711a3eb7c5bc15d1681815d168 kernel-rt-core-5.14.0-570.35.1.el9_6.x86_64.rpm a51dc408333ae9b28dfd13aef39b6a0c7b9b4bff04bc2d10735c523000b831d0 kernel-rt-debug-modules-extra-5.14.0-570.35.1.el9_6.x86_64.rpm b5222ad44179686649f66bf730809cc11fb46d903d1e78bc92fd9c507c0b9d8b kernel-rt-modules-extra-5.14.0-570.35.1.el9_6.x86_64.rpm bbb9acbc194af4faf4efb2dc493d5b76d9ea2adfd0d9af7376cfb52e1c2826c4 kernel-rt-modules-5.14.0-570.35.1.el9_6.x86_64.rpm cdc91a068ca9335b6004459bcc8fb031e5cf933f71b9c27633aec2b378ba78c4 kernel-rt-debug-modules-core-5.14.0-570.35.1.el9_6.x86_64.rpm e41969958193e41582976791a95232aedf0bbf05f3674c4ec0fd0b6fc57a96e6 ALSA-2025:14420 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Fix memory accounting leak. (CVE-2025-22058) * kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914) * kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-modules-extra-5.14.0-570.37.1.el9_6.x86_64.rpm 008fb7789452c96062667ea7ac6aadc4f70ac2e25d9f59a989ec7516982759c4 kernel-rt-devel-5.14.0-570.37.1.el9_6.x86_64.rpm 61c7d737b896473b640b86bf357fa6882165c77adaadcd21a74040fbc839c274 kernel-rt-modules-core-5.14.0-570.37.1.el9_6.x86_64.rpm 63f8f123159ef3aa267994d1d9e05c1e90e1d2bd812edbffcae5695265288ba2 kernel-rt-debug-modules-extra-5.14.0-570.37.1.el9_6.x86_64.rpm 6a22f3eac058596cbb595cf96c680252ecd65685e11acc2acfcf2048468f7958 kernel-rt-debug-devel-5.14.0-570.37.1.el9_6.x86_64.rpm 75cf30c2318b14d7bcd14a6e763ca8f4b9ac711b0c8368c5901e5ad6856ef399 kernel-rt-debug-5.14.0-570.37.1.el9_6.x86_64.rpm 8ea71ec65b39cb701e1b341539bef0ca6b7475ba13983fba2de396eb16db0dbc kernel-rt-debug-modules-5.14.0-570.37.1.el9_6.x86_64.rpm a273fb6835b10e99b1d0e0195160a1663d8dfbabd6e404e9cda75af3be971f90 kernel-rt-debug-modules-core-5.14.0-570.37.1.el9_6.x86_64.rpm aa14dc0733931884afd168e3b6b7369b9513b2d71dbd6823f7163aaa1fca7e81 kernel-rt-modules-5.14.0-570.37.1.el9_6.x86_64.rpm b3d90b07d838c90d618857b54bf5fa45b4568625c8be10a637918b3a1a4e75e0 kernel-rt-core-5.14.0-570.37.1.el9_6.x86_64.rpm bac1f9fc621419d30b9a96650fd04bb38c02050c6474205a1655175ac0331343 kernel-rt-5.14.0-570.37.1.el9_6.x86_64.rpm c01de4ba596622c653359d68e46836e51e9e931154fc6373f96ebeca381030cc kernel-rt-debug-core-5.14.0-570.37.1.el9_6.x86_64.rpm d86e42f72817cf00bd8e4611ec6648026c87bab4a8047723f40c176514600c50 ALSA-2025:15011 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823) * kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200) * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211) * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350) * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464) * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461) * kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-devel-5.14.0-570.39.1.el9_6.x86_64.rpm 061b0000cdc8721323627350d8d3451a914c048c1a03ffe2a9d3d330ddf3baa7 kernel-rt-modules-extra-5.14.0-570.39.1.el9_6.x86_64.rpm 1e37c8615261b32a57f6dfe7fa89000c5b98f0c22bb285991019a77ae4ad4ff9 kernel-rt-debug-modules-extra-5.14.0-570.39.1.el9_6.x86_64.rpm 1fbc14c464624e6d6ee2e872edcf38a7795409d36fb3191267660e865da272da kernel-rt-devel-5.14.0-570.39.1.el9_6.x86_64.rpm 56ee2fbb6c1f9a98f6819f7539d7262d88a43b27f6773a327475ad4f48482131 kernel-rt-debug-5.14.0-570.39.1.el9_6.x86_64.rpm 94745e1390fd50c4e985a21264192f0639d13cbe817e8caacf7b213da42a39a4 kernel-rt-modules-core-5.14.0-570.39.1.el9_6.x86_64.rpm 98f7bb915aaa6c7e2dd61486310426440ac954a1e91afb6f959e1c07abe90c6e kernel-rt-debug-modules-core-5.14.0-570.39.1.el9_6.x86_64.rpm a22466838a424301ee3f036a4891b221d517ece07cfb83ea0684ee0b8be09caf kernel-rt-modules-5.14.0-570.39.1.el9_6.x86_64.rpm cec9d8e23467a9f5eee4f5ee85bfb0bc7495eb8a051e6ca0e44be397a709dce6 kernel-rt-debug-core-5.14.0-570.39.1.el9_6.x86_64.rpm d17d95e2b293e56155fe31b3fdf865fbdf54d083055797e03bf99bc51b2bfc0d kernel-rt-debug-modules-5.14.0-570.39.1.el9_6.x86_64.rpm e6406495ec0a1f832d6cc00864da79f93cf9faf468eff7edcc379a328b8d4642 kernel-rt-5.14.0-570.39.1.el9_6.x86_64.rpm f4330b3e30d14270137c2851afd0ae8c7aa8a498bf0ba830fcd16d0703800f84 kernel-rt-core-5.14.0-570.39.1.el9_6.x86_64.rpm fdad17dbe13632409dcabd1d92777f72fb4f8b3db0c265f32c968b885f7a2766 ALSA-2025:15429 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udmabuf: fix a buf size overflow issue during udmabuf creation (CVE-2025-37803) * kernel: idpf: convert control queue mutex to a spinlock (CVE-2025-38392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-core-5.14.0-570.41.1.el9_6.x86_64.rpm 3f8aa0cd6588241c24195e00cef7a478decd44051a0466b7dcef38fceae91504 kernel-rt-debug-modules-core-5.14.0-570.41.1.el9_6.x86_64.rpm 57938b5d7627b84070c1150de9b2091b35c2163dd3ddbdd44b2b2313578a8099 kernel-rt-modules-core-5.14.0-570.41.1.el9_6.x86_64.rpm 6d70a9c9ae604226879b416b0aacc144e13c4ff11f237d338c061647ee1ebb1e kernel-rt-modules-extra-5.14.0-570.41.1.el9_6.x86_64.rpm 722ee877c6a7e983996a9205fbb46dbfd319a93fcb6b6f72c4c6dce55ac146b1 kernel-rt-debug-modules-extra-5.14.0-570.41.1.el9_6.x86_64.rpm 74177862d1b5e08fa24fe7a1cab721f557d4f56e5e049087b3011f4a063bb739 kernel-rt-core-5.14.0-570.41.1.el9_6.x86_64.rpm 7eed68ea7266cf5ba6f95080e798d97892f1e6ad87e2f13b9d1b34969998d5eb kernel-rt-debug-5.14.0-570.41.1.el9_6.x86_64.rpm 96eef3d0c26b6e0261ef1d06a9083491ee20691068d09ba8501fa0600c9316c9 kernel-rt-modules-5.14.0-570.41.1.el9_6.x86_64.rpm aceaafa6df03d68a7453cc9644eebdd6b97ffcd69ab71f73f687432bcaeeac6d kernel-rt-debug-devel-5.14.0-570.41.1.el9_6.x86_64.rpm b95ad9507d3c3bb4e1d43354e71855dac29072a576ca5ef05eb729be2c7c36c4 kernel-rt-5.14.0-570.41.1.el9_6.x86_64.rpm d500d996c671632c0c82484f2eb7c30ee774774e850962db57ae1e1bfdfc190f kernel-rt-devel-5.14.0-570.41.1.el9_6.x86_64.rpm e4f2c8bb60672b26e2dc2244e7f31bf8ee1f2496cfe17363fa5873830bfffd7e kernel-rt-debug-modules-5.14.0-570.41.1.el9_6.x86_64.rpm fa631d53fc9c4021cd9e86b25875af6668a3c19de8e78709e62de25c73275d7f ALSA-2025:15661 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097) * kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332) * kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352) * kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-5.14.0-570.42.2.el9_6.x86_64.rpm 30e53a4749bff41e6140fd3b64b13e98ee1b7ee25bdc29fe6ff4ff20efdd5123 kernel-rt-devel-5.14.0-570.42.2.el9_6.x86_64.rpm 30f6dc1c625ba02d56c867b626acd8c1bea54df1c5a890cb97127a83e70711db kernel-rt-modules-extra-5.14.0-570.42.2.el9_6.x86_64.rpm 41d606ff9e6385a5ee693fa07581efa9db31073a4dde351e303e3e1aab8137f6 kernel-rt-debug-devel-5.14.0-570.42.2.el9_6.x86_64.rpm 450965bf84812f2559c127d50b67467953ddff6703eb8d70e277fd396df8c3ee kernel-rt-debug-modules-core-5.14.0-570.42.2.el9_6.x86_64.rpm 545bef76e49bbdf61d5f1a5afa1510e6735d910997f97fd695aa0b0b36b2c871 kernel-rt-5.14.0-570.42.2.el9_6.x86_64.rpm 698b2cf2256da9fb4ab8a058eba359774bb94d78928a5994d5bba9fe78421d78 kernel-rt-debug-modules-extra-5.14.0-570.42.2.el9_6.x86_64.rpm 6d1929c5a03362e6355e1b47404ad32aeb90832eadc426ab1253bd523b711404 kernel-rt-core-5.14.0-570.42.2.el9_6.x86_64.rpm 8eac215338bac5d91ff21a39a59d6e68101e7cb58a50c7d15c3b0a7f2cd491ec kernel-rt-debug-modules-5.14.0-570.42.2.el9_6.x86_64.rpm bed5934f7b5d4a87b07310c44630f13229c9a85a78f801274d01ec4ef19412e9 kernel-rt-modules-5.14.0-570.42.2.el9_6.x86_64.rpm c5b6b281938681a7accad4214bdc9baec217333695195efc8a8d01e5fcc84ac2 kernel-rt-modules-core-5.14.0-570.42.2.el9_6.x86_64.rpm da7359af50cb2661dda5f66f607b080f49d0fc9965bde067d5651e4b2107e0b5 kernel-rt-debug-core-5.14.0-570.42.2.el9_6.x86_64.rpm e509091d9a518bb9fd8104872c266dfbd0a2ee484640938883f1c9a6d7ccf176 ALSA-2025:15740 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (CVE-2025-38550) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-modules-core-5.14.0-570.44.1.el9_6.x86_64.rpm 0ef6400233e39173cb9c0f9d23b0c499f3acefed760aa0f1054ae4fd2eec622d kernel-rt-modules-extra-5.14.0-570.44.1.el9_6.x86_64.rpm 37972416ac22cb84886428c2f3bd26a89892b7067a8a159e220c0bffc5e40f4b kernel-rt-debug-modules-5.14.0-570.44.1.el9_6.x86_64.rpm 57f6d66081139f7bef8f512887ae3766be2c4fc6c79e094241017ef28ab4d9f4 kernel-rt-core-5.14.0-570.44.1.el9_6.x86_64.rpm 6d5bcfdafc45b6a608c62312a787c888f334450d0279362ac751d23a08c8ec55 kernel-rt-debug-core-5.14.0-570.44.1.el9_6.x86_64.rpm 7558f579fef3b9bc6b603c6b2c6e0d9d9b3356332cadfb6c04668ffb7a314a7d kernel-rt-devel-5.14.0-570.44.1.el9_6.x86_64.rpm 8c3c37cdbb7a019efaec186961c229c1fc5d1ee48f425819f1213ecf056dd1a0 kernel-rt-debug-modules-extra-5.14.0-570.44.1.el9_6.x86_64.rpm 94780de8368a6b2074e3be3bffa89dc6ec7e8940fc81f8bc7b8ba50072ad64a4 kernel-rt-debug-5.14.0-570.44.1.el9_6.x86_64.rpm b3bfb28a61fa8322395f06e4ad81c0b41fa137a1e3d0f8a2c56efc755cc45cda kernel-rt-modules-5.14.0-570.44.1.el9_6.x86_64.rpm c0c0dee02e496de8acfcc646773544451b365b712656417b4b30854c0ce302e5 kernel-rt-debug-modules-core-5.14.0-570.44.1.el9_6.x86_64.rpm c82d3ca24fad6e021464bff66ba164a05523eb8eb9460be083250baf672def5e kernel-rt-debug-devel-5.14.0-570.44.1.el9_6.x86_64.rpm d5197655ba6606e86ca10c1c59b9ab65756f372f97d45dd4534f1b9ac1f9ec6a kernel-rt-5.14.0-570.44.1.el9_6.x86_64.rpm e776e6b5c9a161fee699a5ad5e07d90cff980f2b4ba4f2b24396884f71d557b7 ALSA-2025:16398 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: usb: smsc75xx: Limit packet length to skb->len (CVE-2023-53125) * kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length (CVE-2025-37810) * kernel: do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498) * kernel: s390/sclp: Fix SCCB present check (CVE-2025-39694) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-modules-core-5.14.0-570.46.1.el9_6.x86_64.rpm 04ff55e4377864999dc618186d831ee37cbf9c44eb14dd1e9f210101574d546c kernel-rt-modules-extra-5.14.0-570.46.1.el9_6.x86_64.rpm 14a8eca4a655d8958c49222d634284f35acbbae6070e440cc9152564137c67ad kernel-rt-debug-modules-5.14.0-570.46.1.el9_6.x86_64.rpm 34981258f10d1e37d28177497d2c914681226ab61c65a87fe4c91191560edcee kernel-rt-debug-modules-extra-5.14.0-570.46.1.el9_6.x86_64.rpm 44c96e8ee2abb8163ea0711818dfce1fe7c30897f38a92d4a23e5e20d6f1a9e2 kernel-rt-debug-5.14.0-570.46.1.el9_6.x86_64.rpm 74208d53e8f068ec473ee1d965c839bc4be47d6a85eb82f25da6dfff0f3c0628 kernel-rt-debug-core-5.14.0-570.46.1.el9_6.x86_64.rpm 781c9c50b7f894bef4bd1285830632d3a48a730bf715aca39002c33d5b1259fc kernel-rt-devel-5.14.0-570.46.1.el9_6.x86_64.rpm 8675dfd6f53f6fdd0c0678e0b8f20af66e0a5d2a105fc26a69ecbc7f34f6a341 kernel-rt-debug-devel-5.14.0-570.46.1.el9_6.x86_64.rpm 8a64744b480780720d6b98ef1915502b7f5b717331b00df9b6e30030355c4353 kernel-rt-modules-5.14.0-570.46.1.el9_6.x86_64.rpm 8c85da765f929e01a5dbe0149f786fd3667ce5f2ab0772fb266c367cb9466164 kernel-rt-5.14.0-570.46.1.el9_6.x86_64.rpm 97283da75126ddc16daa8dd0277c9c3fc74853555f96a7650e0cf8e1be29970f kernel-rt-core-5.14.0-570.46.1.el9_6.x86_64.rpm bb830b274050f19e97008868ec0fd6f5d48724ece41b40fb4d20264b7f19b758 kernel-rt-debug-modules-core-5.14.0-570.46.1.el9_6.x86_64.rpm e5b87ab7eda6a060078327d6bcca6036c3712a6df18bc5633919a743b5d10c79 ALSA-2025:1659 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: mm: migrate: fix getting incorrect page mapping during page migration (CVE-2023-52490) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_5_default kernel-rt-debug-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm 1f610af60075b53f3c86b5343a072d373819a742f1cccb02061a2a11f6f90ad0 kernel-rt-core-5.14.0-503.26.1.el9_5.x86_64.rpm 42a563d8df825838f946fd465d074e73d9a01c3970e13a858e4808523da0e4ae kernel-rt-5.14.0-503.26.1.el9_5.x86_64.rpm 5b21746762264bef65f00f06fc559d43639c34e93524d34b17dd576d8516c1e8 kernel-rt-devel-5.14.0-503.26.1.el9_5.x86_64.rpm 73d93bf4aa02e40d0bae19f93e731f52250f7249de74419dbeb128484bfa505d kernel-rt-debug-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpm 7960f9fe8f9972971e4cff4fe0144b2ddd44d4f87e4eda5a481744fe29b75124 kernel-rt-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpm 7c69b32038544f2cffb490151f729f176b6643cde80b3697a5f45cfb0a1b0005 kernel-rt-debug-modules-5.14.0-503.26.1.el9_5.x86_64.rpm 8a4d0b2dfa8c1066f45865d09396eed7fd3d521105e26eeb6fbe28c638af2595 kernel-rt-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm b0a40e4fb5f0153dc22714510cb54e37d502d9b4e1c5709122ac4fdeb57bb39a kernel-rt-debug-core-5.14.0-503.26.1.el9_5.x86_64.rpm b57c83f7ba9932b8fefd3519e1bd8f4322ca4c42a6bc532997dc84eefea4be41 kernel-rt-debug-5.14.0-503.26.1.el9_5.x86_64.rpm e66f7072ddff0c22eab031a1b365b989e9b7b1e648040104bdf7335101eb8ee7 kernel-rt-debug-devel-5.14.0-503.26.1.el9_5.x86_64.rpm e9b3982a6e847cb52a41f4345ff6d2fc6205c93387c72ffccaa461ea4a92a96b kernel-rt-modules-5.14.0-503.26.1.el9_5.x86_64.rpm ef4c095d160974f08d570140ef9c38c1f49497d805f15cd43902c00f78ab04ae ALSA-2025:16880 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472) * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527) * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718) * kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682) * kernel: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CVE-2025-39698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-core-5.14.0-570.49.1.el9_6.x86_64.rpm 2e618f9405e0b98b70d8fa2e2d24b7c3f7f59aae39cf0f14ffab29dcd2baeab2 kernel-rt-devel-5.14.0-570.49.1.el9_6.x86_64.rpm 633f56e4f5ea6f1ee1eda1a234a362531eb29a7b9c11845810166aeedaa63235 kernel-rt-debug-devel-5.14.0-570.49.1.el9_6.x86_64.rpm 6ba78e60ee8b164db3ca819281723efd607200f15673093dbf04ee31f7d31f66 kernel-rt-debug-modules-5.14.0-570.49.1.el9_6.x86_64.rpm 6c373bd40b2800cc0980efcf20f7f6833119b9f720ed580c52a8beeffe928112 kernel-rt-modules-5.14.0-570.49.1.el9_6.x86_64.rpm 750a2487130398794b79f90d38a58c57b9b2c951fdd23f0efdf9b4174eadf6a9 kernel-rt-5.14.0-570.49.1.el9_6.x86_64.rpm 8f1ee12bfe7871a618c2c4de392f549d3690bd71d7d6fe0439bd00327f3006dd kernel-rt-modules-extra-5.14.0-570.49.1.el9_6.x86_64.rpm a64e4feb8429662da7c527fea5bf3b5904cb5f822d98c1d71069b544a334bc91 kernel-rt-debug-5.14.0-570.49.1.el9_6.x86_64.rpm b237fd24ba43905e07ff117cc423fb9f45a8af8273b4eb306ebf5a90311b46da kernel-rt-debug-modules-core-5.14.0-570.49.1.el9_6.x86_64.rpm baf84cc554278199682b9360e7bc0d9e2296513afe55361c3a334136194678c0 kernel-rt-core-5.14.0-570.49.1.el9_6.x86_64.rpm c06b4e537ba121cec201187866b0a06e371b74b5b6e2451c252f9bdeb70aa7fc kernel-rt-modules-core-5.14.0-570.49.1.el9_6.x86_64.rpm de0684de80d02af3a878f4272b9d1741a50bd0b018e17a80f125b2131196d911 kernel-rt-debug-modules-extra-5.14.0-570.49.1.el9_6.x86_64.rpm f6ecdaaa37646b1a7db32b5fe9a69c2eb82595c38c81afeae41c23f99fe8b519 ALSA-2025:17377 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301) * kernel: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CVE-2025-38351) * kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling (CVE-2025-39761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-core-5.14.0-570.51.1.el9_6.x86_64.rpm 0093fe339302f06cd6f4f92acd6ce9247267a3cef28bbe3c32e0efe5009213da kernel-rt-modules-extra-5.14.0-570.51.1.el9_6.x86_64.rpm 3cd2e9748bf2c61e039a9f31f9378275f7f6f3cfdaf03ed5792d64b57125bd87 kernel-rt-5.14.0-570.51.1.el9_6.x86_64.rpm 3f24724d0bb287cdf2eaea79f640035c0984f146d23962ddbcbb67a853f4b200 kernel-rt-debug-modules-extra-5.14.0-570.51.1.el9_6.x86_64.rpm 4136c8c12575c70bb337f14d914cb0f9836e55010b7029ae078b976c9634998b kernel-rt-devel-5.14.0-570.51.1.el9_6.x86_64.rpm 4cb7d1f47d43434296b6f93c00feaf8769a2edd354c3b1fd76ece27bf2861fc7 kernel-rt-modules-core-5.14.0-570.51.1.el9_6.x86_64.rpm 4e568d48c04e74c09d4dce9bbc511c6893d049d27dc63649967e6a9603158d1a kernel-rt-debug-core-5.14.0-570.51.1.el9_6.x86_64.rpm 6c088cefcdd6d37aa93630a322e8fc399cc8e174f029c215caa359405cdce73d kernel-rt-debug-modules-5.14.0-570.51.1.el9_6.x86_64.rpm ae35445bbfc373e8ada50015eddc265e18806846849f6ef42ab80f79d7e86b16 kernel-rt-modules-5.14.0-570.51.1.el9_6.x86_64.rpm c16e7493c09b0985013a34f1111e3f843f69c051c494f7f31c7e7c20e3d40114 kernel-rt-debug-modules-core-5.14.0-570.51.1.el9_6.x86_64.rpm e81c915e3aac64ef4e17fa23eb8fb36f9fa2428177376dcfc6ebbcd6bf272b79 kernel-rt-debug-5.14.0-570.51.1.el9_6.x86_64.rpm f4aa18d1a31e94dd0222b9057ea4d59f4230f092e9746cf80bad140655c886d7 kernel-rt-debug-devel-5.14.0-570.51.1.el9_6.x86_64.rpm fa2a55391a7f402341f5bdd3167fa39faec54757481f6bba002037b2f2a62ab9 ALSA-2025:17760 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556) * kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614) * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757) * kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-modules-5.14.0-570.52.1.el9_6.x86_64.rpm 23cf1e6d6e1069cd6fc2ff5e2b778e17d30262c081fdf0248c731792c45f7dc6 kernel-rt-debug-5.14.0-570.52.1.el9_6.x86_64.rpm 4a9e0e110a3cbee212df9dd75bb1ec908b84d8307e606f99a729747f1bda9f8c kernel-rt-debug-modules-5.14.0-570.52.1.el9_6.x86_64.rpm 50398198c9c26a6ba93a8bc730c02c62bf9b9f38a048df1ec069716d42b9df23 kernel-rt-core-5.14.0-570.52.1.el9_6.x86_64.rpm 67fe4f9bc4e3f28b5bc3b7e0a6f55719eda995f2762e3161cf1c8793710b2efa kernel-rt-debug-modules-extra-5.14.0-570.52.1.el9_6.x86_64.rpm 768c3b15ad89fdee543fc1f2f0e23e7cf9326f9a251022282673351650daf9ed kernel-rt-5.14.0-570.52.1.el9_6.x86_64.rpm 919b22317dea46e79c6ce140471c2d45709cec6e54fb190c94c1bcc0c4861b59 kernel-rt-debug-modules-core-5.14.0-570.52.1.el9_6.x86_64.rpm b0d5b1ab3f1063dbf22ceb62a92cc8b994325a51d06967be6ca6ba0343024680 kernel-rt-debug-core-5.14.0-570.52.1.el9_6.x86_64.rpm b8260c5e93cec7a280dd346014b0746522fd2d68a0244c2e2860b3312daa92c5 kernel-rt-devel-5.14.0-570.52.1.el9_6.x86_64.rpm bf795d1db725f58cd0748b36027b73fcba789c06352ce99ba9c985638bd18107 kernel-rt-debug-devel-5.14.0-570.52.1.el9_6.x86_64.rpm d3a6679adc442bddcb5bfdfd071b6d56aa2bdccbf85e9d86a6a0b2ccab22856c kernel-rt-modules-core-5.14.0-570.52.1.el9_6.x86_64.rpm e84148a2f2b8b5314e521c9c6eedafdf451d2a4556a54238c5ff7a4747d1b622 kernel-rt-modules-extra-5.14.0-570.52.1.el9_6.x86_64.rpm fe373df327c03c13c9f691ea71fc9711c59a4f6b95005fdebc703d909682014e ALSA-2025:18281 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026) * kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087) * kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571) * kernel: sunrpc: fix handling of server side tls alerts (CVE-2025-38566) * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817) * kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849) * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-5.14.0-570.55.1.el9_6.x86_64.rpm 10ce26b927065e585f113661ce26f8f3d8a511315f9ed92225ca6a5d547159db kernel-rt-devel-5.14.0-570.55.1.el9_6.x86_64.rpm 18a8d9e120e7ed9a39938f374df1fb2254a6e15c0e65e9b72f47202fc80904c0 kernel-rt-debug-core-5.14.0-570.55.1.el9_6.x86_64.rpm 25f23cc9702aa77b31b0fc91b66138df070abb050388508083f79c9ff7ee7de3 kernel-rt-debug-modules-5.14.0-570.55.1.el9_6.x86_64.rpm 3d20150dbada1f230572a26f363a7ac60ad6438dfc95c90a0c5f34714b998ade kernel-rt-debug-modules-extra-5.14.0-570.55.1.el9_6.x86_64.rpm 57489a3ba92185a22d23b62375decb0f8800296c1f8637192ab5e24787200542 kernel-rt-modules-5.14.0-570.55.1.el9_6.x86_64.rpm 5da45550c4cbc91dda944463ab64fde674dae4881c8120b36b905427cfb22e4a kernel-rt-debug-devel-5.14.0-570.55.1.el9_6.x86_64.rpm a5f4623310456bfae5c05854e8c10a8ce92e8caef0dc8bc7463977188a52d18b kernel-rt-debug-5.14.0-570.55.1.el9_6.x86_64.rpm a5fce6b4164a528db7acd93d75bd8fb880a7de9ca4be65ee69519e662b7014b9 kernel-rt-modules-extra-5.14.0-570.55.1.el9_6.x86_64.rpm b1777bfb4cdd4189aa748eabe8113be2cca7321f958a378fe7f4d585c8213b9d kernel-rt-core-5.14.0-570.55.1.el9_6.x86_64.rpm b8969b58a96bf3293f8b5f0347dfb438ebb105d9a205deb4dd6d6ac1bd92f7d3 kernel-rt-debug-modules-core-5.14.0-570.55.1.el9_6.x86_64.rpm ea7493564d5e5af1cf530b0b8b9d0ff1ddd04d58c559ac42be31ec11e1141694 kernel-rt-modules-core-5.14.0-570.55.1.el9_6.x86_64.rpm eec46556f81eae0e0fb9a5ba408137e70e9d963227595bae194314745fede562 ALSA-2025:19409 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702) * kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367) * kernel: crypto: xts - Handle EBUSY correctly (CVE-2023-53494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-devel-5.14.0-570.60.1.el9_6.x86_64.rpm 1b6e05a78443c19e07e655c14a53b3dd76e85624d7394c69c8e27c3b03b6e430 kernel-rt-debug-core-5.14.0-570.60.1.el9_6.x86_64.rpm 3c04b1bad9cb7ea82c513192504a6a0faa416efa9f309dd1c06f2c9675bffc85 kernel-rt-modules-5.14.0-570.60.1.el9_6.x86_64.rpm 41bf573a114ed4f4f0c5765fba55f2f2722acec54bea5ea5694186f6392c76b7 kernel-rt-debug-5.14.0-570.60.1.el9_6.x86_64.rpm 4982d125dd64b601c1da3a22701f0590f6eeb3f4884733c0735e2b162275a612 kernel-rt-debug-modules-5.14.0-570.60.1.el9_6.x86_64.rpm 5c013168fe019c2c8454f9c3f2be35ab5209694ef56e85ec33751c9aecfba1a5 kernel-rt-5.14.0-570.60.1.el9_6.x86_64.rpm 622c33710bd30b080c96c0059683326fefcedfad87436018072a88f2dc6ce0f9 kernel-rt-modules-extra-5.14.0-570.60.1.el9_6.x86_64.rpm 94025f42aaca954b9155eb9393220f41172e04dfc8e25951320097b6fd055761 kernel-rt-core-5.14.0-570.60.1.el9_6.x86_64.rpm c6a2c25721abbb5d41bb2b6a65f633fdaf42bb682eaef6d8691baa16f68d4e16 kernel-rt-debug-devel-5.14.0-570.60.1.el9_6.x86_64.rpm e1bf8ee74556af80256a17111a30c41905f04520e114f565456472c624b66fd8 kernel-rt-modules-core-5.14.0-570.60.1.el9_6.x86_64.rpm e2dbe503c1006f43297f8bbe715f1f25afa01ac86c0b21fa33ce5bcd385c3785 kernel-rt-debug-modules-core-5.14.0-570.60.1.el9_6.x86_64.rpm e4349e2f9ca10ab9de8e356897f33495c5f8ac030dd94a425ff918d7f9b79e81 kernel-rt-debug-modules-extra-5.14.0-570.60.1.el9_6.x86_64.rpm f9719ab04ad108aac6593fb6657b25cd2d874acb5364a8b6abe697d4fe056d67 ALSA-2025:19930 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350) * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357) * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-devel-5.14.0-570.62.1.el9_6.x86_64.rpm 0e0f0179b75fc0cd6820f25be5adcdf58c7e1ce10ba68761391cd6274f2583bc kernel-rt-debug-devel-5.14.0-570.62.1.el9_6.x86_64.rpm 4f27e0b1c89faa9177dfe211a395433c5c34640fa17cef5b6b15b4ec99df59ac kernel-rt-modules-5.14.0-570.62.1.el9_6.x86_64.rpm 54912b5c41e77c6a976f955a343780388763b5d687eb6e1cfd4e5598af212498 kernel-rt-core-5.14.0-570.62.1.el9_6.x86_64.rpm 5e619455f1da2bc622588733f6e5dc7f61ba0c1d10dcb79e96cf227a023f94a5 kernel-rt-debug-modules-core-5.14.0-570.62.1.el9_6.x86_64.rpm 6072964ff7617adb24c547e41fdb01ced449a72f69e499631cc368bedd52e0c5 kernel-rt-debug-modules-5.14.0-570.62.1.el9_6.x86_64.rpm 617d5d184de8e4bbfd3b5aa3e0b5d89e55bbfc82c4744c95a3c1dbcd611c3e87 kernel-rt-debug-core-5.14.0-570.62.1.el9_6.x86_64.rpm 754fe32ba2b638584d06f7af524edb6452ab1383993d02877690b2fade49e0c5 kernel-rt-debug-5.14.0-570.62.1.el9_6.x86_64.rpm 81c8b6c1ff7647d93bd2001d44f9ff74879540759658e0d5aecf914ab8067f31 kernel-rt-debug-modules-extra-5.14.0-570.62.1.el9_6.x86_64.rpm 82b03197defe7a37e904678f29faea721f4c69021b55292ca76694a69f2850b7 kernel-rt-5.14.0-570.62.1.el9_6.x86_64.rpm 8cb119e87871e3491743dc6cd09f1d25b992aa8665c06715c5e113d1ead9faa5 kernel-rt-modules-extra-5.14.0-570.62.1.el9_6.x86_64.rpm bd4c895aaa00c446f1e26331a1039fba88c558fbc109482421536556f4ca44d9 kernel-rt-modules-core-5.14.0-570.62.1.el9_6.x86_64.rpm ee87371bf06151c80ef940caf698ad9442535eb436a67d3f542ef3fb11ad3ee9 ALSA-2025:20518 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830) * kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689) * kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744) * kernel: vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679) * kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727) * kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864) * kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060) * kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024) * kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195) * kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294) * kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052) * kernel: afs: Fix lock recursion (CVE-2024-53090) * kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119) * kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135) * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241) * kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229) * kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170) * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216) * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672) * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662) * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675) * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645) * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690) * kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709) * kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739) * kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786) * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332) * kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680) * kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648) * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647) * kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631) * kernel: zram: fix potential UAF of zram table (CVE-2025-21671) * kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672) * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693) * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691) * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696) * kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702) * kernel: usbnet: fix memory leak in error case (CVE-2022-49657) * kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432) * kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672) * kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353) * kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437) * kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627) * kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670) * kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269) * kernel: ima: Fix a potential integer overflow in ima_appraise_measurement (CVE-2022-49643) * kernel: powerpc/xive/spapr: correct bitmap allocation size (CVE-2022-49623) * kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs (CVE-2022-49357) * kernel: list: fix a data-race around ep->rdllist (CVE-2022-49443) * kernel: tracing/histograms: Fix memory leak problem (CVE-2022-49648) * kernel: Input: synaptics - fix crash when enabling pass-through port (CVE-2025-21746) * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795) * kernel: bpf: Send signals asynchronously if !preemptible (CVE-2025-21728) * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456) * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987) * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014) * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988) * kernel: RDMA/mlx5: Fix implicit ODP use after free (CVE-2025-21714) * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570) * kernel: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (CVE-2024-57993) * kernel: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (CVE-2025-21729) * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989) * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015) * kernel: OPP: add index check to assert to avoid buffer overflow in _read_freq() (CVE-2024-57998) * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995) * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796) * kernel: scsi: ufs: core: Fix use-after free in init error and remove paths (CVE-2025-21739) * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786) * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738) * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986) * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726) * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791) * kernel: team: better TEAM_OPTION_TYPE_STRING validation (CVE-2025-21787) * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981) * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790) * kernel: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (CVE-2024-57990) * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765) * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012) * kernel: blk-cgroup: Fix class @block_class's subsystem refcount leakage (CVE-2025-21745) * kernel: net: let net.core.dev_weight always be non-zero (CVE-2025-21806) * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072) * kernel: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (CVE-2024-58068) * kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference (CVE-2024-58062) * kernel: idpf: convert workqueues to unbound (CVE-2024-58057) * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828) * kernel: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083) * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826) * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077) * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075) * kernel: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (CVE-2025-21829) * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839) * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837) * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350) * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357) * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851) * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855) * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844) * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853) * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847) * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864) * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088) * kernel: acct: perform last write from workqueue (CVE-2025-21846) * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861) * kernel: io_uring: prevent opcode speculation (CVE-2025-21863) * kernel: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (CVE-2025-21848) * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056) * kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization (CVE-2022-49845) * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994) * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116) * kernel: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (CVE-2025-38396) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-5.14.0-611.5.1.el9_7.x86_64.rpm 3860457a9acd00dc323581d3e8aa4d00221d1f7e742de27d491b6a6c8205a7d6 kernel-rt-modules-5.14.0-611.5.1.el9_7.x86_64.rpm 39bd8c6df96272662e9ea4878797c21cc110a79e6e4662aeff5b1b35a49635ae kernel-rt-debug-modules-core-5.14.0-611.5.1.el9_7.x86_64.rpm 43ebee4a604e087e156c9a203114182c14aa4f8029a598a0e1993e2e184b98ce kernel-rt-debug-modules-extra-5.14.0-611.5.1.el9_7.x86_64.rpm 4bfda07483c1ff3f6fe497810fd02a1a992c0113bfa2ccac5b5c5ccd7815778e kernel-rt-modules-core-5.14.0-611.5.1.el9_7.x86_64.rpm 835bc26b704bf9ed5dc5cef3f1ba30b94413b397d5f8ee28130a85260ec75ca9 kernel-rt-debug-core-5.14.0-611.5.1.el9_7.x86_64.rpm 83cb458b248ae5f2502050e29206852729af5ff86958c5e367b4ef7dcc4efe16 kernel-rt-devel-5.14.0-611.5.1.el9_7.x86_64.rpm 92fd73d72ba28dcab9cfff37fe8a52e1a9866c4f000813e2c06b2aeb891431eb kernel-rt-debug-devel-5.14.0-611.5.1.el9_7.x86_64.rpm b78b6c44034e015886709aae2495ea8be8cef5ddbac1cf2f028f79b647bdb499 kernel-rt-5.14.0-611.5.1.el9_7.x86_64.rpm bc9792ef03ffe70ca7be908470e78eebbe495a563b1530c969e3f74daf68aa45 kernel-rt-debug-modules-5.14.0-611.5.1.el9_7.x86_64.rpm e1a7ab971fa529ffda1c2a52c911195ff71529cc427388a3dba0df8c06f04908 kernel-rt-core-5.14.0-611.5.1.el9_7.x86_64.rpm f1e4b175074115c61663619a0445a0f061b7e54cdcb3ab0ab23a0ec12f773e56 kernel-rt-modules-extra-5.14.0-611.5.1.el9_7.x86_64.rpm f9c6b25e7739372584c62a7cce07b6f4ebc5297453d9735f4159ca08a9174d70 ALSA-2025:22405 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724) * kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864) * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898) * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918) * kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955) * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981) * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058) * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-modules-core-5.14.0-611.11.1.el9_7.x86_64.rpm 1fc981b600c2aff3ecef959ed23425bfa4495b497e9f3438e25ff64e64bb8b02 kernel-rt-debug-modules-5.14.0-611.11.1.el9_7.x86_64.rpm 39c5005828ffb9ccbc087d37dd07d222ea7eb52153ac924b95aa164fb3120ed8 kernel-rt-modules-core-5.14.0-611.11.1.el9_7.x86_64.rpm 3ce2edf8fe16a9222d89dfe153feb779c4af96af560e62b903950117c20af6b8 kernel-rt-core-5.14.0-611.11.1.el9_7.x86_64.rpm 4120f9b0c2620176912a8b0c7149521e3262231aa7375b974171e2b325c0c485 kernel-rt-debug-core-5.14.0-611.11.1.el9_7.x86_64.rpm 481996b8d6e2ac285e79cdb3518ec60a2fa41bc30a2b3185a7716f2c65b7e9f5 kernel-rt-debug-5.14.0-611.11.1.el9_7.x86_64.rpm 60559c904c246cc26e93f2533583f9dd65b77ddc78855b6740f66d1b03869ebc kernel-rt-devel-5.14.0-611.11.1.el9_7.x86_64.rpm 7431d3132197a6cc3ab25293b6bbdb7e39be8897e146fde350b03c6a7ed0cdad kernel-rt-debug-devel-5.14.0-611.11.1.el9_7.x86_64.rpm 77a5befdba29c7d68ed0d87662f42168213e5f663f093ddca86877d9dc8f1d51 kernel-rt-modules-extra-5.14.0-611.11.1.el9_7.x86_64.rpm 77f6b8632fbc5c60e41c060f9189f178c183c02c19264c0b3419b3e929f1103d kernel-rt-debug-modules-extra-5.14.0-611.11.1.el9_7.x86_64.rpm c72eacd433e78285aacf95c8d1af9a8cdfbeba7049ad111094b2aa2064ab9f8b kernel-rt-modules-5.14.0-611.11.1.el9_7.x86_64.rpm cb253fb47548c1dcbefd848bf9162281abc0e617b4466879c989d8470b1c22e5 kernel-rt-5.14.0-611.11.1.el9_7.x86_64.rpm cd7eb6d815ff03e760de1978d32aed3dca2cf3e1f26343368bf3eb76c39aa525 ALSA-2025:22865 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925) * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-modules-extra-5.14.0-611.13.1.el9_7.x86_64.rpm 06728bfaeb9ac4c28ef34766f4820b4256371c23c096dba6b168d0bb4734a392 kernel-rt-debug-modules-5.14.0-611.13.1.el9_7.x86_64.rpm 2d4c317a10a1802fc18ead5af55d59db495b2706d0e53e571124c591b3269421 kernel-rt-modules-5.14.0-611.13.1.el9_7.x86_64.rpm 5a1d14d91453f3ee520e416c883a614a2ba5e73207046ef910d528bb45f207cd kernel-rt-debug-core-5.14.0-611.13.1.el9_7.x86_64.rpm 5f1a60b307a6ddb17e7288e3472beb49b84963a8434f4e0f6b2da6c2ce619e8d kernel-rt-debug-5.14.0-611.13.1.el9_7.x86_64.rpm 5f9cc6d9ccc6633037898b8486025a75fdff092780cef9a63931e765643834f2 kernel-rt-debug-devel-5.14.0-611.13.1.el9_7.x86_64.rpm 81f1cb2094d5eace4001de9765585234b5d6d60922ccae230dc90ca195384539 kernel-rt-debug-modules-core-5.14.0-611.13.1.el9_7.x86_64.rpm 91f8a57d9db64c93d2e75127433d48a544cac2218a25e5df0598f98c511bb4e2 kernel-rt-core-5.14.0-611.13.1.el9_7.x86_64.rpm 9a1d0519b39ec1facbf8545a152cd03cee926b342a58479399301140c9b543bb kernel-rt-modules-core-5.14.0-611.13.1.el9_7.x86_64.rpm a53fda616a8c35270a22bef903b80404874b6f59e21cdb99f724936df5bab9ee kernel-rt-devel-5.14.0-611.13.1.el9_7.x86_64.rpm b44af22d72f6d3dca899e9b78d2941723f238387e161e62adfde36debc2cb61c kernel-rt-debug-modules-extra-5.14.0-611.13.1.el9_7.x86_64.rpm d09ead6b65c1f3128bff4afb16f56b4e852c3352e1e5d97b05a891dea3873d07 kernel-rt-5.14.0-611.13.1.el9_7.x86_64.rpm ebe0dea3faba8598b3b4732690575d716db604896bb81a7c4007e82413235701 ALSA-2025:23241 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499) * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966) * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-core-5.14.0-611.16.1.el9_7.x86_64.rpm 058aa396c5db87e46587b4e4e03ea13e4f4738fe2ee7b29020acfa64a27193d3 kernel-rt-modules-core-5.14.0-611.16.1.el9_7.x86_64.rpm 3d3a8bc528ba4403d192d9a793babd3b7e93b5ce7514af4fb6b1fbc09f02d3de kernel-rt-modules-5.14.0-611.16.1.el9_7.x86_64.rpm 5184cfc0b050bedb4662a96b940e582c492458166a6736d9ec5b74f3a50263d6 kernel-rt-debug-modules-extra-5.14.0-611.16.1.el9_7.x86_64.rpm 591db4558c6a77cb80272aa9410c33b90bc50e93282dd33291772e4aaafe67b9 kernel-rt-debug-5.14.0-611.16.1.el9_7.x86_64.rpm 601944c0cf32cfa31800a0fa973df33498711a162caf6a7565d609ea9e010262 kernel-rt-5.14.0-611.16.1.el9_7.x86_64.rpm 601e879f7a4a1ac9419531c2ea4c78af0d55b7235ba9c97c94a18f5813befc8b kernel-rt-debug-modules-core-5.14.0-611.16.1.el9_7.x86_64.rpm 605939307f3a9082c3bbff8179e12c6ce3c09a7184231d88fee2233d822b25f4 kernel-rt-debug-core-5.14.0-611.16.1.el9_7.x86_64.rpm bb79ff6bde7e3e2bbac3be7e880fdb00bc84ff4d66b13894c0ce9c06b96252f1 kernel-rt-debug-modules-5.14.0-611.16.1.el9_7.x86_64.rpm beb467bc7e937772a811d2c00bd7bb2f68dbdf8329c2882b4c445bc7feb192bf kernel-rt-modules-extra-5.14.0-611.16.1.el9_7.x86_64.rpm c4f9da9b830f4a6ede63399e46362552de1ced0cefc66c873726b32357105242 kernel-rt-devel-5.14.0-611.16.1.el9_7.x86_64.rpm cef2292f782a3fdcf86154ac85b8e633fdaf197cb84f98d816302f88d9adae9c kernel-rt-debug-devel-5.14.0-611.16.1.el9_7.x86_64.rpm ebd43f19cfb399a97eac0e69777bee422b95d1f4617ee7aefdaddfb01bd165e6 ALSA-2025:2627 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ACPI: extlog: fix NULL pointer dereference check (CVE-2023-52605) * kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (CVE-2024-50264) * kernel: HID: core: zero-initialize the report buffer (CVE-2024-50302) * kernel: can: bcm: Fix UAF in bcm_proc_show() (CVE-2023-52922) * kernel: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CVE-2024-53113) * kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (CVE-2024-53197) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_5_default kernel-rt-debug-core-5.14.0-503.31.1.el9_5.x86_64.rpm 00737e16390d41b397e5821f436e3840577c9726fda69ba2348c411a745b7099 kernel-rt-devel-5.14.0-503.31.1.el9_5.x86_64.rpm 1b4c90e1fa6aec467132f3e5afefb85a8e76ce38fe80679333261a8bbd21f522 kernel-rt-debug-modules-extra-5.14.0-503.31.1.el9_5.x86_64.rpm 353c566f18db32c8a13152d038e9256dc96c908b3fdbc494c192ed859f61bf7e kernel-rt-modules-5.14.0-503.31.1.el9_5.x86_64.rpm 4264c6f8ecd7d9e3b6423bddf2535cc8f63d50ed8c3d7478013b1b9f833cbc0b kernel-rt-modules-core-5.14.0-503.31.1.el9_5.x86_64.rpm 502b155ce3fa9da52859d870a79f38bc4bce07dbf707c9eb9c15b243c7ed53f7 kernel-rt-debug-modules-core-5.14.0-503.31.1.el9_5.x86_64.rpm 51e3e1de31eea1fb23473846fdcff537a57d2020fc0168c37fcd05f93d6adadb kernel-rt-debug-modules-5.14.0-503.31.1.el9_5.x86_64.rpm 667df19d4197031eed58493aea6b9ff663d48953486c0dba066ebd006e112675 kernel-rt-core-5.14.0-503.31.1.el9_5.x86_64.rpm 6d10e8e02adac661c8d18888299f7cd3aec2c0a083fb761291f18b208ab23ebe kernel-rt-debug-devel-5.14.0-503.31.1.el9_5.x86_64.rpm 8e590bde0a9d660019e3965c4314a485eac5c2771eedefb25fff296c361877a1 kernel-rt-debug-5.14.0-503.31.1.el9_5.x86_64.rpm bfc78a674ef8f3f9658938ec2deba19a66d91f010a084af6c40b1a7a786eaeb1 kernel-rt-modules-extra-5.14.0-503.31.1.el9_5.x86_64.rpm df593a0d02ad69d62e96421f29770652710ea86eb6dc8636b68fa8984251a9a9 kernel-rt-5.14.0-503.31.1.el9_5.x86_64.rpm f46dc1ae296f15946eb1f00f3ec5b67d2d47d21f927a67d6e37ebf95b910130a ALSA-2025:3937 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (CVE-2024-53150) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_5_default kernel-rt-debug-core-5.14.0-503.38.1.el9_5.x86_64.rpm 149a5fbaf667645403121254cfca0ad1e6e301233da94a98727401df479bebad kernel-rt-devel-5.14.0-503.38.1.el9_5.x86_64.rpm 3c181bccd4a2465f05ab1adc7b56931f2f28a4e6c3cb83266751883a9a662379 kernel-rt-debug-devel-5.14.0-503.38.1.el9_5.x86_64.rpm 3eced389e38e7d790a4266895512a6223fad809b69ca677b582d48dcd3275f70 kernel-rt-debug-5.14.0-503.38.1.el9_5.x86_64.rpm 545b26a1b9fa0e9b4753d575468d9108db10d457fcbbae3f7859d377a095c825 kernel-rt-5.14.0-503.38.1.el9_5.x86_64.rpm 565bf432c08febf3dc46f6ddaaabad872e268ca05a7617f76013d62631c117ae kernel-rt-debug-modules-core-5.14.0-503.38.1.el9_5.x86_64.rpm 64f1bdddbdc228d26e688d00363c9c1244d72af9390b1662c74eeb9d097c8c18 kernel-rt-debug-modules-extra-5.14.0-503.38.1.el9_5.x86_64.rpm 91571771b7fd6be6ae82954a28def043e61ca947c4106442bc0a89911a62c7c5 kernel-rt-modules-extra-5.14.0-503.38.1.el9_5.x86_64.rpm a56014b44724481e16ef2746e8f45640a97de6877499310a2dee203da4b9edca kernel-rt-debug-modules-5.14.0-503.38.1.el9_5.x86_64.rpm acebe1cb02549832fef977f2ccb9d198bf99a3f6664a051f8c356252185bec51 kernel-rt-modules-core-5.14.0-503.38.1.el9_5.x86_64.rpm b7ba8ef4b6179dc4630fa9bedc82bbc13003929c01e39024335dbab47dc24800 kernel-rt-core-5.14.0-503.38.1.el9_5.x86_64.rpm e517585595efa6cb91ae265b77b323dba70a424539287f0caeb202e27c65b7f3 kernel-rt-modules-5.14.0-503.38.1.el9_5.x86_64.rpm f76f73d721525caf2a334c3187e100ecc374fd08894e405e680db457f87e11b4 ALSA-2025:7423 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633) * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007) * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005) * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069) * kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927) * kernel: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CVE-2025-21993) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-modules-extra-5.14.0-570.16.1.el9_6.x86_64.rpm 03ee7f57046600960b41fd8fd2cae16ca2964d23ff7b79ad84897a05c6916ebf kernel-rt-core-5.14.0-570.16.1.el9_6.x86_64.rpm 0bf219c8636f24fcc16a0a7b4a4e3ac510fc1d36fde8dc7dba32ea29df42f41d kernel-rt-debug-core-5.14.0-570.16.1.el9_6.x86_64.rpm 1c38bec3d1aceb9b441a939ce653559e0b9f1c9a5003be383b8c43eda2b16d0b kernel-rt-debug-5.14.0-570.16.1.el9_6.x86_64.rpm 2ed52a03b10205a9629c5cc118e7bc7100ac91c8fc7cabd61de4794b90925eb9 kernel-rt-5.14.0-570.16.1.el9_6.x86_64.rpm 4b493da1e048f212420f40f0814c74469e0c8e669e89330938b5ae24d81f37cf kernel-rt-debug-modules-5.14.0-570.16.1.el9_6.x86_64.rpm 8479a8168f9cf6d191dad82418b0ced608550286f21554c6b9522913f67ab527 kernel-rt-debug-modules-core-5.14.0-570.16.1.el9_6.x86_64.rpm 8a8a59ed8a9f5130225a8a3b537abb7b127ae952c9d7564687f4291420f56b8a kernel-rt-debug-modules-extra-5.14.0-570.16.1.el9_6.x86_64.rpm b0f5d9467e351cc54bd74cb110993b5b03460f5e8d1b77869627d19d3a36e58d kernel-rt-devel-5.14.0-570.16.1.el9_6.x86_64.rpm b1e6bdb305a8efd96899f0587a9e51157e29c2e89b0ebde9e0fca491ea5ddcf9 kernel-rt-modules-core-5.14.0-570.16.1.el9_6.x86_64.rpm b7c9095c8896625f8fde4a1948a86e9ad364e59353e7f6a316678c75a1b4a2d4 kernel-rt-debug-devel-5.14.0-570.16.1.el9_6.x86_64.rpm caaf4531b86077928b385896c1d3c7c15f099ebd95a2c00e654876ff4c9d3c64 kernel-rt-modules-5.14.0-570.16.1.el9_6.x86_64.rpm f8690f2dd6eaaf7b681bf18971df4622322b5531ae1b8382611c65d05d9663a3 ALSA-2025:7903 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756) * kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CVE-2025-21966) * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-5.14.0-570.17.1.el9_6.x86_64.rpm 05f5baefc5f4c7019f1e95a2358427587dd19da5c09e1082c3fe902ea804035c kernel-rt-core-5.14.0-570.17.1.el9_6.x86_64.rpm 1fd1dabafc926206d257debfe9c62af406e4a73dc40897c4ccc007b398910521 kernel-rt-debug-modules-core-5.14.0-570.17.1.el9_6.x86_64.rpm 26ecca64a0662e5ece5b0c3b52388ac850ee75bf5d114fa3caa82914f2ef0b54 kernel-rt-modules-5.14.0-570.17.1.el9_6.x86_64.rpm 4d2d57d099cd49ba4413d5fb55daee1ad579c2d5f8a4591026d67af1f4f28859 kernel-rt-5.14.0-570.17.1.el9_6.x86_64.rpm 4e42458fa9361e07096b07d23ea32fde42cfdca7ef2ca5c4cb05fe1642bcd272 kernel-rt-devel-5.14.0-570.17.1.el9_6.x86_64.rpm 6a4ee72a22f61e871aac0d8d839eead144b9aa53fd12b4994d7181a20076a604 kernel-rt-debug-modules-extra-5.14.0-570.17.1.el9_6.x86_64.rpm 8abfa7df145d1829142741d9584caed76666f5db94b777325c4195ee016a0191 kernel-rt-debug-modules-5.14.0-570.17.1.el9_6.x86_64.rpm 99d04cc57b14b41437b93f4e6dd658fa9bea3bbe9ed81136c59005f17f3a545c kernel-rt-debug-devel-5.14.0-570.17.1.el9_6.x86_64.rpm c2179d713fa7970ecc670dda51c3de06f846d10ddfc8e2e1be4196fdc564625a kernel-rt-modules-core-5.14.0-570.17.1.el9_6.x86_64.rpm e69029d51ee4996ca564fb015fde5a80f3268535703c432fa3c7109bbe7867e3 kernel-rt-modules-extra-5.14.0-570.17.1.el9_6.x86_64.rpm f5eee1f342f4aa01c5a5e630ca51c18d2deafac3535a1951bbdf84d13bd6a831 kernel-rt-debug-core-5.14.0-570.17.1.el9_6.x86_64.rpm fda0c9302a373c9f3be94f01e0770592d54372b8b5c134dcd7586f83c1901320 ALSA-2025:8142 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: cifs: Fix integer overflow while processing acregmax mount option (CVE-2025-21964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-modules-core-5.14.0-570.18.1.el9_6.x86_64.rpm 00a290f2ab45fcab02a08b90a3eaa001c4afa35e79c9bf5261d7eaa76ec9226f kernel-rt-debug-core-5.14.0-570.18.1.el9_6.x86_64.rpm 07304eed623811c46fc9479cc813c80f0016fa1f0069add94abf2d5193cf07b6 kernel-rt-modules-extra-5.14.0-570.18.1.el9_6.x86_64.rpm 0a37fa493f10ffb5d7dc6b153753ac4b9e7651a65b8b707e1889aa4c0db63eac kernel-rt-debug-devel-5.14.0-570.18.1.el9_6.x86_64.rpm 2581f73ec130ba44c5dae4dd2a607a89c23946fd7c4355b0d5abf135d22af145 kernel-rt-modules-5.14.0-570.18.1.el9_6.x86_64.rpm 4807ba2ff1123ea224b8e476c887593c6f051e8bcb5c2d37b410bc5315174bb9 kernel-rt-debug-modules-core-5.14.0-570.18.1.el9_6.x86_64.rpm 6b246a3e2a2044374258e717247ae2937ed1f9d50b35451f2c192d98627dce79 kernel-rt-debug-5.14.0-570.18.1.el9_6.x86_64.rpm 81e2cfc44deeda98a53345c1a03274ee21fff6c50ad549789533311364b7fb0d kernel-rt-debug-modules-extra-5.14.0-570.18.1.el9_6.x86_64.rpm 849bef2d5c07455c5685a15d91203ae98ff882603712012105a390c942ff879d kernel-rt-core-5.14.0-570.18.1.el9_6.x86_64.rpm a677d1c9d67730f27f153f61783d5a9456d06327662a3b97057cb4e378a9bbfc kernel-rt-devel-5.14.0-570.18.1.el9_6.x86_64.rpm b2c0b3fe043863be003fa37f5dde83aed96c5e697ac09ece76a4a6377ff901af kernel-rt-debug-modules-5.14.0-570.18.1.el9_6.x86_64.rpm b817155c9b39190c2010008728645c22762d50face7b0c8791ab1ee51c4f3832 kernel-rt-5.14.0-570.18.1.el9_6.x86_64.rpm c0dc1fdef47e8bff60adc6bbd334e233dce42faa2a42fbb0c7f3f9dde1f69c13 ALSA-2025:8333 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Use after Free in gru_set_context_option leading to kernel panic (CVE-2022-3424) * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-core-5.14.0-570.19.1.el9_6.x86_64.rpm 42b10b39263bf85eb05dc93087cf95aa6281896fe311d5009cdbb192714bcb7d kernel-rt-core-5.14.0-570.19.1.el9_6.x86_64.rpm 46eb549bdee24fd002a7e30e3dddf5088f9bf2a316178684802df17805fd0c4b kernel-rt-5.14.0-570.19.1.el9_6.x86_64.rpm 56f1d397658fbe6cc9d66cf1a6f09cb9f2be67b63cf7a01058984d9103e1e534 kernel-rt-debug-modules-5.14.0-570.19.1.el9_6.x86_64.rpm 5b7d556cb4d0cdac8e6d9e3e8723bdcfe755d5d709e117041733dc3c5070afbb kernel-rt-debug-modules-extra-5.14.0-570.19.1.el9_6.x86_64.rpm 684553aa32519e6cb8f35875179c7ec53d37dd7664d7f1ad3068cc80fa2fa0c1 kernel-rt-modules-core-5.14.0-570.19.1.el9_6.x86_64.rpm 915c436191e3496ed8c272ee87f9dc2be335810b8fc9b8080f1fb00844a7dcac kernel-rt-debug-modules-core-5.14.0-570.19.1.el9_6.x86_64.rpm 96831d2a489e7e7efacec1d259b836998c4a03dcb332a73670255905afbedca1 kernel-rt-modules-5.14.0-570.19.1.el9_6.x86_64.rpm 9899ec72d77c976a94b2fbdcbacd03b8b2759d16b6b518c61197ef15d08310b3 kernel-rt-modules-extra-5.14.0-570.19.1.el9_6.x86_64.rpm a7903011114cd5d7c5ebda4ee70bca6e5fa1acb7fb434650a35b91bfa3fb7688 kernel-rt-debug-5.14.0-570.19.1.el9_6.x86_64.rpm a93cbab6c31c001027d2ef8f1d7419ca8ec5fb8ed50a39391256cb43fb8a5b0b kernel-rt-devel-5.14.0-570.19.1.el9_6.x86_64.rpm be2c4328ce098e6a4e69c9ed40bccbd2f75f285cb58cca7fdbd6443013bfadfa kernel-rt-debug-devel-5.14.0-570.19.1.el9_6.x86_64.rpm ecab4631a90ea8091c6241109a910ba8aa52fc6fff896f6c8c3c4cde72ac45a6 ALSA-2025:8643 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926) * kernel: vlan: enforce underlying device type (CVE-2025-21920) * kernel: xsk: fix an integer overflow in xp_create_and_assign_umem() (CVE-2025-21997) * kernel: net: fix geneve_opt length integer overflow (CVE-2025-22055) * kernel: ext4: fix OOB read when checking dotdot dir (CVE-2025-37785) * kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CVE-2025-37943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-core-5.14.0-570.21.1.el9_6.x86_64.rpm 22aa5c7512d6923b3b3f00d0fa490781c0a109717d9acb51cc271c72d8693295 kernel-rt-modules-extra-5.14.0-570.21.1.el9_6.x86_64.rpm 327328dddcb0cdb614b27bd719a92b03e641b334d196c7fe1300a8521b35e4fe kernel-rt-debug-modules-core-5.14.0-570.21.1.el9_6.x86_64.rpm 32c54f04066c6c9e173b68143f538b740fb622c37e17164697e9bbab63a745c7 kernel-rt-5.14.0-570.21.1.el9_6.x86_64.rpm 54cf99ad3170adcc443766a596eb724c38fcc18a49779b77f00ef95817d0f4b4 kernel-rt-debug-modules-5.14.0-570.21.1.el9_6.x86_64.rpm 5a7a86696fcd62c663ac1d6ba4aae114b0f9e74b51b9fdfefe2d518c2d36abc6 kernel-rt-modules-core-5.14.0-570.21.1.el9_6.x86_64.rpm 6cfcb3dcceeb1999802e8abe3d3993bfeecc84ffdc369e1237c53fc1c42201f4 kernel-rt-debug-modules-extra-5.14.0-570.21.1.el9_6.x86_64.rpm 916766bea019951cc216d045ecae4c14eaaa33d02e49e2e53b446cb16ea5f4af kernel-rt-modules-5.14.0-570.21.1.el9_6.x86_64.rpm b2e66bf9708c49b2d77ee0cd8d692d37db7ddd3168b1abd5b9d57170532892b0 kernel-rt-debug-devel-5.14.0-570.21.1.el9_6.x86_64.rpm bd7f8ab30e9249aa392b1fa2982a573a7f8c33d3b3760e996e0ac3ab391369d9 kernel-rt-devel-5.14.0-570.21.1.el9_6.x86_64.rpm c051c1455f28b1e0c01ad14a8028c6d72bfcbb91a093e739f1b6a4130ecbf30f kernel-rt-debug-5.14.0-570.21.1.el9_6.x86_64.rpm f54bb27f76df0bef332cec1693f33a57520c34b4f12fc1721182aa5a5ae710f0 kernel-rt-debug-core-5.14.0-570.21.1.el9_6.x86_64.rpm f9607682905850232fc516226bc130142a215efb48693d0bcf9f757f59448990 ALSA-2025:9080 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961) * kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CVE-2025-21969) * kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963) * kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979) * kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999) * kernel: md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126) * kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-modules-extra-5.14.0-570.22.1.el9_6.x86_64.rpm 062317f6a6776e4cdd595e98ab430a8ec9330c47fda0757394aebff408204935 kernel-rt-debug-modules-5.14.0-570.22.1.el9_6.x86_64.rpm 14742f874f3e8a3621566b57b80117dd081fe3defde11eb0b9f060ee436f85a2 kernel-rt-debug-modules-core-5.14.0-570.22.1.el9_6.x86_64.rpm 24e9c651284fd9ae59bc43f10fa2dc7f4c16aa961e55ef3189c023cf23458858 kernel-rt-debug-5.14.0-570.22.1.el9_6.x86_64.rpm 39a81827acd716d7bde998d88592a0b86bc3c8d9b8960878a0f84417200ea6ab kernel-rt-core-5.14.0-570.22.1.el9_6.x86_64.rpm 4a99f37e7ee494d3758202d7414784ffb55a5e67ec56c7e67ad71b114f83031a kernel-rt-modules-extra-5.14.0-570.22.1.el9_6.x86_64.rpm 76b5753938de310f239579f062f90418768ffea56ae6d58c59ddcabcf5991529 kernel-rt-modules-5.14.0-570.22.1.el9_6.x86_64.rpm 852c70adf3ff1b0e279c13dbb1a7af24b99aed2a114d076940d04ae6ed7b455a kernel-rt-devel-5.14.0-570.22.1.el9_6.x86_64.rpm a6770fea373594d5b360acfa8eb6f07d05360134b09e6f40c23be9e150f548ba kernel-rt-5.14.0-570.22.1.el9_6.x86_64.rpm b1dd140df7ec7fc153f62eacf111d8a2df2549e678effb44442570756c8860e9 kernel-rt-debug-devel-5.14.0-570.22.1.el9_6.x86_64.rpm b9133a45c937147d16ff49fd20b982325ee92a61e7a116736a48615e98c7098c kernel-rt-debug-core-5.14.0-570.22.1.el9_6.x86_64.rpm f3ee99f933f4bda84c0ff85d1308cbbcdf33acae40997ee7d6f8cf76a412c3c2 kernel-rt-modules-core-5.14.0-570.22.1.el9_6.x86_64.rpm fb0f5057f31029e646b44db156ca17d05d341e98d3465809d30a9fa91bfb682c ALSA-2025:9302 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883) * kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919) * kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104) * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150) * kernel: ext4: ignore xattrs past end (CVE-2025-37738) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-modules-5.14.0-570.23.1.el9_6.x86_64.rpm 0bc259cdd3ebcaa031f9cf5a564fce465459a92c3eee3ef0b9ec85872a0ade8c kernel-rt-modules-core-5.14.0-570.23.1.el9_6.x86_64.rpm 152f7be0cf892e578325e212d68074c2f3e40f34c6cd9ac8beaec05b6947c119 kernel-rt-devel-5.14.0-570.23.1.el9_6.x86_64.rpm 55b833516fdc9603d915e2dad1062903a9507bdaa7ecbe4e0f3813163fd4f082 kernel-rt-debug-core-5.14.0-570.23.1.el9_6.x86_64.rpm 97da0b79dede14f2c05dbc65e27d3ef99fb4c3240907365c898373328d3a61bf kernel-rt-core-5.14.0-570.23.1.el9_6.x86_64.rpm 9875160ebbe8f65b98836ad52dae6c50cf5e13d8aad1edda2cca6369d7cadfb6 kernel-rt-5.14.0-570.23.1.el9_6.x86_64.rpm a636b7ac622568ba7a7dcf41d6d6bfb640c534ff9bc5f144c981391c0ef17e16 kernel-rt-modules-5.14.0-570.23.1.el9_6.x86_64.rpm ce43e677cba021fedc007e7f50659490d26fe0d81b6d7a648576ad067d468929 kernel-rt-debug-modules-core-5.14.0-570.23.1.el9_6.x86_64.rpm e016a837f48e21321ad4376c12ffb77f30e000ad55708fd0c2f5e06b858f3491 kernel-rt-modules-extra-5.14.0-570.23.1.el9_6.x86_64.rpm e66488dacc7a3a2b0402629013903e80c1d0beceb090c7247b4f4ed12e89b709 kernel-rt-debug-devel-5.14.0-570.23.1.el9_6.x86_64.rpm ec3a7697be25a2b557754b41d9f511a596b572a2c1333cb49805f90506700596 kernel-rt-debug-5.14.0-570.23.1.el9_6.x86_64.rpm efa6c02f9533d459c7a58705701edf53ca2b64c6386be3fb832da0fb0dd3ba06 kernel-rt-debug-modules-extra-5.14.0-570.23.1.el9_6.x86_64.rpm fd90bab64d9faa2a02ce339e3eeaf9de029fa436b64bffbdf8fd36936edbb4dd ALSA-2025:9880 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Squashfs: fix handling and sanity checking of xattr_ids count (CVE-2023-52933) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_6_default kernel-rt-debug-5.14.0-570.24.1.el9_6.x86_64.rpm 1af58667d9da8eab68d37625b485a7211336d69251c6a8f6851cb61cf1833481 kernel-rt-5.14.0-570.24.1.el9_6.x86_64.rpm 3dd043e07b33766b9a96d901e261803f37906a8b795111025888cd1fcfca3b6b kernel-rt-debug-core-5.14.0-570.24.1.el9_6.x86_64.rpm 3f53e02cc17a5bdb00b2fffc94fa0d61c10a58146a4f15c284980a9a87c6324f kernel-rt-devel-5.14.0-570.24.1.el9_6.x86_64.rpm 454a3bfdf7caa364fad1d245f9ed271069b3118246fd797c84ba3058b1ccc9c1 kernel-rt-modules-5.14.0-570.24.1.el9_6.x86_64.rpm 497d6c65ab5ef36f0268ad6db2c80ad92b70a6a21d58a66db3521db46cb1b1ac kernel-rt-debug-modules-extra-5.14.0-570.24.1.el9_6.x86_64.rpm 6ba6888f3e630701458208faf41235927df76d9eb199836116b15a8dd7ea9519 kernel-rt-debug-modules-5.14.0-570.24.1.el9_6.x86_64.rpm 6e10ac90d1fed6c71f0e8879fbee375d9d00f210acb89a4c6e6e1a9fc185926e kernel-rt-debug-modules-core-5.14.0-570.24.1.el9_6.x86_64.rpm 71b58da508f43700ae2f34443d3adc22ec926f25f4ae111dc7cc5a6a16006c36 kernel-rt-modules-extra-5.14.0-570.24.1.el9_6.x86_64.rpm a1ff3156c7b1d2f25230a24725448945ffe1282229fce0cb0272392f0eb4652a kernel-rt-core-5.14.0-570.24.1.el9_6.x86_64.rpm a4e0b9ce61f281a813a5c8716476f6c602f2cf02a881e9edbabb6f1edeaecb75 kernel-rt-debug-devel-5.14.0-570.24.1.el9_6.x86_64.rpm cb3feeab3ddd513a4861baece212833621cd18d2e7d5d8f458802053e137b1d5 kernel-rt-modules-core-5.14.0-570.24.1.el9_6.x86_64.rpm ed164173b5f47833531f3c314b4773b8c1b08d023c42931f95936d7af6ffad4c ALSA-2026:0445 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806) * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840) * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883) * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-modules-core-5.14.0-611.20.1.el9_7.x86_64.rpm 1318aefc9be3bc55389831592d0e2c23f242e5be79aff068f7ec7a8249fb06ca kernel-rt-debug-modules-core-5.14.0-611.20.1.el9_7.x86_64.rpm 15392dd9049eb9e133b14b5c2fc5b9006278ed33125bd373f6c0389100941be3 kernel-rt-debug-modules-5.14.0-611.20.1.el9_7.x86_64.rpm 3e0a658b7500b6dc3c9ee96bbb70b1c92db75a867601f94d5c3b80bde1b38f61 kernel-rt-debug-5.14.0-611.20.1.el9_7.x86_64.rpm 5160faff4d8b531abd180c3f5c658207f53a94501fe2cd7b3a4013abc1ccd8fc kernel-rt-debug-devel-5.14.0-611.20.1.el9_7.x86_64.rpm 52fd0d9bfbd80275f9bee938b4fbb53e8f4df9c352c7776607d2aeb51a890eca kernel-rt-devel-5.14.0-611.20.1.el9_7.x86_64.rpm 69f6cc5fd7404f4f7e0edc9070656d7dea4eeee9afe3ebb00ad1bc7f122c2bd7 kernel-rt-5.14.0-611.20.1.el9_7.x86_64.rpm 7e7942de7663965973198541f6440baa84f79912bbda9c1e63165ee46dcaf9d5 kernel-rt-modules-5.14.0-611.20.1.el9_7.x86_64.rpm 84d378162d167f32961209ef873c216a142b9be8432f50a2dd518b0be6c9df7e kernel-rt-debug-core-5.14.0-611.20.1.el9_7.x86_64.rpm a1ababe0ceda66a84fd5731f103b05f5eb4b9131b4855d77327d9648ae2d5556 kernel-rt-core-5.14.0-611.20.1.el9_7.x86_64.rpm c597a40c522a92cce8f609c075ccdb2548687236d616260c7363264d26377415 kernel-rt-modules-extra-5.14.0-611.20.1.el9_7.x86_64.rpm d826c9d93ec559d13e616cd7c3afd9308ad41ecf9a298bd02fb4b0fb5bba8724 kernel-rt-debug-modules-extra-5.14.0-611.20.1.el9_7.x86_64.rpm d9e1f9f12c45192d19d589b7640abab524eeb4a49bd200b474ea369962ab2bbb ALSA-2026:0793 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/xe: Make dma-fences compliant with the safe access rules (CVE-2025-38703) * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933) * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277) * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-modules-5.14.0-611.24.1.el9_7.x86_64.rpm 40a748f3c0801cdf0b5c110b376c1b340920d34970a1b1b8f75fa5520383c27a kernel-rt-debug-modules-core-5.14.0-611.24.1.el9_7.x86_64.rpm 5a4f53df685ef173bb2bfb15bfdbc55c20c86faa0be6d89bd063b542b54876a1 kernel-rt-debug-5.14.0-611.24.1.el9_7.x86_64.rpm 5e77d1771563d009f01c9666a53bc2f7f924beede24c064d80af02f424a85b6a kernel-rt-devel-5.14.0-611.24.1.el9_7.x86_64.rpm 74f9a37d74c4c64dfde56b7b02e92ad88b45c5d57051b264785f07daf36ee7a2 kernel-rt-modules-core-5.14.0-611.24.1.el9_7.x86_64.rpm 8acca69a98afa733708b36aed70a9cd4be2c57e5eb2860cbba7491377635321a kernel-rt-modules-extra-5.14.0-611.24.1.el9_7.x86_64.rpm 9b19a87f2f385b14cf21bfc75181a8c24bb2c123a7b4e03d6eeb0402eaba56c4 kernel-rt-debug-modules-extra-5.14.0-611.24.1.el9_7.x86_64.rpm a7dc382984e552056a6f6686ada877d2820109887bc497cc193535198e97aad2 kernel-rt-5.14.0-611.24.1.el9_7.x86_64.rpm b85318d52c90b8b313633e8f412a116bb5ef9043fff0cfb1bc784e03642e8902 kernel-rt-core-5.14.0-611.24.1.el9_7.x86_64.rpm d0798cae42896f02885d55b2e4dc53389b7b3d2a6e2bdbc950ecc7dd7dcf4e54 kernel-rt-debug-core-5.14.0-611.24.1.el9_7.x86_64.rpm dc940e43455b501b596bedbf92a299077043adb75b66b92dc047823f37aea7d5 kernel-rt-modules-5.14.0-611.24.1.el9_7.x86_64.rpm e2b5ec05ceb248968a9ff84f9e7709f1f9e3bfcc68af28f1eba94840e88e1aa9 kernel-rt-debug-devel-5.14.0-611.24.1.el9_7.x86_64.rpm edf38b1e37686152d061c8c93c596c85508db44a5f1bddd0e1e305bac31a1c6f ALSA-2026:1143 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting (CVE-2025-38141) * kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349) * kernel: drm/xe: Fix vm_bind_ioctl double free bug (CVE-2025-38731) * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248) * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258) * kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service (CVE-2025-40294) * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301) * kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-5.14.0-611.26.1.el9_7.x86_64.rpm 1b91b35010e1988582cc01ba5e62b9a1516c5e018f804e3a302f05c7bb309838 kernel-rt-modules-5.14.0-611.26.1.el9_7.x86_64.rpm 22da825f8f333f285d177767eec94fdcf4d3ccacfd5badb25ce27b462ea07fde kernel-rt-debug-modules-5.14.0-611.26.1.el9_7.x86_64.rpm 3559a7eb26d65551df064466f2993f20df27dd434a76e00ad766ed922d74fc27 kernel-rt-devel-5.14.0-611.26.1.el9_7.x86_64.rpm 5c39608a8d5c41ac951eee6958a1b360887be6406bf4860cf2d545b8eba51601 kernel-rt-debug-modules-extra-5.14.0-611.26.1.el9_7.x86_64.rpm 83b9a29d74053f23e86b7de621f6eddee7a7c823d7e2a1e25f9d750747b701a2 kernel-rt-debug-devel-5.14.0-611.26.1.el9_7.x86_64.rpm 9ac327a6aa02a22e419c013a8d7b54205c2689bed4100099a222337a88c64787 kernel-rt-core-5.14.0-611.26.1.el9_7.x86_64.rpm a31c969f537618236b757b82657d7cc09ad0502b240ec668043978d10b60eb15 kernel-rt-modules-extra-5.14.0-611.26.1.el9_7.x86_64.rpm af4c31d24677223f46adfcec78c8210640e6ae48ea769bedc6485ece3891cf24 kernel-rt-debug-core-5.14.0-611.26.1.el9_7.x86_64.rpm c7a042ea28c417b78c96f633af11c2f83c2c4daab6175f800b7b2cb02cefd473 kernel-rt-5.14.0-611.26.1.el9_7.x86_64.rpm cb6a1510a5f1dec0e2a7b1ed6a7a6a739154f1d518212d740c7f08e167aa70fb kernel-rt-modules-core-5.14.0-611.26.1.el9_7.x86_64.rpm e184717c80eb710c0e40f854eb9f814d863f35f4a7756d23674cdd0f39eb5342 kernel-rt-debug-modules-core-5.14.0-611.26.1.el9_7.x86_64.rpm e343191a2bd786c718d83b4a454a009d9253db21740c739560db192da86e80d8 ALSA-2026:13565 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-core-5.14.0-611.54.1.el9_7.x86_64.rpm 08cd1c5db935d37d569bd04e2b1d0e4fe8191239ba9fbd54e97317396dc43247 kernel-rt-5.14.0-611.54.1.el9_7.x86_64.rpm 09fa8fd2e493c513e39e318fe4846194c6350f4be527e813bab95a0d450fe3a6 kernel-rt-debug-core-5.14.0-611.54.1.el9_7.x86_64.rpm 0b73886d505fe47fa48fd2a700d30cd8d53d2f871e661423b042b00f0f47ff4c kernel-rt-devel-5.14.0-611.54.1.el9_7.x86_64.rpm 458f980cb0741f92935c8f965c9a458c8d249c1242ab82f97adb178b37a26aed kernel-rt-debug-modules-extra-5.14.0-611.54.1.el9_7.x86_64.rpm 796fcbcc775e505967b37b1a7ec472ceab1c2b4ac5986c9b791b609d76127636 kernel-rt-debug-devel-5.14.0-611.54.1.el9_7.x86_64.rpm 98f3106b597019cb7ccb705f07123c6ced6272bcd7eec0ac930b82efa0598e9b kernel-rt-modules-5.14.0-611.54.1.el9_7.x86_64.rpm 9db9bc20e6073ded5e95137c17b4d6c0e1af7c14a99f524875b4886f2305e098 kernel-rt-debug-modules-5.14.0-611.54.1.el9_7.x86_64.rpm 9ede23c2e02830528062fdf9eb8b743fce5010601853bd5f3d9bc7a8c04262fc kernel-rt-debug-5.14.0-611.54.1.el9_7.x86_64.rpm bdb631f19b7b9fd7d60a9ad288aeabf365a48cae7660866f7760701e39379cbf kernel-rt-modules-extra-5.14.0-611.54.1.el9_7.x86_64.rpm ca2d2abdcd833c4a47e79e3a0dc9f81f47997704a15bc523de77d76fc36a9d3b kernel-rt-modules-core-5.14.0-611.54.1.el9_7.x86_64.rpm cc982986f1f968d073b97503d99e45fc4553acdb192b913ca3c178475d62134d kernel-rt-debug-modules-core-5.14.0-611.54.1.el9_7.x86_64.rpm e7bc9945db1bb5c20fa9ec07b6a37d61bc1b0fcce3f0fc1691a44359f92b48f4 ALSA-2026:1617 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVE-2025-38568) * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154) * kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-modules-5.14.0-611.27.1.el9_7.x86_64.rpm 2d8bb161d2449ab47cacf78006bf46589168f4084d7831bc3dedbc33ee7d6744 kernel-rt-debug-devel-5.14.0-611.27.1.el9_7.x86_64.rpm 2fab47aea72a11421f16f49056f340b806224a9f916492a2df053fd061e42565 kernel-rt-debug-5.14.0-611.27.1.el9_7.x86_64.rpm 50afe19773532608d48c333c044ffc6014bddca9a66540f33608a45f7560ac84 kernel-rt-core-5.14.0-611.27.1.el9_7.x86_64.rpm 6555f7d1aa499e51f33cc19f310b4d91d893163f951c332ccd4e0154668dd9d6 kernel-rt-5.14.0-611.27.1.el9_7.x86_64.rpm 6849ff0f0b08f043730b71f2627c16f0b23100865128a332024d6d2bcbf5c311 kernel-rt-debug-core-5.14.0-611.27.1.el9_7.x86_64.rpm 959042f83f33db249e8f839ebe1ef09812e0af862fe62534ddfdf7d69e941057 kernel-rt-devel-5.14.0-611.27.1.el9_7.x86_64.rpm 9a6fdc09fe8a33e1fd34ae14a13c82619af29977e17b552f8c8de84507c25111 kernel-rt-debug-modules-extra-5.14.0-611.27.1.el9_7.x86_64.rpm 9fbb97e7741ebd6eb35a12172f7c252b439b1c03fd59a0bb6755119aeab15f08 kernel-rt-modules-core-5.14.0-611.27.1.el9_7.x86_64.rpm bd5bb77813d798719903804fcdd5f45b8cd47bc17e57f00f0eec38f22aef5d41 kernel-rt-modules-extra-5.14.0-611.27.1.el9_7.x86_64.rpm d606d1c6a7cf6c05d823972d0cb1e1d877b01e0cd68884bc8fd65c20ec60d0ca kernel-rt-debug-modules-5.14.0-611.27.1.el9_7.x86_64.rpm ea5b5205086ae54d587e14c39b53507023818f6903321e58b01f552b14433695 kernel-rt-debug-modules-core-5.14.0-611.27.1.el9_7.x86_64.rpm f5cf1222fee0848ded410a810b1cbaa43ad5654b9fadd1c146c28b968501661b ALSA-2026:16206 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-modules-core-5.14.0-611.55.1.el9_7.x86_64.rpm 0a428d21c2e61faa724344e11f99bf77d275d5d6572310401e0c2281cde148a7 kernel-rt-debug-core-5.14.0-611.55.1.el9_7.x86_64.rpm 0d50e78e5af28efc0f0ec2e4f5afcb10246d35439b6965ada4e489b62fcc8d7b kernel-rt-debug-modules-core-5.14.0-611.55.1.el9_7.x86_64.rpm 30fb810c6eea046592eba1e9cfd8e5386298905e5e31ca5945eb5504667339d1 kernel-rt-debug-devel-5.14.0-611.55.1.el9_7.x86_64.rpm 40e1b5b5b31f3b06cf9d6ba6dd4fcf185358459ee004b01d471febdd90237029 kernel-rt-5.14.0-611.55.1.el9_7.x86_64.rpm 4513b11ac10f64324471cd1da7fee56d78e0da2800385c10510dc8406e3b721b kernel-rt-debug-modules-extra-5.14.0-611.55.1.el9_7.x86_64.rpm 884eff71d4c5103f724ace3aa7b6f39e83034006ad83606d5571aa7d5b4f95da kernel-rt-debug-5.14.0-611.55.1.el9_7.x86_64.rpm 894019b3940da32c9a9aaee10a5f251e821338d83aa5b0e3c5ea48043680a712 kernel-rt-modules-5.14.0-611.55.1.el9_7.x86_64.rpm 9a298c8120e8b7f5fedda51fc6f92cec6ddcba19f071cff5dbcdf6b26874f3d8 kernel-rt-core-5.14.0-611.55.1.el9_7.x86_64.rpm c5674d702bdba69e3b479e42199cc84ae4738be1a5492bdc7cd3aa8a5b4e6bef kernel-rt-modules-extra-5.14.0-611.55.1.el9_7.x86_64.rpm d487d7c550c10692cece066775aa8ab714c5dcd6cf51929927c64c3cd40085ba kernel-rt-debug-modules-5.14.0-611.55.1.el9_7.x86_64.rpm db411d8d9f34a09956034f064ca1c419fe85baffad05b481171e0dee12078bb2 kernel-rt-devel-5.14.0-611.55.1.el9_7.x86_64.rpm feeca76160a9fd730a1bd3a66c74fe146bceefa85956889bbde6dc07bdddfb1e ALSA-2026:18587 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bonding: check xdp prog when set bond mode (CVE-2025-22105) * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980) * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015) * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097) * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166) * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279) * kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails (CVE-2025-38400) * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405) * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441) * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470) * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866) * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134) * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-modules-core-5.14.0-687.5.1.el9_8.x86_64.rpm 137bc4d21a2ec48531e866b5bc2485c54a5f741d60ba65ad2d976a1711fb3eab kernel-rt-debug-modules-core-5.14.0-687.5.1.el9_8.x86_64.rpm 15e6cb870f8c0d690287937961b09e2f0add71109e3365aaee782b519c728814 kernel-rt-debug-core-5.14.0-687.5.1.el9_8.x86_64.rpm 22b9f82f945e007b4e06e8b4913c81894aadfe1bd741470e23abdb2b4594a53c kernel-rt-core-5.14.0-687.5.1.el9_8.x86_64.rpm 51471232d5cb53fd59f9b92836316b90ecf766576b8d9d5dd0cfc4f173742ce2 kernel-rt-devel-5.14.0-687.5.1.el9_8.x86_64.rpm 58def35018207028b4be523f385ba52d852b2bf8fd440c48767d83e74b2091d5 kernel-rt-modules-extra-5.14.0-687.5.1.el9_8.x86_64.rpm 5e44109ff53e0544a4a436aa467fa4cbd9d8a38805510418943813bde71f2e71 kernel-rt-debug-5.14.0-687.5.1.el9_8.x86_64.rpm 6f56d634c97ea6a86bd1cf091418b89c73e3929357843c2e5e3c3dedd3978d26 kernel-rt-debug-devel-5.14.0-687.5.1.el9_8.x86_64.rpm 8145d9d883b49b910a870efc23faca87154500fd3288ce420faea4a771240acc kernel-rt-debug-modules-5.14.0-687.5.1.el9_8.x86_64.rpm 84221f456bd9def9f47ddc47cb3c0ff97593c39370c1f8b2940b8ed5e05b6a8f kernel-rt-modules-5.14.0-687.5.1.el9_8.x86_64.rpm 96fc65c0169906518280dfac36f1ef92d91d809211a1da7908fbcb8dfdff5b0f kernel-rt-5.14.0-687.5.1.el9_8.x86_64.rpm b2887842a2b7f8cccfa4436c74779da0fd76018b082f2270f3c54e98279b84b5 kernel-rt-debug-modules-extra-5.14.0-687.5.1.el9_8.x86_64.rpm ea2fafb984543e458b258f49c5de526d47b821a4727aa695e1ea37e9424c2718 ALSA-2026:19225 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677) * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-core-5.14.0-687.5.3.el9_8.x86_64.rpm 127ea7e8eae6fd1229d6b2a977237273b74ae49922097602f9725563607d9762 kernel-rt-debug-devel-5.14.0-687.5.3.el9_8.x86_64.rpm 358d3272bf40b815aad4cacb53f7e3ae4f67c95da8d8f68bfd390f13aa2e8867 kernel-rt-debug-modules-extra-5.14.0-687.5.3.el9_8.x86_64.rpm 3aa1773b28cc8c6e4134e1d6c1b1b3b4b0963647701667bc36795cf02b3ae182 kernel-rt-debug-modules-core-5.14.0-687.5.3.el9_8.x86_64.rpm 695c4dce664f9b0df376ebc381307cc6280378a1fcd39231a6b7274cc980fae7 kernel-rt-modules-extra-5.14.0-687.5.3.el9_8.x86_64.rpm 90b8117fa43f622fc4281adfc332cf1286c763d57da6ef2f8890fbc3ede8d8c8 kernel-rt-modules-5.14.0-687.5.3.el9_8.x86_64.rpm abcc8b8544564ed7afcf80f044e3b8421a8106a4bc4b9c14d6764def1465ff11 kernel-rt-debug-core-5.14.0-687.5.3.el9_8.x86_64.rpm c2975b444b1acbf6fd34ffa7a7386ad8e12729421c1b2e1f70e82838ad5a07bb kernel-rt-5.14.0-687.5.3.el9_8.x86_64.rpm d4e09fc3c385400638d98ccf98a934282313a5e456761518d3224e18c3d53aa8 kernel-rt-modules-core-5.14.0-687.5.3.el9_8.x86_64.rpm eb76934cfeb2542d344bf7d6168aa956826bd866b6a5eca0f6e0f419d58e794b kernel-rt-debug-5.14.0-687.5.3.el9_8.x86_64.rpm ebb8b8521e23450b9c2bdec6eb4cb49b2e8af36fc645c0b12cc2c35b3d595457 kernel-rt-debug-modules-5.14.0-687.5.3.el9_8.x86_64.rpm eeec48cf57afb69d92f6a2073caaf60bd6acda6082154dc9274a179585e460d8 kernel-rt-devel-5.14.0-687.5.3.el9_8.x86_64.rpm fe512c128c49da4412d96c5c7ffddc7cf26e64e2956c9b1c20c2728d0ba96fea ALSA-2026:19568 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-5.14.0-687.10.1.el9_8.x86_64.rpm 1e6e26c0266cd60fb9352defbf429f3a760c93f8bcaf28a72339ded0a25bafc5 kernel-rt-debug-core-5.14.0-687.10.1.el9_8.x86_64.rpm 36b1118bb011c314cf34b98bb3cf83653b782393bd96a7e5c90f743b3a3b8aa1 kernel-rt-debug-modules-5.14.0-687.10.1.el9_8.x86_64.rpm 4339f491196b4e890c7dcc82555549f290baf0cf92e44981214207de648917fe kernel-rt-modules-core-5.14.0-687.10.1.el9_8.x86_64.rpm 8aac9278467409ce8e513afd974493087e340d0150aa856ce45f8d753c06727a kernel-rt-core-5.14.0-687.10.1.el9_8.x86_64.rpm 975811fa129f6076f6458b21ac35f92dc3078204c1b11216542d1cf6f4460e16 kernel-rt-debug-modules-core-5.14.0-687.10.1.el9_8.x86_64.rpm a54b306f0d1b5231ed918d48fb5660da5531f32fc37c748835379f6ce8fb21f8 kernel-rt-debug-devel-5.14.0-687.10.1.el9_8.x86_64.rpm a668baf3c37a9aa97fd7155ff5db716fb8da91b860bb72bd64acbbcfde7da46d kernel-rt-debug-modules-extra-5.14.0-687.10.1.el9_8.x86_64.rpm b02042a1d2770fc5c1e1729726a8e25a52f7bcebad97af4d21000d2d7233c6ab kernel-rt-debug-5.14.0-687.10.1.el9_8.x86_64.rpm b21cbd80e24611ce0a528df0574afc2468e8698bf6645baa0cc4a89817fcd0eb kernel-rt-devel-5.14.0-687.10.1.el9_8.x86_64.rpm c3f471894a28447dafb32bbb035b09bb984f829869a3525f0e8f8e4090139b3f kernel-rt-modules-5.14.0-687.10.1.el9_8.x86_64.rpm caf239b96d5312f5306749f9baf4ae4a8e8b6903c4a4eff795ded79eaef8615b kernel-rt-modules-extra-5.14.0-687.10.1.el9_8.x86_64.rpm d1536ac08aacea35d37f9d950ca5ed81b5a2cfaff192a4f124bc2e3caf329937 ALSA-2026:21556 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653) * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089) * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020) * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023) * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) * kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64.rpm 0eb384978455355a97f829ecaf638fe7039d18e1c6ba117413255d754321fa44 kernel-rt-5.14.0-687.12.1.el9_8.x86_64.rpm 16379e00c02d062b8611b1f11dc9ee4da951fb6b62151ef1b7e69bf5233ca24d kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64.rpm 18843987dabcf05da7005d0bf2cee0efd5d166cdca3639d3263ebc7dc54a9a18 kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64.rpm 4a1df139f236e43603f27535bbb0e17ef0432199e0cb52c0572e59219d458e18 kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64.rpm 4f092a9ec70348e3c46485e620b837730a7b367eabbf449be4e8b2dcfdb245ba kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64.rpm 5ebc56659fe75c6fa3820e970dc5dbbc8c6d174ee42aa76b23fe679cc7c8aa79 kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64.rpm 739506b854cc52e6ad9817f78064f3b99c51b26e42309fec76853f42d61f72e2 kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64.rpm 9081285222ee9cfd72f056b47110009ffec342fae5d3e1d84a5ac49c7937a8dd kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64.rpm a4685f05d1f5f90c9d8c612eea2811f6faf469516a17b859a7a078ee1c022c0b kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64.rpm c872c106529f4655912d9be5c726b5b3f3b074efb590ea6e89690e58e6e3f510 kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64.rpm ee9ce812faa17a31bc7f0d162418436478b602c271bdd4579bfaecc7db2fcaf9 kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64.rpm f491ca9b44a2b88cc495ea44ca30e852f6f2b4faf319259c27a5d57fd290bb0a ALSA-2026:2212 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789) * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819) * kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022) * kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024) * kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415) * kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403) * kernel: Linux kernel: Denial of Service in ATM CLIP module via infinite recursion (CVE-2025-38459) * kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730) * kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760) * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170) * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135) * kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141) * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158) * kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271) * kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269) * kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-core-5.14.0-611.30.1.el9_7.x86_64.rpm 0d318ec6433c42cfcac8d6d1e060721fc042dd3bcbe3f692f2e82a734ca81f51 kernel-rt-debug-modules-core-5.14.0-611.30.1.el9_7.x86_64.rpm 13385c94bfb3afc49ba6623a71f215ba6c3248c3bb1914904bb3decab8762020 kernel-rt-devel-5.14.0-611.30.1.el9_7.x86_64.rpm 2523548536d7f4c24ce38738e4024f343b2a400d151e1d11288227858e969d5b kernel-rt-core-5.14.0-611.30.1.el9_7.x86_64.rpm 4a38e44dba113f50964bd5e954edfb17adf7db6c4c9a320fa586321e1b3ef97a kernel-rt-modules-core-5.14.0-611.30.1.el9_7.x86_64.rpm 78d0f3dadcc209ed6a3dadb0aac2f0f3ad145a6d82713b743eec52431727c399 kernel-rt-debug-modules-5.14.0-611.30.1.el9_7.x86_64.rpm 92eca2a27271091643ed7de78e30e2ef8c8f34a6f12de0409e407d0ef83157d7 kernel-rt-debug-modules-extra-5.14.0-611.30.1.el9_7.x86_64.rpm 970901d28949545a767afda825e0d04963f681a61b0802bc1a0cbe05304bd5db kernel-rt-debug-devel-5.14.0-611.30.1.el9_7.x86_64.rpm aa3d6f8020c84f07f4a51f2ca95ae9001c4ac785c9aab3ce93e057adb6991ef0 kernel-rt-modules-5.14.0-611.30.1.el9_7.x86_64.rpm da94f058bef5393f49fc015415d44581a10b7f00a63f7a00d2720d36fcde570c kernel-rt-debug-5.14.0-611.30.1.el9_7.x86_64.rpm dfd2bccf6ff0f7d1762fdfebc5b9213681a5f6306b0e596616929dbd9134eee1 kernel-rt-5.14.0-611.30.1.el9_7.x86_64.rpm f1858d24dbd44b5460b8114b7e88f9a07d8a8b869fc479a387e0f0efb70e8dc1 kernel-rt-modules-extra-5.14.0-611.30.1.el9_7.x86_64.rpm f927b5c84181246a13537d2362a277a02e4e802b0faf5024a1ac66c1e7aab790 ALSA-2026:24381 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-modules-core-5.14.0-687.13.1.el9_8.x86_64.rpm 1da2b77f353f7e8a7063569cc33a4932ad6ae821e5dc16ed8757a25d22bf1a19 kernel-rt-debug-modules-extra-5.14.0-687.13.1.el9_8.x86_64.rpm 299d9cb27b4404e5558067e3800455308f576c44eace4f85fd1443573c1c4bb3 kernel-rt-debug-5.14.0-687.13.1.el9_8.x86_64.rpm 3e2d127378fcbae1ed13818be2b20d3cdf91309e756b9ea625cb3fb9a192e146 kernel-rt-5.14.0-687.13.1.el9_8.x86_64.rpm 4c2294c212d619c137fed562a47b6676cf90387446e80dbd510a7028377b64f2 kernel-rt-modules-5.14.0-687.13.1.el9_8.x86_64.rpm 5d29b5d9a145236c4a1aff570604929dbead71aef23aa9577eaf85f15b2f52cd kernel-rt-modules-extra-5.14.0-687.13.1.el9_8.x86_64.rpm 685f6ac31bddff3c06662472c325a018b51063af5dad63418910f924cf3cd958 kernel-rt-modules-core-5.14.0-687.13.1.el9_8.x86_64.rpm 6d686fba76bca03949286667844ab1f477f6051fbcc51afb832af4e32bdbd558 kernel-rt-core-5.14.0-687.13.1.el9_8.x86_64.rpm 950ddac5ac720b2ea052a111331d63401a77802d0786f598a3dccf1c1f887936 kernel-rt-debug-devel-5.14.0-687.13.1.el9_8.x86_64.rpm b5201be546e3466a407c09215049234139a55a920ce2146f7e5dd9a63b063ec3 kernel-rt-devel-5.14.0-687.13.1.el9_8.x86_64.rpm bfbb70f9597ec8d955fbfb0b85d2ee68be162ab71a99bffd1e47840864c44ed3 kernel-rt-debug-core-5.14.0-687.13.1.el9_8.x86_64.rpm e3044e89c53023d468d0fbee4a8f1400ddd47235a6555576a3399d588afb5798 kernel-rt-debug-modules-5.14.0-687.13.1.el9_8.x86_64.rpm e7215a401d176f6bbe420af7534beb6a1b70630e3cd1ea61b53ff689eb3f8278 ALSA-2026:25217 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508) * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) * kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125) * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) * kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852) * kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-5.14.0-687.15.1.el9_8.x86_64.rpm 1a9b0479f913aff479d9c1e67cf514890484db957e034aca204d3b1c00d0e3d4 kernel-rt-5.14.0-687.15.1.el9_8.x86_64.rpm 29089c489199bd39262e16077da2bf14ace3a0fe5434f367896251664b9c2b8e kernel-rt-debug-modules-5.14.0-687.15.1.el9_8.x86_64.rpm 48eef8d0968d90ce52ecdaa68956929f5e97691d72adebb080de46de457b6e80 kernel-rt-debug-core-5.14.0-687.15.1.el9_8.x86_64.rpm 4b25d84dfa3f76eaef93b5b1552cbbe20620a83dd410cc1d2b2f8fa75936b71d kernel-rt-modules-core-5.14.0-687.15.1.el9_8.x86_64.rpm 5209fde9679ebb93675439e90d1f9fbde86dd705b55d0e41217c75c40954eb8c kernel-rt-devel-5.14.0-687.15.1.el9_8.x86_64.rpm 55729b8b75c847ed950619b00fd59469e6432317001a43c07064464f1d4597e7 kernel-rt-debug-devel-5.14.0-687.15.1.el9_8.x86_64.rpm 5748fe6dadba160acc5d474b4ab9931c2a671e6174821127c921669d1c7fdb52 kernel-rt-debug-modules-core-5.14.0-687.15.1.el9_8.x86_64.rpm 814c5bf0c87e1466ff50dd6c11748b806105f050f8697dfe3297820950a92b16 kernel-rt-modules-5.14.0-687.15.1.el9_8.x86_64.rpm 8441f3cb89c72528bfa1ab5d08cb2e8eee5140de26891d09eddf8c992dcb1ed2 kernel-rt-debug-modules-extra-5.14.0-687.15.1.el9_8.x86_64.rpm 9f2d114788f0e3a4672259a4170cb50540b38488c7c9cc57983a8243707c6872 kernel-rt-core-5.14.0-687.15.1.el9_8.x86_64.rpm b7586b2414e7564ffa76d8d1542b8dcaac10d8596131bb2a3702f48ccfa082ea kernel-rt-modules-extra-5.14.0-687.15.1.el9_8.x86_64.rpm dc78b179d2cc21a639b9b527fc284728fb2d56d5d599e301f43f9abd9ed552f9 ALSA-2026:2722 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034) * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064) * kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304) * kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322) * kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349) * kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811) * kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-5.14.0-611.34.1.el9_7.x86_64.rpm 04d9c0ca9f5168713bfc89067b3ebbf3c311aeeeb4e939c0fb1a590a28c1cc9b kernel-rt-devel-5.14.0-611.34.1.el9_7.x86_64.rpm 2267c545059a1cbc58a739e972142555fd05c9bdab974c92e34b77f673263920 kernel-rt-core-5.14.0-611.34.1.el9_7.x86_64.rpm 37d8a1c3f8c2a49d959ddc04d476fccbd1aeb3a37105d38f5ed75cbfcfd9d450 kernel-rt-modules-5.14.0-611.34.1.el9_7.x86_64.rpm 3dd763658697263b2b0e3cd7b3c4fbf06c6fcd3c15127a360a0eec93aa863755 kernel-rt-debug-modules-5.14.0-611.34.1.el9_7.x86_64.rpm 4e3e237049e19bcd52c7b88799f4915a14ba670106db605f2b8f9e837cf41d03 kernel-rt-modules-extra-5.14.0-611.34.1.el9_7.x86_64.rpm aaa633dea1ad2ddc8d33f208b64d2855719e1c72f088f08b034452acbdd7ff2f kernel-rt-modules-core-5.14.0-611.34.1.el9_7.x86_64.rpm c09b4cbb85b6b68b171cea859dbca5e4a1805fba3519e2b0673ef581eebaa821 kernel-rt-debug-modules-extra-5.14.0-611.34.1.el9_7.x86_64.rpm cdc86a5d7b60f19cbee120cd05464015c71030e0d57fe1b3cbd1821bc0940517 kernel-rt-debug-devel-5.14.0-611.34.1.el9_7.x86_64.rpm db035269b3dc8e168d28664fef30aaa932ceb6a41d7b09d085a6d5a74afca3d3 kernel-rt-debug-core-5.14.0-611.34.1.el9_7.x86_64.rpm e21da5686c108c64bcceb122940312316c39b3918d164a46269a22cd59a3fbf2 kernel-rt-debug-modules-core-5.14.0-611.34.1.el9_7.x86_64.rpm f3b16042313d24d3799ee4b0d7d083aa4bdd58954ad7781cc219d5c8dbb12bb9 kernel-rt-5.14.0-611.34.1.el9_7.x86_64.rpm fd6c8798d3a970aaaca872e9e06ccd3ed4d088820119c9abc38b4fd1bfac71c4 ALSA-2026:27789 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474) * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772) * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260) * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414) * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) * kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166) * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) Bug Fix(es) and Enhancement(s): * AlmaLinux9.4 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-9.8.z] (JIRA:AlmaLinux-166048) * [AlmaLinux 9.8] Hung tasks during both suspend and hibernate operations on systems with Intel E810 NICs [almalinux-9.8.z] (JIRA:AlmaLinux-175699) * DPLL: Add support for pin operational state [almalinux-9.8.z] (JIRA:AlmaLinux-175820) * DPLL: Add support for fractional frequency offset between pin and device [almalinux-9.8.z] (JIRA:AlmaLinux-175823) * ibmveth Adapter Freeze with Small MSS [almalinux-9.8.z] (JIRA:AlmaLinux-178308) * AlmaLinux9.4 - s390/mm: Add missing secure storage access fixups [almalinux-9.8.z] (JIRA:AlmaLinux-183317) * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-9.8.z] (JIRA:AlmaLinux-183130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-modules-core-5.14.0-687.17.1.el9_8.x86_64.rpm 117dc413a91560b013688f2800c91111884696fe978ebb0a900fee980d5cce7a kernel-rt-5.14.0-687.17.1.el9_8.x86_64.rpm 13ef0f4ed590adfc7cbad65e4ada5afce096c7d58c369c781003da7f8c43c4c2 kernel-rt-core-5.14.0-687.17.1.el9_8.x86_64.rpm 387e73348559585683c1ce909ae9a467165bfc063ac7617ebc280cbe4e367b2e kernel-rt-debug-modules-extra-5.14.0-687.17.1.el9_8.x86_64.rpm 502347c1150dc9be4fd3c928986b4e0a290f9a7da1b8f27ded07104b5121eb30 kernel-rt-debug-5.14.0-687.17.1.el9_8.x86_64.rpm 52ddcada54bc22c8fd708692d4be36ebc259610be8dd0b0f2c5951a926af05cf kernel-rt-modules-5.14.0-687.17.1.el9_8.x86_64.rpm 5ff0950673d40c64da807eeea338a956f745070fd9080424491de517d531d44c kernel-rt-modules-extra-5.14.0-687.17.1.el9_8.x86_64.rpm 825876627abe775d1472d378960ef79153f8327a887b7b9cf6b2283f216f8a17 kernel-rt-modules-core-5.14.0-687.17.1.el9_8.x86_64.rpm 8c1862bdb8fe09e156c2de029f529b7d63d0b68bf5dc4b1812dd0c6cbb527173 kernel-rt-debug-modules-5.14.0-687.17.1.el9_8.x86_64.rpm 93d7f6ae5479e09e269df54cc5dd7f7a48d624cb67dc4c2243b132ab2925f03b kernel-rt-debug-devel-5.14.0-687.17.1.el9_8.x86_64.rpm a9cfff10460bd5de2f6c0a1fa844a4f915e2ee853dcb9f9974c79a97ba71f67d kernel-rt-debug-core-5.14.0-687.17.1.el9_8.x86_64.rpm d70403e5c4cb4626d7e6b66fe640b27891a3159f93761e2dfb3980f136a369fa kernel-rt-devel-5.14.0-687.17.1.el9_8.x86_64.rpm e59350879ace315b238dfc98553d8654e57cc6cdcae7288e8cc612e46271e142 ALSA-2026:3066 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129) * kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service (CVE-2025-38206) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-devel-5.14.0-611.35.1.el9_7.x86_64.rpm 065ea6bfb6f8befcab933d2130ae3a0765d9661847afab68f268c66cb1a41103 kernel-rt-devel-5.14.0-611.35.1.el9_7.x86_64.rpm 10eefcc6d13650a22bd7410cbe5a8d95a400ad4fe64b6894c6d0bee0bd0b8c15 kernel-rt-debug-modules-5.14.0-611.35.1.el9_7.x86_64.rpm 1e2f813afc1e8c10074fb06ac76dd566a4c1492a9269350185f549914b6be6d9 kernel-rt-5.14.0-611.35.1.el9_7.x86_64.rpm 48b5bda946e786da5b2418ab7a5c6eabf0f31286d9b358c28477a6a71dea21e9 kernel-rt-debug-5.14.0-611.35.1.el9_7.x86_64.rpm 655b661516ce754ddba3a7a4d4393082309921886d7bd2f47b2ebd66992255d9 kernel-rt-debug-modules-core-5.14.0-611.35.1.el9_7.x86_64.rpm 70262e4f7ed4642c03794e8d4592bfa9e241d84ce605212105ebecc2204bab9a kernel-rt-debug-core-5.14.0-611.35.1.el9_7.x86_64.rpm 79659e92d2cbceac1d243d771fa4dac9f10902878ee73a74cabd855523b44de2 kernel-rt-modules-core-5.14.0-611.35.1.el9_7.x86_64.rpm d1a81a787d8651616d99ed8d9d09af24553a019e154eff3db16aa26f14def123 kernel-rt-debug-modules-extra-5.14.0-611.35.1.el9_7.x86_64.rpm daac8588eabf9835df7fb515f558e9fc9dec9f1d7a425cefe65e8edade053c9e kernel-rt-modules-5.14.0-611.35.1.el9_7.x86_64.rpm db0932af96e2c4afc22de85a432c3e0d361090dc63340df27804af802ac08fea kernel-rt-modules-extra-5.14.0-611.35.1.el9_7.x86_64.rpm ed4a2738afedbeabd4af1818316cd7e57216db256bd49a44decdb138e45b6ca6 kernel-rt-core-5.14.0-611.35.1.el9_7.x86_64.rpm f4b6fb2e96bcd319a5a45dae1b78deacc707d3cdfe19de1c5cab246273d34f01 ALSA-2026:30848 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898) * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * [AlmaLinux-9.8.z]: Update the mlx5 drivers to v6.19 (JIRA:AlmaLinux-169057) * iavf: during POD churn vlan filters may not be added for a vlan interface, spoofchk drops subsequent packets [almalinux-9.8.z] (JIRA:AlmaLinux-172993) * nf_conntrack_sctp: vtag corruption with late INIT in ESTABLISHED state across conntrack zones [almalinux-9.8.z] (JIRA:AlmaLinux-178273) * sched/fair: Skip sched_balance_running cmpxchg when balance is not due [almalinux-9.8.z] (JIRA:AlmaLinux-182776) * [REGRESSION] ISST-Spyre: Jenkins workload causes soft lock warning to appear on screen. Workload hangs. [almalinux-9.8.z] (JIRA:AlmaLinux-183183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-modules-extra-5.14.0-687.19.1.el9_8.x86_64.rpm 0842f05bb72b0d60d75ca97ca4898ac1f36d98a65afa7f55945ab2063da3b3d9 kernel-rt-debug-modules-core-5.14.0-687.19.1.el9_8.x86_64.rpm 1fe6969f2dc58383b311fe96f83ffc15ac58ffcde77d61c3cf5af79167e53530 kernel-rt-modules-core-5.14.0-687.19.1.el9_8.x86_64.rpm 4058004fdc03f0170cbc895e1bb0a23a30307f468664e9b31b6b92bc51e3528b kernel-rt-debug-5.14.0-687.19.1.el9_8.x86_64.rpm 432f379d11f0c3a6cfd601536efad8498e72b44b7656d1534ad1f9abc4cdc266 kernel-rt-core-5.14.0-687.19.1.el9_8.x86_64.rpm 7833686a32a59d430e96c3fe1ec94c54eb11a7820cce95b9328a218ba18d76b5 kernel-rt-modules-extra-5.14.0-687.19.1.el9_8.x86_64.rpm 8b52a0c585a90096c36d94fa33eac6cba0e409fb641a813c99231cac497b65f9 kernel-rt-5.14.0-687.19.1.el9_8.x86_64.rpm 9c3a9b8c4f3cea2e490ac6c8e92b658d6d5a0768095c619657ff86b7c4b87e66 kernel-rt-debug-modules-5.14.0-687.19.1.el9_8.x86_64.rpm a799cf782aa665254fed8d9a87755199e1451566d65a1eaca355886168d677d7 kernel-rt-debug-core-5.14.0-687.19.1.el9_8.x86_64.rpm b57e969e8f5f5c99cdbadbe80d557adf5ba3a2c3a58da6da1130c3f250309960 kernel-rt-modules-5.14.0-687.19.1.el9_8.x86_64.rpm be88dc243efd394b320b197296895fd3065e8384d54771fbe3b9c4f2858962a9 kernel-rt-devel-5.14.0-687.19.1.el9_8.x86_64.rpm ea9cc28ccccdac07abd476579244d2569c6b87c8757e692e8bb9ae681b4774fc kernel-rt-debug-devel-5.14.0-687.19.1.el9_8.x86_64.rpm efa569203b1311a0cccf933ea5c19074a3be26fea9b0df239114856d93e6a09a ALSA-2026:33285 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411) * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) Bug Fix(es) and Enhancement(s): * [AlmaLinux 9.8 Bug] qla2xxx flash image validation failure [almalinux-9.8.z] (JIRA:AlmaLinux-181886) * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-9.8.z] (JIRA:AlmaLinux-182540) * tegra-se fixes and updates [almalinux-9.8.z] (JIRA:AlmaLinux-182760) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-devel-5.14.0-687.20.1.el9_8.x86_64.rpm 11421a61c6d8979a6161ba270e7748625919ab6491a5f969944b1e39b65d2b6b kernel-rt-debug-modules-extra-5.14.0-687.20.1.el9_8.x86_64.rpm 3f2b9139adf7fdf78f3cc31eb22a7115166cf826c838175156f415dec71a6d92 kernel-rt-modules-extra-5.14.0-687.20.1.el9_8.x86_64.rpm 47a8a391b2a8d1fab6a343f5e732b55c0bdf41a43df785768e2319fca586fc84 kernel-rt-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpm 592ae595a31510004a74f490812b5aa61644f8fe8e1e87247c4c0f7d3c988659 kernel-rt-debug-5.14.0-687.20.1.el9_8.x86_64.rpm 80469e0203ebda362627721fcd771f78ef98f9fb66fe1d89b44741c00de05d02 kernel-rt-debug-modules-5.14.0-687.20.1.el9_8.x86_64.rpm 8f716679cef0104644fb47bdc4acc17b47b6b6be3e9eab0d84a17645b4c16a4f kernel-rt-core-5.14.0-687.20.1.el9_8.x86_64.rpm 9e3b1456f7189382741aeaba40375d34f25960586c5efd99ff34b4e96721b46c kernel-rt-5.14.0-687.20.1.el9_8.x86_64.rpm 9f525733b6bf776d6a651b2a4ca79a4ae7dbb020580fabfb9600985800a22734 kernel-rt-modules-5.14.0-687.20.1.el9_8.x86_64.rpm a872e5207867708d3e4dba09272250c7085cca627cfb0ba8fa9be66f730d7ad9 kernel-rt-debug-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpm acfdf3fc51fdc49366c9ec29edecfde77358f4a4dc8d61849167c0f9740caa9b kernel-rt-debug-core-5.14.0-687.20.1.el9_8.x86_64.rpm ce05ecaa721eb5cf7521204322d94dead06df73fc1b135bdbbabb716e6099468 kernel-rt-debug-devel-5.14.0-687.20.1.el9_8.x86_64.rpm d8b29766fe55bbfdea36b5001972d04ccf36c8d97d16d87a05b3bbf258798f0a ALSA-2026:3488 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168) * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085) * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-5.14.0-611.36.1.el9_7.x86_64.rpm 0676d1c8304b44dc87967652471b02832e6fe7f271fae7917544cdfba90b7450 kernel-rt-modules-5.14.0-611.36.1.el9_7.x86_64.rpm 087c780f799433e881159aabc5659d59eab2ef3f9329817d762573d3f58826cb kernel-rt-debug-modules-5.14.0-611.36.1.el9_7.x86_64.rpm 15f91326d11e5599fe9bbd7c7a8689df3491d16e60e536c44461d43d1466ebcf kernel-rt-debug-devel-5.14.0-611.36.1.el9_7.x86_64.rpm 1967264f54ebbe51d1dae726a5661401e0e935522abb18e41672ff8de0d7791b kernel-rt-5.14.0-611.36.1.el9_7.x86_64.rpm 4227d08c8c9daf99a3fc41a28bc43116dedf084382ad7b5adaa4b1985c4d341a kernel-rt-devel-5.14.0-611.36.1.el9_7.x86_64.rpm 4c2ddd9285e74566aba803d3c350e8b931fa15f9cc9fc80e395ea6f618849e28 kernel-rt-debug-modules-extra-5.14.0-611.36.1.el9_7.x86_64.rpm 7d96b32bb459e599f955294f9eaf235bf5ccd992ca890ec0ffbdd64cbe2e98ed kernel-rt-core-5.14.0-611.36.1.el9_7.x86_64.rpm 9ad12ca473d89e6883d5cc574bf497f49a53c4b16ead042d80fef009d5ab4397 kernel-rt-modules-core-5.14.0-611.36.1.el9_7.x86_64.rpm c1566f9b6fb0eb84a7ba92f3c3cf42d63bbda7e4d43a43b8c0cbb7e3337346b4 kernel-rt-debug-core-5.14.0-611.36.1.el9_7.x86_64.rpm dd7236d4a39702badef735a4913020e595670989f80b9cfbb4654f138f586938 kernel-rt-debug-modules-core-5.14.0-611.36.1.el9_7.x86_64.rpm e0e22f1ea2d0501230842e977b4cdce1980a354959f4b29b37dfe5fad4928723 kernel-rt-modules-extra-5.14.0-611.36.1.el9_7.x86_64.rpm e6680a92bb44abeb0c51ea2750a4434b7495861f6010d6c222063ce211a9e953 ALSA-2026:36018 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276) * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244) * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259) * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * WARNING at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c:1585 r535_gsp_fini+0x2fb/0x310 [nouveau] [almalinux-9.8.z] (JIRA:AlmaLinux-160966) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-modules-extra-5.14.0-687.22.1.el9_8.x86_64.rpm 4c67675dece51e8ffc3649400bd3d3cf9d927e165187695124cec7870711fd6b kernel-rt-modules-core-5.14.0-687.22.1.el9_8.x86_64.rpm 58c40711355bf93cd17fc753bab46344e75b62738886ae47e1ba8a6b59932d47 kernel-rt-modules-extra-5.14.0-687.22.1.el9_8.x86_64.rpm 80e5e887edba5de27230babbce54915dda8076fdc6fe2126295e0d0362ea8007 kernel-rt-debug-core-5.14.0-687.22.1.el9_8.x86_64.rpm 84cb12cf16602426d589ce222c28a0a4988fd44562d5b74fe47a33162dcff541 kernel-rt-debug-modules-5.14.0-687.22.1.el9_8.x86_64.rpm 9fa022e545d12d3493196c60d84976f08d2598609201418a1ed532d9a6e5ca13 kernel-rt-debug-5.14.0-687.22.1.el9_8.x86_64.rpm ad4d4a0b70d14a36de14db9c06268061225d3f78c71f2f625fe1d82e85d79805 kernel-rt-debug-devel-5.14.0-687.22.1.el9_8.x86_64.rpm b7e0e4619a9ca3e76f117628b6ce6efffb52c9668053d62f053c478866e522b4 kernel-rt-core-5.14.0-687.22.1.el9_8.x86_64.rpm dbc5fe4d52b2106bc25cbb43a9395ce991ca2f666b757ea8018a8cb55faf8a7c kernel-rt-devel-5.14.0-687.22.1.el9_8.x86_64.rpm dc077f689806c03d1602f63d790d6a9a1b17c21d7ab971b2affb41bb1d30e913 kernel-rt-debug-modules-core-5.14.0-687.22.1.el9_8.x86_64.rpm dd37c59ea02a0f6cb946ad9350a9086ae579f99842a0c90dc4571e2656fed32f kernel-rt-modules-5.14.0-687.22.1.el9_8.x86_64.rpm edb8ab8f3ee1d1cbfda719dec3b4bb6b6c5a1470b182f8829e00a0d4c0a25319 kernel-rt-5.14.0-687.22.1.el9_8.x86_64.rpm fcb87fd51512ad131f5543ea7002ae4bfeab1bcc1264d0390ca54717d364c95e ALSA-2026:36645 Copyright 2026 AlmaLinux OS 0 1 Important

kernel update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite (CVE-2026-53266) Bug Fix(es) and Enhancement(s): * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite [almalinux-9.8.z] (JIRA:AlmaLinux-182344) * [AlmaLinux 9] Bonding reports unknown speed/duplex for tg3 interface [almalinux-9.8.z] (JIRA:AlmaLinux-182768) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-5.14.0-687.23.1.el9_8.x86_64.rpm 24b6da7ba3019931ab3f3268584443f8e81fef05e69ed90cebdd0b368869a40f kernel-rt-devel-5.14.0-687.23.1.el9_8.x86_64.rpm 2b0f313b5df7f733b6733f101e383ab4d0412de9d4e0c5d7ef42122c98115f78 kernel-rt-debug-modules-extra-5.14.0-687.23.1.el9_8.x86_64.rpm 379dd2a4fbd7311d809848161e30d50e79d37042996793e65b391ecad4108ee6 kernel-rt-debug-modules-5.14.0-687.23.1.el9_8.x86_64.rpm 89990bdded5f0df42d87c55f875ffa4f0bf8098e876de86439d439e77d33c180 kernel-rt-modules-5.14.0-687.23.1.el9_8.x86_64.rpm 90922d6f097a048c7258853d0a7c2936a0f5a40019e601598876d2769c000bd5 kernel-rt-debug-core-5.14.0-687.23.1.el9_8.x86_64.rpm 9817a0b9be57ef552d307cc4ec84b098b5fc144fe49370d69a918ba2b325670e kernel-rt-modules-extra-5.14.0-687.23.1.el9_8.x86_64.rpm a83bc6411def0494c59ccb1c6dca8928328c4f02b08b0281d252799a165e64ef kernel-rt-debug-devel-5.14.0-687.23.1.el9_8.x86_64.rpm a92016270d1ae296a89755091a3dd19ce8d7a707d6cc81e6e97ff2e857562f7b kernel-rt-modules-core-5.14.0-687.23.1.el9_8.x86_64.rpm afb6c7cef9e43178f7d49144350bb79faab4561ec8d335e6090e998ab1eac115 kernel-rt-core-5.14.0-687.23.1.el9_8.x86_64.rpm b7cb09af420d51e53a6427cda5ac5a86f2f253004d87a93ef32b436908efd919 kernel-rt-debug-modules-core-5.14.0-687.23.1.el9_8.x86_64.rpm cfb336cf5f2b75a9d19d2c0781fd9a2377b1121c195603951954087f3bd063fa kernel-rt-debug-5.14.0-687.23.1.el9_8.x86_64.rpm fedb71bd7563ed95495095141cf8c39f4764d17cee6b04874073d5cb43d60ff2 ALSA-2026:36957 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-5.14.0-687.24.1.el9_8.x86_64.rpm 0af806a4cf6a6fcaa534e8913e3eff7da1f4f53efe582d57a3e9689ff6c4210b kernel-rt-debug-core-5.14.0-687.24.1.el9_8.x86_64.rpm 0c208dca35306b6eda33c86cc77b0d957d26f06bff98782a12b8acef27e5a7a1 kernel-rt-debug-modules-core-5.14.0-687.24.1.el9_8.x86_64.rpm 0d4b05797eca2c5db9057c49b8817425b0b3b110a7b5f70b2314e0e782b5b06e kernel-rt-debug-modules-extra-5.14.0-687.24.1.el9_8.x86_64.rpm 28b20e9b12c16368959732ca86aa0188c56345cb815407f449ce7930bfcbbcc4 kernel-rt-debug-5.14.0-687.24.1.el9_8.x86_64.rpm 2f62b4560e4c299fba78e35723916954f4e2dd8f5f57909be5ee00d85c09e8d0 kernel-rt-modules-extra-5.14.0-687.24.1.el9_8.x86_64.rpm 366b662aef0aca1fc4059d21a70794c652e00182eecaa7135bfffa3c4e0239ca kernel-rt-modules-core-5.14.0-687.24.1.el9_8.x86_64.rpm 59916df5c787f50fb4ee398bd81296ebb52eba7bac7de9cfc9e0e64dce9392c7 kernel-rt-debug-devel-5.14.0-687.24.1.el9_8.x86_64.rpm 73625c5e01ad17c1789da3a9e59f8032a0949c1f21087d91801d5295c973c43a kernel-rt-devel-5.14.0-687.24.1.el9_8.x86_64.rpm a08051f4d981db3b9beed37ecb039111409198f8b9f58c72de3ffbfb43149dff kernel-rt-core-5.14.0-687.24.1.el9_8.x86_64.rpm a38bd0cf917af7ce9abcadac20ffdfe8ab078479bc29363697ae858905f678cc kernel-rt-debug-modules-5.14.0-687.24.1.el9_8.x86_64.rpm da358e05ffe5eee3357fc19374eef3ab0627d55062515e02a606c6dd811be94f kernel-rt-modules-5.14.0-687.24.1.el9_8.x86_64.rpm dd820602b119dbaacd1d6f12a0cb21951ccc1b196ea9bcf29aefb516b034e357 ALSA-2026:38491 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling (CVE-2026-22979) * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) Bug Fix(es) and Enhancement(s): * Kernel panic very early during boot while reading a tracefs file (available_filter_functions) due to invalid module name pointer [9.8.z] (JIRA:AlmaLinux-183236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-devel-5.14.0-687.25.1.el9_8.x86_64.rpm 110c25ec4082f77e0e6021e86868380044ec12542ff5f9627cdf1c2af112122b kernel-rt-5.14.0-687.25.1.el9_8.x86_64.rpm 43ec22b583a32b505afaa00fac0e1b8b6857fefcfb6797a689a4a114d3d02587 kernel-rt-core-5.14.0-687.25.1.el9_8.x86_64.rpm 5d53675673d46a553657e76300792e49beeeaf709d37125d140c71389bd9883a kernel-rt-modules-5.14.0-687.25.1.el9_8.x86_64.rpm 71c13a15b33831eabf4a229b7826cb6e5e5ec8881ffa3a24328ace476dde164a kernel-rt-debug-core-5.14.0-687.25.1.el9_8.x86_64.rpm 9a08090b7e2f4936453a7a221901639ff16e2319402d3b45d544e1df8d539e1e kernel-rt-debug-modules-5.14.0-687.25.1.el9_8.x86_64.rpm ac93b5bf50e997be1acd1121dc1065ee05e3dd7b63ece5e22e8192b2cd14212f kernel-rt-debug-modules-extra-5.14.0-687.25.1.el9_8.x86_64.rpm b7ef592dbc9c8b6abb1c65adf20024cbccb4d783d744bb14f20267d69aa60534 kernel-rt-debug-5.14.0-687.25.1.el9_8.x86_64.rpm d10287ad3c02d77b99175f37314879683abb37a3f8f99b1b9048df9546c89935 kernel-rt-modules-extra-5.14.0-687.25.1.el9_8.x86_64.rpm d779287bb05e46dc20040cc6442f44d6b47d9ca9e6614e301a60dac2d0230848 kernel-rt-modules-core-5.14.0-687.25.1.el9_8.x86_64.rpm dbcca9fcd0661af3fbd87a8b85d91ee14546357434548d5167fa6bcc4df2b05c kernel-rt-debug-modules-core-5.14.0-687.25.1.el9_8.x86_64.rpm ea9171cae2c16caf8e5ed6a98a921afa5c7002ab662f69265a17e7614bd9bf4a kernel-rt-debug-devel-5.14.0-687.25.1.el9_8.x86_64.rpm fbd7eadab905a3e3e036d3d1a0c96dda8b7a1f8f023cdd567afc7423de02efd5 ALSA-2026:3966 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free (CVE-2025-38106) * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-modules-5.14.0-611.38.1.el9_7.x86_64.rpm 28e9f911db9494d749a5f89663434bf37fb9557ef920ff4e3068d3e37c7b5ea1 kernel-rt-devel-5.14.0-611.38.1.el9_7.x86_64.rpm 457531f04a089660270fbacfdb05ad3a95cc798abb745b03be67b8699fd2b327 kernel-rt-modules-extra-5.14.0-611.38.1.el9_7.x86_64.rpm 4e87a91a43255de0a080b61bd1795876a7bce8f73db35f46584e42e7edca38a5 kernel-rt-5.14.0-611.38.1.el9_7.x86_64.rpm 6f065480c1476cd9ecc0d2e72f24174e7b567ae3529c7dcf1b967942b13ef5d8 kernel-rt-debug-modules-extra-5.14.0-611.38.1.el9_7.x86_64.rpm 79090f05838455b823694c1bd4e4535a7408903d78ab0c5b4a8aad20be6f65a6 kernel-rt-debug-modules-5.14.0-611.38.1.el9_7.x86_64.rpm 7d5f60e03d9b4b1b0bf560354171ee0f0ed8e4d8b0060b793b3e2532804f6f37 kernel-rt-modules-core-5.14.0-611.38.1.el9_7.x86_64.rpm 8ab23c6090b16069edea07f6b40eacb40c6a9b3a4c7a6d5f188998e0b8d2592b kernel-rt-debug-5.14.0-611.38.1.el9_7.x86_64.rpm 8bb8a728c3da76d529b406bfd73df8df5411152e472a4336c21b1061e94bfd1e kernel-rt-debug-devel-5.14.0-611.38.1.el9_7.x86_64.rpm 90c374b00c8e35d761e00977ced22b6005b2b1e8b0424af514661b55070f4533 kernel-rt-debug-core-5.14.0-611.38.1.el9_7.x86_64.rpm b1a40df371cf5ad7f3ada9a2d38180b04339c02c59af047f32d8c3b57a531c0c kernel-rt-debug-modules-core-5.14.0-611.38.1.el9_7.x86_64.rpm c9ba4696f22684272d675c208455fc5e619f8fa60b317056579e72d4a9317dd9 kernel-rt-core-5.14.0-611.38.1.el9_7.x86_64.rpm e446c93664c219bb2c43e41020453966eaa4fcf44e06d426e7c79ed67aaf9282 ALSA-2026:43307 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: fanotify: fix false positive on permission events (CVE-2026-46150) * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215) * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-9.8.z] (JIRA:AlmaLinux-183980) * [AlmaLinux-9.8.z]: mlx5: include bug fixes (JIRA:AlmaLinux-188121) * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-9.8.z] (JIRA:AlmaLinux-212061) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-modules-extra-5.14.0-687.29.1.el9_8.x86_64.rpm 0946ae253d978b28b9939629a4429a20af206d0f958d6c9b323ab2b5e671d741 kernel-rt-core-5.14.0-687.29.1.el9_8.x86_64.rpm 1418ad1d1b66917c6225fd6f59b70976c4535c941aa30b5d073de9886a643f1f kernel-rt-debug-devel-5.14.0-687.29.1.el9_8.x86_64.rpm 1823a455a363715e073851d7456f3d0009402f7b013934d1c912b8ce2ed44ab3 kernel-rt-debug-core-5.14.0-687.29.1.el9_8.x86_64.rpm 2512d116e7c23fbea726a6c37ed9ffb06502c3f88c20e1e3f7d79e7e4ce6cbb2 kernel-rt-debug-modules-extra-5.14.0-687.29.1.el9_8.x86_64.rpm 2a4bbea7ade0481351c446abbbcbe0c3ee84b5759ce8c2b0d6396f2bc04b29be kernel-rt-debug-modules-core-5.14.0-687.29.1.el9_8.x86_64.rpm 49eb0be79947cd94878d1e466009cb3f66dc07173c72d8a3026f75e88d0b2624 kernel-rt-debug-modules-5.14.0-687.29.1.el9_8.x86_64.rpm 80face078a687003524e738e4a53fb79789dec94f038f66cde5a2fd5d55894ac kernel-rt-5.14.0-687.29.1.el9_8.x86_64.rpm 8239cfc59f1e7934d8488961acf70287aa11e7817663001758dea5cfbe7ec5a7 kernel-rt-devel-5.14.0-687.29.1.el9_8.x86_64.rpm 83a77fdaa670aafcf8c8e734c61b57f5db3ca82b76de630b6403000014d96093 kernel-rt-modules-5.14.0-687.29.1.el9_8.x86_64.rpm bf06779baf7a53a330ebb803ea787f499a990d98244c1cb2a46309514ac27ea6 kernel-rt-debug-5.14.0-687.29.1.el9_8.x86_64.rpm c4ee9ee53633e0223d82c6a282aed6f00fab9347bf34a5c9aab858ee8c5ff06a kernel-rt-modules-core-5.14.0-687.29.1.el9_8.x86_64.rpm f5c5e36426e1aaeb6289e3e662f9371fac7681dad1d23c8b1f9697ef71c40bad ALSA-2026:45192 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976) * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950) * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) Bug Fix(es) and Enhancement(s): * scsi device removal may hang from race with error recovery [almalinux-9.8.z] (JIRA:AlmaLinux-187412) * [AlmaLinux9] kvm fixes for 2026-07-21 [almalinux-9.8.z] (JIRA:AlmaLinux-213468) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-modules-extra-5.14.0-687.30.1.el9_8.x86_64.rpm 0509e14e8f2bda1e83747ef78bf3337c4a261de145ef2137d1d5cd990cc3ba47 kernel-rt-debug-5.14.0-687.30.1.el9_8.x86_64.rpm 38cd03a0ace5188e42519515d54465a1381ae51f81f861ea7d63ee942d93368f kernel-rt-modules-5.14.0-687.30.1.el9_8.x86_64.rpm 4f6ad2fd0587a2ca961db67a06b7c0d0609e92c71c98986a50f681e9f7580e13 kernel-rt-debug-modules-5.14.0-687.30.1.el9_8.x86_64.rpm 52f8af7ca08f89ef61124d235c9ec412af8350dc502b8c226b91e85fb08e0819 kernel-rt-core-5.14.0-687.30.1.el9_8.x86_64.rpm 723ae79275573fac1e9d205c6c141564f05e645c733a433b35da3e63cd9204d7 kernel-rt-modules-extra-5.14.0-687.30.1.el9_8.x86_64.rpm 72c8511d8cfece6cc67c08eafc6b94b981410dcf2d4418a2a768177e25d06c06 kernel-rt-debug-modules-core-5.14.0-687.30.1.el9_8.x86_64.rpm b4a7568fa8d3e64106f41ee73f5fe1d9a54e031d2e5f64d1a7f296aaa131e243 kernel-rt-modules-core-5.14.0-687.30.1.el9_8.x86_64.rpm ba96a42ae9512084e3b330cc9a53b23f0be78cfe181d28b068aaa093d4e8c2fe kernel-rt-devel-5.14.0-687.30.1.el9_8.x86_64.rpm c445d8d56154d90cf1ce578852e16223c34b9dbe5160026771dbbfb8c44c81c5 kernel-rt-5.14.0-687.30.1.el9_8.x86_64.rpm c65aa99e8eb8d442b8da1000718771e08f2debe33aae894e17bc4af5fb6b672f kernel-rt-debug-devel-5.14.0-687.30.1.el9_8.x86_64.rpm c8106f5746942f32e16fe3a0386b217c19b1bf67de89a095941b633a39d6ebcb kernel-rt-debug-core-5.14.0-687.30.1.el9_8.x86_64.rpm ffadcbdf60a161f682b5e85f3400cffd70548e6550f02a80480c0b560c27dcb7 ALSA-2026:47040 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797) * kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281) * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017) Bug Fix(es) and Enhancement(s): * general protection fault during exportfs / nfsd4_revoke_states [almalinux-9.8.z] (JIRA:AlmaLinux-188257) * Enable Pretimeout Watchdog Panic Functionality on x86 [almalinux-9.8.z] (JIRA:AlmaLinux-193729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-5.14.0-687.31.1.el9_8.x86_64.rpm 1c2a3c75b6bbfa66f7a359523f1e58f738da0b71beaebba482f5d77df0600e9e kernel-rt-modules-core-5.14.0-687.31.1.el9_8.x86_64.rpm 2ed002e132908fb39c60f5e35b16210fb769639940f2fa936524a27255f77b8b kernel-rt-5.14.0-687.31.1.el9_8.x86_64.rpm 3e3908ee64c422ff1583695ab1757c97987e27b7745eb6a7ae044154d601d970 kernel-rt-modules-extra-5.14.0-687.31.1.el9_8.x86_64.rpm 3f581a7892bf8f3c9af26dc17ac636cf30993f0a2b77518111348f6d190fb2ac kernel-rt-debug-modules-extra-5.14.0-687.31.1.el9_8.x86_64.rpm 5db728fe1d6e57b57ca0e07b3ef28aac8170f98484f5b5c4a9742593679a529d kernel-rt-debug-modules-core-5.14.0-687.31.1.el9_8.x86_64.rpm 7f7f153ff4af2eef4553afdbf01aef2194a3330f8c3b433d55514d11c28a53eb kernel-rt-debug-devel-5.14.0-687.31.1.el9_8.x86_64.rpm b03c1cfa3e4e6e1881c56b0aef5494f217b60deb635f3a83d2d968829c06e13b kernel-rt-devel-5.14.0-687.31.1.el9_8.x86_64.rpm b627056b50d79baa521c64c6273ee86a5efdf13c263c03b8cea725161b38c642 kernel-rt-debug-core-5.14.0-687.31.1.el9_8.x86_64.rpm bef7224183f6528b9503f88606ed6637f05320725d7e510a1eafd00ef25deda0 kernel-rt-modules-5.14.0-687.31.1.el9_8.x86_64.rpm cdcca583b4d5707f9dcdcd211835bc0ad1dee04d4c42cff90b2111870ea5a784 kernel-rt-debug-modules-5.14.0-687.31.1.el9_8.x86_64.rpm f2c1eb5f0e24e4d4ddf9744ddcfff00abce04a604ccbe229efafb3436f4ac7e5 kernel-rt-core-5.14.0-687.31.1.el9_8.x86_64.rpm fe6882875e92952b14d144bf8179f4639812d33866b69d7056d37fee45d7bb2d ALSA-2026:4759 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CVE-2025-39818) * kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-modules-core-5.14.0-611.41.1.el9_7.x86_64.rpm 0958cb084aa50940a565c10af697ac6b4d14e581eb0c7fd659e858379a3b49fc kernel-rt-debug-modules-extra-5.14.0-611.41.1.el9_7.x86_64.rpm 13b00638d8ef87e9f105bd80ae4df7a04980cc0bdd2e6b36ba2c32857525844d kernel-rt-5.14.0-611.41.1.el9_7.x86_64.rpm 42cf0b5f88e9d29f7341c6cb5767f9e673ad03320618a46e61db5221a24ec15b kernel-rt-core-5.14.0-611.41.1.el9_7.x86_64.rpm b1c2950b43637f13eb20df8b16646ff9cd548cff3b61e4dad59b131b21cb86dc kernel-rt-debug-modules-5.14.0-611.41.1.el9_7.x86_64.rpm c021ddb2c7f7947000771e74856172cd0d039567840942a5e78c876614197aa5 kernel-rt-debug-5.14.0-611.41.1.el9_7.x86_64.rpm c2d93c5f506d7506e9ae19762bc991c8ff5c97513d3801f42451b6b0184e3d83 kernel-rt-devel-5.14.0-611.41.1.el9_7.x86_64.rpm c8da0b478758636b10b7ae495833a149a9b9409b765123712ac9d043b3f8989f kernel-rt-debug-devel-5.14.0-611.41.1.el9_7.x86_64.rpm c9bc8a7463821a237bd407dd1e591be8a4401b6f131ae7ba795b767c83c9f38b kernel-rt-modules-5.14.0-611.41.1.el9_7.x86_64.rpm d2300c197c039c7c886c8a238ced9796750434c04d1ac441bef7d82672799867 kernel-rt-modules-core-5.14.0-611.41.1.el9_7.x86_64.rpm d3f603dfbadc0bc7033b4c8fcce7474ad46c1f3afeb003f2f222a6ebdea2d9af kernel-rt-debug-core-5.14.0-611.41.1.el9_7.x86_64.rpm fd063c4dcfbbb7e348fee7644373f9e152a7e7d60058221e78600e77b7438047 kernel-rt-modules-extra-5.14.0-611.41.1.el9_7.x86_64.rpm feeb81ff96b3564475f2c0353a7c0b4b2afaa42ec4bbda771a15ba503928f88b ALSA-2026:49212 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () * kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CVE-2026-64530) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-5.14.0-687.33.1.el9_8.x86_64.rpm 181f2a81c84e52df0a3fc48c7a22f15dd8cf6d44f373e78b6143671cef9c3279 kernel-rt-devel-5.14.0-687.33.1.el9_8.x86_64.rpm 3f4ab5cc183ddbee3ba79318d5194e60c4e1ca2df06ae1b970239bcf0188e48a kernel-rt-debug-core-5.14.0-687.33.1.el9_8.x86_64.rpm 40db0808752cd6a184e690f6e5da5fde5fcb45ee9b76d513129e03ac1d0de924 kernel-rt-5.14.0-687.33.1.el9_8.x86_64.rpm 46ab482cdb9b06970575b1f16a9701ff080e26583200e01e7c28b197088f664d kernel-rt-debug-modules-extra-5.14.0-687.33.1.el9_8.x86_64.rpm 4adb3dcff9e1a6e06d120621258fde3b9802ecf99926d5b27dd271bab88e8f72 kernel-rt-modules-core-5.14.0-687.33.1.el9_8.x86_64.rpm 8fde0fb8d53182c936ced6b7cec96470373e531a0272bb5628bcecf86b3b4313 kernel-rt-debug-modules-5.14.0-687.33.1.el9_8.x86_64.rpm 9f3633ad19a27742b81fffa878977dec5cc2a5fc6f165c86b6bf2abb58dab4aa kernel-rt-modules-5.14.0-687.33.1.el9_8.x86_64.rpm a2418af9753ea916009913942148c3afaaa97f9ddfd3b46acecee6c003df8eb9 kernel-rt-core-5.14.0-687.33.1.el9_8.x86_64.rpm c69f71f78f4b26270f0b2b7b00bac26224fa214432c741d803dd3b043b5efd33 kernel-rt-debug-modules-core-5.14.0-687.33.1.el9_8.x86_64.rpm ca788d15543c24de1f7f027f0b81f1fcef4440ce10481d8696c10b91e9b1d678 kernel-rt-modules-extra-5.14.0-687.33.1.el9_8.x86_64.rpm ec43c7c642dbcf4a01555dcae9438775c0bbf27aad17c3e18a3048240e2a1b69 kernel-rt-debug-devel-5.14.0-687.33.1.el9_8.x86_64.rpm fe859936c6350eb22688d9f4936c206b1dcf3052489f70c708ac1286055ba9cd ALSA-2026:49870 Copyright 2026 AlmaLinux OS 0 1 Low

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214) Bug Fix(es) and Enhancement(s): * Possible regression with FM350GL [almalinux-9.8.z] (JIRA:AlmaLinux-184273) * AlmaLinux9: Fix downstream-only regression from 532af53c [almalinux-9.8.z] (JIRA:AlmaLinux-192430) * gfs2: xfstests generic/363 failure [almalinux-9.8.z] (JIRA:AlmaLinux-214021) * AlmaLinux 9: Backport b95e0e792822 [almalinux-9.8.z] (JIRA:AlmaLinux-216471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-core-5.14.0-687.34.1.el9_8.x86_64.rpm 01d5ff7d7030def38a3a6a2c45989e7a7dc73b0f6d3a917bb49abdd4357b461d kernel-rt-devel-5.14.0-687.34.1.el9_8.x86_64.rpm 171774450147998c3249c3b36193211da3adc624e74e6d8fb96a6066b3b3d54a kernel-rt-debug-devel-5.14.0-687.34.1.el9_8.x86_64.rpm 1f1d4c97a05386156359a7707a9ddd61a28f554836d85bda81d6cc941606fef0 kernel-rt-modules-extra-5.14.0-687.34.1.el9_8.x86_64.rpm 2cf96560011b04bb15cf8439d3838be48c29fdde64512f558787d1f69769b198 kernel-rt-modules-core-5.14.0-687.34.1.el9_8.x86_64.rpm 3c7bdc4549326a4589e7d64589729d97b7adbc2a49bbd5bbbb8804c763c38f03 kernel-rt-debug-core-5.14.0-687.34.1.el9_8.x86_64.rpm 471b1dbc37d2f632d6fd965fea00a4fda360cf76c3a09e808e573cd45b595a7e kernel-rt-debug-modules-extra-5.14.0-687.34.1.el9_8.x86_64.rpm 6bf767421003cd433766e7e8f9622eddc825a304ee3062f3863e071f15145cbd kernel-rt-5.14.0-687.34.1.el9_8.x86_64.rpm 72c6ee5217b0c2a5c8c658117c4f4f6acfc075abd4aafd6b9b5d58e2244a69e5 kernel-rt-debug-5.14.0-687.34.1.el9_8.x86_64.rpm 83bd90febadbfd6528297decd01402fa4f23c93a8247d582f94c3352931ccdb6 kernel-rt-debug-modules-5.14.0-687.34.1.el9_8.x86_64.rpm ae82cf587ed9fdf541533c20db0be147862c8e17ecda7306c2334192f20610b0 kernel-rt-modules-5.14.0-687.34.1.el9_8.x86_64.rpm d21b171ae857111bb4dbc34b8a6bf5c549d322e5fca953c6df47b1d443b4a0bc kernel-rt-debug-modules-core-5.14.0-687.34.1.el9_8.x86_64.rpm f647be3c4dbd36cee8cd2f1c62a765247fd3000420245648fc918e738acdff8c ALSA-2026:51035 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415) * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-9.8.z] (JIRA:AlmaLinux-186331) * [AlmaLinux 9.4] Kernel memory reclaim bug [almalinux-9.8.z] (JIRA:AlmaLinux-211058) * Bond network interface is not coming up with MTU 9000 while vPMEM is enabled [almalinux-9.8.z] (JIRA:AlmaLinux-215575) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-devel-5.14.0-687.36.1.el9_8.x86_64.rpm 098d003fe11ae36ffd4ceca06be0192c6ebbed7d77714025d412ecf168aaad4d kernel-rt-debug-devel-5.14.0-687.36.1.el9_8.x86_64.rpm 1ab4da8357972b6afadaadb37d369a5584240a72c626eea6625fb4bde81facbb kernel-rt-core-5.14.0-687.36.1.el9_8.x86_64.rpm 28a5abea9f4e8890313aebc46246459707bf37ce0689ae854c199d1e4dccbcf6 kernel-rt-debug-modules-5.14.0-687.36.1.el9_8.x86_64.rpm 661124479fc833bbf0ae0d322402f6129c89cdbba2f8228ed485f25c072574a7 kernel-rt-debug-5.14.0-687.36.1.el9_8.x86_64.rpm 7681ae6a4fa9798ab35c71d6a282b0e28badcdecb7a78ff66b156cd61e09f373 kernel-rt-modules-5.14.0-687.36.1.el9_8.x86_64.rpm 915936727266826416c5fab0ad12e79a5f883bd469d6589d862880663dcddb28 kernel-rt-debug-modules-core-5.14.0-687.36.1.el9_8.x86_64.rpm 93f4a9bbf2e13d7b81ed6a7158dd0cb2a8779a919deb9eb5787d7fe3b719282c kernel-rt-5.14.0-687.36.1.el9_8.x86_64.rpm a4c7799c8fd4621d6f9ce87533b1279957bd8927583c082662f40222db31dc96 kernel-rt-modules-core-5.14.0-687.36.1.el9_8.x86_64.rpm c673ac18393b371d77e49dbdc3c4ade6095126f82fe31112d93854bb9992e321 kernel-rt-modules-extra-5.14.0-687.36.1.el9_8.x86_64.rpm d95fffcce1b4fcf1477e70dec0341649e86daf7f9223cbd81c13c0464eca0c58 kernel-rt-debug-modules-extra-5.14.0-687.36.1.el9_8.x86_64.rpm e86ae438568693371328d86ab33d5200b439e22808c4fe606afeab8e8722c555 kernel-rt-debug-core-5.14.0-687.36.1.el9_8.x86_64.rpm fffe345646c79aa52ea405eed531178171d777ebd11626d477902f1b43a2cac8 ALSA-2026:53329 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530) * kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518) * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368) * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) Bug Fix(es) and Enhancement(s): * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-9.8.z] (JIRA:AlmaLinux-213036) * AlmaLinux9.4 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-9.8.z] (JIRA:AlmaLinux-215578) * AlmaLinux9.4 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-9.8.z] (JIRA:AlmaLinux-215580) * cifs: periodic IO errors when rename races with lease break (JIRA:AlmaLinux-192999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-modules-5.14.0-687.38.1.el9_8.x86_64.rpm 10a140b922364079addeaee8c03b29d258230cd7489b7c0f7c4ff7c9da5cc284 kernel-rt-debug-modules-extra-5.14.0-687.38.1.el9_8.x86_64.rpm 162e610d3d8e021b3b56cff5f358e7f0b8fbbc60710182b7fed02388c7a4b44a kernel-rt-modules-extra-5.14.0-687.38.1.el9_8.x86_64.rpm 6b4eb29f8a47adf8543c814904b7119f8bcdcb6713203fac58ef9335a37f076e kernel-rt-debug-5.14.0-687.38.1.el9_8.x86_64.rpm a429a60312e450c040e32bf4f547618213c13e540dac52cb7c2dc171be5cb548 kernel-rt-debug-core-5.14.0-687.38.1.el9_8.x86_64.rpm b10b5488a488f0a073e5849813a681538746eeef9c0f134e9d03d2396c8cd51f kernel-rt-debug-modules-core-5.14.0-687.38.1.el9_8.x86_64.rpm b419222e3b55766dc52f6612e2adca9d6a786d31965dab65e3c13bc823a99564 kernel-rt-debug-modules-5.14.0-687.38.1.el9_8.x86_64.rpm b7ce8d6a034bd7b781e31e2f7c5634a5a1fbb60fb64150099fa47a9a91dca85c kernel-rt-debug-devel-5.14.0-687.38.1.el9_8.x86_64.rpm d02aed85f7aceec8efbe28df4396a35e293059e0025aa85196d49d2d1cd3e384 kernel-rt-devel-5.14.0-687.38.1.el9_8.x86_64.rpm d8ba180f2c6cb9262bb2c1dbf2ccd125c35af2f722cdca71a643218bccde4a7c kernel-rt-5.14.0-687.38.1.el9_8.x86_64.rpm e3b3bc1665969397426665fa7c3e4e0fffd9d68548eb14264d9ada5a1d3964d2 kernel-rt-modules-core-5.14.0-687.38.1.el9_8.x86_64.rpm ebcc878b51d5f4e142a1a42513dbb9261bef41cd64224cf343c1f59ef568cf68 kernel-rt-core-5.14.0-687.38.1.el9_8.x86_64.rpm f7aaaa85bbb6bac808b06dea539d5cc219c10aec6a25c02fe76be58269ca9dfd ALSA-2026:54443 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202) * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-9.8.z] (JIRA:AlmaLinux-214434) * Kernels 5.14.0-434+ may lose page table dirty bit (and page data) [almalinux-9.8.z] (JIRA:AlmaLinux-220787) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-modules-core-5.14.0-687.39.1.el9_8.x86_64.rpm 09f1bc16e4ef897de3742e4ed24c83674b948dbe980e01f2c394aa389e0afe84 kernel-rt-modules-core-5.14.0-687.39.1.el9_8.x86_64.rpm 1711988629828f4e6932ec65e2d00256985ae8285121de4078dd0e4991a0d342 kernel-rt-debug-core-5.14.0-687.39.1.el9_8.x86_64.rpm 3f1368af91ebdb3eee56f64731f829c5c482fc7c094e90d6894a323c586512c3 kernel-rt-5.14.0-687.39.1.el9_8.x86_64.rpm 4013ef8d77a5803526471c6b86d187a4b754d7aea647b8c82ec77d5825455671 kernel-rt-debug-modules-extra-5.14.0-687.39.1.el9_8.x86_64.rpm 749b7e2219167b15b5086b721902542994f6450db17defefe3d82f9c4793337c kernel-rt-modules-5.14.0-687.39.1.el9_8.x86_64.rpm 9ee9083eacccc0bb05d8a310aed46347d0fd18f8d954dedb9866001ba5072761 kernel-rt-core-5.14.0-687.39.1.el9_8.x86_64.rpm bbd5919c4906c2fd9fb1582e4d8ec59872f38a94de457fe89e221241c28972b5 kernel-rt-debug-5.14.0-687.39.1.el9_8.x86_64.rpm d3c5317a4b9cca5ade59b147759dfba169aaeba84c93cbe8db2cbc029251657d kernel-rt-debug-devel-5.14.0-687.39.1.el9_8.x86_64.rpm de22874a9185f3e5065b51a08c698a14db549db7f8499e24387bb8f0549d9266 kernel-rt-debug-modules-5.14.0-687.39.1.el9_8.x86_64.rpm ea33ccc0057e81278fd66127d0950c702f58695465318e0016b25f70d3df34cd kernel-rt-modules-extra-5.14.0-687.39.1.el9_8.x86_64.rpm f4574962c241b2f65e8ac2ecfce3ebad3d653a1111a08298c7a3f3b82167995b kernel-rt-devel-5.14.0-687.39.1.el9_8.x86_64.rpm feb29ba6b2987d04260a628332ad94e2d32c098efcdfa61c1ca78612ddbdfe8b ALSA-2026:57252 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233) * kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206) * kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237) * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991) * kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878) * kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120) * kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991) * kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143) * kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136) * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189) * kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329) * kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356) * kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374) * kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884) * kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007) * kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952) * kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888) * kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879) * kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048) * kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219) * kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382) * kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379) * kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386) * kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560) * kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343) * kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388) Bug Fix(es) and Enhancement(s): * kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:AlmaLinux-181065) * vhost: reset the vring metadata cache on vring reconfiguration [almalinux-9.8.z] (JIRA:AlmaLinux-224549) * cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-9.8.z] (JIRA:AlmaLinux-235811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-5.14.0-687.41.1.el9_8.x86_64.rpm 05e6e74d87d3f70087f99c85fc888f7b690a61943cf9908f24990ebc59e06c37 kernel-rt-modules-core-5.14.0-687.41.1.el9_8.x86_64.rpm 10d5b4c7686445ef7b1e7e60aa97b10d091868809d8128b5697b63a45ef2cfef kernel-rt-debug-core-5.14.0-687.41.1.el9_8.x86_64.rpm 5d11598a65c35bd5c5cd4145d6c1805f97a59a05bce83b05c40b11a2c2e9f54d kernel-rt-5.14.0-687.41.1.el9_8.x86_64.rpm 5d2a2035a6037b46aed71308b17ebf9d388b0cf2c345c5ebc01df8d3e69bbe04 kernel-rt-debug-modules-5.14.0-687.41.1.el9_8.x86_64.rpm 6a75f5d348c6e328dc97e196140749f8c3abad49e8184c8b77ce1c16eec31239 kernel-rt-debug-modules-extra-5.14.0-687.41.1.el9_8.x86_64.rpm 86474ddfda46357d669b6d04a1bce7971b73d14c2087c9b859dd6852c532939f kernel-rt-modules-extra-5.14.0-687.41.1.el9_8.x86_64.rpm 9bec546494a2bdbf15cf92e2da35d69599170bca8c5101f39ae1063a7141d7c6 kernel-rt-debug-modules-core-5.14.0-687.41.1.el9_8.x86_64.rpm a329a0cb04b179f12cb879fc3349291c79976df56b1d2d6e7866d42cdb9e89d3 kernel-rt-modules-5.14.0-687.41.1.el9_8.x86_64.rpm bcc35a8a225ddb38c691ba7a4e84c2ce0bb2c65efe4ce0a194e4d606caf21585 kernel-rt-debug-devel-5.14.0-687.41.1.el9_8.x86_64.rpm bcefc50aa47f16d1415e6b860f0fcbbc0f0aa4b6e25933dc70ab9a7d6a300ce9 kernel-rt-core-5.14.0-687.41.1.el9_8.x86_64.rpm d225ff6100cbcec7f6333f9b3f2e51d14c77763cd8f4b1e6c33f7d5d61638052 kernel-rt-devel-5.14.0-687.41.1.el9_8.x86_64.rpm deef2c7ee81ebafad868a7f5c5bc837a58d1781629c2ff5505ad12ee575fb6cc ALSA-2026:59723 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211) * kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003) * kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114) * kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924) * kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920) * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185) * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131) * kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268) * kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191) * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189) * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277) * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276) * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581) Bug Fix(es) and Enhancement(s): * [AlmaLinux-9.8.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-166118) * ss core dumped when there is an SCTP session [almalinux-9.8.z] (JIRA:AlmaLinux-212398) * [IBM 9.9 FEAT] zcrypt driver overwrite function - kernel part [almalinux-9.8.z] (JIRA:AlmaLinux-245333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-modules-extra-5.14.0-687.42.1.el9_8.x86_64.rpm 2c2f81f2f8abf2c22d150aa955ec8014cc014e602df39775719021a6e4babc3c kernel-rt-core-5.14.0-687.42.1.el9_8.x86_64.rpm 43ac98e8860380b8f1ec0a5375f372061963d55e7f9fd55f348daa0ec5c03436 kernel-rt-devel-5.14.0-687.42.1.el9_8.x86_64.rpm 5e75513c606f383712f1ff684c2f8614637a6a5833dcdd590effca99cafdcaaa kernel-rt-debug-devel-5.14.0-687.42.1.el9_8.x86_64.rpm 711231227f6b01cd6b8ea66c2b35c15ffe01fa4f6a648def6f3eb9f9069d5f19 kernel-rt-debug-core-5.14.0-687.42.1.el9_8.x86_64.rpm 7adeebfcd6b26af43cd777b06a2e13b3ea5f7edd5b24796d5853fd44e9c26e21 kernel-rt-debug-modules-5.14.0-687.42.1.el9_8.x86_64.rpm 7cb7d5e41b73a10ab903eab6189b94731f581dee6b617d64a4e094cdc593edb8 kernel-rt-5.14.0-687.42.1.el9_8.x86_64.rpm 989941c1d2dbb34b516823af181aabf87be2e471af9a13d2b04ed1d97d442b04 kernel-rt-debug-5.14.0-687.42.1.el9_8.x86_64.rpm b4330a39fa7dcf4fc756869e3895ef9583d7b8f62f41523e6aa798055d4dde42 kernel-rt-debug-modules-extra-5.14.0-687.42.1.el9_8.x86_64.rpm b619938735ce903a5698f324f46d75932904c79cdbb959c00e24bd9921f1045a kernel-rt-modules-5.14.0-687.42.1.el9_8.x86_64.rpm c89396bf27582c1a9cd7b88cb44b32f73f35449522d8435ad8310ac3677a9437 kernel-rt-debug-modules-core-5.14.0-687.42.1.el9_8.x86_64.rpm d5a45da60985e657b7b2286a14ecbe595c3fa29df73774c2d9ea6dc055bbb8c8 kernel-rt-modules-core-5.14.0-687.42.1.el9_8.x86_64.rpm ee0eaeed596b752fe4ee615bd94604beead5eef454382512c24997250b35b0e5 ALSA-2026:6153 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem (CVE-2025-38180) * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096) * kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144) * kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171) * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193) * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209) * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204) * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-modules-5.14.0-611.45.1.el9_7.x86_64.rpm 092f4641be743b43252db90046bd95f8960827cef4e4447dcb9caf931c98e080 kernel-rt-debug-5.14.0-611.45.1.el9_7.x86_64.rpm 29ecf25622fe5e9ab59ef53aa2778d6d5a11e3224ef1677c22c743e63c1db73d kernel-rt-5.14.0-611.45.1.el9_7.x86_64.rpm 368631d65184af60970792422878e0d3f9986174e1d6312452eb514875d94856 kernel-rt-debug-devel-5.14.0-611.45.1.el9_7.x86_64.rpm 4e26c457f36dc28922439eee96f471c207c010bd5ed10ba4c58d11eb4d8b657b kernel-rt-debug-modules-extra-5.14.0-611.45.1.el9_7.x86_64.rpm 792d629fedcabc6d55f39a15d862c8f402a397d017e480afa1642910852bb807 kernel-rt-core-5.14.0-611.45.1.el9_7.x86_64.rpm 890a0b8229b961b51e46dacea03a13d046b29032cb4991fcd6911bba59642db6 kernel-rt-devel-5.14.0-611.45.1.el9_7.x86_64.rpm 8a55465d2077fd120bd264714fa119a26482de56e086f2094176357def0b8a67 kernel-rt-modules-extra-5.14.0-611.45.1.el9_7.x86_64.rpm 9b191407aa307be653711310cf1c35fabc4488111b58cb2550dabaa93db71e25 kernel-rt-debug-core-5.14.0-611.45.1.el9_7.x86_64.rpm b0836b9692351d6d4f290818b82d8bc9833ce659a0d3d6f3e0904499781cc0ac kernel-rt-debug-modules-core-5.14.0-611.45.1.el9_7.x86_64.rpm e31382a98c9215e64e574000ac84346921d07c58be38b4b9c1c984229293283a kernel-rt-modules-core-5.14.0-611.45.1.el9_7.x86_64.rpm f1e8b6fc754aad5eba0066a158bc30c189b28fe5d0190e54aeb6073e9faac464 kernel-rt-modules-5.14.0-611.45.1.el9_7.x86_64.rpm fd861601adcc12f81da472cf948564200bc3deee56a32c36ef2079457320fcfd ALSA-2026:63129 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064) * kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147) * kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970) * kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185) * kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073) * kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800) * kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397) * kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808) * kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399) * kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392) * kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824) * kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391) * kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886) * kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002) * kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018) * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) * kernel: smb: client: fix query directory replay double-free (CVE-2026-64387) * kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268) * kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438) * kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304) * kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298) * kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490) * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480) * kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166) * kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145) * kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069) * kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130) Bug Fix(es) and Enhancement(s): * [AlmaLinux 9] TPM becomes completely unresponsive and requires a full reboot to clear [almalinux-9.8.z] (JIRA:AlmaLinux-213940) * RT scheduler livelock caused by missing backport of 94894c9c477e [almalinux-9.8.z] (JIRA:AlmaLinux-240634) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-devel-5.14.0-687.44.1.el9_8.x86_64.rpm 0541dacb7767a4aedf700d21045d555fcf4d9b8f621b3456177f98704df358f1 kernel-rt-modules-extra-5.14.0-687.44.1.el9_8.x86_64.rpm 10616131eef94def382dfa5eb0eca020b0acd3f6086cd819f8cde9ca46ca5107 kernel-rt-debug-devel-5.14.0-687.44.1.el9_8.x86_64.rpm 38a7e2d7c602a57ac7da67ddbe36ecf54e2e9ca1ac21221c697c7e95646a2585 kernel-rt-debug-modules-extra-5.14.0-687.44.1.el9_8.x86_64.rpm 39cf61b64a530bd7ff89fc3d65386afbe37bef19508bcf87061c6344ea416b84 kernel-rt-modules-5.14.0-687.44.1.el9_8.x86_64.rpm 5b118fe4469797f38c05c8b83484f7b11206581d97ab4dad792ca9d215f2401a kernel-rt-debug-core-5.14.0-687.44.1.el9_8.x86_64.rpm 603b16f8c9493d2dd91528302a4e3c6865e4eb2770256270a916d1cff5ebdb04 kernel-rt-modules-core-5.14.0-687.44.1.el9_8.x86_64.rpm 8504a7362f9d66642048ae9bd4577066bc86d9ff396ac8318c8b5b0d54e1a1ae kernel-rt-debug-modules-5.14.0-687.44.1.el9_8.x86_64.rpm 8fe9d8e27c89c576203a0c682978ef3479d2b2f647f2705e923b07853456480f kernel-rt-core-5.14.0-687.44.1.el9_8.x86_64.rpm 9678767644c08ae8df3facc28d9bc0fa1a5ab79f95a051d9026016762996c131 kernel-rt-debug-5.14.0-687.44.1.el9_8.x86_64.rpm 9bb0526859ccb0089ff222eafc7a31517cf7180336c8ed21435e823a6873f1b7 kernel-rt-debug-modules-core-5.14.0-687.44.1.el9_8.x86_64.rpm 9bbbe564512b7f946f459715627956ff32896db65d4f62259c2652753c092b71 kernel-rt-5.14.0-687.44.1.el9_8.x86_64.rpm ea59a159643082280c8d453c73e40b2c5379c310555cf5c70ff1ac159ede2451 ALSA-2026:64808 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004) * kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933) * kernel: netfilter: nat: use kfree_rcu to release ops (CVE-2026-53000) * kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136) * kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320) * kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319) * kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287) * kernel: smb: client: fix change notify replay double-free (CVE-2026-64384) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-5.14.0-687.45.1.el9_8.x86_64.rpm 0bd76fa4b71bb005812fe76d4e847da66e6245b30793983c5329acb201849325 kernel-rt-devel-5.14.0-687.45.1.el9_8.x86_64.rpm 1b68eebf2f1f449cc4794df76bb298b16d15e07deea227abbf2a85da93c02f29 kernel-rt-modules-extra-5.14.0-687.45.1.el9_8.x86_64.rpm 3172b83ec95d57333e0f3be5c2da7db84ca634ffdf3a4ec8548524af87553fac kernel-rt-debug-modules-5.14.0-687.45.1.el9_8.x86_64.rpm 36a74293ad09a2787e15c14df84cf335dd63b0490ffad55b89ae887d706135f8 kernel-rt-debug-devel-5.14.0-687.45.1.el9_8.x86_64.rpm 635579e11cf3984220dde9d5522a9a1cdaa5968234cbe44ac80315f7ec84fb52 kernel-rt-core-5.14.0-687.45.1.el9_8.x86_64.rpm 697d6b9b3e8326894f1d11882d53401ea117c4bdfe52feeca81d47a047c2c432 kernel-rt-debug-modules-extra-5.14.0-687.45.1.el9_8.x86_64.rpm 8eb8712bd83d87d0e3f4304c9afae5be40275ce9131232efff91b3d111641c85 kernel-rt-modules-5.14.0-687.45.1.el9_8.x86_64.rpm 95d1b8aa43c1aca3ee139f43e606d07a1f2495881952102b6d51d20e13c814a0 kernel-rt-debug-modules-core-5.14.0-687.45.1.el9_8.x86_64.rpm a424540ce853809118a4354af80bbb08f8d19ce8a36fcf10ebd387375a77c6b0 kernel-rt-debug-core-5.14.0-687.45.1.el9_8.x86_64.rpm aff496614f10138c968a26a339f258e13f716562062563fdad80c66f95700682 kernel-rt-modules-core-5.14.0-687.45.1.el9_8.x86_64.rpm dbd3237fec6e5fde677658cca15066d704cbdaca93e97108cacb499e587dbac0 kernel-rt-5.14.0-687.45.1.el9_8.x86_64.rpm e1fe0c2a2d8365c14fff5169b5fadce67993658fdc1cdffdd65372d846a68861 ALSA-2026:6570 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109) * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111) * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210) * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-modules-5.14.0-611.47.1.el9_7.x86_64.rpm 146798584141fefe3106df73b6b53b40a552a1a8e3bfe7c110554a085af5c982 kernel-rt-devel-5.14.0-611.47.1.el9_7.x86_64.rpm 1f64c723ec929c257264e5ff096dcfbcebfced2c9c439072b170e31b133d1fcd kernel-rt-debug-core-5.14.0-611.47.1.el9_7.x86_64.rpm 24c0b7acaec28ed9ea18450708f5317f470872a1dee496c08c0dddb9b0836f18 kernel-rt-debug-modules-core-5.14.0-611.47.1.el9_7.x86_64.rpm 508211a97d45536b9ae6eb841fc735cf9243ce716d7404ace79a606900bb9426 kernel-rt-modules-core-5.14.0-611.47.1.el9_7.x86_64.rpm 6ea6355ee199c3fd0422df872512e66f0948e52489a95b6c745f830cfba1b7d5 kernel-rt-5.14.0-611.47.1.el9_7.x86_64.rpm 6ffe5d3f4317c9de280fa80216e6a4fbe7194617a81c34ba2c9766f512bcb414 kernel-rt-debug-devel-5.14.0-611.47.1.el9_7.x86_64.rpm 7f73962218753d0a46269780709d32c9c619b8728ce647ee0ddbdee20f946430 kernel-rt-modules-extra-5.14.0-611.47.1.el9_7.x86_64.rpm c1924ea27af029345b73fd3111f8d0ba9191f1da7dcf0be7d16db6612628e501 kernel-rt-modules-5.14.0-611.47.1.el9_7.x86_64.rpm c24f018fab87c5a5120eb39e8e0649d21993c52f641a24847fbec73089c6d0b4 kernel-rt-debug-5.14.0-611.47.1.el9_7.x86_64.rpm cbbfdde8c0f1df6b59604e0c3ab3f5e820ff0cc3d908636a5a01699a204c0e93 kernel-rt-debug-modules-extra-5.14.0-611.47.1.el9_7.x86_64.rpm ce6db1866e5a162d159ba266c81dd005b2b3a3c2c1280cce65c5ee2d9fa4dbea kernel-rt-core-5.14.0-611.47.1.el9_7.x86_64.rpm e1baabe842ec06aedb6e8defff4c343eee45c8edbc7da7c151c6a364d50ee76c ALSA-2026:66180 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339) * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) * kernel: tcp: call sk_data_ready() after listener migration (CVE-2026-46015) * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149) * kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266) * kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306) * kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330) * kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002) * kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223) * kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275) * kernel: ipv4: account for fraggap on the paged allocation path (CVE-2026-53366) * kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034) * kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563) * kernel: smb: client: fix double-free in SMB2_close() replay (CVE-2026-64597) * kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129) * kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) Bug Fix(es) and Enhancement(s): * KSM to deduplicate only zero pages [almalinux-9.8.z] (JIRA:AlmaLinux-249161) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-core-5.14.0-687.46.1.el9_8.x86_64.rpm 11c96ab4745872a932f1de134457d05fae817c871d114c460821d68a05180192 kernel-rt-5.14.0-687.46.1.el9_8.x86_64.rpm 1bcd0bca59242c2c93b9d27674ad7fd10facb97dde2f057aeefff3d039990886 kernel-rt-debug-devel-5.14.0-687.46.1.el9_8.x86_64.rpm 1d7ce04ef998fbf953eff625aedc2d369d24eda842b7be0ee61557d4261e5de2 kernel-rt-devel-5.14.0-687.46.1.el9_8.x86_64.rpm 37e5bf4998b6879ae60314e93eccbc396be2013b823479d1b6c0a1687b48488b kernel-rt-debug-modules-5.14.0-687.46.1.el9_8.x86_64.rpm 3fa9a1f446402b2ba50bf6ef620308ede7c15d4136351953d243e5a67bc8f7e1 kernel-rt-modules-5.14.0-687.46.1.el9_8.x86_64.rpm 60d702cc2c61d8bad8f1be883fe9ab14f7bc2ad02b5613041093c896dc6b5060 kernel-rt-debug-5.14.0-687.46.1.el9_8.x86_64.rpm 7097eafe120b39535aeef328b82d97840db4bebc21638836e5eac5da5a16fb45 kernel-rt-debug-modules-core-5.14.0-687.46.1.el9_8.x86_64.rpm b41203a150c5446aa1436195e51660c42af38f0de1c211bd5bd354b35dacd2b0 kernel-rt-modules-core-5.14.0-687.46.1.el9_8.x86_64.rpm c741affe73332752fd2895f2d7e25b641f8496ed69a0d4011db19d23e8d1a4eb kernel-rt-debug-modules-extra-5.14.0-687.46.1.el9_8.x86_64.rpm df77b4604479e08c549403df158d2ba6039d988681f1354a1dfe99ca12666f8f kernel-rt-modules-extra-5.14.0-687.46.1.el9_8.x86_64.rpm efe7ef1b5fd1e1b23b0207bfbe4ff36a44b4f1e2a3e5e24d576b89b0bb20c2b7 kernel-rt-debug-core-5.14.0-687.46.1.el9_8.x86_64.rpm fca9f961d193b34b102f8505e4a74ffa219cf7e026844bd95b03feeffb24ee52 ALSA-2026:67150 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745) * kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466) * kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479) * kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566) * kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334) * kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368) * kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370) * kernel: Bluetooth: serialize accept_q access (CVE-2026-52918) * kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917) * kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091) * kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053) * kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CVE-2026-53072) * kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (CVE-2026-52947) * kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256) * kernel: wifi: nl80211: reject oversized EMA RNR lists (CVE-2026-53182) * kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CVE-2026-53209) * kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246) * kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254) * kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801) * kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889) * kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971) * kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975) * kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947) * kernel: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CVE-2026-63944) * kernel: Bluetooth: ISO: fix UAF in iso_recv_frame (CVE-2026-63946) * kernel: Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CVE-2026-63945) * kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (CVE-2026-64117) * kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (CVE-2026-64037) * kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113) * kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (CVE-2026-64255) * kernel: wifi: mac80211: fix MLE defragmentation (CVE-2026-64515) * kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086) * kernel: Linux kernel: Wi-Fi subsystem out-of-bounds read via crafted frames (CVE-2026-68402) * kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376) * kernel: wifi: cfg80211: validate PMSR FTM preamble range (CVE-2026-68406) * kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117) * kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300) * kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264) * kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315) * kernel: dm-verity: fix buffer overflow in FEC calculation (CVE-2026-72098) Bug Fix(es) and Enhancement(s): * gfs2: Various xfstests fixes [almalinux-9.8.z] (JIRA:AlmaLinux-178219) * rtla-timerlat-top doesn't stop properly when threshold is reached on multiple CPUs at once [almalinux-9.8.z] (JIRA:AlmaLinux-193025) * qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-9.8.z] (JIRA:AlmaLinux-193050) * Customer needs "netfilter: nfnetlink_queue: optimize verdict lookup with hash table" patch [almalinux-9.8.z] (JIRA:AlmaLinux-224489) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-devel-5.14.0-687.47.1.el9_8.x86_64.rpm 0aabc0d0d9f86bb9c0fe0d92981e6efadf9b94a0a9cc4a67d0187ad7e4b32a7e kernel-rt-debug-modules-5.14.0-687.47.1.el9_8.x86_64.rpm 21016bc29cfdb31bb98eea9eb2fc7531a88c2a61dceb78bc134abff070c32603 kernel-rt-debug-5.14.0-687.47.1.el9_8.x86_64.rpm 3b0ab3c72d8dc7f77e7bd099d9cbb8ffc7b1d96e9ec2ef45cc74a7d690abfc58 kernel-rt-debug-core-5.14.0-687.47.1.el9_8.x86_64.rpm 4be7d06dc5f547845112463ee79d648670b6f6680a4b4c01740384805a13f0ef kernel-rt-5.14.0-687.47.1.el9_8.x86_64.rpm 4d14ace20bda16d2ab78541dcbcac989b2660cdb0858181792fd59ce84cebdf7 kernel-rt-debug-devel-5.14.0-687.47.1.el9_8.x86_64.rpm 4dcfdb5f675f237fa518cb979216fe2bc0eb4f3750815cc7031ad7b0eee05bf5 kernel-rt-core-5.14.0-687.47.1.el9_8.x86_64.rpm 4ea7e9b562f9c4e412e1defb63cc5913804ebc65dc2eb07260a9080a98339c3e kernel-rt-debug-modules-core-5.14.0-687.47.1.el9_8.x86_64.rpm 7f0681eb6251718bc3928894f212a05e16bd8e8c1ad793393a5eac6f6eff527e kernel-rt-modules-core-5.14.0-687.47.1.el9_8.x86_64.rpm 852f92078a0473ee4477c6d87a1a1c9c4cc50dbcf356caa66ddfb35d5c97946f kernel-rt-debug-modules-extra-5.14.0-687.47.1.el9_8.x86_64.rpm de1c04917f3b738c4c747806500b345fd52c78a0485ebb526b27453881ec0b47 kernel-rt-modules-extra-5.14.0-687.47.1.el9_8.x86_64.rpm e97e3cb6ce86fd5f1662cde99d58a3efe54318930a6ea9b1b8c083e1085d8cbf kernel-rt-modules-5.14.0-687.47.1.el9_8.x86_64.rpm fa6b9bf76cf632e6e92dcf77db8d8618341466a8f40f667e379875bb8d6d42ed ALSA-2026:67470 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248) * kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015) * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923) * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143) * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294) * kernel: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (CVE-2026-72045) * kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556) Bug Fix(es) and Enhancement(s): * gfs2: bufdata leaks [almalinux-9.8.z] (JIRA:AlmaLinux-178223) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-modules-core-5.14.0-687.48.1.el9_8.x86_64.rpm 484b1a350efbee42bdb6a3c025afccb309ab53ae2262f32598e2f22cb25d2a8c kernel-rt-debug-modules-5.14.0-687.48.1.el9_8.x86_64.rpm 4dc92e24e472f945a3fe048a2da9ea94d2e4b0b26ddba986fa7eb6dd17da45d2 kernel-rt-debug-modules-extra-5.14.0-687.48.1.el9_8.x86_64.rpm 57f28544722eed86ac6620002d24707e2625eb97e391f99d4bdfea8510b98b7d kernel-rt-debug-core-5.14.0-687.48.1.el9_8.x86_64.rpm 80ee6dc4bc60576fe8d3a24c50a2fb949ece041926c6a2a7ab02e3b2f5ada2d8 kernel-rt-debug-devel-5.14.0-687.48.1.el9_8.x86_64.rpm 8a9c6bc6a9cc46aa0dd6142b4d2e01d606e6c79a773e574a29cdd2225d291cfd kernel-rt-debug-modules-core-5.14.0-687.48.1.el9_8.x86_64.rpm 90eade7c74cf6f19bd0718bfce3ccb9723ab5f0ea78096adbf8d3439298cf711 kernel-rt-modules-5.14.0-687.48.1.el9_8.x86_64.rpm a099ea477c4a1cd424af7ab740f21d3a6ddd94c508b15896a62cbe5d6ba66947 kernel-rt-core-5.14.0-687.48.1.el9_8.x86_64.rpm a3fc24ebef4d707bfdb0e05131d51e7d5b53eac190ac2e552d2def4d9382b277 kernel-rt-debug-5.14.0-687.48.1.el9_8.x86_64.rpm bad882c3503348a159574e44399e4cbfc3ccd1c10de465ac8a2ba4ddcc1fcd03 kernel-rt-devel-5.14.0-687.48.1.el9_8.x86_64.rpm d79c35e15f46efed280f9aeac7273cfa06f28d1276c51cc014b61486f9d3989b kernel-rt-modules-extra-5.14.0-687.48.1.el9_8.x86_64.rpm d7fe4192e8ab8836cfb2f2ea1f0d89cc36e6f6ecb769169f5b291bc3b955fb74 kernel-rt-5.14.0-687.48.1.el9_8.x86_64.rpm e96b8e086b63587bfe99e6ad477397b8181c38004eb84377e02befc90f3a354f ALSA-2026:68570 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172) * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663) * kernel: RDMA/rxe: Fix race condition in QP timer handlers (CVE-2026-45910) * kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043) * kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133) * kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (CVE-2026-46114) * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971) * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176) * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193) * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239) * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192) * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869) * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029) * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921) * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919) * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917) * kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913) * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176) * kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (CVE-2026-64174) * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175) * kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582) * kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159) * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation (CVE-2026-68200) * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128) * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363) * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426) * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102) * kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298) * kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (CVE-2026-72003) * kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243) Bug Fix(es) and Enhancement(s): * gfs2: filesystem withdrawal rework [almalinux-9.8.z] (JIRA:AlmaLinux-252540) * The slab cache entries for gfs2 and dlm grow very large for gfs2 filesystems [almalinux-9.8.z] (JIRA:AlmaLinux-252544) * gfs2: Get rid of sd_async_glock_wait [almalinux-9.8.z] (JIRA:AlmaLinux-253986) * [AlmaLinux9.8z] watchdog: System panics during reboot when pretimeout is disabled (0) (JIRA:AlmaLinux-255217) * [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [almalinux-9.8.z] (JIRA:AlmaLinux-256733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-core-5.14.0-687.49.1.el9_8.x86_64.rpm 085f96cf39653ba9be05a8af5e089d0c4db68b9e255d0b34268d2293dbe5a130 kernel-rt-modules-core-5.14.0-687.49.1.el9_8.x86_64.rpm 0f1361dee6acd749b1deefef6323c1ba545a4cf653e62830324cd597b1ac7435 kernel-rt-5.14.0-687.49.1.el9_8.x86_64.rpm 15e5b61c6adb6c6dafc259323a5f0ac9eb19ded8a50209761d4f8ec7544316e0 kernel-rt-devel-5.14.0-687.49.1.el9_8.x86_64.rpm 4c461f8474648bc41c520e52f5b12e0c413ebf9ff1c4852ff18cbad069d3d4b6 kernel-rt-debug-devel-5.14.0-687.49.1.el9_8.x86_64.rpm 5389c36579b79f8b1d7d23912577c6111399b474061f398f35e41b3e3b479c84 kernel-rt-debug-5.14.0-687.49.1.el9_8.x86_64.rpm 53a65452d9eb6cfd450c066922076dd3fc2ce7050e074071acc84fbea28541be kernel-rt-debug-modules-5.14.0-687.49.1.el9_8.x86_64.rpm 59860fd3e198cf36fcce3d05fc09d238f9f40f5d0b2b2afffc4b73b4ec06f1be kernel-rt-debug-modules-extra-5.14.0-687.49.1.el9_8.x86_64.rpm 6ec8f171e2d3c0b3776ecaa9f52630a31cb2848afcbfda81c400ba85415feff2 kernel-rt-modules-5.14.0-687.49.1.el9_8.x86_64.rpm 87f7554952ed867c18f6ef786da7cf90342cde02fe2ddf328336f9eeaa8f1a53 kernel-rt-core-5.14.0-687.49.1.el9_8.x86_64.rpm abf2e1ae6356eb2b1e4bf9c400aa823df1a3649209bdd384847f88ac0993509a kernel-rt-modules-extra-5.14.0-687.49.1.el9_8.x86_64.rpm ddf167cca03a47b7a6d524c569bf4da7bcd53e88ae94bf5e1f06065ba8be40ae kernel-rt-debug-modules-core-5.14.0-687.49.1.el9_8.x86_64.rpm df53c50514568af8a14ce2d44b48f069411cbeb07b9e47f9f8cb8ef3cc4e39e3 ALSA-2026:70459 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964) * kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894) * kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959) * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062) * kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823) * kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293) * kernel: Linux kernel: libceph null pointer dereference leads to denial of service (CVE-2026-68157) * kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188) * kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156) * kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155) * kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391) * kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (CVE-2026-72072) * kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518) Bug Fix(es) and Enhancement(s): * [Intel 9.8 FEAT] ice: Driver Update [almalinux-9.8.z] (JIRA:AlmaLinux-213003) * AlmaLinux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [almalinux-9.8.z] (JIRA:AlmaLinux-254108) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-modules-extra-5.14.0-687.50.1.el9_8.x86_64.rpm 184b26a54e91216d132a5d152e3ba83d1d7027c1bfb00a160ac119f49be857c0 kernel-rt-debug-modules-extra-5.14.0-687.50.1.el9_8.x86_64.rpm 3677037b33b57ef59c447c249ccc5002ab1bdaedb763ec1f092a70e91fab1c4a kernel-rt-debug-core-5.14.0-687.50.1.el9_8.x86_64.rpm 49f95c0135aa4bbae7428669549383258a7fc5b710a638345ca217f07a2117da kernel-rt-debug-modules-core-5.14.0-687.50.1.el9_8.x86_64.rpm 5f39a8ed4978d0fc8cf5c60753b26d7dd0c6ae350d100300ee459df085952a47 kernel-rt-debug-5.14.0-687.50.1.el9_8.x86_64.rpm 6df0193a4952392269129dbac1c3d9f23dd919f1416075bace86bd402dc9def5 kernel-rt-debug-modules-5.14.0-687.50.1.el9_8.x86_64.rpm 786bccd903c016c386ab879f2aa04d185d0f9d7de595df855d2f706716089600 kernel-rt-devel-5.14.0-687.50.1.el9_8.x86_64.rpm 9be2dc5c2f787d26de31cbbf8cef6b3633fd1073b565a4b0d1c6c8ba19f2cd6a kernel-rt-core-5.14.0-687.50.1.el9_8.x86_64.rpm bcec2c160a15bf5179be579447588d3390cb90b7b0925f4efa85b80dacf3f505 kernel-rt-debug-devel-5.14.0-687.50.1.el9_8.x86_64.rpm cb506c27b5c54d3ed0cecc18195fe9ec014ba3819e588c45385e37eeec25b384 kernel-rt-modules-core-5.14.0-687.50.1.el9_8.x86_64.rpm cf7e0405c19b4b2ef23a7b2253c198b6a0fd1fbbac80970296e988a4ed483723 kernel-rt-5.14.0-687.50.1.el9_8.x86_64.rpm ef03221cb826c061a0a2c40d15557906e8366509aded4cb90a10f95f58c150e7 kernel-rt-modules-5.14.0-687.50.1.el9_8.x86_64.rpm f9c5c81a78e4f14aa013acc7872a32728416c3e707060d08040ef0e446f7f3f2 ALSA-2026:71700 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323) * kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539) * kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199) * kernel: drm/amdgpu/userq: fix access to stale wptr mapping (CVE-2026-46311) * kernel: netfilter: nf_queue: hold bridge skb->dev while queued (CVE-2026-52912) * kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CVE-2026-53203) * kernel: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CVE-2026-53290) * kernel: drm/virtio: use uninterruptible resv lock for plane updates (CVE-2026-64098) * kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121) * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108) * kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CVE-2026-68257) * kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CVE-2026-68267) * kernel: drm/xe: Hold a dma-buf reference for imported BOs (CVE-2026-68266) * kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273) * kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714) Bug Fix(es) and Enhancement(s): * MADVISE i/o size in AlmaLinux 9 additionally limited by read_ahead_kb - Was addressed in AlmaLinux8 via AlmaLinux-22476 [almalinux-9.8.z] (JIRA:AlmaLinux-260938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-core-5.14.0-687.52.1.el9_8.x86_64.rpm 1e4f62647697f2f1e97af78772ba0f411c1dc05980ac741885f05802cd7951b3 kernel-rt-modules-core-5.14.0-687.52.1.el9_8.x86_64.rpm 4853bd524d0d4c320982eeb931a7c34a654a24092e17d9d2109d687155e1dd2f kernel-rt-debug-modules-extra-5.14.0-687.52.1.el9_8.x86_64.rpm 49255500c81f627440e218bddf4ab6a7069b245f26442434cfe6d714945d598d kernel-rt-debug-devel-5.14.0-687.52.1.el9_8.x86_64.rpm 534d9ad844bba35b72f32723f82ee00bbcff8d9bae62b6d36e197d04fb5d2f21 kernel-rt-debug-modules-5.14.0-687.52.1.el9_8.x86_64.rpm 58a10d3a0b8a01af52188a446d1f77822eabe4573de46011a6dc41e08a9b41d5 kernel-rt-5.14.0-687.52.1.el9_8.x86_64.rpm 98ebd3f39630655866d74b734b89797875c0883e4b13ca24eba6d1bde5a35e0e kernel-rt-debug-5.14.0-687.52.1.el9_8.x86_64.rpm a8d11f5b359a2836570c43de73522fd46e8b234a917c99686dbb07af4e42b0ee kernel-rt-modules-5.14.0-687.52.1.el9_8.x86_64.rpm b53bbc4b47680ecbb2cc73734ce00c9b8c4a5bbea370ee23579811a465882992 kernel-rt-core-5.14.0-687.52.1.el9_8.x86_64.rpm ca70065982bae4d60c9777a0d8b8c331a1fe44395be1ef9df53f7d7d3e316daa kernel-rt-modules-extra-5.14.0-687.52.1.el9_8.x86_64.rpm dd29e5981abe15233b80133a633e3d960fba76dbb4878b034db05f3833ead71c kernel-rt-debug-modules-core-5.14.0-687.52.1.el9_8.x86_64.rpm ee011491c69f268c70d4befa3aace6e1395c65211b7ab17d4da5b8fef4533129 kernel-rt-devel-5.14.0-687.52.1.el9_8.x86_64.rpm fc161a049763a1cb54cae263825608eec45eb42cf85ce77dde9a06df0ba66c43 ALSA-2026:72623 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942) * kernel: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (CVE-2026-46325) * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972) * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341) * kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875) * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102) * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556) * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522) * kernel: perf: Reject exited events as group leaders (CVE-2026-74753) Bug Fix(es) and Enhancement(s): * KVM: s390: Limit adapter indicator access to mapped page [almalinux-9.8.z] (JIRA:AlmaLinux-188656) * crypto: xxhash64 should not be fips approved [almalinux-9.8.z] (JIRA:AlmaLinux-256437) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-devel-5.14.0-687.53.1.el9_8.x86_64.rpm 252d2c5231b4736b9730416c0d05d433c25bb92c5ddb7d5595ff0c64e615f4d7 kernel-rt-debug-modules-5.14.0-687.53.1.el9_8.x86_64.rpm 27e418759d4bfa3b8c8c33aec4d047970967cac59a0efc502cf6989bbf66b42e kernel-rt-5.14.0-687.53.1.el9_8.x86_64.rpm 2ed705f21944d4953b9455e8d69c21378bbc117c38eb8c9c1db0c248348ae4d7 kernel-rt-debug-modules-core-5.14.0-687.53.1.el9_8.x86_64.rpm 2fb1a292b456cd20373b5b7f3daaa9b8f8371e902e53d3390dc0b895d9455fa0 kernel-rt-debug-5.14.0-687.53.1.el9_8.x86_64.rpm 8f67a5592710be7c238fddf09ba1500655583052f83d443a25866094d55f850a kernel-rt-modules-extra-5.14.0-687.53.1.el9_8.x86_64.rpm a2cb11b753a85762266556868e6f2050cc739ffe179592fdb153ba198c68a314 kernel-rt-modules-core-5.14.0-687.53.1.el9_8.x86_64.rpm a823e0f2676554a2c122cf70367d012520ae8868bbb5fc9ec43b20f3405e5e66 kernel-rt-debug-devel-5.14.0-687.53.1.el9_8.x86_64.rpm a91dda74b6469e16c6edd32fc905c898de548c9a26eac4108765851be12a9fe9 kernel-rt-modules-5.14.0-687.53.1.el9_8.x86_64.rpm ab31ff74d3be292932d3d9424737e14b1c6a7f3dcef72c3a6efb9c9afd965de9 kernel-rt-core-5.14.0-687.53.1.el9_8.x86_64.rpm ac6350616679a5197e2bca0e96697dea983d56df127810e41225177484c02704 kernel-rt-debug-modules-extra-5.14.0-687.53.1.el9_8.x86_64.rpm b74660d7de7690774d3431c918a4f7f8543c7c6da28e39338e9e22d53b13ee3b kernel-rt-debug-core-5.14.0-687.53.1.el9_8.x86_64.rpm bb9c67460e4e9bc3a4dcd17f48d68572c850377894dd243a9deef7009595c7a7 ALSA-2026:74438 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856) * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794) * kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775) Bug Fix(es) and Enhancement(s): * Backport of protocol attribute to IP addresses (IFA_PROTO) [almalinux-9.8.z] (JIRA:AlmaLinux-169936) * try_charge_memcg() refactor in kernel 5.14.0-687.36.1 causes premature memcg OOM with GiB of clean page cache present [almalinux-9.8.z] (JIRA:AlmaLinux-269060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-5.14.0-687.54.1.el9_8.x86_64.rpm 0872fc81795d37b56e27b27070581e1b22bb624eb00874a6d711111192195665 kernel-rt-debug-modules-5.14.0-687.54.1.el9_8.x86_64.rpm 0b187582be8aed39f85e8187e91bb367f1fee47f94028bb3b5d82ad4e605640e kernel-rt-modules-5.14.0-687.54.1.el9_8.x86_64.rpm 1a4a8289d273f908a8c567d1f0d5e9506809e706d92543b17224fd70d7e47c1a kernel-rt-debug-modules-core-5.14.0-687.54.1.el9_8.x86_64.rpm 1b5683a906b0a15cea2ce0bb3652d2de22ccbbd1e49d24047829b36bbd9341d3 kernel-rt-modules-extra-5.14.0-687.54.1.el9_8.x86_64.rpm 627eb24b084c1f13af6f830bc67a6e3cfadaf315f44b1296b85f172a64e0c99d kernel-rt-core-5.14.0-687.54.1.el9_8.x86_64.rpm 700838a4dbbf0a3b1a81a70cec09a249e53ceb1b55f17e870e03e0e1ed27f9e7 kernel-rt-debug-5.14.0-687.54.1.el9_8.x86_64.rpm a30a07f780478c507a25b07f0c3c0f7d0e8721e6e1de65eaa2a2379b9e525ac7 kernel-rt-debug-devel-5.14.0-687.54.1.el9_8.x86_64.rpm d14ee703bc30d02f643053d0e71a35e34be58528815f5cb753a5463b2c8e7738 kernel-rt-modules-core-5.14.0-687.54.1.el9_8.x86_64.rpm d6eed602d057ecb338b874ef04c05adab1e69116b2f224782b2f4f7bfbbdbc46 kernel-rt-debug-core-5.14.0-687.54.1.el9_8.x86_64.rpm eaab5ab4eff81ade4af726ba2a11668fe0dac565097cc9d897506b5600a71db0 kernel-rt-devel-5.14.0-687.54.1.el9_8.x86_64.rpm efe715f9c73a560b487483665d3a1a2e3901a13e4d42a989d80675ddc9755e34 kernel-rt-debug-modules-extra-5.14.0-687.54.1.el9_8.x86_64.rpm f8b7b397a11295bb8f9fb0fa2242a375df9ad0ce6dcf40c72c649550a7d4f3db ALSA-2026:77689 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) * kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365) * kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398) * kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970) * kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035) * kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162) * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317) * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744) * kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690) * kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669) * kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530) * kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663) Bug Fix(es) and Enhancement(s): * "iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors" broke rx-vlan-offload on almalinux-9.7 [almalinux-9.8.z] (JIRA:AlmaLinux-169480) * [GNR-D] missing interfaces tspll_cfg (JIRA:AlmaLinux-183201) * AlmaLinux9.8z KVM guest panicked in vmmouse driver (JIRA:AlmaLinux-186577) * Add Epson RX8111 support to AlmaLinux9.9 [almalinux-9.8.z] (JIRA:AlmaLinux-212014) * RT scheduler livelock: migrate-disabled task at pushable-list head causes repeated RT push/stopper retries, starving a critical RT task (remaining issue after CVE-2026-45919 fix in 94894c9c477e) [almalinux-9.8.z] (JIRA:AlmaLinux-256279) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-core-5.14.0-687.56.1.el9_8.x86_64.rpm 0a5649477a4a22210849d084ba1c38f93956380d2d6d4d6eeb4060226f23ae09 kernel-rt-debug-modules-extra-5.14.0-687.56.1.el9_8.x86_64.rpm 0ff2a7ec016513b312027adfa14767786401428e4a8e9440c7a35a2c54941bfe kernel-rt-debug-devel-5.14.0-687.56.1.el9_8.x86_64.rpm 30d9946b6248fe1ff4073b7c12e7a67190dc8a8712bf21fdcd81906aee9895c0 kernel-rt-debug-5.14.0-687.56.1.el9_8.x86_64.rpm 4037a9951337162edd6a8412410098dec7ad60974908b026affc6a717853c576 kernel-rt-core-5.14.0-687.56.1.el9_8.x86_64.rpm 4ca07f2800187bd808b2523ab8d724e5c629e5e2251ebcdafd5f3eb8618c2b82 kernel-rt-modules-5.14.0-687.56.1.el9_8.x86_64.rpm 8512f7207f7e28b42020a5fbf67b2e2368a118e629e3064633a3b98513cfa1c1 kernel-rt-modules-core-5.14.0-687.56.1.el9_8.x86_64.rpm 8894a108604864ced3d3fd6deba9ab550bbc56de514a9640ea77df2e49549be8 kernel-rt-debug-modules-5.14.0-687.56.1.el9_8.x86_64.rpm a2bb23a2206600644b388089442994a5b5f942012fd17bbedfa1d29043797731 kernel-rt-devel-5.14.0-687.56.1.el9_8.x86_64.rpm aeb2cf2807a33b7885eaaf5ece43f33216925477c0233c8f9849df2b70603337 kernel-rt-5.14.0-687.56.1.el9_8.x86_64.rpm ba8810958d25e8a2682bb608bba57a5fb0d4b5000131a63036dae9331acaa8ed kernel-rt-modules-extra-5.14.0-687.56.1.el9_8.x86_64.rpm ee4f9b28a8724a90673c94e3b5618522db3bd1566841f55823bbb9bf5ca4b0c0 kernel-rt-debug-modules-core-5.14.0-687.56.1.el9_8.x86_64.rpm fe2f1e41a2ce1d540eca43e91283898b54c861192cad46e962ea2bbedc289f43 ALSA-2026:83156 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319) * kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011) * kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030) * kernel: wifi: cfg80211: use wiphy work for socket owner autodisconnect (CVE-2026-68404) * kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377) * kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140) * kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409) * kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288) * kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262) * kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320) * kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641) * kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705) * kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985) * kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526) * kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CVE-2026-81003) * kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036) * kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207) * kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-5.14.0-687.58.1.el9_8.x86_64.rpm 0b1058581d73d76e5d0ad43efe0e24c14492a4efe0a8a4003ee268b3840c171b kernel-rt-core-5.14.0-687.58.1.el9_8.x86_64.rpm 34e1b9a6ad2c908e4736989cdf0abac88cd082c5b97e870e369dcc226fc1d8d9 kernel-rt-devel-5.14.0-687.58.1.el9_8.x86_64.rpm 54378ca1ff13865310e17d2b3c3439d99d7b0c4f4eb24c72137252aa6464c530 kernel-rt-modules-core-5.14.0-687.58.1.el9_8.x86_64.rpm 7de84487178e0ee4feffe70da836b7844c82ffe5f0e598f7da0463446ca04a03 kernel-rt-debug-modules-5.14.0-687.58.1.el9_8.x86_64.rpm 804380a0333a8062ab95d54f2f00c1471f60fa7085bd7c7ddf4e9bdc6cda4ab1 kernel-rt-debug-modules-core-5.14.0-687.58.1.el9_8.x86_64.rpm 84828c1d2887ab56a568716ce51c5027d5218004f1679a8e4529843de6bc754f kernel-rt-modules-extra-5.14.0-687.58.1.el9_8.x86_64.rpm 8ac97f82352750082965f1da23c66814b2489ff666e1d72f7f8c5899cc6199b1 kernel-rt-modules-5.14.0-687.58.1.el9_8.x86_64.rpm 99535d1eb52038b704379728af26c41af071e001e26d1fed09abf7fa3114e08a kernel-rt-debug-5.14.0-687.58.1.el9_8.x86_64.rpm 9fdc5c96adcb4f94d339fe3f2ef5e2baf2d03b32bf92a3a85975e78666d43e43 kernel-rt-debug-core-5.14.0-687.58.1.el9_8.x86_64.rpm a1c8e440861cf06ccb1dc471aa5d9309c62fd0a4182aa720600a6ea44bfd9b4c kernel-rt-debug-devel-5.14.0-687.58.1.el9_8.x86_64.rpm b3ec2f2d5a33147a522e5f9e7f3389ed3ec39978ee9b47c0d3c99b8bc5c289b3 kernel-rt-debug-modules-extra-5.14.0-687.58.1.el9_8.x86_64.rpm dbaa88e85cd5740805a1804687c1a0776a53cc237d47a7383c280ebd2a3680a1 ALSA-2026:86033 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935) * kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899) * kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032) * kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024) * kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962) * kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974) * kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114) * kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572) * kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509) * kernel: Linux kernel: Denial of Service due to incorrect GSO state handling in network fragment reassembly (CVE-2026-80590) * kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633) * kernel: perf: Fix addr_filter_ranges lifetime (CVE-2026-93817) * kernel: kernel: strparser: use-after-free via msg_timer_work rearm after strp_done() cancellation () * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260) * kernel: ipv4: validate checksum_start before completing checksum (CVE-2026-99999) Bug Fix(es) and Enhancement(s): * Batch: z-stream xfrm - almalinux-9.8.z (NST-Core-26W38) (JIRA:AlmaLinux-256697) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-devel-5.14.0-687.59.1.el9_8.x86_64.rpm 3b361c240fb06115f3704e0dafc56ccd6c864dc57ec6c4ca188f0f695aee0b6a kernel-rt-debug-modules-5.14.0-687.59.1.el9_8.x86_64.rpm 41e2724ec279d6914b71485061832e01948b3ca4a9a24d6dfa50660852eb1dfe kernel-rt-debug-modules-core-5.14.0-687.59.1.el9_8.x86_64.rpm 4f8430060c47fd7e62a984c4a5582738e9e14f8dd8d88d974fde3754e6639fed kernel-rt-debug-modules-extra-5.14.0-687.59.1.el9_8.x86_64.rpm 590ac77a530115c05169d12b983463079f2ad02d224721d2f1a4e196a9afc611 kernel-rt-debug-5.14.0-687.59.1.el9_8.x86_64.rpm 7c0d058ef0cad6988bf1a56e607d7936edbd7337c631a727b2c9ccf3fa0668c9 kernel-rt-debug-devel-5.14.0-687.59.1.el9_8.x86_64.rpm 89dc8cc336b034a8cea41bc2da218672b4e0222019d4165d30f15fec69527cec kernel-rt-debug-core-5.14.0-687.59.1.el9_8.x86_64.rpm 8ab54007c60f0ce21204f59bda7dac505add0574aeb56d906846d0f185f5aa73 kernel-rt-modules-extra-5.14.0-687.59.1.el9_8.x86_64.rpm 8ebf32aa8ddb0e8202395f311e5f7bb7447c920318e1c8cda27bf98030b13206 kernel-rt-5.14.0-687.59.1.el9_8.x86_64.rpm 98829b42af52fce79217e08bc5dd640f9d87f88a95ec3d06473ab7157e1cb5db kernel-rt-modules-core-5.14.0-687.59.1.el9_8.x86_64.rpm d1db766a93acae9b57e2fc76fdd86ee402ae437f1749329b6afc57e936a1f8ee kernel-rt-core-5.14.0-687.59.1.el9_8.x86_64.rpm d68150e3be542a20875034c8a382c8c75e7a216f0188a3a44977d7a7f808360a kernel-rt-modules-5.14.0-687.59.1.el9_8.x86_64.rpm f7846e86a82e153bf77803fe235c787e33948d6f3071ba41c3c4f8479ac739b8 ALSA-2026:87805 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CVE-2025-22063) * kernel: calipso: Don't call calipso functions for AF_INET sk. (CVE-2025-38147) * kernel: ALSA: hda/cs35l41: Fix firmware load work teardown (CVE-2026-64481) * kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299) * kernel: ovl: check access to copy_file_range source with src mounter creds (CVE-2026-68448) * kernel: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CVE-2026-80530) * kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536) Bug Fix(es) and Enhancement(s): * RTLA segfaults on freed memory access on double SIGINT [almalinux-9.8.z] (JIRA:AlmaLinux-193029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-debug-devel-5.14.0-687.60.1.el9_8.x86_64.rpm 006dfecebe83d6d031a313d90c9ea0874d106278cba16a384f3c1f320bfdd78c kernel-rt-debug-modules-5.14.0-687.60.1.el9_8.x86_64.rpm 01d8c84139f363ee5cda7b8b2ae0f8af4137a636e87752c1813090b407bccd08 kernel-rt-modules-core-5.14.0-687.60.1.el9_8.x86_64.rpm 0b8ad38c1aa4017c23c37bb4d2b9470be00b9c8970d415df9619e4b1295da5f5 kernel-rt-modules-extra-5.14.0-687.60.1.el9_8.x86_64.rpm 1151110e42f8b01bcfd37c872053b88f9a9521daa6d7140b9a4bcaa857ebddda kernel-rt-debug-core-5.14.0-687.60.1.el9_8.x86_64.rpm 162996afa220bcfde758c4a76006593fe0d429415257ddb9d55f8d69858c9ef3 kernel-rt-5.14.0-687.60.1.el9_8.x86_64.rpm 1f80e9dc2f5ffcba4a19612fc9151bee53601a1093e378a0019f70ff8cac02ce kernel-rt-debug-modules-core-5.14.0-687.60.1.el9_8.x86_64.rpm 77d678306f252e49b1e6fa057d96436056d9bd602aad9a462b2a6b950dcd777d kernel-rt-debug-modules-extra-5.14.0-687.60.1.el9_8.x86_64.rpm 93f3f08ad4d828c2131bd0bd9e23296b242e334a602b5ad1a6fb9c1d7f02d3d6 kernel-rt-debug-5.14.0-687.60.1.el9_8.x86_64.rpm 9a07f8cf0f979cf422e3c99a5cd6065fbca04903d05bdbb202c46cfa6facab3e kernel-rt-core-5.14.0-687.60.1.el9_8.x86_64.rpm bbc20f3c297e01afff91f1fbbef01cbc2e3f90dd143d58f6217b0ac485a990d7 kernel-rt-devel-5.14.0-687.60.1.el9_8.x86_64.rpm e323692cd9c7b7f3141ecf18aad7f8748be1cdd833275c9e75e7e9790b84d6d4 kernel-rt-modules-5.14.0-687.60.1.el9_8.x86_64.rpm f97f59fb87977899d507081c4dc6aa23c1fdabe8b64a19310b038d8897763023 ALSA-2026:8921 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-devel-5.14.0-611.49.1.el9_7.x86_64.rpm 02f7bf4ae8a75bb28174652185eae0ddd1801589f48c79492f127f805ea05504 kernel-rt-modules-extra-5.14.0-611.49.1.el9_7.x86_64.rpm 0ffdad9f5a7fe8372f4832afc740d62f89150ef3863bebf1e18c5f204dbfe0d0 kernel-rt-modules-5.14.0-611.49.1.el9_7.x86_64.rpm 4efa7579a4f717c689e0840f032fb8f5582720cf1088d3f9cd6ddd6c503eb52e kernel-rt-5.14.0-611.49.1.el9_7.x86_64.rpm 55bd5c563f6ad9b1e581fee338bc002fd8342fce5d8add26371c287681d53552 kernel-rt-debug-modules-core-5.14.0-611.49.1.el9_7.x86_64.rpm 62905e1a1f2ecaedddb94f783e594deea02ac656c557de6adec9b840859a4682 kernel-rt-debug-modules-extra-5.14.0-611.49.1.el9_7.x86_64.rpm 91804548feb3f1e5bd6835dc10b12807f3c09cdb85cf21ee06a0df96746acf04 kernel-rt-devel-5.14.0-611.49.1.el9_7.x86_64.rpm 99405cea775f4026e974ac1ea01301e1dd56582cf400047dbddf18104048b477 kernel-rt-modules-core-5.14.0-611.49.1.el9_7.x86_64.rpm b7b6478c2f38a8d7728f65b58643a151a7cadb84bf3995f8a0bedfa7b8513b39 kernel-rt-debug-core-5.14.0-611.49.1.el9_7.x86_64.rpm c7c95273a48ab14e6a4d25e960c4b6afc05025bbf5d9ea08b412e0acd1605a12 kernel-rt-debug-modules-5.14.0-611.49.1.el9_7.x86_64.rpm d175fd4470754654415955efd0b54771f501fec43a85cd64733e1003481f8d62 kernel-rt-core-5.14.0-611.49.1.el9_7.x86_64.rpm e7c778b8a6a1fa9a1d72ebabdb65b5df83046886f3a0f6f58e59d76458ea4560 kernel-rt-debug-5.14.0-611.49.1.el9_7.x86_64.rpm f43c98e6c98dbd18d756d133bace38337a4306fabd1aef5559052b870876990b ALSA-2026:90365 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Deal with race between UDP socket address change and rehash (CVE-2024-57974) * kernel: fuse: re-lock request before replacing page cache folio (CVE-2026-53388) * kernel: net/handshake: hand off the pinned file reference to accept_doit (CVE-2026-63979) * kernel: net/handshake: Drain pending requests at net namespace exit (CVE-2026-63978) * kernel: fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266) * kernel: net/handshake: Take a long-lived file reference at submit (CVE-2026-64523) * kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476) * kernel: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CVE-2026-72242) * kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CVE-2026-74515) * kernel: usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CVE-2026-80824) * kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CVE-2026-89638) * kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure (CVE-2026-89777) * kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262) * kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222) * kernel: netfilter: flowtable: hold reference on ct until flow is released (CVE-2026-98320) Bug Fix(es) and Enhancement(s): * kernel panic at __crypto_xor+0x2 after a number of out-of-bounds read and use-after-free read (JIRA:AlmaLinux-257205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_8_default kernel-rt-modules-5.14.0-687.61.1.el9_8.x86_64.rpm 13ddd460ae4d66b1330e125fd8b4d5f7b207a714c4fdd043181d5e30f336bbbf kernel-rt-modules-core-5.14.0-687.61.1.el9_8.x86_64.rpm 21b64fd321c8e6bc6ad1e39aebb5b10c7fa491051002949c184940a6a163f833 kernel-rt-modules-extra-5.14.0-687.61.1.el9_8.x86_64.rpm 332b9c04918303368bbab98aab92a1157478127f720c0c23759e0c42760ef60c kernel-rt-5.14.0-687.61.1.el9_8.x86_64.rpm 3a87a83a4974e33e0e868ade0b0e44d1e33965f510b5f7d3e70377bdf174c72a kernel-rt-debug-modules-core-5.14.0-687.61.1.el9_8.x86_64.rpm 48e172468cccc1f932d00b1480266709e3a9760ae45f9f8ea88f689135b4d07e kernel-rt-core-5.14.0-687.61.1.el9_8.x86_64.rpm 61ea1fe9183dec8a60030e3a63a23c4097cadc355b9c32db083d7d0231d609b1 kernel-rt-debug-core-5.14.0-687.61.1.el9_8.x86_64.rpm 7bc9f0abfbf88f37625e10ade509da46120467246b7440b7e369201cbaf6dc5d kernel-rt-debug-5.14.0-687.61.1.el9_8.x86_64.rpm 9e6c3994dc3efb0649046a9497a5c2edc7864107304158a76138a4296d740ff5 kernel-rt-devel-5.14.0-687.61.1.el9_8.x86_64.rpm 9ef935bd9edfc59e392f36d2332a3db36d59b27b5ff09332dfea7ff6c4c9f93c kernel-rt-debug-devel-5.14.0-687.61.1.el9_8.x86_64.rpm d54cb16bc75dc2b23893bf640763213b6ef68743ffaea3dee78308b6cfd5751c kernel-rt-debug-modules-extra-5.14.0-687.61.1.el9_8.x86_64.rpm e1cec17c6bd459abcc10aa82a72dad9c60112eb0d9b66a719bab80f9ebbbe2bc kernel-rt-debug-modules-5.14.0-687.61.1.el9_8.x86_64.rpm e74060a9dd9ee6ed196ce9565e4b7fff14b27a5f548e4ece0077cbcf1c3a8154 ALSA-2026:A002 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-5.14.0-611.49.2.el9_7.x86_64.rpm 1a5a9954f33cb2594fc6c9d5ecd79e759c2eb66e294d8185dfa5c59dcc35a2ce kernel-rt-devel-5.14.0-611.49.2.el9_7.x86_64.rpm 20c3be5207fbebd5a4266807463a95140aad3a992dae0f5802b789b87894cd43 kernel-rt-debug-core-5.14.0-611.49.2.el9_7.x86_64.rpm 48b417bb7c2a388d69a684d36374836d24b02fbd553a614e174d1e4fce9437d8 kernel-rt-modules-extra-5.14.0-611.49.2.el9_7.x86_64.rpm 4cbcfddc523ed99b282cfa49ad94a10087f2f5c9597dd9d411b617ca9544eed7 kernel-rt-debug-modules-extra-5.14.0-611.49.2.el9_7.x86_64.rpm 55c23e761d82ed77fa4f02c2b2cc36dc2e6557d1834c318588275710c68bbc29 kernel-rt-5.14.0-611.49.2.el9_7.x86_64.rpm 5d80a8e9b479ef7254dfbb60592a6ae991462ed0f784c7ac7fe1ac61066f917c kernel-rt-core-5.14.0-611.49.2.el9_7.x86_64.rpm 60e770527dd692ce4f6860d11e8e1a8d822a9fe5e3a99bc1f16d1b4b0abd76aa kernel-rt-modules-core-5.14.0-611.49.2.el9_7.x86_64.rpm 808288fa89efbe49f91bd5961011d9fa9864f2919071fea9f3c95954562efda1 kernel-rt-modules-5.14.0-611.49.2.el9_7.x86_64.rpm 91bed03cee12532bffaee105a233f0610bea9a8e5deb75e4963ab3cb43035a68 kernel-rt-debug-devel-5.14.0-611.49.2.el9_7.x86_64.rpm 975136f7fed3148e1347bc9c1670a6c0cd4c17413b74bb5ee299a65f0e296df4 kernel-rt-debug-modules-core-5.14.0-611.49.2.el9_7.x86_64.rpm d2fdb202b03083ac515bab9f45959ebe373ce02c1f6aadb4dd6f316c2a524ba5 kernel-rt-debug-modules-5.14.0-611.49.2.el9_7.x86_64.rpm d66393ba01062038a25ad45cb3a00649beb45ac5350e823ac9c87268e669af0e ALSA-2026:A005 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-debug-core-5.14.0-611.54.3.el9_7.x86_64.rpm 0577672fc463d01208bd640b291ad97559a14816c4c330c7ae5485f39c9a9e04 kernel-rt-5.14.0-611.54.3.el9_7.x86_64.rpm 10f843db5c2a2455f6c1e76114fd6ec2390c5e60cfd43369e9d566367f92596c kernel-rt-core-5.14.0-611.54.3.el9_7.x86_64.rpm 15f679f1c0b539d12623d236b9d2f8104deac1e1c2282872e561a138a9f34eb0 kernel-rt-devel-5.14.0-611.54.3.el9_7.x86_64.rpm 1895a54fa641adcb49624ec98e139541cedf8dde540c2a222b5a99c646236fc3 kernel-rt-debug-modules-core-5.14.0-611.54.3.el9_7.x86_64.rpm 1b620529586749a6f1e2f37cb3f116d1fd56fd312bbb8fa77cce540a31faae04 kernel-rt-debug-5.14.0-611.54.3.el9_7.x86_64.rpm 3753f6c4cddf2e78ea52be785fff29a68712ec6269624f3be57c307e266ab4fc kernel-rt-modules-5.14.0-611.54.3.el9_7.x86_64.rpm 3e424f2a966aed0718ef5e82c9fbbd2ffda7ea06df7c9f44ba93635b8681cdcf kernel-rt-modules-extra-5.14.0-611.54.3.el9_7.x86_64.rpm 4403cf102985bef727838a801a759cfd336a8c1355110aa0ba718f62da72fb1d kernel-rt-debug-modules-5.14.0-611.54.3.el9_7.x86_64.rpm 89e314254ae8690422b01ffeef12c6b3d0f55d7664934e3f668b50bc30a01a0b kernel-rt-modules-core-5.14.0-611.54.3.el9_7.x86_64.rpm 935e00866d475d14d0da2c9f6936240573a7617b38ba623c0c05a0459bd6b34c kernel-rt-debug-devel-5.14.0-611.54.3.el9_7.x86_64.rpm c203b35159152a063e434c688fe94834ed7cf21fafb475fb07f027a196aac1b2 kernel-rt-debug-modules-extra-5.14.0-611.54.3.el9_7.x86_64.rpm d24d03cebdc21eadaadf13ea986de30e0e1c8697202d301748cfe46d4c9f8940 ALSA-2026:A009 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300) * kernel: ptrace: require CAP_SYS_PTRACE when task has no mm (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-x86_64-rt-rpms__9_7_default kernel-rt-core-5.14.0-611.54.6.el9_7.x86_64.rpm 4fc39cb5b9d6631cbea4fdc399aa69ec5757c9422ee34549464d1bafa2221a9a kernel-rt-debug-modules-5.14.0-611.54.6.el9_7.x86_64.rpm 4fde86595c47c30a8e94ee7c50bbccecaf58dea0ead7fa67abec0e2ae8a75e5e kernel-rt-5.14.0-611.54.6.el9_7.x86_64.rpm 59e9fa3069054bff3cce831226ceaa90a9403c324e993febad07c58a2252a444 kernel-rt-debug-devel-5.14.0-611.54.6.el9_7.x86_64.rpm 6525a448d4190b18ec6e3eff79b1026074d9833a4d396debb01a1257fc4f90e7 kernel-rt-devel-5.14.0-611.54.6.el9_7.x86_64.rpm 6604037aa58597266cab0552b2f5b8b9b806a9cc6ee521e3c005f150897ba503 kernel-rt-modules-extra-5.14.0-611.54.6.el9_7.x86_64.rpm 839f3d4e41ed90aedf43506b392b04ed599fb4eeefc38896a253e778df2777c7 kernel-rt-debug-modules-core-5.14.0-611.54.6.el9_7.x86_64.rpm a0c5f2df04ed479f74bc966564f29b40cc1e3735cdc622e15b17d9a715374e4f kernel-rt-debug-core-5.14.0-611.54.6.el9_7.x86_64.rpm bb9b07a05c645cb80d2396b74ab24621e94036a2fa71c3242fec5f0d6a8c8094 kernel-rt-debug-5.14.0-611.54.6.el9_7.x86_64.rpm be391b2dc75f510b31a7661fcd0d32122fd0bd02013de61b4f047787b222e229 kernel-rt-debug-modules-extra-5.14.0-611.54.6.el9_7.x86_64.rpm dc6953fe67004a4958ede076a297d8c32fab8928f400237b7ece98e48bdfb1d3 kernel-rt-modules-5.14.0-611.54.6.el9_7.x86_64.rpm e227684727053ae50a04d95acd7ba860d8d4f3ab9b999618abd4b24fa5bae315 kernel-rt-modules-core-5.14.0-611.54.6.el9_7.x86_64.rpm e95d027caffa3fa0daa59b048b76d6d170e40bb1a70c5a800fe02d42489ad71e