ALBA-2026:39332 Copyright 2026 AlmaLinux OS 0 1 None

kernel bug fix and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Bug Fix(es) and Enhancement(s): * XFS data corruption using reflink [almalinux-9.8.z] (JIRA:AlmaLinux-193937) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-modules-5.14.0-687.26.1.el9_8.aarch64.rpm 01f89cd5a42646183852c7b6981a487c784756eee6e6f2007a5a5dcd3629b32d kernel-rt-64k-modules-5.14.0-687.26.1.el9_8.aarch64.rpm 09039f9ee682081c1d4f460f1b86abca1a3adaffbdbd33e8ede81ac5b8b54d70 kernel-rt-debug-modules-core-5.14.0-687.26.1.el9_8.aarch64.rpm 1e9b32ab200b829b6b107230ae81c30697a76d45dbd27bfce718318af5dcbeb4 kernel-rt-64k-modules-core-5.14.0-687.26.1.el9_8.aarch64.rpm 31825b8334d8b0e9964178b83a41b139a9a856d41024b559ed026ee11a9f679d kernel-rt-64k-debug-5.14.0-687.26.1.el9_8.aarch64.rpm 3aaef34ae27197f6d61dbf6d717d5c1cefba6b0ca9e4c0b72e248e8ac7646243 kernel-rt-debug-core-5.14.0-687.26.1.el9_8.aarch64.rpm 4c246385dcf44be7713669900dd583ba893c81174dc399ab9854b43130f605a3 kernel-rt-64k-debug-modules-core-5.14.0-687.26.1.el9_8.aarch64.rpm 5a11cdcfab1d779d9a77adcf87d4d4d9270bc0cd36e3fdb4a783fafc1be94efa kernel-rt-64k-modules-extra-5.14.0-687.26.1.el9_8.aarch64.rpm 5be5d7bc60d1f7e7cf165fa770e4ca533a0b835a139d8eae036c25cfccb08676 kernel-rt-64k-debug-modules-5.14.0-687.26.1.el9_8.aarch64.rpm 5cd7eac397ea4a931b15967db450077c15775fe548fed77ea98a00623771d515 kernel-rt-modules-extra-5.14.0-687.26.1.el9_8.aarch64.rpm 60932140f5d4525c83aff077bd0ee7340092a148e8a854a593c3ffac21daf193 kernel-rt-64k-5.14.0-687.26.1.el9_8.aarch64.rpm 655c3cf87093aada08b49915f3c1bcf36d1526cb0566a365b4bac2467318d147 kernel-rt-debug-modules-extra-5.14.0-687.26.1.el9_8.aarch64.rpm 658af29ccc658ff9ea276db0670c883c811b0a9e53c6544c642c3343e4bb2768 kernel-rt-64k-core-5.14.0-687.26.1.el9_8.aarch64.rpm 7a07abcb00e775c596212e7bfb6bd0134fa455d394fca809c4c5a2122dca2f90 kernel-rt-debug-5.14.0-687.26.1.el9_8.aarch64.rpm 9ca3bda5a4d83efb9d7208c0cc7335d96688d78b6b6e725a5873095232b19336 kernel-rt-devel-5.14.0-687.26.1.el9_8.aarch64.rpm a0c5d43a9cb22f02ee41aaf0e82cef0b598872526a5e462756f83c039e879c8e kernel-rt-64k-debug-devel-5.14.0-687.26.1.el9_8.aarch64.rpm a7ec650b673784f7bf9abd702b600433e4c03bd9cfc298f49e94023f48864b55 kernel-rt-core-5.14.0-687.26.1.el9_8.aarch64.rpm aa0568ba491b5e628e37e900edbf6a21c74e078eb2f3154a39b47ce795694ad7 kernel-rt-debug-devel-5.14.0-687.26.1.el9_8.aarch64.rpm adfc7e6804516ace0e334f5789a705890c4b0ef0900bef4997eb6c7dd14fd811 kernel-rt-64k-debug-modules-extra-5.14.0-687.26.1.el9_8.aarch64.rpm b5c92dffd654ae19d3f37a988a97cf7ccecaa1bbe7b2aa85f7c3795620e76450 kernel-rt-64k-debug-core-5.14.0-687.26.1.el9_8.aarch64.rpm e2f84191ece45a69cf2d2fb3bfd8fe033801885adfb96200ca6496a575110fe5 kernel-rt-64k-devel-5.14.0-687.26.1.el9_8.aarch64.rpm e9f3bdfaa9f12ccaa05dab47848b146e4bf63bbf55cee293c10c97a7a5e50e31 kernel-rt-modules-5.14.0-687.26.1.el9_8.aarch64.rpm ee4c05cca93c829a7e107af4091c72c210bfaf4f9cd9acf99c0069970bf744fc kernel-rt-modules-core-5.14.0-687.26.1.el9_8.aarch64.rpm f1909299fe4a35278a99412d1f4ed73b24e3087b976c16216bc04f6dff53d8bc kernel-rt-5.14.0-687.26.1.el9_8.aarch64.rpm ff44c1c6279385042857cdaf46fdd109135fbec5cec3e05f1630144971fbf5b0 ALSA-2023:2161 Copyright 2023 AlmaLinux OS 0 1 Moderate

fence-agents security and bug fix update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * python-oauthlib: DoS when attacker provides malicious IPV6 URI (CVE-2022-36087) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_2_default fence-agents-lpar-4.10.0-43.el9.noarch.rpm 2f16c7097949ab89b3576a84c88fbfbece6cb9a75f92d469318a0ca4ab6f0fa6 ALSA-2024:0848 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2. Security Fix(es): * dotnet: Denial of Service in SignalR server (CVE-2024-21386) * dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_3_default dotnet-sdk-dbg-8.0-8.0.102-2.el9_3.aarch64.rpm 257f38b613a68866e081f6097151f498b5b858004f6ea16f70fb69804b0a8d6d aspnetcore-runtime-dbg-8.0-8.0.2-2.el9_3.aarch64.rpm 44e48b401c16b50941f3f361f9485e22e0f7ac1b9a56a8a562789176c47b3957 dotnet-runtime-dbg-8.0-8.0.2-2.el9_3.aarch64.rpm 7a10d32de3cb49fc8eaf8319a46aa12cdd1dca76a2626aee5c3ae43b77760409 ALSA-2024:10384 Copyright 2024 AlmaLinux OS 0 1 Important

tuned security update

The tuned packages provide a service that tunes system settings according to a selected profile. Security Fix(es): * tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root (CVE-2024-52336) * tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_5_default tuned-profiles-realtime-2.24.0-2.el9_5.alma.1.noarch.rpm 3da522cd5b375c06df9a4fa8297226b17d3f192806176a2ee4382e169d4c473f ALSA-2024:10791 Copyright 2024 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978) * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979) * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_5_default postgresql-test-rpm-macros-13.18-1.el9_5.noarch.rpm 8e7546673e90d6d2cf20b6956f17bd1e184001032394a5fb82dfcd5ef8e622ee ALSA-2024:1310 Copyright 2024 AlmaLinux OS 0 1 Moderate

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.103 and .NET Runtime 8.0.3. Security Fix(es): * dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_3_default dotnet-sdk-dbg-8.0-8.0.103-2.el9_3.aarch64.rpm 8f269e83b3e45c9b121cdbda176971374047ea65969102c59289f531a6f1e6d1 aspnetcore-runtime-dbg-8.0-8.0.3-2.el9_3.aarch64.rpm a3d845d2dcfa1d5fe2e047e58efa017b352e35363a5b179c047773d6b88e995d dotnet-runtime-dbg-8.0-8.0.3-2.el9_3.aarch64.rpm e292b88d6097d202f047b2fb34bfd6e1491249f76d532bf870129d9d1382b4b4 ALSA-2024:2132 Copyright 2024 AlmaLinux OS 0 1 Moderate

fence-agents security and bug fix update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803) * pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323) * jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_4_default fence-agents-lpar-4.10.0-62.el9.noarch.rpm b25cbd1df0550235a0c3d9b05b49122fa35a297569a1992de3eb623605f11af1 ALSA-2024:2456 Copyright 2024 AlmaLinux OS 0 1 Moderate

grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048) * grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692) * grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_4_default grub2-pc-modules-2.06-77.el9.alma.1.noarch.rpm 1b0e6216aa285ff2b09fde2a5789e456445a8e73d0ed0a93df0949d84fc9139c grub2-ppc64le-modules-2.06-77.el9.alma.1.noarch.rpm b51a8480c154c1fe05f4595e8b04d538ff44ff31387370b6df08131151e08e4e ALSA-2024:2525 Copyright 2024 AlmaLinux OS 0 1 Moderate

mingw-pixman security update

Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fix(es): * pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (CVE-2022-44638) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_4_default mingw32-pixman-0.42.2-3.el9.noarch.rpm 07603021a28859b36aeb48c4aa15c5b96743dca186a9a556f8c044dac95fcd40 mingw64-pixman-0.42.2-3.el9.noarch.rpm c2fbf33dbc77425cba74765e158b8483b31db258b2cb1a90921a590dcad78825 ALSA-2024:2528 Copyright 2024 AlmaLinux OS 0 1 Low

mingw-glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: GVariant offset table entry size is not checked in is_normal() (CVE-2023-29499) * glib: g_variant_byteswap() can take a long time with some non-normal inputs (CVE-2023-32611) * glib: Timeout in fuzz_variant_text (CVE-2023-32636) * glib: GVariant deserialisation does not match spec for non-normal data (CVE-2023-32665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_4_default mingw64-glib2-static-2.78.0-1.el9.noarch.rpm 206020896cc3cf20421ed70865dbd9343ffff98194f87c6476e42df03c6eee2d mingw64-glib2-2.78.0-1.el9.noarch.rpm 839339f8fd55dc4c85f77df9117e90bd5bd6fbff613ab09d91ce207d269b3d10 mingw32-glib2-2.78.0-1.el9.noarch.rpm cff64d89762143bbf988c66a8e8ac3d7ed2220331371a1261ea6f7fd78d3aa8f mingw32-glib2-static-2.78.0-1.el9.noarch.rpm e2fd3c66e44f228a14f348af913e612cef7c65e18358d7dcc0e1f4f74eef3e4c ALSA-2024:2842 Copyright 2024 AlmaLinux OS 0 1 Important

.NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5. Security Fix(es): * dotnet: stack buffer overrun in Double Parse (CVE-2024-30045) * dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_4_default aspnetcore-runtime-dbg-8.0-8.0.5-1.el9_4.aarch64.rpm 2354d80b2243c16b9cb523175ab23f201f5acf433e61ddcfdf4ef77913095b4e dotnet-runtime-dbg-8.0-8.0.5-1.el9_4.aarch64.rpm 6a6744a317dde5d50f6cdb05dcb3cffe334cf525ee10fac2b59a88615e890be7 dotnet-sdk-dbg-8.0-8.0.105-1.el9_4.aarch64.rpm ac816a5e3bf67fe21714576cb9d10941a6cdb469d486b662576091aedc8f6440 ALSA-2024:9401 Copyright 2024 AlmaLinux OS 0 1 Moderate

microcode_ctl security update

The microcode_ctl packages provide microcode updates for Intel and AMD processors. Security Fix(es): * kernel: local privilege escalation on Intel microcode on Intel(R) Xeon(R) (CVE-2023-22655) * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746) * kernel: Local information disclosure in some Intel(R) processors (CVE-2023-38575) * kernel: Possible Denial of Service on Intel(R) Processors (CVE-2023-39368) * kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode (CVE-2023-43490) * intel-microcode: Race conditions in some Intel(R) Processors (CVE-2023-45733) * intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors (CVE-2023-46103) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_4_default microcode_ctl-20240910-1.el9_5.noarch.rpm 8c62be3b9b3b71c9b4cfda517ca9f93f184cb644316a144729859fd6193216a8 ALSA-2025:10379 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759) * kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CVE-2025-21887) * kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004) * kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CVE-2022-49846) * kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CVE-2025-37799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-devel-5.14.0-570.25.1.el9_6.aarch64.rpm 02d7f3667853d090dbfbe6954107f1cecb09c0642e4780fdad60eee2eaad250d kernel-rt-64k-debug-modules-5.14.0-570.25.1.el9_6.aarch64.rpm 06df4d2871d55be4ef1dc58965112d742979e4fbc72ec517fe7fe0621e66ceb3 kernel-rt-64k-modules-core-5.14.0-570.25.1.el9_6.aarch64.rpm 0edfaba56f8a0fb4abe8ec369f32b166ff69d6194f5c1a2593a00de3245a322c kernel-rt-64k-modules-5.14.0-570.25.1.el9_6.aarch64.rpm 19f24f7c365cc6a5893e1c2125b0ffc1b413f538f7358e1e01040b20220245f1 kernel-rt-64k-debug-modules-extra-5.14.0-570.25.1.el9_6.aarch64.rpm 1ca48f36659b34a01dcd6e249d33ffaeaaf6c1143656793901be3013c5d049cf kernel-rt-modules-5.14.0-570.25.1.el9_6.aarch64.rpm 1ef3b2ea2f878ad66eb40cf58481db4779007bbc09b2b4b2261a331c97554c1e kernel-rt-debug-5.14.0-570.25.1.el9_6.aarch64.rpm 237fb91d613bf1e9fee6559dde783454291a7159264c5866a1d5f461113d0a26 kernel-rt-debug-modules-core-5.14.0-570.25.1.el9_6.aarch64.rpm 243b9e82bfb30b9aea377427e6446d49a3184d59e985e9b795edd289eaca1cd7 kernel-rt-core-5.14.0-570.25.1.el9_6.aarch64.rpm 31110e511c9b31a3e2d87e38b01383fff197c92b2eedde816525f037ff252a5c kernel-rt-modules-core-5.14.0-570.25.1.el9_6.aarch64.rpm 382adf66b86f3518d9affde804b482d4bfd6f46c8ba08484fa95192748c11e45 kernel-rt-modules-extra-5.14.0-570.25.1.el9_6.aarch64.rpm 4a97c8732255eee6871b75e22640b9acdaaf939068c8adb1bfe3182af52870bc kernel-rt-64k-debug-5.14.0-570.25.1.el9_6.aarch64.rpm 54ee650ec95e7bbc072aa829031fd6ad8a641d4c69257558de525f3cf9201d24 kernel-rt-64k-5.14.0-570.25.1.el9_6.aarch64.rpm 589c0bf9942b53c66ce36dcd6b7c76e79cc17e19cb9754c2c9faa4747088912d kernel-rt-64k-debug-devel-5.14.0-570.25.1.el9_6.aarch64.rpm 658fc1af6bc810e8a2ec948eb05ba0cc49094155c552e5d71a09ed8af5deda9c kernel-rt-64k-debug-modules-core-5.14.0-570.25.1.el9_6.aarch64.rpm 6c526860204bc476c073d2c58c62d2c8851a64d298ad92004cd031b672588393 kernel-rt-debug-modules-5.14.0-570.25.1.el9_6.aarch64.rpm 6ce9a832263d06966e3417d2f96ad7a4e69b93216b005952715dcf1f14cfe8f5 kernel-rt-64k-debug-core-5.14.0-570.25.1.el9_6.aarch64.rpm 7f6db0a9a8c0a641ce29f732c5191a7426c1540d52e57af14a359058f5194c5c kernel-rt-5.14.0-570.25.1.el9_6.aarch64.rpm 8288b582a26a7b9c865fcd6e3d8071e195f4888c1257534013732fe0b82495c3 kernel-rt-64k-core-5.14.0-570.25.1.el9_6.aarch64.rpm 877ed11fde761a0f0bd235e7ae354b663e701aeaba363bb1f57710d3e54b038a kernel-rt-debug-modules-extra-5.14.0-570.25.1.el9_6.aarch64.rpm 994d5a4111d4c0e11013ba2973a5e2d03b181eb771524a55172145018e5d39c7 kernel-rt-64k-modules-extra-5.14.0-570.25.1.el9_6.aarch64.rpm b93e681f80d117c3a77d9994e622208352d12dccbd8b5a18e8cc19bcd95c3059 kernel-rt-debug-devel-5.14.0-570.25.1.el9_6.aarch64.rpm c76e03f650676f3ab848cc8d4f7f9dabd0f24db30e64160314f0385b7044a035 kernel-rt-debug-core-5.14.0-570.25.1.el9_6.aarch64.rpm d7089271edb4c0d4c03d317aa15791bff1f9bd6047b85e0f0c070e8774e56647 kernel-rt-devel-5.14.0-570.25.1.el9_6.aarch64.rpm fcde640d5d7135286d27cc00e0f6ae518a6e44d97721509243fdb2234b155877 ALSA-2025:10837 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-devel-5.14.0-570.26.1.el9_6.aarch64.rpm 04f0c9218b866ef3703b441df339eaf58d1bb1067edb57614ebe3ec70a0a15a3 kernel-rt-devel-5.14.0-570.26.1.el9_6.aarch64.rpm 117ba7841849214b736c340d15ec15beea03061f5963f576796cec6b207eb1bd kernel-rt-debug-modules-core-5.14.0-570.26.1.el9_6.aarch64.rpm 18b4d8f6a270b58e4d98d59f851fe35b4aea79bcc3998c829dc5a7233f969738 kernel-rt-modules-core-5.14.0-570.26.1.el9_6.aarch64.rpm 1dd2c10eea3a3386cfb2df641db03afdaf29c05f515da57a03ec18c1e8dc751f kernel-rt-core-5.14.0-570.26.1.el9_6.aarch64.rpm 2b08e19937fb75ad80e20f25a376265193910a27433ebc43295c9efb6adfaced kernel-rt-modules-5.14.0-570.26.1.el9_6.aarch64.rpm 2ebab892639830b1ba00c642e9e36bca5d6c1498f094483b6e9d472f4c8c8547 kernel-rt-64k-debug-core-5.14.0-570.26.1.el9_6.aarch64.rpm 3c1a0af089573c69f1460f8cf797bd1d1584126bf16adef046d617c144b5a3be kernel-rt-64k-modules-extra-5.14.0-570.26.1.el9_6.aarch64.rpm 432a97b7f16c3b933ec0223d241ae3cd1c59d95ed197070b4ddec7e286e53e53 kernel-rt-5.14.0-570.26.1.el9_6.aarch64.rpm 466d135731d402e02ff5a6947301f7176ea37f6f3c1a2be9518fdaa35570258a kernel-rt-debug-modules-5.14.0-570.26.1.el9_6.aarch64.rpm 4ecc64a3203d5fa4e664fa4acdb1a510148d72f3744415d9a01da704ea7d863f kernel-rt-debug-5.14.0-570.26.1.el9_6.aarch64.rpm 5b2a8dc1b0b67984bab4321ba0795cc005f8430409b143d1217dbfff249bb4d1 kernel-rt-64k-debug-modules-core-5.14.0-570.26.1.el9_6.aarch64.rpm 68112083b95bf61469cfcf192b9f2e1b1eacddf19ab27a1eba04c9fcee00d5de kernel-rt-64k-debug-modules-5.14.0-570.26.1.el9_6.aarch64.rpm 6a3ac70a755d97fe4a1913ecaac3355897e36341885d9b06aec58870a03c7764 kernel-rt-64k-debug-devel-5.14.0-570.26.1.el9_6.aarch64.rpm 704f685ab51480f1acf620b867ab018728cdc3e908f51e007e569fff2233c420 kernel-rt-debug-core-5.14.0-570.26.1.el9_6.aarch64.rpm 8734ea23635305ce208c2d2ea1c769023c21a8b24c00b1c48688f152cc4834c1 kernel-rt-debug-devel-5.14.0-570.26.1.el9_6.aarch64.rpm 8f434a2928e2b9af428e70188f13d78273f33f2450e29bb65158ed905c810770 kernel-rt-64k-debug-modules-extra-5.14.0-570.26.1.el9_6.aarch64.rpm 94383acd93ed34c3ef00940096de96919c389e19756565c12d88483ce5a79683 kernel-rt-64k-5.14.0-570.26.1.el9_6.aarch64.rpm 9dd32505fe90b14a0c0233c5949bfd4c9105ec8513bda2a8ce810ffeacb2a4eb kernel-rt-64k-core-5.14.0-570.26.1.el9_6.aarch64.rpm b538472c06839f5d9950ebe1a03cd22b382e31eaad0ca7a03f807975359bd0b1 kernel-rt-debug-modules-extra-5.14.0-570.26.1.el9_6.aarch64.rpm b5aa34760652c607b44d36be1d10b46277473dd022ea168290382a57bd2cf946 kernel-rt-64k-debug-5.14.0-570.26.1.el9_6.aarch64.rpm c6929036eeb83e6745f813ffd61d253d1e22006a3d5a551252c0b7a20c09ecd3 kernel-rt-64k-modules-core-5.14.0-570.26.1.el9_6.aarch64.rpm d0911912269843797a7fb6789a52f5977025c907117a96aa88d57f8aae588380 kernel-rt-modules-extra-5.14.0-570.26.1.el9_6.aarch64.rpm d11f6ddda2a8be82d4496f03158784835f035b84db4638416b6fd799b79b1abe kernel-rt-64k-modules-5.14.0-570.26.1.el9_6.aarch64.rpm ec4bab83a6d961085073f95030f8d7611dd7cc5276d0fef403196b635cd5c7a2 ALSA-2025:11411 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002) * kernel: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CVE-2025-38089) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-debug-core-5.14.0-570.28.1.el9_6.aarch64.rpm 0b151eb83a61b644ca4b38f6fb98c13a8a6c690498a63c2ae5eec7798877b6af kernel-rt-64k-modules-core-5.14.0-570.28.1.el9_6.aarch64.rpm 0bf4ac8aa05b8dcd3a2cc9ad07f373fb7a8fc5c54203fc27aaee698505e8b731 kernel-rt-64k-debug-modules-5.14.0-570.28.1.el9_6.aarch64.rpm 1d0fb883aeb9c6b5ff66e1ac3b88a35bba59a25cd424db104f122c5fea271b0b kernel-rt-debug-modules-core-5.14.0-570.28.1.el9_6.aarch64.rpm 2e6933307ce1213c9c941ce3e6fd62fbee3089b17c94d9aca5106d9db35c7d04 kernel-rt-64k-devel-5.14.0-570.28.1.el9_6.aarch64.rpm 46a857c0591799ad607ef99385f630c1cc69f5fc78d8717e72c4ab5e583669da kernel-rt-64k-core-5.14.0-570.28.1.el9_6.aarch64.rpm 4dd188f5bc9240db92c9b60f36894249447d8a8f682425f5b4481014f4cb8a19 kernel-rt-debug-5.14.0-570.28.1.el9_6.aarch64.rpm 51017c687ba1ffd6678b70a6598dea8fb17cc2610abaf392312ea7870201c438 kernel-rt-64k-debug-modules-core-5.14.0-570.28.1.el9_6.aarch64.rpm 55ae9ff29023afcf13d3c5cec77f0a1c0f1bfd93388d0ce9b6829197c243367b kernel-rt-64k-debug-modules-extra-5.14.0-570.28.1.el9_6.aarch64.rpm 5db4c1cd311b94985fcbc39696ec95efca44fe6725d342fbaffc51c93dd588bb kernel-rt-modules-core-5.14.0-570.28.1.el9_6.aarch64.rpm 645cfc4a1c45f812ceff0ef4a7e42b4cae87ea68701f50f2954506933baf3db9 kernel-rt-debug-modules-extra-5.14.0-570.28.1.el9_6.aarch64.rpm 708f87b3524940bd97cb419c27e292bb7626724e1137814bbe1d0cc89099cf75 kernel-rt-64k-debug-devel-5.14.0-570.28.1.el9_6.aarch64.rpm 7ffd31de91af1e2e38d91b1e57391c3c87b0c185cfbdd763d1a620da363713a9 kernel-rt-core-5.14.0-570.28.1.el9_6.aarch64.rpm 92a19a4b1c361329fdf76fac76243adf7ca51c60cb7c03912f81cf8ca0cc64f2 kernel-rt-5.14.0-570.28.1.el9_6.aarch64.rpm a106b7ae5d5083be7e96327a9330b2b4acf2225f55be341a87e4b7965e04a2a4 kernel-rt-64k-modules-extra-5.14.0-570.28.1.el9_6.aarch64.rpm a68aeb4d8497702f2fde1c8fa4524843b0cb56746c00e47cb9db809d787d69f6 kernel-rt-modules-5.14.0-570.28.1.el9_6.aarch64.rpm b2ae6bafba7aad8899ad0eab90386c78f2e7534d9b0118fe6f69e5717369c0bc kernel-rt-debug-modules-5.14.0-570.28.1.el9_6.aarch64.rpm bb322d77689424e51d49421a00a0bb25dc4317e60d51eb58ecab71c7f4b90524 kernel-rt-64k-modules-5.14.0-570.28.1.el9_6.aarch64.rpm bfdc02299d2a9af866e4f2f0ef949a2f1d62a23863a126f9b13c8412fa1332b5 kernel-rt-debug-core-5.14.0-570.28.1.el9_6.aarch64.rpm d83a5ed89de7a5a3530dde61f3d75743df0e8f1cf48dd01888ba7c067f70c738 kernel-rt-devel-5.14.0-570.28.1.el9_6.aarch64.rpm daafd864bbb16a6ea04b9a7a9ee337e3a3671d46606c8aceb3d1af0ffabb6478 kernel-rt-modules-extra-5.14.0-570.28.1.el9_6.aarch64.rpm df61998716780824e9e74080d88d6b572de2d205601ac1ddda36c86a6eddedb1 kernel-rt-debug-devel-5.14.0-570.28.1.el9_6.aarch64.rpm e59fcebe705ace7416cf1c31daadfee7a9e5bffe0a1408b1797f7d74f1964577 kernel-rt-64k-debug-5.14.0-570.28.1.el9_6.aarch64.rpm ef18a844177ab1d19d7f4b7d4bf9a6896afb5a4145be30c71b8778f343e38d9c kernel-rt-64k-5.14.0-570.28.1.el9_6.aarch64.rpm fe074899d83a99cdf28320a999274baddd04641e45277fb9cc1b0852182cbfa0 ALSA-2025:11463 Copyright 2025 AlmaLinux OS 0 1 Moderate

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default fence-agents-lpar-4.10.0-86.el9_6.7.noarch.rpm 18628cafc5ba3d22490a6740d1955aba878c3ddd5ea221d99cf99a815b0aebcb ALSA-2025:11861 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980) * kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905) * kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091) * kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121) * kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113) * kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085) * kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797) * kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958) * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086) * kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-modules-5.14.0-570.30.1.el9_6.aarch64.rpm 08f60afb25898d652c3d2a1c5fbcb21a60b34d12a75c35fcb310d8afd6861f23 kernel-rt-64k-debug-modules-core-5.14.0-570.30.1.el9_6.aarch64.rpm 0b69336d21ad2c9478095feed8a8bef52c45d894ade9c108f5945b7f8dc558d2 kernel-rt-debug-modules-5.14.0-570.30.1.el9_6.aarch64.rpm 2698da8ffbe5930de958699179ed5cfde9855cd4d5a4ceb4c81d5b61be165d24 kernel-rt-64k-core-5.14.0-570.30.1.el9_6.aarch64.rpm 29361d83a07a7bc98043fc71c494fb23ae0c3a32789f77791f6e924188a6ebea kernel-rt-debug-core-5.14.0-570.30.1.el9_6.aarch64.rpm 342876750486544e9e57dbf0d9fdb61a09089fa34366b4de9a71645aee6d7443 kernel-rt-debug-5.14.0-570.30.1.el9_6.aarch64.rpm 34cb6a064432a29a92c2f9f811c801390be9c83bb60a81c2798086f57b59813a kernel-rt-5.14.0-570.30.1.el9_6.aarch64.rpm 4420e01c9e1398d7dbae7fb8b9cdd1d01eda418ac4cb9a51aa6d49729413b9ea kernel-rt-64k-modules-core-5.14.0-570.30.1.el9_6.aarch64.rpm 51ffd5ae6c26a2385b0f891cef4d5cea85677a9c133606a11edff719843809ac kernel-rt-64k-debug-modules-5.14.0-570.30.1.el9_6.aarch64.rpm 5c1758e54182abfa8e5d35cfaadd7bfda7f4dd158962f92c6c5cf71140cfe46c kernel-rt-64k-debug-modules-extra-5.14.0-570.30.1.el9_6.aarch64.rpm 5ed05bbd65a95542936d5c95aa195cd34da79c8979e6e8bb1b47b9e67b3be02f kernel-rt-debug-modules-extra-5.14.0-570.30.1.el9_6.aarch64.rpm 7007de97d3767a38cf47314b7c605264a98024a789fd4a06c4df0a21e5c511a5 kernel-rt-64k-devel-5.14.0-570.30.1.el9_6.aarch64.rpm 72d7996e5064c26526557c4170225c9b2e68d6f9aba6493e017bece8d22cdd81 kernel-rt-64k-modules-extra-5.14.0-570.30.1.el9_6.aarch64.rpm 7313a7fb6039f731e621a1e74237397df5758c66e81f0f1558eb5e61e49f18f0 kernel-rt-64k-debug-5.14.0-570.30.1.el9_6.aarch64.rpm 8d927e0332cb45bb29547068ef4fcde4c5359c850c3b4817fefb76ded2165126 kernel-rt-devel-5.14.0-570.30.1.el9_6.aarch64.rpm aa78680db47fc49e9f924617e430d530cc438593f895a41186a689a55ae63b0e kernel-rt-debug-modules-core-5.14.0-570.30.1.el9_6.aarch64.rpm b7c9ba3c92cf4da9e419b45d3cb1892f097eb9c9778abfd61d0c606b1bf2d254 kernel-rt-debug-devel-5.14.0-570.30.1.el9_6.aarch64.rpm beabf798bb7dee5fc50a8da73f17abc2ba8c01a1a41eb5c6cf742400d46910d5 kernel-rt-core-5.14.0-570.30.1.el9_6.aarch64.rpm c16e34dbbc6626d38228b39fd986fa916d355b1b8f1e14a661724afef0615af3 kernel-rt-64k-modules-5.14.0-570.30.1.el9_6.aarch64.rpm ca2e67a1df4795c0a510e0ecf486d4ce24c648d4c05b582c9c52c63ed6204cc7 kernel-rt-modules-core-5.14.0-570.30.1.el9_6.aarch64.rpm cd89c84fa132bd60f66322e7545b4b39e0ed9df21d08b59710789d05e103b9c5 kernel-rt-modules-extra-5.14.0-570.30.1.el9_6.aarch64.rpm e16c4526a4d6a8ca9cddf7c5cdbe787f5ae5773156d57b0a46fe149bed642f19 kernel-rt-64k-debug-devel-5.14.0-570.30.1.el9_6.aarch64.rpm e466b643adfa0c4116e1186d58937b0eb73167a58aa13ba7ad687195e0a48a64 kernel-rt-64k-5.14.0-570.30.1.el9_6.aarch64.rpm ead419f423baa5cb4f30aa347d8bef5c54aa9b212d3cd7c13368afdfb2ced706 kernel-rt-64k-debug-core-5.14.0-570.30.1.el9_6.aarch64.rpm fcb9852dd7ecaf6e32a25b47ea200caf6bcb2f844b377664f953dd0dc93d3864 ALSA-2025:12746 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727) * kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928) * kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CVE-2025-21929) * kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962) * kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020) * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788) * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890) * kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052) * kernel: net/sched: fix use-after-free in taprio_dev_notifier (CVE-2025-38087) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-devel-5.14.0-570.32.1.el9_6.aarch64.rpm 03b5526bacad54945074c7377891fc06a5266bbd1ec3e45290b16c8b6665887b kernel-rt-debug-modules-core-5.14.0-570.32.1.el9_6.aarch64.rpm 0836800cd041883845a0162cc59f52a415bdf95f217eed2ef845d546f10e289a kernel-rt-5.14.0-570.32.1.el9_6.aarch64.rpm 20b9ef660ce96bab724ffb5985548268f09abc3d61332c5c1063adc310e89dc4 kernel-rt-debug-5.14.0-570.32.1.el9_6.aarch64.rpm 25076d125014de58a99a46367e61599212bf17bd89e4e34c7af8326766aeda48 kernel-rt-64k-modules-5.14.0-570.32.1.el9_6.aarch64.rpm 31d0f827ee1eb11accc789fd20b3aa0b31375933275b7791255f45b70b9825b4 kernel-rt-devel-5.14.0-570.32.1.el9_6.aarch64.rpm 33bcbcb06e86e2034967a2eec4d0dc94316504bce180c03413001c47fc6a0ad7 kernel-rt-64k-5.14.0-570.32.1.el9_6.aarch64.rpm 427406cabf6c2514f5c110bd4512e26f352bb5c8c0fddcb9a408c509dc7bedc4 kernel-rt-64k-debug-devel-5.14.0-570.32.1.el9_6.aarch64.rpm 427ba8be66dc592b2d9d5016dabcee74a29be1e5f6d30de3d95833c0893382e5 kernel-rt-64k-core-5.14.0-570.32.1.el9_6.aarch64.rpm 436aa0b688e6105e732d1b248ab6767e79522c766ad355c31446ea1339817eb7 kernel-rt-64k-modules-extra-5.14.0-570.32.1.el9_6.aarch64.rpm 47abd4a9c250619f30698891f6a46cdbb8bf3b9ade34b8de8c1c210e4bc28678 kernel-rt-modules-extra-5.14.0-570.32.1.el9_6.aarch64.rpm 571aed7d3020f25daa684f649847606b4213bcfdd60e31cca18d58837301c57e kernel-rt-debug-devel-5.14.0-570.32.1.el9_6.aarch64.rpm 70c2db45734610fb2485726d55c93d25b11144b0efde8ab91451a18759a3fcf3 kernel-rt-debug-core-5.14.0-570.32.1.el9_6.aarch64.rpm 7f3a7273c84f560674b4c6db139617ee8cd9e17fee0a45d545f17f0321349b0f kernel-rt-64k-modules-core-5.14.0-570.32.1.el9_6.aarch64.rpm 87b0303617f5f9734774298641f1b0883f8b11bbd280d47a4f70fee3a2cfdb9f kernel-rt-64k-debug-core-5.14.0-570.32.1.el9_6.aarch64.rpm 98ad532a3c5d13e70c03d24b6ade442ceb653a4ad95dbab87a215a9a36f3b309 kernel-rt-64k-debug-5.14.0-570.32.1.el9_6.aarch64.rpm a45ad6b0396ae9403b65413cb63301e41046177e1deb09dfe4a8eb8989bb4e58 kernel-rt-modules-core-5.14.0-570.32.1.el9_6.aarch64.rpm ac44686dbf6e9066b425a0fc60a0a8180d8837b1952241bc72ce399f90c54a89 kernel-rt-core-5.14.0-570.32.1.el9_6.aarch64.rpm b63ace832e2d72776a44202406cc359dddc1c238a3c05575e568254ba64f822f kernel-rt-64k-debug-modules-extra-5.14.0-570.32.1.el9_6.aarch64.rpm b99e1aa0117425ac2b010fcb2eeb8f31388fde8f315a1359876dae0030bc3f69 kernel-rt-debug-modules-extra-5.14.0-570.32.1.el9_6.aarch64.rpm c8d491910f5b7f55eca0e17648513a52bd42c5bfd069fe84d65149d43c8371aa kernel-rt-modules-5.14.0-570.32.1.el9_6.aarch64.rpm dc433beb887695e6ea11bd25b4e69ac026f9f6639d7239e9c0878d8aee6bba8d kernel-rt-debug-modules-5.14.0-570.32.1.el9_6.aarch64.rpm e31c3aa3c9d112a4a37b8a7bce503ff364a4e0278dee8b78130816c1f4283b96 kernel-rt-64k-debug-modules-core-5.14.0-570.32.1.el9_6.aarch64.rpm eb576e2d2fbfaacbc8cb63dc47d920c3985748186984c851ddd3c3493b5c90a2 kernel-rt-64k-debug-modules-5.14.0-570.32.1.el9_6.aarch64.rpm ee4596eeb98d3b23870edc06829424085cdea0dd36e7f95b69667e190e0a5ae4 ALSA-2025:13602 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079) The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079) * kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-debug-modules-5.14.0-570.33.2.el9_6.aarch64.rpm 07b2c9a6e15ecc4768ee624fd061ae5544f1eda3706100d7f897e925e4b57e23 kernel-rt-debug-modules-5.14.0-570.33.2.el9_6.aarch64.rpm 110224bf401e5bdb4806af324590501e11a3610f77eb8e998052780b4d86dd87 kernel-rt-modules-extra-5.14.0-570.33.2.el9_6.aarch64.rpm 1b0f137b3d41b9e1ef368d7338824cabceaf7c79f4fc5a790333e0658ea92d88 kernel-rt-modules-core-5.14.0-570.33.2.el9_6.aarch64.rpm 206e5df8ecaccfeeb2d127d091914016b4dc03204358b8b6b0b314ada79473a7 kernel-rt-devel-5.14.0-570.33.2.el9_6.aarch64.rpm 24cde367ce16d1767c0821aa2c9142f704091fc9468304002993f77ef168acd6 kernel-rt-debug-modules-extra-5.14.0-570.33.2.el9_6.aarch64.rpm 3026b8305622f37fde3876a09096197dc56fc254d675209dfd814bd3f2d1f936 kernel-rt-debug-devel-5.14.0-570.33.2.el9_6.aarch64.rpm 34fcec7c495b41ebe16896af6211d901e4615d5604cad013c4caad40d975af98 kernel-rt-64k-core-5.14.0-570.33.2.el9_6.aarch64.rpm 4fb5990320085cf2e8c218b6c3a7c21ce4bc723f8a940d24e9a3cd27519d8e6d kernel-rt-64k-debug-modules-extra-5.14.0-570.33.2.el9_6.aarch64.rpm 576938e4f983aa66b060e2c274d8aa8548f5474bf005a26290c0b69941af571d kernel-rt-64k-debug-modules-core-5.14.0-570.33.2.el9_6.aarch64.rpm 59fe9ed5c2edc8abe0515b858a8d7c042bca724995e38238d8e73590b9e67f96 kernel-rt-64k-modules-core-5.14.0-570.33.2.el9_6.aarch64.rpm 68599b9a40eb3dcfa1b696fa71b027b80007557720dfab88a87f4b97e784539e kernel-rt-64k-modules-extra-5.14.0-570.33.2.el9_6.aarch64.rpm 6d9095f166ab7365be86f2e4008c7fa11e1fea818826b04b6bc3319bfca5c7ed kernel-rt-64k-debug-core-5.14.0-570.33.2.el9_6.aarch64.rpm 8a56091ae8723a0d8653154356f9b9156743aba19a6ceae1f0ccca0dcf9a1677 kernel-rt-64k-devel-5.14.0-570.33.2.el9_6.aarch64.rpm afe65b3a4af19305e40f4a477b497a6bc2d109b3bccac21a5571271ac1ff0d91 kernel-rt-64k-debug-devel-5.14.0-570.33.2.el9_6.aarch64.rpm b50844a0663c03fdbd95f39132718902cac5e49817343f924e63c7966ebb4bbd kernel-rt-64k-modules-5.14.0-570.33.2.el9_6.aarch64.rpm b6cd3b7aacfbda9dadcf55b5e7a7780e6d01c2476e1d368708cf27e416fd60f7 kernel-rt-modules-5.14.0-570.33.2.el9_6.aarch64.rpm b7b5988d6caff945b624d653de12654b7e38498491c154a76a406c1a31e9c6b8 kernel-rt-debug-modules-core-5.14.0-570.33.2.el9_6.aarch64.rpm b7c8a62e4de09b357bac9354e1f1e5db1806b37c8eb5d8fd53ca9a20d1d199b0 kernel-rt-5.14.0-570.33.2.el9_6.aarch64.rpm d602aa5d4eef7cc2e5a331d7aca57fe8be6c82a7920d59601c88b233933d4ad7 kernel-rt-debug-5.14.0-570.33.2.el9_6.aarch64.rpm d8592234da6f2c49dd643640544d5010841ee661a800b338d9a5cacfbaa9ec73 kernel-rt-64k-debug-5.14.0-570.33.2.el9_6.aarch64.rpm e6c70149485ff4942c12dfbcf2ebb09f470c0723239eeb5a2cdd0a524124e975 kernel-rt-core-5.14.0-570.33.2.el9_6.aarch64.rpm f2bb4cc7c981e11acceb4e4070053753f75ec258527fc072a1368dec8eccf9cb kernel-rt-64k-5.14.0-570.33.2.el9_6.aarch64.rpm f7169437ccc16bfaa95f3dff519c281cf0b4ab6741aaf914e7d3ce192429dd49 kernel-rt-debug-core-5.14.0-570.33.2.el9_6.aarch64.rpm f800258f395e09e0c46bbcf709e2f0b8a8f1f4199519fcfa981559bc672f5f09 ALSA-2025:13962 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (CVE-2025-21867) * microcode_ctl: From CVEorg collector (CVE-2024-28956) * kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084) * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085) * kernel: net: fix udp gso skb_segment after pull from frag_list (CVE-2025-38124) * kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159) * kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250) * kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380) * kernel: tls: always refresh the queue when reading sock (CVE-2025-38471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-debug-devel-5.14.0-570.35.1.el9_6.aarch64.rpm 00474c732010c3cd4d5edb9a2e248a12dd719ac22419ff6aceabc4e75b009b79 kernel-rt-debug-modules-5.14.0-570.35.1.el9_6.aarch64.rpm 051a9eeb4083697f0048101fbefedc553b0266412ef5d1569e3d38de40647e0a kernel-rt-64k-modules-5.14.0-570.35.1.el9_6.aarch64.rpm 0a686811013a2befa41431cd11e51a6051340dfbbaab0912cd7341322bba66da kernel-rt-64k-5.14.0-570.35.1.el9_6.aarch64.rpm 282c5e4209cc8e051719c971954c764ba49004f1b3ad041e41ae133ebcd4f2e1 kernel-rt-modules-5.14.0-570.35.1.el9_6.aarch64.rpm 29ae60029a5f556deccd1b44a097e348013c8cba1158e3227285be3c267166cb kernel-rt-64k-core-5.14.0-570.35.1.el9_6.aarch64.rpm 4e27d85cdad75d9d6b8bbc724944db6f83c1eb7e61038e86f187342040c3af1e kernel-rt-64k-devel-5.14.0-570.35.1.el9_6.aarch64.rpm 5395b03ee433b84f03c6b33ec379ff872cf80cfb881f7c0d94ddb344f2cfff06 kernel-rt-debug-5.14.0-570.35.1.el9_6.aarch64.rpm 5ce820e3d122512740809423c292ac24c14801c46f284bcbbdec266e2c7d2f96 kernel-rt-devel-5.14.0-570.35.1.el9_6.aarch64.rpm 6c22135ae4949e2779f316741a11f83a4d12cc0e16931e5b36eb997af58a81b8 kernel-rt-modules-extra-5.14.0-570.35.1.el9_6.aarch64.rpm 86583640990788c7f31b53c65f6b7f9f40cb8eeffd47c2ac503bd421a190e828 kernel-rt-debug-devel-5.14.0-570.35.1.el9_6.aarch64.rpm 8f8bf523b95d39b9c415b5cdf8a6d6e8f7ca14b1c52f00aeb8b4f0382c8ad65b kernel-rt-64k-debug-core-5.14.0-570.35.1.el9_6.aarch64.rpm b2992fb8e5460fbfcec3f0a1b1a21850bcf08a83b562a3fb0624b25f081cf41e kernel-rt-64k-modules-extra-5.14.0-570.35.1.el9_6.aarch64.rpm b685fc5d511ba0a11de2354d118c4b246cf1585de18181142824b4193cfbae7f kernel-rt-core-5.14.0-570.35.1.el9_6.aarch64.rpm ba64164c4b2e725cb12681f9c79c5eacd8e5449f9e9e9df77987693839f1609d kernel-rt-64k-debug-5.14.0-570.35.1.el9_6.aarch64.rpm be0db728648de794f1c8f053b8d45031cdc74f67bb7eda1e974b5cee6f93e2e2 kernel-rt-64k-debug-modules-extra-5.14.0-570.35.1.el9_6.aarch64.rpm c1bbf39f2c90e607daa38241fac7cca7400567e267741997e268024822eccd8e kernel-rt-debug-modules-core-5.14.0-570.35.1.el9_6.aarch64.rpm c1de24fa6cebb62957abcd43841b96e805e5564723847318fd74fa66850a7a00 kernel-rt-64k-debug-modules-5.14.0-570.35.1.el9_6.aarch64.rpm ca5dc4b16e6614cadff470991f3995b050b89cca1a65ec19a6e12aed52d4185c kernel-rt-debug-modules-extra-5.14.0-570.35.1.el9_6.aarch64.rpm d0954fd91d517ad0850a7733eaf9c0633921098c1bef9faccac3d4d58c68d7df kernel-rt-5.14.0-570.35.1.el9_6.aarch64.rpm d3117b3be3f4a8b3071548d1a9e5e8dbab93cfd6e6b4617e6fd1e7af91e307c6 kernel-rt-debug-core-5.14.0-570.35.1.el9_6.aarch64.rpm e5687362b4f54033b33d3db49c79b6cf8d351be4b1ab0d78abc68957900e86a2 kernel-rt-64k-debug-modules-core-5.14.0-570.35.1.el9_6.aarch64.rpm f6201db306558c4f53e0e371e8ff1667780534f43c60ae63aab5ad4d86ea8b98 kernel-rt-modules-core-5.14.0-570.35.1.el9_6.aarch64.rpm f97991c59c89cfb05b696a0c7629a504ea8247a622f205a2277e8e4e80fe21a9 kernel-rt-64k-modules-core-5.14.0-570.35.1.el9_6.aarch64.rpm fd0c25771870c72a7bba3e74d03b47ebf3c3de973b9e65b0aec1591d38415332 ALSA-2025:14420 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Fix memory accounting leak. (CVE-2025-22058) * kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914) * kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-debug-modules-core-5.14.0-570.37.1.el9_6.aarch64.rpm 0d5a4f868fa78f157e138408b75bdff84adf18ed64264b9423385d0640a53712 kernel-rt-devel-5.14.0-570.37.1.el9_6.aarch64.rpm 11434ffa7bf327792efb4e7fa9158962b82fb0dcaddd9e2b7adfa9f0855bcc9e kernel-rt-64k-modules-5.14.0-570.37.1.el9_6.aarch64.rpm 1186d1592fa0ad04cc515eaa78324a242613d1ae6e693ed298ccf5e42882fa24 kernel-rt-core-5.14.0-570.37.1.el9_6.aarch64.rpm 17052bace2680afe34d2954687335f343895dd476ea514bed6717448e152a93e kernel-rt-64k-debug-modules-extra-5.14.0-570.37.1.el9_6.aarch64.rpm 1c6e5b57148d4bf11f108c683625d1937b45833a71778014ad02f26f2a878944 kernel-rt-debug-modules-extra-5.14.0-570.37.1.el9_6.aarch64.rpm 2a76da076b52f5ea748cd4ce506269920c81282569f29e6c9f752752ea9d0a5e kernel-rt-64k-debug-modules-core-5.14.0-570.37.1.el9_6.aarch64.rpm 2bdaec55306c647014a33015146df2180ea2b1921aafea374aa64904eaeba797 kernel-rt-64k-debug-modules-5.14.0-570.37.1.el9_6.aarch64.rpm 2e18a6ea31bad877e91e557385452ceb02592dab5987a64d1d6a4e0869332ea9 kernel-rt-64k-debug-devel-5.14.0-570.37.1.el9_6.aarch64.rpm 2f4adbb4fa025dd64770ddb5cdd1ae703d91f5b6a85cf70dd79e026a3d58f47c kernel-rt-64k-devel-5.14.0-570.37.1.el9_6.aarch64.rpm 551a40fad84fc5220c3f0f46adf9b3f005b05bf7a655e08d5280e58d19dc4e8a kernel-rt-debug-modules-5.14.0-570.37.1.el9_6.aarch64.rpm 69bd3d2615e2a1228f4125c0c9f81cfdf29253fcbfe403e83033278aa973ca7e kernel-rt-64k-debug-5.14.0-570.37.1.el9_6.aarch64.rpm 7830b55533a97442be6c9e94641a47c14d786068ca233a0f90020ce60fc377d0 kernel-rt-64k-modules-extra-5.14.0-570.37.1.el9_6.aarch64.rpm 89e1f857278197c39bb805e1eb6a7126843044498f662275a0e1b8046e2ddbff kernel-rt-debug-devel-5.14.0-570.37.1.el9_6.aarch64.rpm 8a3190c67bf0181aaba7218777cfb307603903ffe5c866cda7755d801fc819b7 kernel-rt-64k-modules-core-5.14.0-570.37.1.el9_6.aarch64.rpm 8cfaa0fdec39adacc22b084a8e0dbc415999ef83618947e43a47a29cf3313975 kernel-rt-modules-core-5.14.0-570.37.1.el9_6.aarch64.rpm a46a7821a9aedefad7ff57cc76b0ab6ee92cf60725752d37789065392413ccb0 kernel-rt-modules-extra-5.14.0-570.37.1.el9_6.aarch64.rpm a4cca05a3c550b782baf35d204b1cec1cf5e5ee08593bdb8bba6d51f13aab48c kernel-rt-modules-5.14.0-570.37.1.el9_6.aarch64.rpm b8bcbf3e5b37b20993afd867003d76252e5d16399c39ff1970027935b796b4cb kernel-rt-64k-debug-core-5.14.0-570.37.1.el9_6.aarch64.rpm c51bf497191304b11094d7f3b889be249d376ead3b863da3e8458d1590671394 kernel-rt-debug-5.14.0-570.37.1.el9_6.aarch64.rpm c5500a0192a0a251160f644a0f0cb6c423fb53101f0ef41acc1f776ee4176aaa kernel-rt-64k-core-5.14.0-570.37.1.el9_6.aarch64.rpm c7d2b0ad5b513cd8d9a3485063bf2e1093f3b40983da307c433d5961f810f202 kernel-rt-5.14.0-570.37.1.el9_6.aarch64.rpm cb46595cf24732982c93360d904194db19082dd3f5366abc89c27a5868fdc42b kernel-rt-debug-core-5.14.0-570.37.1.el9_6.aarch64.rpm d62a0a69dfe549d4ea5e780b1bf331b611f710b68ceb496fca4b344de6d69b1b kernel-rt-64k-5.14.0-570.37.1.el9_6.aarch64.rpm f590848fa6c1d40b8332074019b6a79af588a6b0b8973db93c6003dcfaec1f8f ALSA-2025:15011 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823) * kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200) * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211) * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350) * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464) * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461) * kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-core-5.14.0-570.39.1.el9_6.aarch64.rpm 140c54637288bc1c520bde1a9a89e93fdf47ba2e5b2576fd6d78f5159bc61df9 kernel-rt-64k-debug-devel-5.14.0-570.39.1.el9_6.aarch64.rpm 1491f7a40b49165c9481c6c889ecda4a08b5c74cde19b591281c6810bed2e1d7 kernel-rt-64k-modules-core-5.14.0-570.39.1.el9_6.aarch64.rpm 26e6218d023e9ee06c562f7fb1254bbbbf55e7bdd9ac10718985c61b18ae326a kernel-rt-debug-5.14.0-570.39.1.el9_6.aarch64.rpm 281d72c7f216753b56c55870b844ad8478c914fad11ce7720b45998be0a0a18d kernel-rt-core-5.14.0-570.39.1.el9_6.aarch64.rpm 31027f3a533b75ef0498bb14f511664c026ca4a851d29f65f0b7ccab0555e216 kernel-rt-debug-modules-extra-5.14.0-570.39.1.el9_6.aarch64.rpm 3163452545d66b4ab724095ed72a06889a07023badeb10b07cfbcc8d0800929b kernel-rt-64k-debug-5.14.0-570.39.1.el9_6.aarch64.rpm 3d4488ece9f400dee27af9a70b0259401e223eee2674a5cfa68246a2963b7c29 kernel-rt-debug-modules-5.14.0-570.39.1.el9_6.aarch64.rpm 42dc523e36b773b70fc6d56767bd1bcac261db3c9d3082e933febc2bf5ea4410 kernel-rt-64k-debug-modules-core-5.14.0-570.39.1.el9_6.aarch64.rpm 45a66b48bd335ef7ad23c76e303859e0c462a5fe2155db1dfca0eeb465b7c09b kernel-rt-debug-core-5.14.0-570.39.1.el9_6.aarch64.rpm 557141ef09487b953adcc3d468179f2579656121c1f0798a80a72cddcada790e kernel-rt-64k-devel-5.14.0-570.39.1.el9_6.aarch64.rpm 5d2066f0ccc6c2b7311ad8138c2494ed402b4972437c8726c88be2bc67d362b2 kernel-rt-64k-debug-modules-extra-5.14.0-570.39.1.el9_6.aarch64.rpm 71de9b6e3980275d755f7330316d3c6d6f5b9149772c4340669fb8abd9124098 kernel-rt-64k-5.14.0-570.39.1.el9_6.aarch64.rpm 85e164b46e44a8c8712a30fe991b13dfa1d2530fb146df04336ab26eaa963e0d kernel-rt-modules-extra-5.14.0-570.39.1.el9_6.aarch64.rpm 8752c40ab4dec5cad35350efcc7aeaf43f87654fd236d0c35cee67936016a9ce kernel-rt-modules-5.14.0-570.39.1.el9_6.aarch64.rpm a32d869502841177e6e78c012322cd28e68dd548e25f679e2c67e8bbcf8f8257 kernel-rt-modules-core-5.14.0-570.39.1.el9_6.aarch64.rpm b0900ba27c7da5b176d783db68818be9084e3c9cd9591f9de015f6aeba9eebf4 kernel-rt-devel-5.14.0-570.39.1.el9_6.aarch64.rpm c0290872fed8df1c01fe54251c1c66a25cd5e5c301f571e49171b6e207a2a58c kernel-rt-64k-modules-extra-5.14.0-570.39.1.el9_6.aarch64.rpm c230e49ddf50bb2fc89abef612b78042402fd8ee8590a7fc60a561f32b6dcfac kernel-rt-debug-devel-5.14.0-570.39.1.el9_6.aarch64.rpm d1b7766dfd788629bcf5059259d6dd06ae031ffbb39dcd2774988f223d73f658 kernel-rt-5.14.0-570.39.1.el9_6.aarch64.rpm d341971ebe738e4a105c21de31e1380027f84cc1aa4c843602865691e836f354 kernel-rt-64k-modules-5.14.0-570.39.1.el9_6.aarch64.rpm e322b427d6b005db3ac11f5e8e7b271b96f9250bb7c87cc773985f3e64ea29b5 kernel-rt-debug-modules-core-5.14.0-570.39.1.el9_6.aarch64.rpm f25f0a3908dcab5e20cd6b1e2e34afb68f1c4323d26715bfe75f1977df29edff kernel-rt-64k-debug-core-5.14.0-570.39.1.el9_6.aarch64.rpm fee44180f2d7736feb005d70747347a1f2e527dba5224e3bdee34965c5aa741d kernel-rt-64k-debug-modules-5.14.0-570.39.1.el9_6.aarch64.rpm ff6fbd1d3b9e09d0d6bb424466b40da69a8b43b28825b3eca1380d09cb891fc1 ALSA-2025:15429 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udmabuf: fix a buf size overflow issue during udmabuf creation (CVE-2025-37803) * kernel: idpf: convert control queue mutex to a spinlock (CVE-2025-38392) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-core-5.14.0-570.41.1.el9_6.aarch64.rpm 2183b814117ccd1a48b6cf93febb0a4446c647dc51e4ff9a9b8b5166a3a23662 kernel-rt-modules-core-5.14.0-570.41.1.el9_6.aarch64.rpm 227818f27419d00df69492df31bd4e9902298c46507380452ae2b1b37538cf9d kernel-rt-64k-modules-5.14.0-570.41.1.el9_6.aarch64.rpm 269fe34896a1cb65da0f23f3d9c12af7823b93083b79a317b0601e607cd1bf2e kernel-rt-64k-devel-5.14.0-570.41.1.el9_6.aarch64.rpm 2bd0469e57db70ac8046139d8d72f4f1aee1fcddeccbe6bc1ff9d9f164ff8e16 kernel-rt-64k-debug-devel-5.14.0-570.41.1.el9_6.aarch64.rpm 31408cfae5d21a6160909ee27a5cc395a9e7900f761e5cd05e3bcdb81df8c0b9 kernel-rt-64k-modules-core-5.14.0-570.41.1.el9_6.aarch64.rpm 33a6fead82c723ac4655394c04ca653a9a5e728bad7578eae8bf3547521c0fdd kernel-rt-debug-5.14.0-570.41.1.el9_6.aarch64.rpm 3f2c64b572b6a86ed09994e0171a4c9152ec7dd2531a4ebce2e6d4220d00d4fc kernel-rt-debug-modules-5.14.0-570.41.1.el9_6.aarch64.rpm 4d50878f01eb58750b5724e4b38749ad361ff0e7e0bf1a2023821d67a6696ec8 kernel-rt-64k-5.14.0-570.41.1.el9_6.aarch64.rpm 4fec9939e52c4c5c1987766bb46ba4877bfee22ab1f439b12058b454c6ef315d kernel-rt-debug-modules-core-5.14.0-570.41.1.el9_6.aarch64.rpm 6dbc56fc12c32ea3a6cb2556c7a711ee50bd65751fae0ed92d23a009fc104b87 kernel-rt-64k-modules-extra-5.14.0-570.41.1.el9_6.aarch64.rpm 76bb950d9be15625fd01083d6c9f781ecdc2c8e3552d716ce2015e4a1a6c8bcf kernel-rt-64k-debug-modules-core-5.14.0-570.41.1.el9_6.aarch64.rpm 76e5fdf2777632cb8a5853fafef14997faf1a81865837a53b4cca8b714bf0dd9 kernel-rt-5.14.0-570.41.1.el9_6.aarch64.rpm 7ae322beb6abf7e02a6e4006d8a3ee1f455545bd072575c019c63cb98002a569 kernel-rt-64k-debug-5.14.0-570.41.1.el9_6.aarch64.rpm 86ff14803173e3604bda47497fb1959d920a018c6057f79b16bab72c3c859b92 kernel-rt-64k-debug-modules-5.14.0-570.41.1.el9_6.aarch64.rpm 8809052e095a9ad4714d8740bf427b9902476de13063dc0677e6dca3f04d8611 kernel-rt-debug-devel-5.14.0-570.41.1.el9_6.aarch64.rpm 8c57137d69322be20f64a7a99bff3176a228661319a76eac5d6b87c0ed1a5a2e kernel-rt-64k-debug-core-5.14.0-570.41.1.el9_6.aarch64.rpm 98f4e3daf5fd8f5059fc17a78ec6bf549cbf93fed13aee6a3012855908a9885f kernel-rt-modules-5.14.0-570.41.1.el9_6.aarch64.rpm a86ec38a988915000ed0718371a0e28cb9a65d5dec667617cd60d71845a10ef2 kernel-rt-64k-core-5.14.0-570.41.1.el9_6.aarch64.rpm a9c226c672978b07ed6f3f4a3b495c5b7c9439fdcd026ff8ed33dc626e6d31db kernel-rt-debug-core-5.14.0-570.41.1.el9_6.aarch64.rpm b75a4bb84587ec2ff023911b026b28247bb41059663cec0ced94511ac4b79a4b kernel-rt-debug-modules-extra-5.14.0-570.41.1.el9_6.aarch64.rpm c5fd19f8fe4f9e0a3f708617033815e42f837858b561fa05f0d181e1bb491030 kernel-rt-modules-extra-5.14.0-570.41.1.el9_6.aarch64.rpm d84043a0083c1e560d8b64ae14441d7e2893ae05f49ff5fe986f48dd6f71cd75 kernel-rt-devel-5.14.0-570.41.1.el9_6.aarch64.rpm eb88a499df4ed8ff8b08e7758f28da6c6cf91e1b466ce1858c1ff2124a9d033c kernel-rt-64k-debug-modules-extra-5.14.0-570.41.1.el9_6.aarch64.rpm f9e81c77c6c5b19b714ceaf7ab1e6eefb6cb96c98e70a4b7cde1aa9b43530d10 ALSA-2025:15661 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097) * kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332) * kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352) * kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-debug-modules-core-5.14.0-570.42.2.el9_6.aarch64.rpm 08fc6b5a6b7fcdac4ccde0a8b75c9f9a8c41f7e5a2ce43dbe9d6ebc42c156279 kernel-rt-64k-debug-5.14.0-570.42.2.el9_6.aarch64.rpm 1b88e24bb3db268f7eab2a234ce028e12e0274ddd792fdc552384edb72e97ddc kernel-rt-debug-modules-5.14.0-570.42.2.el9_6.aarch64.rpm 53b461d0b0e2f5c9219d9376bd869d63f3df00fe58ecaec22f532292b7dad6eb kernel-rt-devel-5.14.0-570.42.2.el9_6.aarch64.rpm 5dd4c775ff2b3be04befd49bfadafd59391e5464e47a8c28b2fbf19e7f4409d7 kernel-rt-64k-debug-core-5.14.0-570.42.2.el9_6.aarch64.rpm 65e4e1b13c3eca2522492987e5398239e8beef598e840a23cf8045541e008b39 kernel-rt-debug-devel-5.14.0-570.42.2.el9_6.aarch64.rpm 69807d4bd5fcf750d84fa5b26b86c6148c9224db0d9d6a8a41bfd7f0b391766b kernel-rt-64k-debug-modules-5.14.0-570.42.2.el9_6.aarch64.rpm 6b094fafd9552fb686c3bed3b19c608a34c0659a8e8421c086f1aac071f56088 kernel-rt-64k-core-5.14.0-570.42.2.el9_6.aarch64.rpm 6d070459f565497a122a84ef7992416306a01a6069d4bd6e89e5ce4c5cc6c8f9 kernel-rt-modules-5.14.0-570.42.2.el9_6.aarch64.rpm 785aa08aabbf8dbb59ec5cc3e7a76985ee5b32104b795988dce49f43257d3c36 kernel-rt-64k-modules-extra-5.14.0-570.42.2.el9_6.aarch64.rpm 796aa5726ba90c00ec4b7c5ccef45eb8861f4c1c4e9ca350562147b862dfa6de kernel-rt-core-5.14.0-570.42.2.el9_6.aarch64.rpm 796b6fcaa15981ad6a61bdb2d3af6e4c1ec3c86103d36fa878b97cb746aa89af kernel-rt-modules-core-5.14.0-570.42.2.el9_6.aarch64.rpm 7b79717348ece8b6bf634115baa14d535975a5c61284541d98d140243570fd5e kernel-rt-debug-core-5.14.0-570.42.2.el9_6.aarch64.rpm 82e9091d834bb8e368ea421210043be0a78c938e13b92ef676489b2cfbb28fc8 kernel-rt-64k-debug-devel-5.14.0-570.42.2.el9_6.aarch64.rpm 8fc3dc03d4f95166c6d6d9a51acfb2e1c7ebd182973c5282a5ef52e2af682b27 kernel-rt-64k-modules-5.14.0-570.42.2.el9_6.aarch64.rpm 91847a739ebeba24f36a88b4e1f980bec278eb72397e4f9fc09aa196a2bef0be kernel-rt-debug-5.14.0-570.42.2.el9_6.aarch64.rpm 9293356e9ac066b7374021945d3512301e529762244104edbf39b8557f3d4d5f kernel-rt-modules-extra-5.14.0-570.42.2.el9_6.aarch64.rpm a4f25b351d38d77dfbfaf81c731a5543d8c603af47fc6f08a7517cc34b80e615 kernel-rt-64k-debug-modules-extra-5.14.0-570.42.2.el9_6.aarch64.rpm afadea35f72165c009f1dd1d01572d85859157a33eda3610254a85fadc1427da kernel-rt-debug-modules-core-5.14.0-570.42.2.el9_6.aarch64.rpm b699817778824afcaffb24ca09be92659c49a0fd169209e144bb765308fb5331 kernel-rt-64k-5.14.0-570.42.2.el9_6.aarch64.rpm ba6ef9d8e0d1db417478239773df573d7cc7f85a505a3b28a7ebd13ab887e198 kernel-rt-64k-devel-5.14.0-570.42.2.el9_6.aarch64.rpm bf81e89f45b456a4f9286d863fea190fb5fc7568f7b19a37efbdcbd1bd2b61d9 kernel-rt-64k-modules-core-5.14.0-570.42.2.el9_6.aarch64.rpm c0cb3fb7e6ace308bd52451185addb0f13d35f7af1836a475fee25078a145898 kernel-rt-5.14.0-570.42.2.el9_6.aarch64.rpm c968433ed70c90affb5969b5d70c86f59231d36d4b71e0d40b02270367e5e777 kernel-rt-debug-modules-extra-5.14.0-570.42.2.el9_6.aarch64.rpm d1af62a8e962a5c54f8cec41cb5abf15dfb5de081fb3d9ff5a2245815b48d81a ALSA-2025:15740 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (CVE-2025-38550) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-debug-core-5.14.0-570.44.1.el9_6.aarch64.rpm 0d3b09e341af3d2ed46a16fce41df4e1cf64195d379f31f6e677cb54c5ca1994 kernel-rt-modules-5.14.0-570.44.1.el9_6.aarch64.rpm 0f88f8a505d3dcaccc9e4e32aaeb949fac87ed6b78a6e649e0715e5175176e4e kernel-rt-64k-modules-5.14.0-570.44.1.el9_6.aarch64.rpm 2d3d848b5c6f1b0fc0655e0bb14028c3f08b226ce0c09053acb591c905371ce5 kernel-rt-modules-core-5.14.0-570.44.1.el9_6.aarch64.rpm 32da59358e854ea9ab6262a26000481415a1631eb496ae2c198963c856138c80 kernel-rt-64k-modules-core-5.14.0-570.44.1.el9_6.aarch64.rpm 3ff6ce6abad507ebf7327b23df5fe0f3f3dc9194f8b45887ce5e0bf517edaa13 kernel-rt-debug-modules-extra-5.14.0-570.44.1.el9_6.aarch64.rpm 472fbbf03167f3be2653678c18c1c6f91f9b9e0568dcf69c3f3f77273edfff30 kernel-rt-64k-5.14.0-570.44.1.el9_6.aarch64.rpm 4ee5cb1d0b81f6726603b6ba7005280a37a9f1437c9f045aa0660601cdaf7ad5 kernel-rt-64k-modules-extra-5.14.0-570.44.1.el9_6.aarch64.rpm 547bd7b4794b285887d5604d130d7c6bdddda316989e6e03c9bd64f5c5e4986c kernel-rt-debug-5.14.0-570.44.1.el9_6.aarch64.rpm 55dab82c2c8c20e2cf710c49aecf1232b6fae3bed06914d107e39bafd6e286e5 kernel-rt-core-5.14.0-570.44.1.el9_6.aarch64.rpm 5dc3dd1f200d5b150f023c4168f240014b1f6ec71e94cc2923f61cafe09a71b9 kernel-rt-debug-core-5.14.0-570.44.1.el9_6.aarch64.rpm 666f497f6d5ea14022f2c214144803f135314cf54468db96516c450b35acb10c kernel-rt-debug-devel-5.14.0-570.44.1.el9_6.aarch64.rpm 69ee65a7609c1d8abce0763935e19343a0313b605a2aefa088bc63f1b6216e46 kernel-rt-64k-debug-devel-5.14.0-570.44.1.el9_6.aarch64.rpm 6cb0da365ccfe55568d4939fc537e8c33f2288205ea947afda89197d21a4403e kernel-rt-64k-devel-5.14.0-570.44.1.el9_6.aarch64.rpm 7a671cfe27c795d7d7efad1d972c1ab7f6ec29a8e07fabc8e1f023f574d71de4 kernel-rt-debug-modules-core-5.14.0-570.44.1.el9_6.aarch64.rpm 7aeb4aa9430dc5b4922b71955f34c09ec5c57ded1bb7d69a4c999352cb552ada kernel-rt-devel-5.14.0-570.44.1.el9_6.aarch64.rpm 7eeab7f8e5c99e17636094dabb3fc0276a508437e1553f73d6494d70c398242c kernel-rt-debug-modules-5.14.0-570.44.1.el9_6.aarch64.rpm 96f97986b2650f492b7347c3e3ecde6a1797c64416907076ea7428127544f402 kernel-rt-64k-debug-5.14.0-570.44.1.el9_6.aarch64.rpm 9b1fb46982ab2fb42a91df9ab321d0010b0a7451423574b7f4c47a48b4493520 kernel-rt-64k-core-5.14.0-570.44.1.el9_6.aarch64.rpm addf96d64398e7acafbe152658ff8db173a966f55bb8178a981e14e218b1016a kernel-rt-modules-extra-5.14.0-570.44.1.el9_6.aarch64.rpm b5a3541b47e12a9a159132c1d244f12898b3b847f86d13ffa8e07518ae4f2f63 kernel-rt-64k-debug-modules-extra-5.14.0-570.44.1.el9_6.aarch64.rpm d027ac7ffaa6f14e925528f5c0f9be4cc9b71b812cae2640bd5da5bc3e1e6c4c kernel-rt-64k-debug-modules-core-5.14.0-570.44.1.el9_6.aarch64.rpm d159f5b569e1ca825b5f27c72d7d17b6a7a7cf3ee89927429770e1fb1f750a95 kernel-rt-5.14.0-570.44.1.el9_6.aarch64.rpm f71f4b1842b009d2a43ab7fbdd0529e8ec12da9766686ac24b89bb095923d380 kernel-rt-64k-debug-modules-5.14.0-570.44.1.el9_6.aarch64.rpm fddab5ba452ba3e5857a869077a01ddb6d5ad1367a3d724bb07db867e9639371 ALSA-2025:16398 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: usb: smsc75xx: Limit packet length to skb->len (CVE-2023-53125) * kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length (CVE-2025-37810) * kernel: do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498) * kernel: s390/sclp: Fix SCCB present check (CVE-2025-39694) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-debug-modules-extra-5.14.0-570.46.1.el9_6.aarch64.rpm 02d49e249174fcd5ab6e0fab34fa38aa6ecd064cc388a6269e38cd4350df3a89 kernel-rt-5.14.0-570.46.1.el9_6.aarch64.rpm 04da67899e1232eeb5ad5c17e5729c58fea21d841ba960447dc4faa89470f494 kernel-rt-debug-modules-extra-5.14.0-570.46.1.el9_6.aarch64.rpm 068d5721a7e2d485f7820a4bb231dd219a17488a6432a2da5043ef1b414c3744 kernel-rt-64k-devel-5.14.0-570.46.1.el9_6.aarch64.rpm 24ffee8507996afe34d0c398af4d6f9cdbc65381c1d92336ecf1079ab2206134 kernel-rt-64k-debug-5.14.0-570.46.1.el9_6.aarch64.rpm 2c873bb1da4d01e79d699def38f18e69380ae38246dd81f79df51326d84eafa5 kernel-rt-64k-modules-5.14.0-570.46.1.el9_6.aarch64.rpm 2d085c9963c62732b03e2189909e001a35578e6363eafd71456e081980eb74ea kernel-rt-64k-5.14.0-570.46.1.el9_6.aarch64.rpm 4e4cecef30cf2fbeb069c0faa4897ad0b95fd09f8eda5256b815e9607df5d636 kernel-rt-debug-devel-5.14.0-570.46.1.el9_6.aarch64.rpm 583212307844e5d7ece2ed8783b86ec635aafe1b567fc8c92596af89b7e3a7ea kernel-rt-modules-extra-5.14.0-570.46.1.el9_6.aarch64.rpm 5adee6d8b4249d11a974b4a9b9df121a1d3fd4af509b32b9bd36b7c771f45613 kernel-rt-64k-modules-core-5.14.0-570.46.1.el9_6.aarch64.rpm 5c4da4369453798706f694dc0177905b861ee2c2b5d5faa710bad9a4c61cae0a kernel-rt-debug-modules-core-5.14.0-570.46.1.el9_6.aarch64.rpm 5e13184f58522ca75c00c9e464e2015494d8d982b36fe0a94016fd853e900840 kernel-rt-64k-core-5.14.0-570.46.1.el9_6.aarch64.rpm 7c781e1506f694dbe7bfe26a3af297b01ef9d0179a9f849dee3d2eeed718fb24 kernel-rt-64k-debug-modules-5.14.0-570.46.1.el9_6.aarch64.rpm 808d84a5d42db186d9071123b504f584ba840378157b15a759f44f503a1799ab kernel-rt-64k-modules-extra-5.14.0-570.46.1.el9_6.aarch64.rpm 97739d841e1892234cd3f85770dfaee24bfab11f9f5eb37143b9fd5365802acd kernel-rt-64k-debug-modules-core-5.14.0-570.46.1.el9_6.aarch64.rpm a9333bda2e37f7950beca5c004d9579925b4939e38e2e3ee46b170d6075935ea kernel-rt-debug-modules-5.14.0-570.46.1.el9_6.aarch64.rpm b1d419aefc4d01f73a55258900cb7f3ff27f0e913adc87a4881eca636a5c4b4f kernel-rt-debug-5.14.0-570.46.1.el9_6.aarch64.rpm bd2d3d9911b222016a378cfc8af00da2544b55218c8a3ee5cada8da56628e614 kernel-rt-64k-debug-core-5.14.0-570.46.1.el9_6.aarch64.rpm bea4f062aa5da47a15f7124ea288ef39552f4e7f9fe47542075abfe36887bfc0 kernel-rt-devel-5.14.0-570.46.1.el9_6.aarch64.rpm dd0be483597677cf255c04345eac09712f1c249097d769af68832656a0cb76e7 kernel-rt-modules-5.14.0-570.46.1.el9_6.aarch64.rpm f8f6d55be6f33a8f7f6a8af01957bf47a52e943d22b22298ee962c606f8eda56 kernel-rt-64k-debug-devel-5.14.0-570.46.1.el9_6.aarch64.rpm f983ace1a2423b3e70f37a6ce4291f40660486ae77295b315e3c3e23151b72fb kernel-rt-modules-core-5.14.0-570.46.1.el9_6.aarch64.rpm f987a422336b35b15b3d5e5fa186c107d210d06ac104fda89228793029883b22 kernel-rt-debug-core-5.14.0-570.46.1.el9_6.aarch64.rpm f9ed13d16b4f7a5051f1d895005f6630f8d4ff5b2dd4945b5df11235457bd19a kernel-rt-core-5.14.0-570.46.1.el9_6.aarch64.rpm fcf4503de9690073d835b269e5fd091803df61558853a52afca62bdfc5579542 ALSA-2025:16880 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472) * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527) * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718) * kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682) * kernel: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CVE-2025-39698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-debug-modules-5.14.0-570.49.1.el9_6.aarch64.rpm 073d6dfe1cf42d11797a2e3ba65d90d61dbd61d7858e0295292eaf2b2ab0b051 kernel-rt-modules-core-5.14.0-570.49.1.el9_6.aarch64.rpm 07a48235a2948f792e1fe2c95039b7ca9584c30d9702ea8f5f217c01c9a6fc9a kernel-rt-debug-devel-5.14.0-570.49.1.el9_6.aarch64.rpm 0d7474be60de9804e537bf58d895030961c42cf54bd0d2ee6a886f62d07c2f8c kernel-rt-5.14.0-570.49.1.el9_6.aarch64.rpm 18d988fa23772a46d35404b3e7c8aa67ceeb9e1ccfa22ee4652d151b51aad4e8 kernel-rt-64k-debug-core-5.14.0-570.49.1.el9_6.aarch64.rpm 23f8096bcc55280e36234398c1c11020e26cb8ad0d461d6927bbb68f9d0a98cf kernel-rt-debug-modules-extra-5.14.0-570.49.1.el9_6.aarch64.rpm 3c3d6e01923aeb8bfee984b42f77c6ebae4c58d403a7559283a1aec760b47b95 kernel-rt-debug-5.14.0-570.49.1.el9_6.aarch64.rpm 44ce83238a1542475aa34dee9045d12ebbe98c436d4d9bfcb4ce3ce2ce03d53e kernel-rt-core-5.14.0-570.49.1.el9_6.aarch64.rpm 527fdff09de55c754e8ce64e81347fb216af6fe77d95cd94ac4d77ac5f31cc75 kernel-rt-64k-modules-core-5.14.0-570.49.1.el9_6.aarch64.rpm 59eeed23cc9a9f5785489442fe3ee273dff0415b650a41700abf42c3816e6b3e kernel-rt-devel-5.14.0-570.49.1.el9_6.aarch64.rpm 755fae1b905384a01deea7fd3a3b886e6cc46f1856def6bd535351546d3338b8 kernel-rt-64k-debug-devel-5.14.0-570.49.1.el9_6.aarch64.rpm 7d86fc8e1571135d8d75c68353e585f7011b15451db2aa1d4cff1d8b5cf6b02f kernel-rt-64k-debug-modules-extra-5.14.0-570.49.1.el9_6.aarch64.rpm 7f4338b35b9c85af1b5739596088d68911790601b662b4d148d3de94cd9f78b5 kernel-rt-64k-modules-extra-5.14.0-570.49.1.el9_6.aarch64.rpm 96a81ae03b10630c91b47d453bfa58eccea39ab4a1abdc6036c0b5526400d5a9 kernel-rt-64k-debug-5.14.0-570.49.1.el9_6.aarch64.rpm a41dbd2b0e4b9aa9ffec5e09e246f8113d6fb989e5e5599ba1f048d257db44b9 kernel-rt-modules-5.14.0-570.49.1.el9_6.aarch64.rpm ac496bf67cf1d5146d31169bb9e44bf25e859dc75dc9b695642fa6988c0d80af kernel-rt-64k-core-5.14.0-570.49.1.el9_6.aarch64.rpm b9c37a0f574cc799895551ee2d14d8be79149db5365fd4eee380bb5a97d10e98 kernel-rt-64k-devel-5.14.0-570.49.1.el9_6.aarch64.rpm c22c8c1e843edab69fce8b34ee1dfd5a35980844efe11d00935ff8801224b0b0 kernel-rt-64k-5.14.0-570.49.1.el9_6.aarch64.rpm c2b87d79be2161a818fff81cd0a55dfed663437ec68367313680df69c985575b kernel-rt-64k-debug-modules-core-5.14.0-570.49.1.el9_6.aarch64.rpm c59a50437b2b0731b871e0c111824e29857242d2522c3795bcbef0deeeada32b kernel-rt-debug-core-5.14.0-570.49.1.el9_6.aarch64.rpm d1c746bcd96914adbde95794279d03a07b89ea429d8405c8ac00fe8abfd7e916 kernel-rt-debug-modules-5.14.0-570.49.1.el9_6.aarch64.rpm d75d89f99ab47ecfa166a1fc9a8715af5548d8443d780e874880107119627499 kernel-rt-modules-extra-5.14.0-570.49.1.el9_6.aarch64.rpm d7f5f14b0f85b129aa4ef3dbbb13f3f88a3fa813f5f2dc22f9160e39684c50b7 kernel-rt-64k-modules-5.14.0-570.49.1.el9_6.aarch64.rpm ebe02f5c78a648e15b2050054f7cebc233344cf3dfb30410ede97406cac0c1fb kernel-rt-debug-modules-core-5.14.0-570.49.1.el9_6.aarch64.rpm f0054d7ba50a04f66c37a8beb44d64d40c1432de9f66270294602a031d70b120 ALSA-2025:17377 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301) * kernel: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CVE-2025-38351) * kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling (CVE-2025-39761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-5.14.0-570.51.1.el9_6.aarch64.rpm 02aff927e932735d0cca6dbc8e2e7a3fabad07af039cbe3db99ca4a0156ab155 kernel-rt-devel-5.14.0-570.51.1.el9_6.aarch64.rpm 05da305b778972bc3b3c0f5ad59477bd5f9608f8266086368ed4c21896ad8b54 kernel-rt-64k-debug-modules-core-5.14.0-570.51.1.el9_6.aarch64.rpm 072a065d593bf297d7260c1e06bdf1838a84bacfc8763b756d2af99ff9fe3f1e kernel-rt-debug-modules-core-5.14.0-570.51.1.el9_6.aarch64.rpm 0e1c90a39a70b68479f01ca72ffee6cfe73f885a4170df17559979ed0e5ec133 kernel-rt-modules-extra-5.14.0-570.51.1.el9_6.aarch64.rpm 1295766aef114b3d8d7c34b4a543167ff37951fa510c4406e8862d1435b1f651 kernel-rt-64k-modules-extra-5.14.0-570.51.1.el9_6.aarch64.rpm 2080211b881639bc620bcd3e3e28bdfab7b9c627b8b2cdd2a66137851ec70ccb kernel-rt-64k-modules-core-5.14.0-570.51.1.el9_6.aarch64.rpm 234c37a04b253fa69c3a7b5bef0668bd75aeff0f9baf6ffc5741919094b0e93c kernel-rt-debug-devel-5.14.0-570.51.1.el9_6.aarch64.rpm 2516d97fbda7ccdad25537d75a2a2788513781363c24c0481d3ffde1bf0afcd6 kernel-rt-64k-modules-5.14.0-570.51.1.el9_6.aarch64.rpm 334bc7d3766ac5f1e3beef18736e938aaf45a57e814e0fb186902ec358d1dd28 kernel-rt-core-5.14.0-570.51.1.el9_6.aarch64.rpm 422c888c6bca3f9cd17d1f0ba4d00d5b5a2809166cea913abd75f2c5aec020bc kernel-rt-64k-debug-modules-extra-5.14.0-570.51.1.el9_6.aarch64.rpm 4f63a99df2b871575e31d7d1ecc4d9d6eeb64879a7dacfe1d73c506feafda16b kernel-rt-64k-debug-core-5.14.0-570.51.1.el9_6.aarch64.rpm 4f878d294a35dc0b717d3bdd0b568f6bf1ff614ab7ede935a70372530a1798bd kernel-rt-debug-5.14.0-570.51.1.el9_6.aarch64.rpm 728d0744cf67f6a3b0f84ef7938f609584d21456837b191721f6989a855b1df2 kernel-rt-64k-devel-5.14.0-570.51.1.el9_6.aarch64.rpm 7b99ad40bf21ec090e50a5e9a1c21c15aadee224bf2e9f70703e782ed980874e kernel-rt-modules-5.14.0-570.51.1.el9_6.aarch64.rpm 84977d2a9122f2f121912c21e4e0de3a384c1dbfcab29c908281b9fdfbc84362 kernel-rt-64k-core-5.14.0-570.51.1.el9_6.aarch64.rpm 95b8a5265514baebc30690413454cea78f1978feffc6c55499b1fcbfbc94820c kernel-rt-64k-debug-5.14.0-570.51.1.el9_6.aarch64.rpm b1032090e6e64160aa2a4138febabcf87a6572f2205a0233fb08220f73fde396 kernel-rt-64k-5.14.0-570.51.1.el9_6.aarch64.rpm c4cb252c06381d3f3c07f4739b234c91c1946003112e8c941316de23f76f5ae3 kernel-rt-64k-debug-devel-5.14.0-570.51.1.el9_6.aarch64.rpm cdf53630f5aae8378760ea3c22b227c603f4251e619a9238ea47778c38567d31 kernel-rt-modules-core-5.14.0-570.51.1.el9_6.aarch64.rpm db00e1f25e675fcb670da76ff62b6872c633be76be3be04bf27d5080218a9717 kernel-rt-debug-core-5.14.0-570.51.1.el9_6.aarch64.rpm dbe6f8fd86d2a4db939700dbd502d16f864511705b542e3a2b8c5611c4513c75 kernel-rt-debug-modules-extra-5.14.0-570.51.1.el9_6.aarch64.rpm e81923acaf06b25899371825c4a1a8074533dbaa09f8c16505049bcc690f109c kernel-rt-debug-modules-5.14.0-570.51.1.el9_6.aarch64.rpm f22e55a176111731920da2d4c73108f9edb1403c3e1991687891bc8bf4e1c9cb kernel-rt-64k-debug-modules-5.14.0-570.51.1.el9_6.aarch64.rpm fef2bbaab9f5de8c30c2a6394eb2d10a1c9a1a65c13844b33428d992ec817252 ALSA-2025:1742 Copyright 2025 AlmaLinux OS 0 1 Important

postgresql security update

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_5_default postgresql-test-rpm-macros-13.20-1.el9_5.noarch.rpm 167bf6673ce0e88f70019e49d0937948c321511b6c62d9f015003e4796450bab ALSA-2025:17760 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556) * kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614) * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757) * kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-core-5.14.0-570.52.1.el9_6.aarch64.rpm 0689bb9861adcbcf527d124d733b916c1c180f08deed141dc6fd2958ece37190 kernel-rt-64k-5.14.0-570.52.1.el9_6.aarch64.rpm 076af10c8bf884dfe6d30df4a32b65b5ecec8f9ff24ce412fd6255f6b5a5931e kernel-rt-modules-extra-5.14.0-570.52.1.el9_6.aarch64.rpm 108b9e5efaf22d55cdd703ddac0941451b4ec8b1408b93ae9276097e047b2986 kernel-rt-64k-debug-devel-5.14.0-570.52.1.el9_6.aarch64.rpm 31942c095e77d00e0f25fc22d1ae7fe108931aa03d25a660134e00582bab47fa kernel-rt-debug-5.14.0-570.52.1.el9_6.aarch64.rpm 4cdb3a18512ca8825d17b77f667abc4caa86f87624c9c9ac971178273b2b61ff kernel-rt-modules-5.14.0-570.52.1.el9_6.aarch64.rpm 4da789123b1eeb578f7daf5f416414dd37720c6c2f804b5025a59e48f723d852 kernel-rt-64k-debug-modules-5.14.0-570.52.1.el9_6.aarch64.rpm 563931d86493a2687a4abdb85bf9fa28ae49af77d541555d3e3b21da4f4a84a2 kernel-rt-debug-core-5.14.0-570.52.1.el9_6.aarch64.rpm 5b62fc57619f04b827544313fd538fdf97d659af288eabdf973bd77e65864ac7 kernel-rt-5.14.0-570.52.1.el9_6.aarch64.rpm 6064858ba24dbd2b3160e159ad5d89320443bf3e192af93fefdf9bf37115011e kernel-rt-modules-core-5.14.0-570.52.1.el9_6.aarch64.rpm 6815e8651127aa9c72e70d87443579b9d5f9de9df38dcca0ccc1086df050c5de kernel-rt-core-5.14.0-570.52.1.el9_6.aarch64.rpm 6ff23e28a88e9e848e565c1b65d7db02dca383c38af169b54b1d5e3ec1bdb62a kernel-rt-64k-modules-core-5.14.0-570.52.1.el9_6.aarch64.rpm 78a5f3434b03d959f76558d4cbcda52028c81ada5716fbad0787841f9be2fdad kernel-rt-debug-devel-5.14.0-570.52.1.el9_6.aarch64.rpm 798ddf12d75588816279c43c7250ff0206393228e29007c3bf72f42a88492162 kernel-rt-debug-modules-5.14.0-570.52.1.el9_6.aarch64.rpm 8677b2e7b68c0a8c654c8a9de48aba221fc3821e6d4f9c1a51f2b70b8d6755bb kernel-rt-64k-debug-modules-core-5.14.0-570.52.1.el9_6.aarch64.rpm 958ab31786d79dd2970235df0a820afee078c53d5c358f1094d385917a16bb28 kernel-rt-64k-debug-5.14.0-570.52.1.el9_6.aarch64.rpm a089da84fcee38c8d0fde02167a43d9b1de78fa132968f0a41f5596b49068c07 kernel-rt-devel-5.14.0-570.52.1.el9_6.aarch64.rpm ac90ec05b6ec7a741ef5eea52c3ed5071c6d8dbcf4d287d2e998491ffed0a5bb kernel-rt-debug-modules-core-5.14.0-570.52.1.el9_6.aarch64.rpm bd148d7739a9a92175648a841f0f61b474bd2b7103f4d1fa1c0addf546c986e3 kernel-rt-64k-devel-5.14.0-570.52.1.el9_6.aarch64.rpm c0d291f3163c9bf2945b42572c5d4ed49093d06088e016717c828c87d77cd23c kernel-rt-64k-modules-5.14.0-570.52.1.el9_6.aarch64.rpm cdaf83bbb2a5fa17c56b7e2580c2b38a1ca07f1731425e045671a5455d9d9d3f kernel-rt-64k-modules-extra-5.14.0-570.52.1.el9_6.aarch64.rpm d6cd40b241136f801d7383ae2f99780249b9cf1daff1528f832a1cd92688d55a kernel-rt-64k-debug-core-5.14.0-570.52.1.el9_6.aarch64.rpm e2845775db806b499278937e908e1cbbb5f67457944281f7d21d7483eab27a8f kernel-rt-64k-debug-modules-extra-5.14.0-570.52.1.el9_6.aarch64.rpm ef2d416be827a9ded4d5c73d341921f61b6656f2ddb97eb189ea5b61ff433239 kernel-rt-debug-modules-extra-5.14.0-570.52.1.el9_6.aarch64.rpm f41cd23d090bf431e9d628a57913889f9fad94d729bd86aaded029f2fca1a235 ALSA-2025:18281 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026) * kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087) * kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571) * kernel: sunrpc: fix handling of server side tls alerts (CVE-2025-38566) * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817) * kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849) * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-modules-core-5.14.0-570.55.1.el9_6.aarch64.rpm 07b0f8265ccd4159e5959448657bfcbd5c2931b00c306d1da0814d4fd1ef222c kernel-rt-64k-debug-core-5.14.0-570.55.1.el9_6.aarch64.rpm 10005af1790fd0b4d48362b57c69f9b236900221e02fa7d0b8e7d46e358fb368 kernel-rt-debug-modules-core-5.14.0-570.55.1.el9_6.aarch64.rpm 2537aab06f00859df0c7bb1bcce636e22d92a9fd8ad66dee49e6701f4bc95d1b kernel-rt-64k-debug-devel-5.14.0-570.55.1.el9_6.aarch64.rpm 29fab608e4e773fb8ae662ad27b0895eac785a575ee950588acc4def6130105f kernel-rt-64k-core-5.14.0-570.55.1.el9_6.aarch64.rpm 30dc2fdf07b857d8ad9dd4be2ce72c9fc0b8a17d71ea81fbb7c1960e55939e00 kernel-rt-modules-5.14.0-570.55.1.el9_6.aarch64.rpm 3513b2e9489a437789ce0088399071316827f58064aec817668ca2d2e7a5dfc3 kernel-rt-64k-debug-5.14.0-570.55.1.el9_6.aarch64.rpm 35cd6e7450ab6c7f53632a30fe8d3c32e17fb6d3d12bbcfd43d92299dce6f41f kernel-rt-modules-extra-5.14.0-570.55.1.el9_6.aarch64.rpm 402d1724a8e4b1902bce3dbf0b9cd0c116366e1e8e46dbf33556593e86562914 kernel-rt-64k-modules-extra-5.14.0-570.55.1.el9_6.aarch64.rpm 48d3074553d57fef7111e911e7c40b470f5debd5a6ec20ee24ab8fe7b05d7ea3 kernel-rt-devel-5.14.0-570.55.1.el9_6.aarch64.rpm 529b762b2b65c135c8a5b493f71d29fbecc2a8a622850f5b997d7a28ea5ff48e kernel-rt-64k-debug-modules-5.14.0-570.55.1.el9_6.aarch64.rpm 5c5c7214f72fb2e6bb6bd89688cf4ff010a1bb727727ff781338d1f1cc394687 kernel-rt-5.14.0-570.55.1.el9_6.aarch64.rpm 7d352432f8b36e07c38a69fdf64e955e26a893f7b6e37559373fa6f6da9b7cd8 kernel-rt-debug-modules-5.14.0-570.55.1.el9_6.aarch64.rpm 82fa7726757399737811d3ad629dcc691315ed22f489ce6db1e8aeb7e0fe5490 kernel-rt-core-5.14.0-570.55.1.el9_6.aarch64.rpm 96eccf96a3373aae947fe4094fb920d23dab9c36c4982cd59bd72ec69ede7827 kernel-rt-64k-debug-modules-core-5.14.0-570.55.1.el9_6.aarch64.rpm a28cfda37906020d28b85272dd5bd12c0f0c775777af80305d9159ee4362c1d3 kernel-rt-64k-5.14.0-570.55.1.el9_6.aarch64.rpm c1a7e82479e9510011869fb85554e69c7a9423ccbbb7541109d37a7e604bac76 kernel-rt-64k-modules-core-5.14.0-570.55.1.el9_6.aarch64.rpm c1c9dec86609c3e462350e283cce08fba07b7a19ec26f8bf71fb2c4da061fb6c kernel-rt-debug-modules-extra-5.14.0-570.55.1.el9_6.aarch64.rpm c7015b06d5e36ef80b252bdb9ea6929d689ad8aa49576fc68bb75a6897f20bc0 kernel-rt-64k-debug-modules-extra-5.14.0-570.55.1.el9_6.aarch64.rpm c9162291ba45c7d5d919e8162fd73ed8bd94dca183854b03b715ab4c794ef247 kernel-rt-debug-core-5.14.0-570.55.1.el9_6.aarch64.rpm dda36209e6ef2dd3e14aaed3c1d5740b9a8a5e5befc39a1e4961212286428fc4 kernel-rt-64k-devel-5.14.0-570.55.1.el9_6.aarch64.rpm f5223324094a8513980ef7a46327f7939bf23fd53951eab22f0f6c903bf2a382 kernel-rt-debug-devel-5.14.0-570.55.1.el9_6.aarch64.rpm fdcae39633bc45fdcffca1d809667a11a4daaaa1865d411121a1a23b3a919070 kernel-rt-64k-modules-5.14.0-570.55.1.el9_6.aarch64.rpm ff786c4a57e0a188ab9bac6ede0d3f7f80a2ebd2da7ceb65329e52f0e820a30f kernel-rt-debug-5.14.0-570.55.1.el9_6.aarch64.rpm ff8aaad029f0518ca3daf8d1e465e358899b84e12631a9dcd2b5b82eee27a614 ALSA-2025:19409 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702) * kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367) * kernel: crypto: xts - Handle EBUSY correctly (CVE-2023-53494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-debug-modules-extra-5.14.0-570.60.1.el9_6.aarch64.rpm 1098e854dd8b9c36bc54f8009930c240bf5ac9d70bff95698e3eb01ab442a771 kernel-rt-devel-5.14.0-570.60.1.el9_6.aarch64.rpm 12e35a3616e5fd043948f3e39001cc8cb24089b9304a3eaa16d91ced97b71e97 kernel-rt-64k-debug-core-5.14.0-570.60.1.el9_6.aarch64.rpm 1612b5baf1d5b84fb180c2209293b44869df59f1b761cfeacacfbbcd2f3a0356 kernel-rt-64k-modules-5.14.0-570.60.1.el9_6.aarch64.rpm 1aa0a543b8b16ed8183ad2f243b7c82b16643c4bd062dd974e8ef1bda0fe66bd kernel-rt-core-5.14.0-570.60.1.el9_6.aarch64.rpm 27c4bf203ef4096e00e84fd797dfd0849d52cc960eae66d135aa97b75f3d9bb3 kernel-rt-64k-debug-modules-5.14.0-570.60.1.el9_6.aarch64.rpm 29e1f2b36936bab9a2fc10f8c26d1cacf39e4ed4d02a7b0316f1d6fcdbfc04fb kernel-rt-64k-devel-5.14.0-570.60.1.el9_6.aarch64.rpm 2f5346c96dc3ddf92246a09588b5f3f3e023fd0bba271528fbab614655bc0d05 kernel-rt-debug-modules-core-5.14.0-570.60.1.el9_6.aarch64.rpm 4cf254d5b5ee0448a1a1c9a04d31b7521d33ac079cbe5222844fe4a57af7a164 kernel-rt-5.14.0-570.60.1.el9_6.aarch64.rpm 52a666226ef26a4f18cd68aefe79c1022df89fd6a65526cf25697ec60769eb90 kernel-rt-64k-core-5.14.0-570.60.1.el9_6.aarch64.rpm 54a43be006d7d986dc3328ff511fb63bff9d65b54b76db5e77c66ce21a7a9011 kernel-rt-modules-5.14.0-570.60.1.el9_6.aarch64.rpm 565dde15f783133a3d3adb2b6d3dc8d0a5b71185a88ee5f0738e15ecd6ab1c89 kernel-rt-debug-devel-5.14.0-570.60.1.el9_6.aarch64.rpm 618c27c12f435138a91ef77961f057244d50a17515e81f16770a9b0b16ddb0ab kernel-rt-64k-debug-5.14.0-570.60.1.el9_6.aarch64.rpm 61e09a51addaf3b4f7916bcfb90714218c29dd790f288c39ffb0cb575de87686 kernel-rt-64k-5.14.0-570.60.1.el9_6.aarch64.rpm 6da218f97c3c8c79bb6a8985262a48c0890714a4bf64f56d16d2002466b8588a kernel-rt-64k-modules-extra-5.14.0-570.60.1.el9_6.aarch64.rpm 6dbc7476d20dc506a4e9dc6c75187193f7782f341e37028228af799e75bf3804 kernel-rt-debug-5.14.0-570.60.1.el9_6.aarch64.rpm 8fe52f4a843f0c20218b5afbd470345e6703b30b898c1bc7b56f1827f0a8ce17 kernel-rt-64k-debug-modules-core-5.14.0-570.60.1.el9_6.aarch64.rpm 95b6a567527a5741598e9f44a98b0d00bb8909add818aa2b255db5c234a2674e kernel-rt-modules-core-5.14.0-570.60.1.el9_6.aarch64.rpm ac4d3847ee402eed8e3be1cb1ba84dfe1705ac17036b7081e021a5c824f5a55c kernel-rt-64k-debug-devel-5.14.0-570.60.1.el9_6.aarch64.rpm d430a4764edb1b1aedc618e9bd9b3d44fcdae87f8b0f42ea2407cdf94d2ab9d8 kernel-rt-debug-core-5.14.0-570.60.1.el9_6.aarch64.rpm d828600d7bf3e6a2a91ee7b50d28c326ab4f92c8b5e07ee6686054d1103b5069 kernel-rt-modules-extra-5.14.0-570.60.1.el9_6.aarch64.rpm d884f91c3612ac3e56f9a1de314301a61239b775c785274e7018bc9b7fd422fc kernel-rt-64k-modules-core-5.14.0-570.60.1.el9_6.aarch64.rpm f23935e87367bf93a747e93b91dec1c7a13cb38a593fb05fb8261f51d53894aa kernel-rt-debug-modules-extra-5.14.0-570.60.1.el9_6.aarch64.rpm fa072f54b2cd5a21f53a20f40b408894e8f267757363328066a4b24d29c499bf kernel-rt-debug-modules-5.14.0-570.60.1.el9_6.aarch64.rpm fc7544363dbd432f804991d7f7f4274d05027e6642f02cb9108fbd13b86d21d4 ALSA-2025:19930 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350) * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357) * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-debug-5.14.0-570.62.1.el9_6.aarch64.rpm 082e40402a0c443cd1497830ad4d78768f165baabb07144028d0ec2d9c743daf kernel-rt-debug-modules-5.14.0-570.62.1.el9_6.aarch64.rpm 0a8cb29b4eb0787b1527f8663a0dee068b27228acac147b899e72181c3b6271b kernel-rt-64k-debug-modules-core-5.14.0-570.62.1.el9_6.aarch64.rpm 19218e65293fdab964d7d93e3d9e98846ecf25537e4d00d0705ad6af8b780774 kernel-rt-64k-debug-5.14.0-570.62.1.el9_6.aarch64.rpm 256f17c431fa2d00d82dc17d84acadee55e9b9bc9f9646ad75f2532b2a14829a kernel-rt-modules-extra-5.14.0-570.62.1.el9_6.aarch64.rpm 27f3317ead5304bf3fe81999f0e71fe24f2e7d60779ccbca02f5482ed7e421bb kernel-rt-64k-debug-modules-extra-5.14.0-570.62.1.el9_6.aarch64.rpm 2be5eec5fd40051f486b8c915364bea7fef7b1108e4e8b7c53f67f5a1844ed2d kernel-rt-64k-modules-5.14.0-570.62.1.el9_6.aarch64.rpm 303932d6cd263938725be8035f50adda3391b90d5688e335e7ebafc826e9e3ab kernel-rt-devel-5.14.0-570.62.1.el9_6.aarch64.rpm 32d122eb30229b90b2fd8c9c041f81bd5bd84c872a7258e35a2540084ad31500 kernel-rt-64k-modules-core-5.14.0-570.62.1.el9_6.aarch64.rpm 381f3fceeb9c235fc926be7e4c5fb4ac2664fbadafc47a4fc2d8096cf1da7da4 kernel-rt-64k-debug-modules-5.14.0-570.62.1.el9_6.aarch64.rpm 5837dcd2c7b5152ae4d32c49e14b8ae3e396ed323c4b03d69521bf35ee8d9f8a kernel-rt-debug-modules-core-5.14.0-570.62.1.el9_6.aarch64.rpm 5a30ddabc0faadfadf1dc1bca0952f0f54dc402452b4ac76b25b5dc89d443104 kernel-rt-64k-modules-extra-5.14.0-570.62.1.el9_6.aarch64.rpm 5d5ec1933928c638b7215eed5105cb7378d8cf665eb948f0ef7f8caa2b66e2e2 kernel-rt-modules-5.14.0-570.62.1.el9_6.aarch64.rpm 5fce5bcfbdfaf2eea8adc151cccdc7a3e13ef22f50de1fb37e6c68c016efc996 kernel-rt-64k-core-5.14.0-570.62.1.el9_6.aarch64.rpm 68050b7567159ab11de0c626b057213ed2a2a8d3572ecb6844778aff96666761 kernel-rt-modules-core-5.14.0-570.62.1.el9_6.aarch64.rpm 7c1a5f330cb52d41873be295533913826a1f23a02521fd3cbc9f76bc23622e04 kernel-rt-64k-debug-core-5.14.0-570.62.1.el9_6.aarch64.rpm 812ed13e77080b5ec5abad71946a7fd3b2092697c4f9b47740eb9fde31aa956c kernel-rt-debug-devel-5.14.0-570.62.1.el9_6.aarch64.rpm 81ef89c437c9b9250e699fbf823b78eb4aa2f56ed601ba12cc3093384c1d2f9e kernel-rt-core-5.14.0-570.62.1.el9_6.aarch64.rpm 98d62976575a3eb7cfbd52ca058a9047cc60438f9f0d2cb6d03ca45430e55c93 kernel-rt-64k-debug-devel-5.14.0-570.62.1.el9_6.aarch64.rpm b3226acfa9eb4535c93452cd764e4f8ea37ff369ab840d58a2e91d6105ab3137 kernel-rt-debug-core-5.14.0-570.62.1.el9_6.aarch64.rpm c1954fb327cdb1d70b1308817e44a06bd34ea829444143080ea5fc94684b4cea kernel-rt-debug-modules-extra-5.14.0-570.62.1.el9_6.aarch64.rpm c19d12f69c6ba27b65dba64d1e9aed18035900e3858d31118dfed08b17032ee0 kernel-rt-64k-devel-5.14.0-570.62.1.el9_6.aarch64.rpm de1dde2026dcea051c156814543da2d3c925af0acf20a4cc77cd6bcd4968646e kernel-rt-64k-5.14.0-570.62.1.el9_6.aarch64.rpm ea20540dbee6878b497b2129deced032f73696cb42c65e13418b6d5f8809dc66 kernel-rt-5.14.0-570.62.1.el9_6.aarch64.rpm f6be13e7c3f9aa382c27ebf295cfc00b65f2fd584e0823955533e0803a07bf9d ALSA-2025:20518 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830) * kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689) * kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744) * kernel: vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679) * kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727) * kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864) * kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060) * kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024) * kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195) * kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294) * kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052) * kernel: afs: Fix lock recursion (CVE-2024-53090) * kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119) * kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135) * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241) * kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229) * kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170) * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216) * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672) * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662) * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675) * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645) * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690) * kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709) * kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739) * kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786) * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332) * kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680) * kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648) * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647) * kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631) * kernel: zram: fix potential UAF of zram table (CVE-2025-21671) * kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672) * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693) * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691) * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696) * kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702) * kernel: usbnet: fix memory leak in error case (CVE-2022-49657) * kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432) * kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672) * kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353) * kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437) * kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627) * kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670) * kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269) * kernel: ima: Fix a potential integer overflow in ima_appraise_measurement (CVE-2022-49643) * kernel: powerpc/xive/spapr: correct bitmap allocation size (CVE-2022-49623) * kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs (CVE-2022-49357) * kernel: list: fix a data-race around ep->rdllist (CVE-2022-49443) * kernel: tracing/histograms: Fix memory leak problem (CVE-2022-49648) * kernel: Input: synaptics - fix crash when enabling pass-through port (CVE-2025-21746) * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795) * kernel: bpf: Send signals asynchronously if !preemptible (CVE-2025-21728) * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456) * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987) * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014) * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988) * kernel: RDMA/mlx5: Fix implicit ODP use after free (CVE-2025-21714) * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570) * kernel: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (CVE-2024-57993) * kernel: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (CVE-2025-21729) * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989) * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015) * kernel: OPP: add index check to assert to avoid buffer overflow in _read_freq() (CVE-2024-57998) * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995) * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796) * kernel: scsi: ufs: core: Fix use-after free in init error and remove paths (CVE-2025-21739) * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786) * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738) * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986) * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726) * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791) * kernel: team: better TEAM_OPTION_TYPE_STRING validation (CVE-2025-21787) * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981) * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790) * kernel: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (CVE-2024-57990) * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765) * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012) * kernel: blk-cgroup: Fix class @block_class's subsystem refcount leakage (CVE-2025-21745) * kernel: net: let net.core.dev_weight always be non-zero (CVE-2025-21806) * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072) * kernel: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (CVE-2024-58068) * kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference (CVE-2024-58062) * kernel: idpf: convert workqueues to unbound (CVE-2024-58057) * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828) * kernel: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083) * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826) * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077) * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075) * kernel: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (CVE-2025-21829) * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839) * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837) * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350) * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357) * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851) * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855) * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844) * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853) * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847) * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864) * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088) * kernel: acct: perform last write from workqueue (CVE-2025-21846) * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861) * kernel: io_uring: prevent opcode speculation (CVE-2025-21863) * kernel: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (CVE-2025-21848) * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056) * kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization (CVE-2022-49845) * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994) * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116) * kernel: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (CVE-2025-38396) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-64k-debug-core-5.14.0-611.5.1.el9_7.aarch64.rpm 03f586ee7499e1eecaa3940f175aa58872191520c443ae2b6650bf9f8e9af7d5 kernel-rt-debug-modules-core-5.14.0-611.5.1.el9_7.aarch64.rpm 05a054c13cf3e26318f2263d58d86da8c5344281bae2245c867ba2f479bbe7ac kernel-rt-64k-debug-modules-extra-5.14.0-611.5.1.el9_7.aarch64.rpm 060c4b0fbcf21b7fe8a8a883c48fabeb10277bc0bf46abf658945ad65f1e7cc3 kernel-rt-debug-devel-5.14.0-611.5.1.el9_7.aarch64.rpm 0fef4a53bc2f7545cb43cdae1e150397ae5821791cfda54db0d5548915bc907b kernel-rt-64k-debug-modules-core-5.14.0-611.5.1.el9_7.aarch64.rpm 116fd280305c3025e2463de3fac4d015ea66d54e537c8ce05288d29e7ff3d830 kernel-rt-core-5.14.0-611.5.1.el9_7.aarch64.rpm 1c4c84f634059006f73ce0ae324b48dd0f99ce74e0d6cae68341a54dde7fa80d kernel-rt-debug-modules-extra-5.14.0-611.5.1.el9_7.aarch64.rpm 1dd57515d61e056e04c9e335a0ebe1d80a7f86424e3ddcddd09800733e4ef26b kernel-rt-64k-debug-devel-5.14.0-611.5.1.el9_7.aarch64.rpm 34baacd6d582a349306911a43b750051211bbaab5abb4a4cbe2b29d0916e9c01 kernel-rt-modules-5.14.0-611.5.1.el9_7.aarch64.rpm 3769d2799c182072de68b7b4f1678292490fa54bf86700cad83404d43e0eec0a kernel-rt-debug-5.14.0-611.5.1.el9_7.aarch64.rpm 5da23d647b8f5678b1d4b48cd3f3dd9b8ac41acec78add7cb3ca19749bd03275 kernel-rt-64k-modules-extra-5.14.0-611.5.1.el9_7.aarch64.rpm 73b38ec1103e5306efd7db61e38210857511f343f1868f9c466caee7ab400ed6 kernel-rt-64k-modules-5.14.0-611.5.1.el9_7.aarch64.rpm 7db7515ddc74c8b6631cd066e3fab3e0b0a525e2451adcb07b8ec9f706b885b2 kernel-rt-modules-core-5.14.0-611.5.1.el9_7.aarch64.rpm 871baee3fc045671b9a239337f0fd5d659a18ca66246659ecfd998d9f969b750 kernel-rt-64k-debug-5.14.0-611.5.1.el9_7.aarch64.rpm 92373e67b14b441d382d799d7be00d40df7860bacde488786e5ef126ece587ab kernel-rt-64k-devel-5.14.0-611.5.1.el9_7.aarch64.rpm 9c0ecb19a6575a33d442d45e49143bd749cfc01a037f284016aa84df85889ac0 kernel-rt-64k-debug-modules-5.14.0-611.5.1.el9_7.aarch64.rpm a0231232ed0a12df43b358d96d817e2c8f957024f3df52a0c79ef52b2ef7270e kernel-rt-64k-core-5.14.0-611.5.1.el9_7.aarch64.rpm a72fe80210a4b8c118d234a9117d052ecd4ae488e2844f3a4922904f99fdd54c kernel-rt-debug-modules-5.14.0-611.5.1.el9_7.aarch64.rpm b116b7afcc711a5059c223e570e35d69f521941938532efe53119ea70fb780bc kernel-rt-5.14.0-611.5.1.el9_7.aarch64.rpm b17eaeca0107cc6917b8f890467d28fa96d84b17b76911e8f128f7851b4c0541 kernel-rt-debug-core-5.14.0-611.5.1.el9_7.aarch64.rpm bf98e8e3e9ee01534b4fdf671eb71e68da92ed7297776ed5b91ac362cd76576c kernel-rt-devel-5.14.0-611.5.1.el9_7.aarch64.rpm c339c701a5dfe8b7e76ec9dcd00c619687f089d4a4082183583c827eaefa330c kernel-rt-modules-extra-5.14.0-611.5.1.el9_7.aarch64.rpm f7b0b91d200564334534331f331080eca052347585e6043021416ceda608b5ef kernel-rt-64k-modules-core-5.14.0-611.5.1.el9_7.aarch64.rpm f9631ca1e0ff6a1f24b1e7076fc6964d705d22f8a4504579a15b0382cac7e5db kernel-rt-64k-5.14.0-611.5.1.el9_7.aarch64.rpm fd56cf7a4074185dccb52ebbf8b4374bb040936eb2e24534886649938c68859d ALSA-2025:20532 Copyright 2025 AlmaLinux OS 0 1 Moderate

grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write. (CVE-2024-45777) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default grub2-pc-modules-2.06-114.el9_7.alma.1.noarch.rpm bbb561d57e7a44ab17215b52a0aefbfcc28b895d1f31c680c0249ba5d4058521 grub2-ppc64le-modules-2.06-114.el9_7.alma.1.noarch.rpm f5b3b52bc09e457bdcf42329bb7fb3e50cd50e7eaae34360eab5bf05c88b15c6 ALSA-2025:22405 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724) * kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864) * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898) * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918) * kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955) * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981) * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058) * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-64k-debug-modules-extra-5.14.0-611.11.1.el9_7.aarch64.rpm 001c36bd91394bb2ac2186b557a57a8919163b7b75abe76c191c9f241d87f643 kernel-rt-64k-modules-5.14.0-611.11.1.el9_7.aarch64.rpm 0724a1cb6b4b5a99aa50c45bb5d79f7bbb3a5727368ed8cc419033b56b559911 kernel-rt-64k-debug-modules-5.14.0-611.11.1.el9_7.aarch64.rpm 08d05b4e6a1d91a6551d74974064b3175e138be011c41aa878963d03ce0e07ae kernel-rt-64k-debug-core-5.14.0-611.11.1.el9_7.aarch64.rpm 12b6c2d80300f913d24c643ddc93223506b25e19338e8a19df0e2edb97353304 kernel-rt-devel-5.14.0-611.11.1.el9_7.aarch64.rpm 1eb69d48502d53a17121ac736b6f2576893e45330e0540c8e1c5dea5f37c9837 kernel-rt-64k-devel-5.14.0-611.11.1.el9_7.aarch64.rpm 344a9863e67b69e7c4b38ad116194203131609b084d71a2d74a4cccf641a6a7e kernel-rt-64k-core-5.14.0-611.11.1.el9_7.aarch64.rpm 35b69b8a506e5d6bb94183cb72a721e34b059bbe1971a1b8923dc990f81141f8 kernel-rt-64k-debug-devel-5.14.0-611.11.1.el9_7.aarch64.rpm 40594b077bb9dca417419afcadb3f94027dff3c40bdd16fea2de49d884300e27 kernel-rt-64k-5.14.0-611.11.1.el9_7.aarch64.rpm 4f03fb1499eb48ab266b3c5f4a3e80e84a65c7db5bf1e5aa6b10a16e6ce10136 kernel-rt-modules-extra-5.14.0-611.11.1.el9_7.aarch64.rpm 57016d10c746603f3cf3e1923e68ddb47b450e54a8e700f90bf9ab782d95b8f9 kernel-rt-64k-modules-extra-5.14.0-611.11.1.el9_7.aarch64.rpm 587f78765ef31272b615859327c25a2bec18c8458abe102ab1f2a7accdc00911 kernel-rt-debug-devel-5.14.0-611.11.1.el9_7.aarch64.rpm 5ad35a096829c12f4b0062ee10f61aa7fad595553eb99baac73700e7e06289a6 kernel-rt-core-5.14.0-611.11.1.el9_7.aarch64.rpm 61d6929cf3b8cbd46a799f8014e49f107ee8a36b822a8926542c4fc841ad19a8 kernel-rt-modules-core-5.14.0-611.11.1.el9_7.aarch64.rpm 703ffa2b1ea8abc91d17e8c955bbb16fdff96cd005b5c44e71eb959e7d7f3ff3 kernel-rt-5.14.0-611.11.1.el9_7.aarch64.rpm 81eec8cdb2e6a8f7c4e3bb75656dfbe0f2dfd84e536384940cae6bb6e93adba6 kernel-rt-debug-modules-extra-5.14.0-611.11.1.el9_7.aarch64.rpm 8b7e3de9a4426b34ef16150c8a78aa4a4e7c4c814517e61ccdc6af8b74501478 kernel-rt-64k-debug-modules-core-5.14.0-611.11.1.el9_7.aarch64.rpm 92d94772cbae583baaf93dec763eac7e6d8cc16f73a6130e376f47608cb50a9c kernel-rt-modules-5.14.0-611.11.1.el9_7.aarch64.rpm b49b609f74dcabfc0dd07c553069b37af0a013393a912d9bb86c143d1ad792ce kernel-rt-debug-5.14.0-611.11.1.el9_7.aarch64.rpm c16881eca7917c83f014f37be203ab2bd0cd5571e5de8a921f6768b8bd7aa992 kernel-rt-64k-debug-5.14.0-611.11.1.el9_7.aarch64.rpm c850be83ea2b2d4bccf0d18ffa92e6fdfc1e36e18140cf6b96bc4be29190c682 kernel-rt-64k-modules-core-5.14.0-611.11.1.el9_7.aarch64.rpm cb7b5910c13c7e1f3b166208f69587e356a11ad74a615912f10b92bf13d390c9 kernel-rt-debug-modules-5.14.0-611.11.1.el9_7.aarch64.rpm e3b76ea34a5dac83c08d1a0ad7b58f8ab589694caada8d6bba03c57ac781c03b kernel-rt-debug-modules-core-5.14.0-611.11.1.el9_7.aarch64.rpm e3c5388ae87305890920c7d876031e7ea94dd4052fc7472ccdb1f1afc5ba4da4 kernel-rt-debug-core-5.14.0-611.11.1.el9_7.aarch64.rpm e68d5e8f8650610af802c909a04c6a284781403f7b002942aaa83a04bb425b54 ALSA-2025:22865 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925) * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-64k-debug-core-5.14.0-611.13.1.el9_7.aarch64.rpm 00955a67d068770db88a9bfa338462a7650e8dd128e338183264d5ac6ebcb564 kernel-rt-core-5.14.0-611.13.1.el9_7.aarch64.rpm 06de89226021c43979b6e1f2fe24decfb1c711d1fd4f07fa475f799260143c3d kernel-rt-64k-modules-core-5.14.0-611.13.1.el9_7.aarch64.rpm 1afbab7ca56a53958297d5272ff590a701ef3936d8e492ae3a340b57249e92b1 kernel-rt-devel-5.14.0-611.13.1.el9_7.aarch64.rpm 1fb1cc3cbaea39d65553d1d602628c13fee5ab75c6d15a0959f1fa33cb4b94c9 kernel-rt-64k-devel-5.14.0-611.13.1.el9_7.aarch64.rpm 217925d58ed16c7a4e6b5cc8582d628223d5867f57ccc901f8cbe8d8284f47b3 kernel-rt-64k-debug-modules-5.14.0-611.13.1.el9_7.aarch64.rpm 365822a83756ba3212b589c9f6ee359cb5505c07158eec2a521960f12c34e0ed kernel-rt-debug-modules-extra-5.14.0-611.13.1.el9_7.aarch64.rpm 484696c5b560e9f66b2082836169a4d59dfe1b27e397bbb80c48b6fc0f6168ef kernel-rt-64k-debug-devel-5.14.0-611.13.1.el9_7.aarch64.rpm 4f0f440283b1e5f4fa559787995f194fec5bb271b34408643b62c17ea677240d kernel-rt-64k-core-5.14.0-611.13.1.el9_7.aarch64.rpm 828665e42ed07ddb751a1ab22adef31b6546da353f17abdd2f7b1067fe5ac3d5 kernel-rt-64k-debug-5.14.0-611.13.1.el9_7.aarch64.rpm a2db851357136cca0e9bc6cc7cd0e1d64cda1bbd86dfd5d16da5f82b4acd1688 kernel-rt-debug-modules-core-5.14.0-611.13.1.el9_7.aarch64.rpm a5a4f75ed2d475beff36de0dd5e9d7b6bcbc330a3f2a9811edc47f0883d298e5 kernel-rt-5.14.0-611.13.1.el9_7.aarch64.rpm ac72a8705119e8b09a70b9e36aff57436b0997daf56637fa0d952c82155ce7c4 kernel-rt-64k-modules-extra-5.14.0-611.13.1.el9_7.aarch64.rpm c5304c41b62519ec02bae767a92368b5fcacd023b362989cacdfcba5f6f44a9e kernel-rt-modules-core-5.14.0-611.13.1.el9_7.aarch64.rpm c968283fc04c13ee64434714a001252b940f05241341ae5cbc5e7a70c475f718 kernel-rt-modules-5.14.0-611.13.1.el9_7.aarch64.rpm ce3494ea80493b78b50ced344640efc27af4f0dbc9a993a99ffe1c02fecf7256 kernel-rt-modules-extra-5.14.0-611.13.1.el9_7.aarch64.rpm cff71eaa172f78d8b12eee81de0797e8237952bf3436f181fe57f35b5e3ea843 kernel-rt-64k-5.14.0-611.13.1.el9_7.aarch64.rpm d5b71e2b341a813479c0c06169cc637440b5a366ff894a6289589db1b0c6d5c9 kernel-rt-debug-5.14.0-611.13.1.el9_7.aarch64.rpm d740b0ce5ac4c5fd81c5024a9e402f02f3155d9eecd6f0a71276f04d2bfe503b kernel-rt-64k-modules-5.14.0-611.13.1.el9_7.aarch64.rpm dab14a401cce1e9ddd536976b78b0d3e16b0e8b125f68358d70841b5a38ab103 kernel-rt-64k-debug-modules-extra-5.14.0-611.13.1.el9_7.aarch64.rpm dfa8bfd891b0bade87afef4929812918603316027ba7cb9cb4bdb6b02b9a5e72 kernel-rt-debug-modules-5.14.0-611.13.1.el9_7.aarch64.rpm e06d12550600641e2b06fd993ad6802f8b1072659f7034747b3c71c82d71f2ee kernel-rt-64k-debug-modules-core-5.14.0-611.13.1.el9_7.aarch64.rpm ed072019a6998daccbd2931b359d646fa02dad9d3c841d493e88096d4d51aeb6 kernel-rt-debug-devel-5.14.0-611.13.1.el9_7.aarch64.rpm f84c3e27f7491fd3850119791ff124d721c25457c6606ba513e51a0ae6e30dc2 kernel-rt-debug-core-5.14.0-611.13.1.el9_7.aarch64.rpm fcbc39bb1488ecd88ccf0519d66f09fd068e08ec797c28d67ff5bc8a023d8ac6 ALSA-2025:23241 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499) * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966) * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-64k-modules-5.14.0-611.16.1.el9_7.aarch64.rpm 08ac10ff2e0a328a29eb9ebc0871da972ef04b74aca4c0e118bbe4c3e2118711 kernel-rt-debug-modules-extra-5.14.0-611.16.1.el9_7.aarch64.rpm 10dea8be8994dd17113c34d089c9b3a0793637cdaebee31865bf3589dd09bca3 kernel-rt-64k-modules-core-5.14.0-611.16.1.el9_7.aarch64.rpm 18b3a56a20eada30ae324d1d4a6218a8025d86655674c541dc43beb8805a1431 kernel-rt-debug-core-5.14.0-611.16.1.el9_7.aarch64.rpm 1a396e3c72a7b4a52f3a7f046f390a49e622e8a070c6aeba9804d27d72b35beb kernel-rt-64k-core-5.14.0-611.16.1.el9_7.aarch64.rpm 1af1dea4ec8a16d357f015deefdc044f8904c79d38ea88dd08214798b57216fe kernel-rt-modules-extra-5.14.0-611.16.1.el9_7.aarch64.rpm 51f2971d5234fc0666a47dc0c9204b2c8d14d970a9d507aa0a9891ddfdb1663e kernel-rt-debug-devel-5.14.0-611.16.1.el9_7.aarch64.rpm 5220fc48821b5aac4372ca1a856e0d85d1f770e41cf8c6695dca81a8751203c8 kernel-rt-64k-debug-5.14.0-611.16.1.el9_7.aarch64.rpm 55d5bef41f99503c30ac64c100ad4980ec977815aea52cb99dea344372c3d6fd kernel-rt-64k-debug-modules-core-5.14.0-611.16.1.el9_7.aarch64.rpm 77c5682248f4b918d6695218902cae499964a1592fa86d50d9629c4f638be48d kernel-rt-devel-5.14.0-611.16.1.el9_7.aarch64.rpm 866403e24ddc9501216e376b01753b05f349c446665c3a4df06efca19376bbf7 kernel-rt-64k-5.14.0-611.16.1.el9_7.aarch64.rpm 98f77ea7f50b19b39ebffaee1740ba820df4c4b39f2863fc9749f28ba45969b2 kernel-rt-64k-modules-extra-5.14.0-611.16.1.el9_7.aarch64.rpm 9f4ca8b50affb392c8c7968417aadfabe7b47ac113658effa81dbacc3b7ab2b5 kernel-rt-core-5.14.0-611.16.1.el9_7.aarch64.rpm b5d5440ac496cad7d7f752c1ff245d1126dedbe123375ad80db7a048eda11ba2 kernel-rt-64k-debug-modules-extra-5.14.0-611.16.1.el9_7.aarch64.rpm bf94bf1651b650e90cb5f6eb4a7b93bcab8ccacadf5410765f2e4a0bf8e6145d kernel-rt-64k-debug-modules-5.14.0-611.16.1.el9_7.aarch64.rpm cb317941fc2259fc4b72f9273f8c72833f348b031f428b350d0b3de35a217b42 kernel-rt-64k-debug-devel-5.14.0-611.16.1.el9_7.aarch64.rpm d42adfdc09afac038f16a337c7bf541bd521018c208913e110b6c8dd80cf5625 kernel-rt-debug-5.14.0-611.16.1.el9_7.aarch64.rpm e87259029af6e34e25bdde9b46cc5d96fc874e9669cd1b83c4fa81365970d815 kernel-rt-64k-devel-5.14.0-611.16.1.el9_7.aarch64.rpm ecc7017b150c02df0bda8e6f9a62f9e65201d64af298aa454eb7c58aad5582db kernel-rt-modules-core-5.14.0-611.16.1.el9_7.aarch64.rpm f01805b18663846fc35a32b729ccf0ce70e147ab3ecd48c1f68e67229f721eaa kernel-rt-debug-modules-5.14.0-611.16.1.el9_7.aarch64.rpm f5bdf8b985988dcf1d1b35d1322d836b71887ef135b620a120e3e0c4c513da97 kernel-rt-5.14.0-611.16.1.el9_7.aarch64.rpm f8702f59de567a950d6680a0887caf126a3056a430960e11d03016dd4ee352d4 kernel-rt-64k-debug-core-5.14.0-611.16.1.el9_7.aarch64.rpm fc850ccf5a70a022ca9da0b11e67a6a4ab033b158a80574d8aad3758140c019f kernel-rt-debug-modules-core-5.14.0-611.16.1.el9_7.aarch64.rpm fc8524ead72fda58212e0b06b6ae199d18bc955f7518fc74d65e6c5588587350 kernel-rt-modules-5.14.0-611.16.1.el9_7.aarch64.rpm fcf55691458835098e2f6b3a17d80acbab02398094b0539134dfb8328f428855 ALSA-2025:2867 Copyright 2025 AlmaLinux OS 0 1 Important

grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: net: Out-of-bounds write in grub_net_search_config_file() (CVE-2025-0624) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_5_default grub2-pc-modules-2.06-94.el9_5.alma.1.noarch.rpm 0f74115758e957bee223401d6917e78a8ead8c693314e0887d7a8198446b4dd4 grub2-ppc64le-modules-2.06-94.el9_5.alma.1.noarch.rpm 1a9a4a1379668ed0d7f554b4e2a8cbd2b954a08b4041aa5602f8aa7cd13d7fd7 ALSA-2025:6990 Copyright 2025 AlmaLinux OS 0 1 Moderate

grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: reader/jpeg: Heap OOB Write during JPEG parsing (CVE-2024-45774) * grub2: commands/extcmd: Missing check for failed allocation (CVE-2024-45775) * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. (CVE-2024-45776) * grub2: fs/ufs: OOB write in the heap (CVE-2024-45781) * grub2: fs/hfs+: refcount can be decremented twice (CVE-2024-45783) * grub2: command/gpg: Use-after-free due to hooks not being removed on module unload (CVE-2025-0622) * grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks (CVE-2025-0677) * grub2: read: Integer overflow may lead to out-of-bounds write (CVE-2025-0690) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default grub2-ppc64le-modules-2.06-104.el9_6.alma.1.noarch.rpm cc51846110a748db9533eee1172507ea540b83caa6e63b058641377a95207ab1 grub2-pc-modules-2.06-104.el9_6.alma.1.noarch.rpm ef2c38771e51097d02737e395037f0b09108048252a159a94d4fb2eaa64c5b08 ALSA-2025:7043 Copyright 2025 AlmaLinux OS 0 1 Moderate

microcode_ctl security update

The microcode_ctl packages provide microcode updates for Intel and AMD processors. Security Fix(es): * microcode_ctl: Improper input validation in UEFI firmware (CVE-2024-28047) * microcode_ctl: Insufficient granularity of access control in UEFI firmware (CVE-2024-39279) * microcode_ctl: mproper initialization in UEFI firmware OutOfBandXML module (CVE-2024-31157) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default microcode_ctl-20250211-1.el9_6.noarch.rpm e9ee981e2cb12b3e11104458751afab3d3ee42d4d6fa5188724375669751d321 ALSA-2025:7423 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633) * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007) * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005) * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069) * kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927) * kernel: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CVE-2025-21993) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-modules-core-5.14.0-570.16.1.el9_6.aarch64.rpm 1d2752e6f417de4c778334863f6f818d1f02ecc3f84314d00e3dce4e87cc29d2 kernel-rt-64k-debug-modules-5.14.0-570.16.1.el9_6.aarch64.rpm 1f6586b780d4780829c95b52dadbbd0d769f80a5e7977ea56f9a11e705fdfb9c kernel-rt-64k-debug-5.14.0-570.16.1.el9_6.aarch64.rpm 37ecdfdad874903f2b271160fcba7c7ff184bb772bce7a0ce1a1e48d00cd9abe kernel-rt-devel-5.14.0-570.16.1.el9_6.aarch64.rpm 4615beb09483957cd56736afa0abbec2d08c568d58f5e6f5a5dfefea333bf26c kernel-rt-64k-debug-devel-5.14.0-570.16.1.el9_6.aarch64.rpm 48c02b2550d0679ad27302ae02dc1f5cf5a407bb1e2f90dadae9a28da3578cf1 kernel-rt-core-5.14.0-570.16.1.el9_6.aarch64.rpm 4a0f44c7a521a1d301845d48bb4e9c7cf1f3cea941f21407907a8e7593881eca kernel-rt-modules-core-5.14.0-570.16.1.el9_6.aarch64.rpm 4cc704f9eeba1af650fd63406e166814e60f79e5f11e22f8e330b23405b105b3 kernel-rt-64k-core-5.14.0-570.16.1.el9_6.aarch64.rpm 4d817509c172531fbe60bb41632d8a7712bab3bba2a29ea079ee00ac7ca394b6 kernel-rt-64k-debug-modules-core-5.14.0-570.16.1.el9_6.aarch64.rpm 518b7fc90de4bdd911fc86232f225cad889316449748571cd32261fec51d164a kernel-rt-5.14.0-570.16.1.el9_6.aarch64.rpm 57612c247500bc4569f27806bb053e29b9bbb276023c352de040a62f8edbd89f kernel-rt-debug-core-5.14.0-570.16.1.el9_6.aarch64.rpm 59ef634f371da8966f3d01ba0bcc805885e53009071f5f6da31866017758a69f kernel-rt-debug-modules-5.14.0-570.16.1.el9_6.aarch64.rpm 6eb69b97839bc545a09b1388452e195e5910941ce1d5dd6212e55f4daeb8dcad kernel-rt-debug-5.14.0-570.16.1.el9_6.aarch64.rpm 72ea9d64505741c2d91b1ea69544b7ff207727a193b91ca0b7e0d8aee4bcd07f kernel-rt-modules-extra-5.14.0-570.16.1.el9_6.aarch64.rpm 74b8b4182e7869e9e1c7ad56eb9dac4bb5f657940adcfa7d3cc6de7a8b776f4a kernel-rt-64k-devel-5.14.0-570.16.1.el9_6.aarch64.rpm 76d00d8babd7637960eb0d8a8f31c4f7f160a78b632d7b57c0851eb59efc2ad3 kernel-rt-64k-debug-core-5.14.0-570.16.1.el9_6.aarch64.rpm 7ce519ae692517bd164ff8a0c4c65ef6cc8be23efa4e1995391fe92850e1f6fa kernel-rt-64k-modules-5.14.0-570.16.1.el9_6.aarch64.rpm aff35a2593d81b0a88603ecd4af14ed31b80aa5b7ca52d052d183ec16a524982 kernel-rt-64k-5.14.0-570.16.1.el9_6.aarch64.rpm be230a93cbc5428836efd2a901b511476bdb969b44bc2afc8f05cfeb1382017a kernel-rt-debug-devel-5.14.0-570.16.1.el9_6.aarch64.rpm dffeaaa91ec7f514b3508ed92e646c55c4eb1ea241f55f0f7b3c0479d5bfcfc2 kernel-rt-modules-5.14.0-570.16.1.el9_6.aarch64.rpm e19670d552f61ec6d6d3bbcbefe46609f35cccd2ad93d36585360381b1cf628d kernel-rt-64k-modules-extra-5.14.0-570.16.1.el9_6.aarch64.rpm ed2da9a6cf5ef972ba935b6cf13df6c530b8d301692eb0b2d1e699876fd0aba0 kernel-rt-64k-debug-modules-extra-5.14.0-570.16.1.el9_6.aarch64.rpm f6ed4c358149bbee2ff575928a9ee39180aa396290b1816aa52271e9c52cc07e kernel-rt-debug-modules-extra-5.14.0-570.16.1.el9_6.aarch64.rpm fd8e394aebfaed3e77e2794fefe9a71964d3947753001b542943796bac5aa4e2 kernel-rt-debug-modules-core-5.14.0-570.16.1.el9_6.aarch64.rpm ff8236d4add9ebb377799a42199130e2b2d0d56d4a6e388080c45f9eaec8dfcb ALSA-2025:7903 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756) * kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CVE-2025-21966) * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-modules-5.14.0-570.17.1.el9_6.aarch64.rpm 00ea569727156986dbfbd39bfa529fa2607bb24ad4c3e2f1b8caa064918bdf32 kernel-rt-5.14.0-570.17.1.el9_6.aarch64.rpm 0ed243737af0935e8c74d212588b1d42b35952dcddfe099068fbbe8a19e8f80b kernel-rt-debug-5.14.0-570.17.1.el9_6.aarch64.rpm 16463b1aaee6dbf47143ad7e1512b1b53707b7401e9e4b65dbcc7ea5aaf14867 kernel-rt-modules-extra-5.14.0-570.17.1.el9_6.aarch64.rpm 2be70099c6e6f7f304c00e499c487b8cda28a1dd58da45326e92ea2d49d3180f kernel-rt-64k-debug-modules-5.14.0-570.17.1.el9_6.aarch64.rpm 2e91cb5aee12d38f7edddcb4cdd52108e824adee41a082519d57b627adb01628 kernel-rt-64k-debug-5.14.0-570.17.1.el9_6.aarch64.rpm 40f448dabc8dd56aa3f9e19713435682b68bfd31abd250ccf17f0a011bf97738 kernel-rt-64k-core-5.14.0-570.17.1.el9_6.aarch64.rpm 47cc0aa470f097446ff521cc82e11822690ab0b07e5eb41acc2e801afed00f05 kernel-rt-64k-debug-modules-extra-5.14.0-570.17.1.el9_6.aarch64.rpm 485d8ee18c44d67364ea436e62fe1dd01609caa74235dd78e3d42b0797b0f68f kernel-rt-64k-modules-core-5.14.0-570.17.1.el9_6.aarch64.rpm 4bb27cb511286360c48bfa65e4c529bb1e897db58bf8734a4309a18d08175b85 kernel-rt-64k-modules-5.14.0-570.17.1.el9_6.aarch64.rpm 4dc8d645eef3af97be65a6c0e398d170eaf1d8402cba2fbec58c8930859aafda kernel-rt-64k-debug-modules-core-5.14.0-570.17.1.el9_6.aarch64.rpm 589296b7d3d652147fb81b6610a6b874b1981d30bad806ca492775e742ba42b5 kernel-rt-debug-modules-core-5.14.0-570.17.1.el9_6.aarch64.rpm 606bc41e6e4dc44a88ef72432c0503a0951f9f7231c1a05eb48613fcdc4c5fc3 kernel-rt-debug-modules-extra-5.14.0-570.17.1.el9_6.aarch64.rpm 61be8fc8af90dae5e8af8e319aef6667046ae23ae4d82725cbc76d2735517e29 kernel-rt-64k-debug-core-5.14.0-570.17.1.el9_6.aarch64.rpm 65015cd74d0a12d725886569cdf674e7c89c9af28f5a3ede9453161d7ace3fe0 kernel-rt-debug-devel-5.14.0-570.17.1.el9_6.aarch64.rpm 656c1044d58bcda28be9cf7ad8bdc79753cfce5b1fc1ea911dccbd540e64bbd5 kernel-rt-debug-core-5.14.0-570.17.1.el9_6.aarch64.rpm 6bd05967bdb556b16d2b223c8015c3c1b03c33e676529bcc8fc5d6af8592d4f4 kernel-rt-64k-devel-5.14.0-570.17.1.el9_6.aarch64.rpm 7b63bc9e10452cb986900d445ee5a301d857e8d81a3520f76fc660a65644ce5a kernel-rt-debug-modules-5.14.0-570.17.1.el9_6.aarch64.rpm 7f2058bd089e6e9c64bb0890c605b1855ede22afd98d5ca15954104df115ae59 kernel-rt-64k-5.14.0-570.17.1.el9_6.aarch64.rpm 851910e949577a1c93a60e2b32310b7f1008df8679f3ee4555f6c49f7e0ba5ba kernel-rt-64k-modules-extra-5.14.0-570.17.1.el9_6.aarch64.rpm 8e505c76b0bdd4d0d9b2b986ec0db44c7e78d38f34061d41864b3743f873a7ab kernel-rt-64k-debug-devel-5.14.0-570.17.1.el9_6.aarch64.rpm 97bcdb28687682e8c5a1adc6678b5b80a56a51568c817ca6b485de3ae647dba9 kernel-rt-modules-core-5.14.0-570.17.1.el9_6.aarch64.rpm b9a399cc13776a754c18f908d7417593343a48fa0f8fc024362ff66ea5142f80 kernel-rt-devel-5.14.0-570.17.1.el9_6.aarch64.rpm c0d1c1c9b4c0ef1e13e5381bcba6ff266ebc2a6fb31560507911142a3095c233 kernel-rt-core-5.14.0-570.17.1.el9_6.aarch64.rpm d30efcace3cf12e62d002967ba0efef89e109044831e5ac993b82f45cb945226 ALSA-2025:8142 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: cifs: Fix integer overflow while processing acregmax mount option (CVE-2025-21964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-5.14.0-570.18.1.el9_6.aarch64.rpm 0244e73ab8c5ca101bf9a0363cee9cbd649adbe8943c365877e509c87a93f094 kernel-rt-debug-modules-5.14.0-570.18.1.el9_6.aarch64.rpm 2a5bc1a0544e793a50ddde82e9d0ac30f9d426850c8d7b6f3790ce6f2ea73326 kernel-rt-64k-debug-5.14.0-570.18.1.el9_6.aarch64.rpm 31027e79256582cc159ff347194cd6cb26bc2e4a000564b3f08d12c6fb102b5c kernel-rt-64k-modules-5.14.0-570.18.1.el9_6.aarch64.rpm 33815ef0a7e64f3e6b1fb05e9b4e69d3b9dfa39e4371c3d6424879c582dc2354 kernel-rt-debug-core-5.14.0-570.18.1.el9_6.aarch64.rpm 4ce28c4af373c3c9e567307c493eafdf7325c550c8dfea68eab5aa7fdbcd42ad kernel-rt-5.14.0-570.18.1.el9_6.aarch64.rpm 571d77b44f60835f4de319d6f761938b06fa7b98521216e989b7c24c9cc88bdd kernel-rt-debug-modules-extra-5.14.0-570.18.1.el9_6.aarch64.rpm 71201b7bc7402f57ad9561ac0008ed5fc582675440bcd996e8f43f7ce67949a8 kernel-rt-debug-5.14.0-570.18.1.el9_6.aarch64.rpm 97562e761377f371d945e21cbc7e6986a6842de15ff3a515f4acaf9e81b0fe9b kernel-rt-debug-modules-core-5.14.0-570.18.1.el9_6.aarch64.rpm 97deb7fcf884ce52ffa96a182580c24e1eff19bfac2f6e4b72a7e59df2e49cdf kernel-rt-64k-core-5.14.0-570.18.1.el9_6.aarch64.rpm 97e1119335b735556eac0ec3d544cb6510ddea8dd8014e8dc35e4ee746cf7300 kernel-rt-modules-extra-5.14.0-570.18.1.el9_6.aarch64.rpm 9b8af1ecdb21c213bf5b48ed40942ff87dc980a556549854aa878775bd28b0b7 kernel-rt-64k-debug-modules-5.14.0-570.18.1.el9_6.aarch64.rpm a146baf9a1e5d254afface3769c31ceec3e2e4ccbfc03c9e9fb4832a60845026 kernel-rt-64k-debug-modules-extra-5.14.0-570.18.1.el9_6.aarch64.rpm a3b5d03507014e6b9c706b742530933cd023d6302e0cf5111c2c5a281c1ba5b4 kernel-rt-modules-5.14.0-570.18.1.el9_6.aarch64.rpm a85303496b6452463753cc9dd79f771faf000af05547b50213a5773525873220 kernel-rt-64k-modules-extra-5.14.0-570.18.1.el9_6.aarch64.rpm abffedb4229497a56d96eaa705d74a6ca0c0f86d3dba21af326143ed61447ba7 kernel-rt-64k-debug-modules-core-5.14.0-570.18.1.el9_6.aarch64.rpm b9dd09c4e6878fa14891ea5eb093bfc9715491e8dd310a2c5ad534ccd8cfd407 kernel-rt-debug-devel-5.14.0-570.18.1.el9_6.aarch64.rpm bed0f3a826a13a211b3237413356927e2fe22f5c2e3222935532fd3cbecc046f kernel-rt-64k-debug-devel-5.14.0-570.18.1.el9_6.aarch64.rpm ce001c2411a48ebcfee80606e06a212f97b128346882bb6a9e22b85d22bd83fa kernel-rt-64k-devel-5.14.0-570.18.1.el9_6.aarch64.rpm d27fec2f873d4386bce38776828e76e835a098006c8195f75389ffd1037b788b kernel-rt-64k-modules-core-5.14.0-570.18.1.el9_6.aarch64.rpm d3bb1c9783ca044ad1bfb2fc7c575ccca73c82fb3958c12152c0a63f5eee3cc2 kernel-rt-64k-debug-core-5.14.0-570.18.1.el9_6.aarch64.rpm da4d4d401f14d386c946134801a035a59e127c39b472cf316dd4118534599001 kernel-rt-devel-5.14.0-570.18.1.el9_6.aarch64.rpm e064fe227ef9d45257e10e363b5ae91bd7437b24cd14c1ea7633dcfd3b5709a1 kernel-rt-modules-core-5.14.0-570.18.1.el9_6.aarch64.rpm e4021a16fce345ff6c6965ac50df0a5e34bdadce66e78cc122c7d1d475146546 kernel-rt-core-5.14.0-570.18.1.el9_6.aarch64.rpm efd1a5320daf7388ca54196cb82d3c71893e10e1e52a82014012729816c61be6 ALSA-2025:8333 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Use after Free in gru_set_context_option leading to kernel panic (CVE-2022-3424) * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-modules-core-5.14.0-570.19.1.el9_6.aarch64.rpm 04a4da26159e1d9129f32274bbfeda83a894e6c187f8eec4a7229bc48378dfd2 kernel-rt-5.14.0-570.19.1.el9_6.aarch64.rpm 1ee2ca08b4ee082fd10d975991fa4ba67f66ecb4d5bdf3b6c04f5222bd694492 kernel-rt-64k-modules-5.14.0-570.19.1.el9_6.aarch64.rpm 31abe11a05dfdd4b7c6d2c179583e78b10afeae4cad1d9491227b0d0da8c9f00 kernel-rt-debug-modules-5.14.0-570.19.1.el9_6.aarch64.rpm 3e13e020eaae857bdfa8c24b9d0b54344335a2e4aae11f0d5a967b9e26ed43bd kernel-rt-debug-core-5.14.0-570.19.1.el9_6.aarch64.rpm 4359452ca8e8ecc1b87208712e6fd36475394bfa339c919f1faf4e70320ffced kernel-rt-core-5.14.0-570.19.1.el9_6.aarch64.rpm 47b22088ff93062d6d55b7d67ace0b0ddd3bd7ab32d04c240a13af4888eff540 kernel-rt-64k-debug-5.14.0-570.19.1.el9_6.aarch64.rpm 4e1abca8312ff905e98986f98eafe1910fb117af7157af4cd9b90354652f7917 kernel-rt-64k-5.14.0-570.19.1.el9_6.aarch64.rpm 4e90311e7ca62217d40e36fa28d5fb9afa7370afc8dbaf72d5e5d3cf7dffcaa2 kernel-rt-debug-modules-core-5.14.0-570.19.1.el9_6.aarch64.rpm 551e16c97121a5b6208953f281ca5b5a2bcdba2466ea69e9778722c15eadf01b kernel-rt-64k-core-5.14.0-570.19.1.el9_6.aarch64.rpm 590c822196e403f052aa19b954bdf762c57a51adcd5936fe6ea9c9de2866c827 kernel-rt-64k-debug-modules-core-5.14.0-570.19.1.el9_6.aarch64.rpm 6a956bc665576a006c53a4c32c9ad2f277c2ac38acd01bbdca29fc0ed045bcc4 kernel-rt-devel-5.14.0-570.19.1.el9_6.aarch64.rpm 712455c3dffb07432b52a7895c79cec948487f6ba116b8e2605cd8949d31c865 kernel-rt-debug-modules-extra-5.14.0-570.19.1.el9_6.aarch64.rpm 87bbac0e7cbcc0c6578cf6b912b1fe6f188264a8b29ce575a1255ff4c667ae4c kernel-rt-64k-debug-devel-5.14.0-570.19.1.el9_6.aarch64.rpm 8caa8610eb4d5b8663be95166ca8775665051ad76457e543d301d504c924aefa kernel-rt-64k-debug-modules-extra-5.14.0-570.19.1.el9_6.aarch64.rpm 9301a9346e412babd7a293bf9cfc4709ba9d7e2327baf4d23534802bd91c9dee kernel-rt-modules-5.14.0-570.19.1.el9_6.aarch64.rpm 94cb2ab47e20bc9489c2c37311ad23f69be16382d52d7d17df033a1a40596913 kernel-rt-debug-devel-5.14.0-570.19.1.el9_6.aarch64.rpm 9e06000a11a10bf7c9af44aeed54532c276818241dcd90e36d75dffa92d4e256 kernel-rt-modules-core-5.14.0-570.19.1.el9_6.aarch64.rpm a122e1f6cf0f673e502fd3067ea77f322426b8c548cac36ea75b4b59e552a3f6 kernel-rt-64k-modules-extra-5.14.0-570.19.1.el9_6.aarch64.rpm b1f4fc91e17e4d84355c0b42f102b9166465f2d72a3defedc353e7cbaf662a81 kernel-rt-64k-debug-core-5.14.0-570.19.1.el9_6.aarch64.rpm ba7fccc28a463dd4bf38db20f92a778c28ce790c540461c0f9c31026faa2dd5b kernel-rt-modules-extra-5.14.0-570.19.1.el9_6.aarch64.rpm d1d4eaeded7feb30ee65db3e38fcd496c4e4e2a58a978003b46f0899dc76c201 kernel-rt-64k-devel-5.14.0-570.19.1.el9_6.aarch64.rpm dbd331e1a3527367ff23f8f207e033465bcb26ea09fa35e1f889bc5b7030b4e8 kernel-rt-debug-5.14.0-570.19.1.el9_6.aarch64.rpm e4b59401b2bd9fe65d2d3083dac4ff6edb2a9c471e0898efac1ddfe1d158aeec kernel-rt-64k-debug-modules-5.14.0-570.19.1.el9_6.aarch64.rpm ea5cc850d27cdb628f3fdd10e4afd82781537ef5f59cafbe5b6f25d65d0d537a ALSA-2025:8643 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926) * kernel: vlan: enforce underlying device type (CVE-2025-21920) * kernel: xsk: fix an integer overflow in xp_create_and_assign_umem() (CVE-2025-21997) * kernel: net: fix geneve_opt length integer overflow (CVE-2025-22055) * kernel: ext4: fix OOB read when checking dotdot dir (CVE-2025-37785) * kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CVE-2025-37943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-devel-5.14.0-570.21.1.el9_6.aarch64.rpm 13077f6ead5d59c3a86ed0491f6746807a2e8aca87458672770e524834a34b0d kernel-rt-debug-5.14.0-570.21.1.el9_6.aarch64.rpm 1c9563981f76cc6d1bd84bca9b3eb04b37326b2af24cb85fec43748778d05fd2 kernel-rt-devel-5.14.0-570.21.1.el9_6.aarch64.rpm 34dfb8f2ba450359fb6dc910f1149ff0ceb61c7c91da5ddf92fb1d5d01f66cd0 kernel-rt-modules-core-5.14.0-570.21.1.el9_6.aarch64.rpm 3f08ae859f98ec3e0a3255e2cef360bfb7e6e9b8b94cea8068794339d8c47015 kernel-rt-64k-modules-5.14.0-570.21.1.el9_6.aarch64.rpm 4fb8b70ac9e3b1234893262c70d0d416f1a5ad6f19fe9570d4936adcfcef2857 kernel-rt-debug-modules-core-5.14.0-570.21.1.el9_6.aarch64.rpm 542e5122959b4f3abdd13146cb34d7973b615e511f643313e4779a3ddfe6205a kernel-rt-debug-modules-extra-5.14.0-570.21.1.el9_6.aarch64.rpm 63e7b7a134bcc8e241fde09af8cbcfd8e9b09e491726a12b404013d161e45a50 kernel-rt-modules-5.14.0-570.21.1.el9_6.aarch64.rpm 6ab2ea50d60db88aace951f5f357e40c09354b8c2c6d47e78327e8ce9d808d0d kernel-rt-debug-devel-5.14.0-570.21.1.el9_6.aarch64.rpm 81268b4b6137c3fc22ff9a971a8fd14f91760bc717dc953916bec3b586e0ca46 kernel-rt-64k-debug-modules-extra-5.14.0-570.21.1.el9_6.aarch64.rpm 9290ebf11eaecfa99056197842674b39b9c70b9bd3d62a3641cd396129904d32 kernel-rt-64k-5.14.0-570.21.1.el9_6.aarch64.rpm a4036cd8cbdb52ae0df828cde7255598a42d41e269a0f051cea9272b3504635d kernel-rt-64k-modules-extra-5.14.0-570.21.1.el9_6.aarch64.rpm af67dfffa9c6f096eddbc5408c832ae7ff058860ddc1cd8587e0c55502be0472 kernel-rt-modules-extra-5.14.0-570.21.1.el9_6.aarch64.rpm b0f0abb25def9514b1c2c50723d822d2207e73d8c59b9f56565f5cb514dc7551 kernel-rt-64k-modules-core-5.14.0-570.21.1.el9_6.aarch64.rpm b2c622dbd69f18b2b9ce2bfb39eb541be67621e4570cdf77dce2ee905e25c060 kernel-rt-64k-debug-core-5.14.0-570.21.1.el9_6.aarch64.rpm b5e7aea924831abed598a1c73d12950e6d1afdfcdafc54a02ba324b09911ce02 kernel-rt-64k-debug-modules-5.14.0-570.21.1.el9_6.aarch64.rpm c245185678958151e715715fd5012371caa978a707d86c2d89530485a3d6402b kernel-rt-core-5.14.0-570.21.1.el9_6.aarch64.rpm c35562ec96be6fcee72e85a80119ae9dd7fc5beceba7fedbfc3fd90cae63a223 kernel-rt-64k-core-5.14.0-570.21.1.el9_6.aarch64.rpm c763872020867324292d0f4e097097badd1e6cf94e7ea334851d1b94b9dee5e9 kernel-rt-debug-modules-5.14.0-570.21.1.el9_6.aarch64.rpm d0a7d2bc9e9b437c140746bf848e4358b2bbee959c51810081e1d4502b709e5a kernel-rt-64k-debug-modules-core-5.14.0-570.21.1.el9_6.aarch64.rpm d23c5bc20c157ac846668e1ada4963f9a41d665baeed5962328f66418d0a3a53 kernel-rt-5.14.0-570.21.1.el9_6.aarch64.rpm d966f9aa37628214737d1c8b97d45895de8c1e0c8f487f7e9a03d12ab86839f9 kernel-rt-64k-debug-devel-5.14.0-570.21.1.el9_6.aarch64.rpm de90ad28cdc4da24ef451ee3122c6520e6d21af0e1d496526b799416005ec567 kernel-rt-debug-core-5.14.0-570.21.1.el9_6.aarch64.rpm ecf1098835743076e51d3365c46b0b8c907a42bf3544c3b468cdddb6fcb14f0a kernel-rt-64k-debug-5.14.0-570.21.1.el9_6.aarch64.rpm fa25dcdb038d59f5919d049b13b079d28e77930680c9d8e6cbeea3c9a4a3401f ALSA-2025:9080 Copyright 2025 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961) * kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CVE-2025-21969) * kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963) * kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979) * kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999) * kernel: md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126) * kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-debug-modules-extra-5.14.0-570.22.1.el9_6.aarch64.rpm 054d5f83486aff29d0b76db05056b4e656eb088fa6b5f2cc197e6fa666cf68a7 kernel-rt-debug-modules-extra-5.14.0-570.22.1.el9_6.aarch64.rpm 0d963eff3775eee4d5cf30503f28c26812d0c39d2b4e40ab86853f8600b27957 kernel-rt-64k-debug-5.14.0-570.22.1.el9_6.aarch64.rpm 1027d4f52d4cc7348687b7da6dbf0058d87fe0bc0d2854b0cba9f1562664c603 kernel-rt-64k-debug-modules-core-5.14.0-570.22.1.el9_6.aarch64.rpm 1bff96d5e6d3ede369a2e3b335b9524c7f8de2dfd194f271753bfdaaa6687f58 kernel-rt-64k-debug-core-5.14.0-570.22.1.el9_6.aarch64.rpm 1df6bba157b3b26a9e0ff9ce31d4d755a607f9465b9cdfc152b059b5191f384f kernel-rt-5.14.0-570.22.1.el9_6.aarch64.rpm 4b5b4bc1463aac332d55f73aa436b507357be91c322229ebb8e4c60218f6a302 kernel-rt-64k-devel-5.14.0-570.22.1.el9_6.aarch64.rpm 4edf0dc82dc20b347de3a70092f49d63260f3f6a1de11106fd053fbf4dcef12b kernel-rt-modules-core-5.14.0-570.22.1.el9_6.aarch64.rpm 4f59073f0ebf8aab5c5685e47e76fb7619b38c3dc8397dfe69ae6d1dd21d05c3 kernel-rt-debug-modules-core-5.14.0-570.22.1.el9_6.aarch64.rpm 536d0a340c07c650284bed5b033ec1764b59e58cd58464936b791e72346bb66d kernel-rt-64k-core-5.14.0-570.22.1.el9_6.aarch64.rpm 53f6e5360a2ac6ae803bc5575381174c837dcf8cee418104816b9a249473e7dc kernel-rt-devel-5.14.0-570.22.1.el9_6.aarch64.rpm 599f40455d697e894a11678209b271f04ee2196ee23ae99591a039be244e8cf5 kernel-rt-64k-modules-extra-5.14.0-570.22.1.el9_6.aarch64.rpm 5b2263b4ed26eb34f3f6509608fe3ce862285072f94b6190a70e4c3fbf66a03b kernel-rt-64k-modules-5.14.0-570.22.1.el9_6.aarch64.rpm 5fcbfa69422b38c2214c70445825d5b0bf09dab2e079f65068260d1850026d83 kernel-rt-debug-5.14.0-570.22.1.el9_6.aarch64.rpm 621a0ee8d5cef3ddb9a9c53c0b4eb561d6e4076400dc0148f099026f0dedde9b kernel-rt-64k-debug-modules-5.14.0-570.22.1.el9_6.aarch64.rpm 71d24da5bd85f7dcc9bfb367b30a73d9a24837b809f5a89784271bc423893855 kernel-rt-debug-core-5.14.0-570.22.1.el9_6.aarch64.rpm 77aa9b4edaf496cdd512b9aab47c054615822e97f59a83841bb224e1814d1467 kernel-rt-modules-5.14.0-570.22.1.el9_6.aarch64.rpm 79227835ab6aa5533f281b39d189a42824a1e58b0607fe170d7303224bbba617 kernel-rt-modules-extra-5.14.0-570.22.1.el9_6.aarch64.rpm 839df8799824e626390f000ff9a9869b44f23550858efde336af31dad2bd6f07 kernel-rt-64k-debug-devel-5.14.0-570.22.1.el9_6.aarch64.rpm 908bc18b74fdb2b185730910a2925408e8f238c5df12f071839994ee85aa7eef kernel-rt-core-5.14.0-570.22.1.el9_6.aarch64.rpm 9f5f93c01e72573910f5e780b653b34aca49d2aecad77635bbdf179ec4bccebf kernel-rt-64k-5.14.0-570.22.1.el9_6.aarch64.rpm a2daf7064547ba1c8326dda756138e142227f8abe512264e7659e50acb1c0f0e kernel-rt-debug-modules-5.14.0-570.22.1.el9_6.aarch64.rpm acdd7b7b8280920eee7e85997cac68ad46fdd8cd82823a149b64646c3c68ffb1 kernel-rt-debug-devel-5.14.0-570.22.1.el9_6.aarch64.rpm b7f0eecedccdc213daa9e0b4808e38b9f955e7691023809e39b4f6e524ec95fc kernel-rt-64k-modules-core-5.14.0-570.22.1.el9_6.aarch64.rpm b88a632c25cd834dbcad8dc1b1a1f8adba5964f301351507d84b0e47f9512d4e ALSA-2025:9302 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883) * kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919) * kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104) * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150) * kernel: ext4: ignore xattrs past end (CVE-2025-37738) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-debug-core-5.14.0-570.23.1.el9_6.aarch64.rpm 0504b2042f0db40e7156ae36453c9536a9a02db8fa4adfee765f8bc97aaf60d8 kernel-rt-modules-5.14.0-570.23.1.el9_6.aarch64.rpm 17f8842db79706db1ca533182ab7d31617338313d37cb2192f8947f6d642dfd1 kernel-rt-5.14.0-570.23.1.el9_6.aarch64.rpm 1f6499d6eaaf3b9af0a63ad9e23b809c03499fe80b0a4ade90cd76e95701660f kernel-rt-64k-debug-core-5.14.0-570.23.1.el9_6.aarch64.rpm 219f0c5afbdbbd817b7c93ecb20f1ca003eeac0bd780f1a23d4fc524e9e8d0e3 kernel-rt-64k-5.14.0-570.23.1.el9_6.aarch64.rpm 3acdcb61a5c1a48d8a694da89c74150fc60d6089acbd6cea80780a3c6d585887 kernel-rt-devel-5.14.0-570.23.1.el9_6.aarch64.rpm 4641ce81331d18a53cfe1fdd03f16b80be2f8b75aac75d163905efb65a66560c kernel-rt-modules-core-5.14.0-570.23.1.el9_6.aarch64.rpm 5050d1ab6f3c488a9ec86b66bdaf49388331d3b5336569eca7c50242cebe2859 kernel-rt-64k-modules-5.14.0-570.23.1.el9_6.aarch64.rpm 5300ab054a91d0feb9afbe81524406c95c9ba7c696c43c414955090341fa5883 kernel-rt-64k-core-5.14.0-570.23.1.el9_6.aarch64.rpm 5ebadc3c4361a371634b0748118a67079ab90bf6dc7e4777cb337b4113630e5f kernel-rt-64k-modules-extra-5.14.0-570.23.1.el9_6.aarch64.rpm 68237ba501460fb32b0a24fdb5b843b76c1baab75644765ec9c9c4e9d0edbfef kernel-rt-debug-modules-5.14.0-570.23.1.el9_6.aarch64.rpm 769b0563a6754a6019f353d136901b6a942e4d95416eda44b57c43b71236d231 kernel-rt-debug-modules-extra-5.14.0-570.23.1.el9_6.aarch64.rpm 80563ed221fedff854f498584d4e7953f93070b405874aa3ae6ff8d5cae64976 kernel-rt-64k-debug-modules-extra-5.14.0-570.23.1.el9_6.aarch64.rpm 833e491ea602c1e717a89a9e3238df2d17834171af47eec3ab551ed85fbd284b kernel-rt-64k-debug-devel-5.14.0-570.23.1.el9_6.aarch64.rpm 845f19e8ccf00bc01d2b8035e9abc2e0afbc7fe74b56a06876b8b753b0718afc kernel-rt-64k-devel-5.14.0-570.23.1.el9_6.aarch64.rpm a147be989d8b43bc563c0922824710ee9ee676bc6497aba997d172ee748a2472 kernel-rt-debug-devel-5.14.0-570.23.1.el9_6.aarch64.rpm b2ad6c72c8060d02b6e4c2c8966adf50826fbffcc53eb8cf1e2182d7e1cab2ed kernel-rt-64k-debug-modules-core-5.14.0-570.23.1.el9_6.aarch64.rpm b5ad103fabf49d5eb9bcfba4e2aa808d45342ad36aa68291b6cdac2296164b34 kernel-rt-debug-modules-core-5.14.0-570.23.1.el9_6.aarch64.rpm bfa0813f38b29c314849ed84abc6ecc62fd9f9eb9dc9335f887de921adc71bab kernel-rt-core-5.14.0-570.23.1.el9_6.aarch64.rpm c6d532b3df669d168a361041503ae5adc1d55a638e767b8599899e35754df2e3 kernel-rt-debug-5.14.0-570.23.1.el9_6.aarch64.rpm d6bcdbd6ff78e964da5de3d7b24b1db52a9342b955fc0c36191f8a2c397825b4 kernel-rt-64k-modules-core-5.14.0-570.23.1.el9_6.aarch64.rpm d9073fcabc88e4d9d373e141de8cfc969f582926b1c892e025e4d6b5770d2c38 kernel-rt-64k-debug-modules-5.14.0-570.23.1.el9_6.aarch64.rpm e229d1a774eed6423dd17793ea2b4ae23634b5b281bf8aeac2638ab4fad7888f kernel-rt-modules-extra-5.14.0-570.23.1.el9_6.aarch64.rpm f82b49ecc48cac031b4e9558c8973fec5a0a33dcd660b897787cdccbc521c7f0 kernel-rt-64k-debug-5.14.0-570.23.1.el9_6.aarch64.rpm fbe094f14aeb64588d6c6d1cdb0141461aef065a027237eac70674d927fc1b92 ALSA-2025:9880 Copyright 2025 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Squashfs: fix handling and sanity checking of xattr_ids count (CVE-2023-52933) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default kernel-rt-64k-modules-extra-5.14.0-570.24.1.el9_6.aarch64.rpm 114506194f967a0c7b799ae7073f7ff5d1888391069e3369fd5599644ba8d5a0 kernel-rt-debug-modules-extra-5.14.0-570.24.1.el9_6.aarch64.rpm 1162cee16b49df7ea8aeac6aeac2bcf3311f84969da2d99bd247872fe3047ca1 kernel-rt-modules-extra-5.14.0-570.24.1.el9_6.aarch64.rpm 215c9d137b42495edd8e94986fb5e7acc97132db57f20ae52a8ea01fd1bcd11a kernel-rt-modules-5.14.0-570.24.1.el9_6.aarch64.rpm 384a36f50d2e542ab6b31f78ccff76ac9ad8a4c38fdaa3d4b11696c0eee7e304 kernel-rt-64k-core-5.14.0-570.24.1.el9_6.aarch64.rpm 39a93af609d458950f56c345dbb2db2e9606aadd0a46cdde798a1c9de2e77aeb kernel-rt-devel-5.14.0-570.24.1.el9_6.aarch64.rpm 3a2a3095c0ac9423f982e77591120e009e7e20e155bf1d3100cefe48a4e6a4c6 kernel-rt-64k-debug-devel-5.14.0-570.24.1.el9_6.aarch64.rpm 4a8402031e5f6af735a8db8fe34b13f2f0843a728318ec8cc6d030955957743b kernel-rt-64k-modules-5.14.0-570.24.1.el9_6.aarch64.rpm 582c8f96dfb03ba99ea5dc149401c4fe703125b0e4b80ae67f58a86d99fa1cd0 kernel-rt-64k-modules-core-5.14.0-570.24.1.el9_6.aarch64.rpm 5e790984329ac7a759066214fd62b2e3e288b224ec455d0ce3e8ab66f2dbd724 kernel-rt-64k-debug-5.14.0-570.24.1.el9_6.aarch64.rpm 68ee3c00c6b80b8ade6a87c28a42510b57dc49a30dd58c84cae15b9ed9a4bb77 kernel-rt-64k-5.14.0-570.24.1.el9_6.aarch64.rpm 6b5b2e2406fddc688dcb35439f9f9cdeb04efd9e0027fcb83c7c3e0321443769 kernel-rt-core-5.14.0-570.24.1.el9_6.aarch64.rpm 8aa62cce9357b7e3582fc26db009ef36a87ff20ff8529a6ecf6a79bd97f4d3b1 kernel-rt-debug-core-5.14.0-570.24.1.el9_6.aarch64.rpm 912c3a0e7dfa6d2141ab3e5759acd07ecdea4d3dc1552b88dc63cb1d50c93f9e kernel-rt-64k-debug-core-5.14.0-570.24.1.el9_6.aarch64.rpm 93394c4787e2dfc25ca9423200ac527370436afc9202ac9cf4f0f0deb833ac59 kernel-rt-64k-debug-modules-5.14.0-570.24.1.el9_6.aarch64.rpm a303203adb6b04057fc9519f51e597ba24f6a4a64b541a61f85d7e59fa56f3c2 kernel-rt-5.14.0-570.24.1.el9_6.aarch64.rpm b17c40ec7fec28ea3107a920ccebb6b266c036b6c8aab98753da05525cf391ec kernel-rt-debug-modules-5.14.0-570.24.1.el9_6.aarch64.rpm b59927c21f68f8f683a9e8584d170060ce0186fed208263e2c383b2d8bcaba4b kernel-rt-debug-5.14.0-570.24.1.el9_6.aarch64.rpm b730dfb386cb4d1ffdc5f08de2f2335f2b7401de0f29929fed67b5be9aadfd8b kernel-rt-64k-debug-modules-extra-5.14.0-570.24.1.el9_6.aarch64.rpm c34811a1cd65b241f0c64f39df0771f48cd819f387a9dccc0ce48d6a49687373 kernel-rt-debug-modules-core-5.14.0-570.24.1.el9_6.aarch64.rpm c3aecd46cf216bb8c10a0717ab3bcb0c51b2d36aae3e1f7ca4a7bf98511b8fa6 kernel-rt-64k-devel-5.14.0-570.24.1.el9_6.aarch64.rpm e031ce136a5b192007cf98d38b48bd2e1e2b6b5067b2d510885bbded3ad15524 kernel-rt-64k-debug-modules-core-5.14.0-570.24.1.el9_6.aarch64.rpm e9fb86e9a7713b104cca3c3578e8cd8b88d6f597a54cd98a6ce13df97d378181 kernel-rt-debug-devel-5.14.0-570.24.1.el9_6.aarch64.rpm ec80a84e35f5c36c0ff78f70c81bb6de10e151e74eb483ed4b1eeaecd6ff8dab kernel-rt-modules-core-5.14.0-570.24.1.el9_6.aarch64.rpm f29ef129591e192f1493051d96a32039b0109a71662ac7de32fcc6fb3672ff5c ALSA-2025:A002 Copyright 2025 AlmaLinux OS 0 1 Moderate

open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines. Security Fix(es): * open-vm-tools:A malicious actor with non-administrative privileges on a guest virtual machine (VM) may tamper with the local files to trigger insecure file operations within that VM. (CVE-2025-22247) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default open-vm-tools-sdmp-12.5.0-1.el9.alma.1.aarch64.rpm 7d2fe40db7dbdcc0411c189fef81e5dade696c6ddbca4550472c318e21e1a315 open-vm-tools-devel-12.5.0-1.el9.alma.1.aarch64.rpm ad1d252d9051475332e5595def4c75f3ac891ccca38a51d6034f466868e44f37 ALSA-2025:A005 Copyright 2025 AlmaLinux OS 0 1 Important

libblockdev security update

libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology (like LVM, Btrfs, MD RAID, Swap,...) is implemented in a separate plugin, possibly with multiple implementations (e.g. using LVM CLI or the new LVM DBus API). Security Fix(es): * libblockdev: Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. (CVE-2025-6019) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_6_default libblockdev-swap-devel-2.28-13.el9_6.alma.1.aarch64.rpm 0c4416b6ee4b4a5ad3552dc9274701a833d49b3cb2297de5fee8cb0c46ac21ae libblockdev-nvme-devel-2.28-13.el9_6.alma.1.aarch64.rpm 1733ffe87e954260cb68ad57d24bf519ec688cc3e5eb1689e32df35c6277f26d libblockdev-dm-devel-2.28-13.el9_6.alma.1.aarch64.rpm 1abb6240988455bcc844d7acb17a952d6a2d6996179963d7b6021455f20c7464 libblockdev-crypto-devel-2.28-13.el9_6.alma.1.aarch64.rpm 21dc8e3922c0e29b833dfb7b73a235312953dddb7777b58b351570eec6b82432 libblockdev-fs-devel-2.28-13.el9_6.alma.1.aarch64.rpm 38152879fd56668951afb818e9f439d8b0db9cbc51424b831f205aebefbe1e96 libblockdev-kbd-devel-2.28-13.el9_6.alma.1.aarch64.rpm 45edfa5d6733708a44fad8a3e5e8f16679217fa974f30239ed29ed39299b6ece libblockdev-mdraid-devel-2.28-13.el9_6.alma.1.aarch64.rpm 56c56fa4ee18d51c2422404eaa58772c9e1d85c3a7a36d4abf6d9426fd4efb3b libblockdev-part-devel-2.28-13.el9_6.alma.1.aarch64.rpm 64af8831351ae6ea63a8352413ea37447864851ace5f655bcf9ef4e6f326886e libblockdev-lvm-devel-2.28-13.el9_6.alma.1.aarch64.rpm 7a2ba24d3c66f7fd34a82e95a20db71e6461bab909f967a4ad2e795f9ee87bea libblockdev-mpath-devel-2.28-13.el9_6.alma.1.aarch64.rpm 7eba17093befa02be2d50fe3e596471a8b3abe1caa120cfd045b60f23261df66 libblockdev-devel-2.28-13.el9_6.alma.1.aarch64.rpm 9d651072b8948a38d999b7dd63b0b2a5a50b5d6f55b6476c1792c4ddd0889c82 libblockdev-lvm-dbus-devel-2.28-13.el9_6.alma.1.aarch64.rpm a4eb3fbdaa4a7e87fed592f82db492e6f5162cb296b5a79d4751afb0bda6c799 libblockdev-loop-devel-2.28-13.el9_6.alma.1.aarch64.rpm a5727779777e26448eccb58a1ce1c045742013da792a3df214495b9d921f1c11 libblockdev-nvdimm-devel-2.28-13.el9_6.alma.1.aarch64.rpm bb4af0ad05fb6ffa65097f6a6c107f123ff5feefcea3107848a18088a3f17507 libblockdev-utils-devel-2.28-13.el9_6.alma.1.aarch64.rpm d8fcf6f75d0652e0bd088c8caa0e345847dc8a80dca6c87d423a42adc442e1fe ALSA-2026:0445 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806) * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840) * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883) * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-debug-modules-core-5.14.0-611.20.1.el9_7.aarch64.rpm 100b66fc66a3f12a11cfa0d72722244021e0caac1e058bf92fc4f831ebc3a94d kernel-rt-debug-devel-5.14.0-611.20.1.el9_7.aarch64.rpm 1c0c6e2fc56b84ad97eb3dbd13bb35177b1f67cc54b8c6237556e7db8c70ad46 kernel-rt-64k-debug-modules-5.14.0-611.20.1.el9_7.aarch64.rpm 1fe848e1f085c4a9d72bc7fb991b7713cd8f58ebb75aa0b69c9d514683805e65 kernel-rt-debug-modules-5.14.0-611.20.1.el9_7.aarch64.rpm 228abe166187d4f34b97e80985d196c723358f38e18c8f225eacae7c89443cae kernel-rt-core-5.14.0-611.20.1.el9_7.aarch64.rpm 2c713ca4089df59dc8fe55371b5d7e0d80b9b229bd4a86b16d248d29f82052a6 kernel-rt-debug-modules-extra-5.14.0-611.20.1.el9_7.aarch64.rpm 455629ad43e97d0bc38032905e6861414802b5a97ac360aee2c94aa9d155a511 kernel-rt-5.14.0-611.20.1.el9_7.aarch64.rpm 596dcf58b7384acae3e82f42db36b6a90d5811707f5b202941e29de80584717e kernel-rt-64k-debug-modules-core-5.14.0-611.20.1.el9_7.aarch64.rpm 6a9750a59f4d8c39e54085376a4972a6034abe798d008ba8c33103047cdd9348 kernel-rt-devel-5.14.0-611.20.1.el9_7.aarch64.rpm 702d11ec1b250321bf07a9e029ed795b626331cd1a5e927245265fba68f19bff kernel-rt-64k-modules-5.14.0-611.20.1.el9_7.aarch64.rpm 89f9499d3370fcd8e896b8a96423bedec2100e0f2f6c2df6d02bd7eccbc7193e kernel-rt-64k-debug-devel-5.14.0-611.20.1.el9_7.aarch64.rpm 8dac868661cdb628ec3c92875b97b72d0c00c58b5b8622ddef524813d21541cf kernel-rt-64k-core-5.14.0-611.20.1.el9_7.aarch64.rpm a181dc434ab1c3c8c16a4afd98130680a921b192b161908099aa4c71bea513b5 kernel-rt-64k-devel-5.14.0-611.20.1.el9_7.aarch64.rpm a909a9aeecc51908bc339d314bc4b8d06af743df6e2ff39b66d24a1e6cfc0522 kernel-rt-64k-debug-modules-extra-5.14.0-611.20.1.el9_7.aarch64.rpm b46c74f8a7294985067518e41d4dd5b812072265ff7d1d9b58e4cd8a0c79426e kernel-rt-64k-debug-core-5.14.0-611.20.1.el9_7.aarch64.rpm bae8a3b7b2193d0335f03860e64ff1b9a4fd903fba29e6daacc3d815b24ce0f1 kernel-rt-debug-core-5.14.0-611.20.1.el9_7.aarch64.rpm c17bba3532207811a20650543892a27433ae14f99a7e71098f3998f69d41aa1f kernel-rt-debug-5.14.0-611.20.1.el9_7.aarch64.rpm c4181e08713192b96101ac32000648cdc0141818b41cbfab00cff5370783b174 kernel-rt-modules-5.14.0-611.20.1.el9_7.aarch64.rpm c720687eb7f967e1d0a2cf073fdde48ad252d66a1474174c50fe80329c100f20 kernel-rt-64k-modules-core-5.14.0-611.20.1.el9_7.aarch64.rpm ca6fad1f901b27c8b09b19cd5ddd425ad1d48539668df57c9aa42b09380ca4d1 kernel-rt-64k-5.14.0-611.20.1.el9_7.aarch64.rpm dc1ee54cb619c765edbc2e2127e9ada7afd5b79818a098fe16a9e6ce75ca5462 kernel-rt-modules-core-5.14.0-611.20.1.el9_7.aarch64.rpm e39aaef880d3c4994de4f6d510657fbafc3f0b0a579a7171e6f6ac5ea813e0df kernel-rt-64k-debug-5.14.0-611.20.1.el9_7.aarch64.rpm fa565f7dad8f4eaa03e29243bff0cd434a1664f92fa683c516703d99cabaeacc kernel-rt-64k-modules-extra-5.14.0-611.20.1.el9_7.aarch64.rpm fd3e7bb454c53aa9c89b64a04d99b338106e669daf7f4feb8dd1c48c9ca115eb kernel-rt-modules-extra-5.14.0-611.20.1.el9_7.aarch64.rpm fd9923edad003136cb7a171382c6c5287dbae9ff1dfa0252e5912c50b5fccc59 ALSA-2026:0793 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/xe: Make dma-fences compliant with the safe access rules (CVE-2025-38703) * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933) * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277) * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-modules-core-5.14.0-611.24.1.el9_7.aarch64.rpm 075ef5a12fdb5d3e6e2be516e36502d9f3c4496822af24dc2659651114208d62 kernel-rt-debug-modules-extra-5.14.0-611.24.1.el9_7.aarch64.rpm 07658eb5545c1596635880a2d897a85eabc3bbdd496e67e3ed1e94d4729df706 kernel-rt-debug-core-5.14.0-611.24.1.el9_7.aarch64.rpm 0b6b1dcb68a4f5c961ade6a727cfdcf07a50c5b5176729fec5f00ea934e7ea58 kernel-rt-debug-modules-core-5.14.0-611.24.1.el9_7.aarch64.rpm 0c56c814980c7ecfb7c751f41677571ff8a49e1cbf696527b4dc642d18558525 kernel-rt-64k-devel-5.14.0-611.24.1.el9_7.aarch64.rpm 0f055aaea3bf497b0126f574a072f7435222933fafb13e05f2569c49ebf406a6 kernel-rt-devel-5.14.0-611.24.1.el9_7.aarch64.rpm 0f53777011ac3d91b02db4ec549ab4efc44218b57f0896f210dd179317d57c82 kernel-rt-modules-extra-5.14.0-611.24.1.el9_7.aarch64.rpm 2027fae67740680501cb477fa0a72b2f017a8ccba6b447f0f33d652fa97cdf20 kernel-rt-debug-devel-5.14.0-611.24.1.el9_7.aarch64.rpm 27a92be64c9a0b9f6f621888ab2dfab737d7b9d3800ddb3e37706d9cc94335db kernel-rt-modules-5.14.0-611.24.1.el9_7.aarch64.rpm 37cbfde38015c3a59e157e8f0be4d00eb728f482140d067068fd6424e45675ca kernel-rt-debug-modules-5.14.0-611.24.1.el9_7.aarch64.rpm 4ca67ca200c6e1d03fd7e649471ea1cd5279557e636cc846dea48d876b17fb54 kernel-rt-64k-modules-extra-5.14.0-611.24.1.el9_7.aarch64.rpm 4fdeac57224576f80a1fc82190139f62dea36334c4370724e3d80284ab788c69 kernel-rt-64k-debug-devel-5.14.0-611.24.1.el9_7.aarch64.rpm 578c4a06e3ff8b00195035389b94a656fd6c1f44c957fbf244179fbc1139340b kernel-rt-64k-debug-modules-core-5.14.0-611.24.1.el9_7.aarch64.rpm 6686b6de12ffa82d8f16c75b9846d1caa601b1759f923fc4100a2a4e88076bc9 kernel-rt-debug-5.14.0-611.24.1.el9_7.aarch64.rpm 77e535aff3c384df7a1a70a3fc26d560f3f3845cac4dab79b66c6f09252f5838 kernel-rt-64k-modules-5.14.0-611.24.1.el9_7.aarch64.rpm 863f18f71d06e537700018a7f5787cb4ce774c3188d0e97e7d609f732352dfb9 kernel-rt-64k-debug-5.14.0-611.24.1.el9_7.aarch64.rpm 8942d2e3ea212d8a3c766de9cb328ce72a57502b9b5b955b3e64c781921b1a25 kernel-rt-64k-debug-core-5.14.0-611.24.1.el9_7.aarch64.rpm 9eeb37571ebf8831960a7fabc9a70fbd15805f905bb1fbb9ebea71e279afffc8 kernel-rt-64k-debug-modules-extra-5.14.0-611.24.1.el9_7.aarch64.rpm ac5a75981f1351b3e5a205d38274b771cdaecdee4c570aef86579581fcffef1f kernel-rt-64k-modules-core-5.14.0-611.24.1.el9_7.aarch64.rpm ae65125c30bbb8234d7f2a2a26fbe52119a338b30760e941b8689dd5493219b2 kernel-rt-64k-debug-modules-5.14.0-611.24.1.el9_7.aarch64.rpm bf11f34431ee78440e0f4c958a88a0f872b3b879323eb5fadc522578a6066258 kernel-rt-5.14.0-611.24.1.el9_7.aarch64.rpm c4152b9914f70426c804af959d0c6d8012266c296de6c01bef720ea858cf05ad kernel-rt-core-5.14.0-611.24.1.el9_7.aarch64.rpm d8f9ace7278dc9a65524c425d850394eb51cc4dc4f109e17eed8709e820a6b85 kernel-rt-64k-5.14.0-611.24.1.el9_7.aarch64.rpm dff310a83a8b29bed7f58ca2615f8f0d9f81a1a7afa88a8f615fa1ce8adad8c5 kernel-rt-64k-core-5.14.0-611.24.1.el9_7.aarch64.rpm f29e538db8efe5870859a69c8a9df2fe1e03f7f357077d5d2bc4c48046fb3390 ALSA-2026:0933 Copyright 2026 AlmaLinux OS 0 1 Important

java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default java-25-openjdk-crypto-adapter-25.0.2.0.10-1.el9.alma.1.aarch64.rpm 25c56363d7c64210e5daa49aea0f506acee206e0c3542437ddd6b91ba9cf9da8 java-25-openjdk-crypto-adapter-slowdebug-25.0.2.0.10-1.el9.alma.1.aarch64.rpm 35945651421b056202bb9e45d3a0b4c315220431740167a0931b86f0900454ff java-25-openjdk-crypto-adapter-fastdebug-25.0.2.0.10-1.el9.alma.1.aarch64.rpm 543396f82f932cd7932760d010972c693ea37a5d87eb22e98529fdf727b45046 ALSA-2026:1143 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting (CVE-2025-38141) * kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349) * kernel: drm/xe: Fix vm_bind_ioctl double free bug (CVE-2025-38731) * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248) * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258) * kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service (CVE-2025-40294) * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301) * kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-64k-modules-5.14.0-611.26.1.el9_7.aarch64.rpm 0071f3510466c8c039010de4fc60d1f10de47e9b0220c539984b7b6671b3e1b1 kernel-rt-64k-debug-devel-5.14.0-611.26.1.el9_7.aarch64.rpm 018de6c84a9769ee6252c0d25d66ab4cadb930a84a0155d406c1e01a2f1232cd kernel-rt-64k-5.14.0-611.26.1.el9_7.aarch64.rpm 0f6428f330df3718b433516a97855b2c4e55be98261bb59ad9a5cdd77a8c66d5 kernel-rt-64k-debug-modules-5.14.0-611.26.1.el9_7.aarch64.rpm 364a9fbcccf36b940a43f9d1ae605d7023279357c880135ea5a8e4e8d290cc3f kernel-rt-modules-extra-5.14.0-611.26.1.el9_7.aarch64.rpm 42d00eeebef30c7f765bbf0ed14adbc8c3214cd2482532adde589862a4b9287d kernel-rt-devel-5.14.0-611.26.1.el9_7.aarch64.rpm 4b136bb754e5f7fb6190774a951988ca02d07474e1cadb2ce3d400f7cd47cd0c kernel-rt-debug-modules-extra-5.14.0-611.26.1.el9_7.aarch64.rpm 57c28c27553433f60f90c5ea6cbbad8d1068484f89d3efcaed3931c5a457a3d2 kernel-rt-64k-modules-core-5.14.0-611.26.1.el9_7.aarch64.rpm 5dd3c39c0aa3f80f7aba2b3fa877e4549a8607ab233644d84883d26a91accf38 kernel-rt-64k-debug-5.14.0-611.26.1.el9_7.aarch64.rpm 600fcc736d3a8b86e5b7c42ae55fe87188ecb01367409ecf47baba67c5f826ba kernel-rt-64k-devel-5.14.0-611.26.1.el9_7.aarch64.rpm 6bf3c41833fc8af670081d270d190f766cb91d21dac0bcb2fdb53e69f0c75654 kernel-rt-debug-devel-5.14.0-611.26.1.el9_7.aarch64.rpm 6ec0625fc054b146813a6104f089a5c6db2bd1436463d51deac9b2c0c929cd6e kernel-rt-modules-core-5.14.0-611.26.1.el9_7.aarch64.rpm 726bd2b95a26e66c19eb4b4255f0475de08c2cdc15442f510796a15cea80fe32 kernel-rt-5.14.0-611.26.1.el9_7.aarch64.rpm 79b62a272cbcd778f625bba9d3ba600359c882f2c36cab448a99c57ce7059594 kernel-rt-debug-modules-core-5.14.0-611.26.1.el9_7.aarch64.rpm 7bd81c5a77210051977cc561224e3d4957a83db0a6a23f7dee61f067d0a65582 kernel-rt-64k-debug-core-5.14.0-611.26.1.el9_7.aarch64.rpm 9120d3188f45080d2fa30b0c32452880ad57fd0e2e41f84ac58bcef2f6fedd0c kernel-rt-modules-5.14.0-611.26.1.el9_7.aarch64.rpm 9d94cacd0ef761e8bcbeff7add41374368b44ea4ebad447254decdc76063d20b kernel-rt-debug-core-5.14.0-611.26.1.el9_7.aarch64.rpm b58c117431fdef7d7a0ac337a3c00364e326e7f06258829be267d55c69a5c793 kernel-rt-64k-debug-modules-extra-5.14.0-611.26.1.el9_7.aarch64.rpm b987ef9c78c07e9b4635d307546d6b1d0404bb882e91451a866181b0a2a18607 kernel-rt-64k-modules-extra-5.14.0-611.26.1.el9_7.aarch64.rpm c393be491a0ea4a16349ebcba7c87fa6e1ee2f495f77e2119388af6418f6f2a3 kernel-rt-debug-modules-5.14.0-611.26.1.el9_7.aarch64.rpm c84a7943767c2e4938a26504b62e5b812eaf6c1cb5056762995bb108be3eeebc kernel-rt-debug-5.14.0-611.26.1.el9_7.aarch64.rpm c88fe34a87781a76a9e86bb6929a12bf9f97e274c54f3435035d674c25934d7b kernel-rt-core-5.14.0-611.26.1.el9_7.aarch64.rpm d21a56d4c15a2c03b87a9943b10ee0ec1eb589c6fecd44e3d470843206377147 kernel-rt-64k-debug-modules-core-5.14.0-611.26.1.el9_7.aarch64.rpm e0284beb5664a1d1346e7a82a47d31cd891ce0ba74df8355f3a174bc8b260be9 kernel-rt-64k-core-5.14.0-611.26.1.el9_7.aarch64.rpm fb483be5823d85f05c6fdb42802426c9e40ae8059ecf89161a977e9af9b46d0b ALSA-2026:13565 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-64k-debug-modules-extra-5.14.0-611.54.1.el9_7.aarch64.rpm 07cedbb19936e38a56d98cd087e968a3efcccb418b63aa950d106bf7dc46902b kernel-rt-64k-devel-5.14.0-611.54.1.el9_7.aarch64.rpm 0fbd49a22d051343844ef5a7eaf71054b165c13c44ba1294ff5b400fba503eb6 kernel-rt-debug-modules-extra-5.14.0-611.54.1.el9_7.aarch64.rpm 1b6ef87540231f924769c41fc6cf8ce185d65f6381640db0b47ffed4f25bf6e1 kernel-rt-64k-modules-core-5.14.0-611.54.1.el9_7.aarch64.rpm 47ad52629f0031846a648786d2b31a3cd4104ae1c3caa50a9e0678cc421b6314 kernel-rt-5.14.0-611.54.1.el9_7.aarch64.rpm 5c2af4420f27420c1c9a87e6a1f3fed9b4bfe7ef5633b1ffd8c85d598826bceb kernel-rt-debug-modules-5.14.0-611.54.1.el9_7.aarch64.rpm 5ebb4361acdb60d61135ed60bbeb8b80159308cce9862e1c73ede8e6bc6c31fd kernel-rt-debug-core-5.14.0-611.54.1.el9_7.aarch64.rpm 62936182c5094f076d3b666c07973fcbb183108e3e4c434b4687de72c0fe344b kernel-rt-64k-debug-core-5.14.0-611.54.1.el9_7.aarch64.rpm 62bc3536e2830a86256b98afe828f510b899625cd8170cee23af5294d61e15b1 kernel-rt-64k-debug-devel-5.14.0-611.54.1.el9_7.aarch64.rpm 6a3dad89801e1ac3f56119c0add3e64aaf868d6689d9adf93f5380d80ad948fe kernel-rt-modules-core-5.14.0-611.54.1.el9_7.aarch64.rpm 6b8e2b12e7e9615f56762cd512a8af4c676ef7fdaed1858a0b5978ea3e4753df kernel-rt-debug-devel-5.14.0-611.54.1.el9_7.aarch64.rpm 7557106420294ab800ef692e1e9802a23fb7c149480ba1645a45e859121eca12 kernel-rt-devel-5.14.0-611.54.1.el9_7.aarch64.rpm 87060876ea78ea4fddbd460af5beac6e74f2351e0763305be75bf86fa3fe0f7f kernel-rt-64k-debug-modules-5.14.0-611.54.1.el9_7.aarch64.rpm 8fb91e4adb5fbca9ee175571fb9880edce24eb81eb8b84d08a63494f5b07225d kernel-rt-64k-5.14.0-611.54.1.el9_7.aarch64.rpm b0f3d58994cb02aed4c175396e79d67197e9f68fd78b2a740e6b49bfc7a0071c kernel-rt-modules-extra-5.14.0-611.54.1.el9_7.aarch64.rpm b5997d868e24accc319edfd2ded7194d38cf7dbfdfb5b58715129d70ad13ce6a kernel-rt-64k-modules-extra-5.14.0-611.54.1.el9_7.aarch64.rpm b7924c62d2251cfbd5d5e2c4d00a66d08f578faadd27b8bc9bf8d65c7fff4bad kernel-rt-64k-debug-modules-core-5.14.0-611.54.1.el9_7.aarch64.rpm bcadfaa956b1326612170101f3785c609faebcbc426b675debd71b5506ec9664 kernel-rt-64k-debug-5.14.0-611.54.1.el9_7.aarch64.rpm c47940311fa80bf80913590ccc33053eaa23ea6f086d2dff79ee937f5b03e6cf kernel-rt-debug-5.14.0-611.54.1.el9_7.aarch64.rpm c5359d84e32093a02828e9cc351e91beec5f557d3d306c971344eed2c28db6d4 kernel-rt-64k-modules-5.14.0-611.54.1.el9_7.aarch64.rpm dd055a8ca9c65a383cc75487589cf35d36d65259278789bb1305d9df8253a638 kernel-rt-64k-core-5.14.0-611.54.1.el9_7.aarch64.rpm e9150c1a14e6209c633c29d1813bd35e24d6ef9281d1175c3b9efb0731970284 kernel-rt-debug-modules-core-5.14.0-611.54.1.el9_7.aarch64.rpm f19505296509ccdeb00040b98d6e112c0c1ef9ab93e4c9b9fc72c85ad9cf0dc4 kernel-rt-core-5.14.0-611.54.1.el9_7.aarch64.rpm f2594124e337b987b52f7655886f013b58e1562ae67f207f696cb34bfd595623 kernel-rt-modules-5.14.0-611.54.1.el9_7.aarch64.rpm f43e21f7c2b7c9bee86795be271f8b466d4653fb767fb2b3aea6195159c31732 ALSA-2026:1617 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVE-2025-38568) * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154) * kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-64k-devel-5.14.0-611.27.1.el9_7.aarch64.rpm 0a6c37ad3d82b3f738f2182698236a47ba5cc42a978769434a9f94ed50f12092 kernel-rt-debug-5.14.0-611.27.1.el9_7.aarch64.rpm 184fe736b8bff877117ac9cca2bfc4e76fcb29c284ad0709bc0e1beca2155d62 kernel-rt-modules-core-5.14.0-611.27.1.el9_7.aarch64.rpm 1f24dbcef47682dbe562bec2dae6eb0bafb07c648f7c0839b8511543c85145e8 kernel-rt-5.14.0-611.27.1.el9_7.aarch64.rpm 25b3ee2939c3140bda24e17593849ca60e95dda3861c9ea4c8d173e501725ba6 kernel-rt-64k-5.14.0-611.27.1.el9_7.aarch64.rpm 261594e3ab895e7a13c3e7457c1ffe25365d63a8bce20e6743ffcac7ada10a87 kernel-rt-64k-core-5.14.0-611.27.1.el9_7.aarch64.rpm 3b2c824d7b0e51b08503832afc4daca426e5b4e852fe88544179690e8343d460 kernel-rt-64k-debug-modules-core-5.14.0-611.27.1.el9_7.aarch64.rpm 3b47d99142eaebb510140990f3ca73c755c2e1406323c0e7ac4a4f1e034dd231 kernel-rt-64k-debug-core-5.14.0-611.27.1.el9_7.aarch64.rpm 4a560fe0a6724edc067446e8ceb9323eba4adf8da297184e934304e30e7e7d0b kernel-rt-modules-extra-5.14.0-611.27.1.el9_7.aarch64.rpm 51fa9e029d49f255612afae7a8499d69d976c8eb4faade3ac8cb4e7b57dd19fa kernel-rt-64k-debug-modules-5.14.0-611.27.1.el9_7.aarch64.rpm 68d1df0ab0444ba4f9465475df96c802c349d8234239af05c050635d999efa89 kernel-rt-64k-modules-5.14.0-611.27.1.el9_7.aarch64.rpm 697bc3fff9a618803f3d2fd8e47ec1afb38a22258330d5bcd353ff5c77b87e5e kernel-rt-modules-5.14.0-611.27.1.el9_7.aarch64.rpm 7d0afd01f51d8f66996b385c8278d80a6c59de165e5f9d4032a3e4a18e0db85b kernel-rt-debug-modules-5.14.0-611.27.1.el9_7.aarch64.rpm 84902ee433ccbd9b2f81dc726f7676f03bfc85f76b796bc6ba32d0991493cd37 kernel-rt-64k-debug-devel-5.14.0-611.27.1.el9_7.aarch64.rpm 8e7a2d60b1c403dc9b5c7a3cc6ee2a2261c95fdc961ccb008a93888afb5ff1ef kernel-rt-64k-debug-5.14.0-611.27.1.el9_7.aarch64.rpm 9b2b636fb232560d8f26bd28aa9d370f4c4ef32373f756d54b29cd0a8fd2f308 kernel-rt-devel-5.14.0-611.27.1.el9_7.aarch64.rpm a21e89d1c0248fd32a4ee187968ed4ad44a30d9874881261177cdda7188037bc kernel-rt-debug-modules-core-5.14.0-611.27.1.el9_7.aarch64.rpm a5f7fc963673e03be654f3204599e04d4e6939eb618569a094736de2aef306f0 kernel-rt-core-5.14.0-611.27.1.el9_7.aarch64.rpm b84f5b41302cc8703af0686cfc9f250de52107161c18fa160cd06a75400e9e94 kernel-rt-64k-debug-modules-extra-5.14.0-611.27.1.el9_7.aarch64.rpm c8dcf0e9d36f485205bc6aa6d15e845a89476e9b0bb6c444abc2cdeb4066cd47 kernel-rt-64k-modules-core-5.14.0-611.27.1.el9_7.aarch64.rpm ca85c234c81772bc902397e9b46ea4af6fa1de0b3f4bb7fa46e34980c86d85f6 kernel-rt-debug-devel-5.14.0-611.27.1.el9_7.aarch64.rpm d1fcded735dbf0adeb1c600a5dad49180c765df72d42bfbfe0a156b12a44034c kernel-rt-debug-core-5.14.0-611.27.1.el9_7.aarch64.rpm deaff9e5943425c256602dfd90e5a6de2eff09e50afa18a3860df4272f534b72 kernel-rt-debug-modules-extra-5.14.0-611.27.1.el9_7.aarch64.rpm e29d9daa0c158fb07c6ac37570e341c8a30bbb61ee1baabd3dfdf566a1611a0f kernel-rt-64k-modules-extra-5.14.0-611.27.1.el9_7.aarch64.rpm fffb20cbf1bf50b889b9a671e302ad640e9742cbde8dc6233210f2cc91fdbec4 ALSA-2026:16206 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-modules-core-5.14.0-611.55.1.el9_7.aarch64.rpm 0674d2b643877799085ef2b677369325f266557c0ed3151035a8e453cb36f06e kernel-rt-debug-modules-5.14.0-611.55.1.el9_7.aarch64.rpm 14aa88e9e44c7bcbbb6d0c3538e1fdf0268727880064043a3f596ba34f81a4cd kernel-rt-64k-debug-modules-extra-5.14.0-611.55.1.el9_7.aarch64.rpm 15eae1f0305cc55d8606d7fc8b295cfb1898aefeeee8bafc55da1b8bba06e527 kernel-rt-modules-core-5.14.0-611.55.1.el9_7.aarch64.rpm 345069bc3a93b6ce445f00d0b5e23f52a9d174f721acf3193f6f9768428016d5 kernel-rt-core-5.14.0-611.55.1.el9_7.aarch64.rpm 465f33542016ba2a7a33f62863aa197493f42009f084e6d09eeeada4d009d468 kernel-rt-debug-devel-5.14.0-611.55.1.el9_7.aarch64.rpm 51b133ce3fc69124f2596c6d291325eb56e42f58d1207c5e5c22f5253a90e55a kernel-rt-64k-core-5.14.0-611.55.1.el9_7.aarch64.rpm 53a99c9073717c9001888dc3b7e9a91c494b5324d6363fb9fb9c33f2f4805c52 kernel-rt-64k-modules-5.14.0-611.55.1.el9_7.aarch64.rpm 66e57ec9861e11d1099fba2376a022dba53eeb6df93cac4c42c8a09fe1588a80 kernel-rt-64k-debug-devel-5.14.0-611.55.1.el9_7.aarch64.rpm 69c04fcd45672ba9388111a7ebe598cb58147ae5fa0aa1bc7c0ea071bae03b3b kernel-rt-64k-debug-5.14.0-611.55.1.el9_7.aarch64.rpm 899a8780c56700d655e0c014661da391f224bea4feb9e4ed95b56e8680ca0f29 kernel-rt-64k-5.14.0-611.55.1.el9_7.aarch64.rpm 8ff7bddf4ff98df650f25b3fc221e1a98a435d4d05c996eb9d4239de1c5bd53c kernel-rt-debug-5.14.0-611.55.1.el9_7.aarch64.rpm 9353db448c84fdb3e92c0a28cc98e4cbab558bf879094654762ad69581172b31 kernel-rt-modules-5.14.0-611.55.1.el9_7.aarch64.rpm 9b0fe1aa1e31963056866e2dfaf4cc19642daf3d8cdaf23ab5353f50c8efd8e0 kernel-rt-devel-5.14.0-611.55.1.el9_7.aarch64.rpm a20feb0b79faf904ed8064040a60f1fd9fd6b53a35aba3f41cc387818ebf44aa kernel-rt-debug-modules-extra-5.14.0-611.55.1.el9_7.aarch64.rpm a85ba1cfdf86072f375cf1555d32eeb8fd6ff7089a2a1b983ad57bdd38d87149 kernel-rt-64k-debug-modules-core-5.14.0-611.55.1.el9_7.aarch64.rpm b574b2ecec3ec14401ad4c111342bc2f9cdbd4d2e882d518a77195c7c8917ce9 kernel-rt-64k-modules-core-5.14.0-611.55.1.el9_7.aarch64.rpm b749276d8efb1a5d984fcb73ca58d6d28808737d57a5a8d0ce0d167b46574cb5 kernel-rt-64k-modules-extra-5.14.0-611.55.1.el9_7.aarch64.rpm b94640b64ef95786aa838e0b41722240c1d5b3ddf0b2bf0292e69e50c2d8decd kernel-rt-64k-devel-5.14.0-611.55.1.el9_7.aarch64.rpm c13622866b47fd1dd6589b79158ffd47d4d3b6013b44adcf6896fecf5b93831c kernel-rt-64k-debug-core-5.14.0-611.55.1.el9_7.aarch64.rpm ce154beb68d8de3d6dd6f16a48e3e341429d0b58f7cd3953e027c72e073e1681 kernel-rt-64k-debug-modules-5.14.0-611.55.1.el9_7.aarch64.rpm d0cbd08b4af8f01927120a55e1a62a3bf29bb50365c5378d9d98378766817abd kernel-rt-modules-extra-5.14.0-611.55.1.el9_7.aarch64.rpm d4172530849e20b5457a303eca2655269849776f7f16ce662359bb41b689fe0a kernel-rt-5.14.0-611.55.1.el9_7.aarch64.rpm d987806c26434a83b526052f45cf2a70d0e0dccc3498ec35c9fb298e8048d9b7 kernel-rt-debug-core-5.14.0-611.55.1.el9_7.aarch64.rpm e4d94045796d7a87e08d100792fa4f7b9a0933844d3b581fbad6290b2270162c ALSA-2026:18587 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bonding: check xdp prog when set bond mode (CVE-2025-22105) * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980) * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015) * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097) * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166) * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279) * kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails (CVE-2025-38400) * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405) * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441) * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470) * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866) * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134) * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-5.14.0-687.5.1.el9_8.aarch64.rpm 061172501dd7f362fc822dfe1775eb0521f6d9714f057d598e7280842a6a97e1 kernel-rt-core-5.14.0-687.5.1.el9_8.aarch64.rpm 071e1d692e79991a28b9a1a71a2d04f00d8dfb5b14da4cc6738ba6ac102eab82 kernel-rt-devel-5.14.0-687.5.1.el9_8.aarch64.rpm 16983acb42c5e81523f804a83df415cd80324e3f5973a1e4c0ca613c59030313 kernel-rt-64k-debug-modules-extra-5.14.0-687.5.1.el9_8.aarch64.rpm 19a34684e942cd6a5ac6d9eab2a74cf1011bbeff59830d5ae1ac60cefa031c7e kernel-rt-debug-modules-extra-5.14.0-687.5.1.el9_8.aarch64.rpm 300936903c1635aa9235711bf30c98569d32138efa1ca6c52d9adf1a8537d72d kernel-rt-64k-devel-5.14.0-687.5.1.el9_8.aarch64.rpm 3c2b5da14713a441d030f8dc55dec6cdae2da2bd89de8785cb48f5825d698d2f kernel-rt-64k-core-5.14.0-687.5.1.el9_8.aarch64.rpm 3e90e54eb42988f71ff1d44b2881a90d14c5f8fe3bf981ec9fc23fad04a6d9b3 kernel-rt-64k-debug-modules-5.14.0-687.5.1.el9_8.aarch64.rpm 50e358399667c339c570974d431053fa6a97945cd15107cc0b037defad05eb11 kernel-rt-64k-modules-5.14.0-687.5.1.el9_8.aarch64.rpm 5ce0b51d5637f5792c37f24708f6a27051fe7fede63d218a6c7145cf761225c0 kernel-rt-64k-debug-devel-5.14.0-687.5.1.el9_8.aarch64.rpm 61bf6aac669d2ba65ad7a33064bb2afed964a44222df77f0536d1fc9d50942ef kernel-rt-modules-core-5.14.0-687.5.1.el9_8.aarch64.rpm 65576556bf53c1058c0038d4eeb4a63aaeeea1f66b0b2a659cfa4a99eb1e0e6c kernel-rt-64k-debug-5.14.0-687.5.1.el9_8.aarch64.rpm 746c0e59e644a4a88fcb6b8649dff48468bbae15719b75049c84b72d1f963ea8 kernel-rt-64k-5.14.0-687.5.1.el9_8.aarch64.rpm 79b1d48b7d3a56c0f20f0bfa11cfa3446234356aa69246dcc7ce7ff9f98d6000 kernel-rt-64k-debug-modules-core-5.14.0-687.5.1.el9_8.aarch64.rpm 7e0eab9d54c4c17556b9173b1c8d906ad6ab06adea6e44a1439ea437f58a1cb2 kernel-rt-modules-extra-5.14.0-687.5.1.el9_8.aarch64.rpm 8f8db8def9ef740f943d49d0d4743299b05eabeeb91b5497480c9639e3a91391 kernel-rt-64k-modules-core-5.14.0-687.5.1.el9_8.aarch64.rpm 913bae5565d7b5daec2fab702f039319589325c46aa80c48a90000e53fb28c27 kernel-rt-64k-modules-extra-5.14.0-687.5.1.el9_8.aarch64.rpm a9ade85bfb15c98a88aa47253c7e067b8d620c5b95fb8462655e2cc34741b979 kernel-rt-debug-modules-core-5.14.0-687.5.1.el9_8.aarch64.rpm bb93a0d8b1405b723f33691907a863253d749f717c0c4540f7586956357850a8 kernel-rt-64k-debug-core-5.14.0-687.5.1.el9_8.aarch64.rpm c5b2500d9379fc313193eb482345a38adaceac20b25838d0d7f77ae2455c9d08 kernel-rt-debug-5.14.0-687.5.1.el9_8.aarch64.rpm ce32f368a705625a69cbc1e215964ca53b53f6300dbb6fc0bc98cc3774844813 kernel-rt-debug-core-5.14.0-687.5.1.el9_8.aarch64.rpm d13ba23befac6c60eda4fe4dfe605cdbaeb5ef242c8c4834dba88844cb880c6e kernel-rt-modules-5.14.0-687.5.1.el9_8.aarch64.rpm e07072fa7f43b15fa19b61d2d5fe05351a9e15fc666659b7f296a4eb352faff0 kernel-rt-debug-modules-5.14.0-687.5.1.el9_8.aarch64.rpm eab670f884c3883698835fd1bf244069f9ab25ed635f0240b981bb716c6f4cdb kernel-rt-debug-devel-5.14.0-687.5.1.el9_8.aarch64.rpm ed1542d98a8e2a6ec4fe6f93cd062ab105f694518900dd79b6292618a6132dbb ALSA-2026:18705 Copyright 2026 AlmaLinux OS 0 1 Moderate

mingw-glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default mingw32-glib2-static-2.78.6-3.el9.noarch.rpm 427345ab6bb853ed43bbeaeee61e3fe8ac7f3b3e5043ed079af88d2c7d6951ca mingw32-glib2-2.78.6-3.el9.noarch.rpm 8be95294a8c5b9b9bdcce963edc08c58882242f8a0fb25d3960d1e90ec8f98c0 mingw64-glib2-static-2.78.6-3.el9.noarch.rpm 9b06851a94f4f4658c2bc2d356be455a7ddd0fb44da48a832592b39c84ae4fba mingw64-glib2-2.78.6-3.el9.noarch.rpm a6b316346aa4440804f86f107147dcdd1a26e9a03c2525509d47114de9ada502 ALSA-2026:19225 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677) * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-modules-extra-5.14.0-687.5.3.el9_8.aarch64.rpm 0f8ea771ba60df8234e63d9de2c569a3699770c0762b44176b368f6bd41269c4 kernel-rt-core-5.14.0-687.5.3.el9_8.aarch64.rpm 1c65940148ec0d6408411ec9a8ccd017f78e5a58a027a16365608357078a0bdb kernel-rt-modules-core-5.14.0-687.5.3.el9_8.aarch64.rpm 2827feee70b19968ee55f30a256699781debc0a4c04e11d2f20fd503dd71d724 kernel-rt-debug-modules-extra-5.14.0-687.5.3.el9_8.aarch64.rpm 2bd3f68357024dcdce76efd71048e44c2f5242a11d5f1b60449437c4aedce35d kernel-rt-64k-debug-modules-core-5.14.0-687.5.3.el9_8.aarch64.rpm 44cac83acdac40afbbe0ed3d25778bc40eb22389df1bc268c2a8b5a314a8f4f3 kernel-rt-debug-devel-5.14.0-687.5.3.el9_8.aarch64.rpm 526904fedf670909113b60c5d6b8f07434b4e341c7379fc4c85027805a28a568 kernel-rt-64k-debug-devel-5.14.0-687.5.3.el9_8.aarch64.rpm 543075a0d2a7dd5cb510181f7f768816f89593c8a7ad026d46c389562add094b kernel-rt-64k-5.14.0-687.5.3.el9_8.aarch64.rpm 6165fcf8e49edf3c9098b7ddfb845cfd23642621d784301f774fc81c7d16be23 kernel-rt-64k-debug-5.14.0-687.5.3.el9_8.aarch64.rpm 69661d375da23fb7b428aefdc1dfa72a76b967b7f41b36de437731a33f90635a kernel-rt-devel-5.14.0-687.5.3.el9_8.aarch64.rpm 70da0d6c287b16fbeecb275810c3c484d0449cc65afce44459648c644d7637bf kernel-rt-64k-debug-core-5.14.0-687.5.3.el9_8.aarch64.rpm 712a3b9cb897ad01e52f651dcbd5511a02f8605a42557b87097b0df9b79f8180 kernel-rt-64k-modules-5.14.0-687.5.3.el9_8.aarch64.rpm 788b6c616f5968a91ea823d951671aae67f1427bd2706daee7efe85b9075739e kernel-rt-64k-debug-modules-5.14.0-687.5.3.el9_8.aarch64.rpm 869e8df9c83860606ec277bbaade7bef122d092f8a753f1de4c98c6e7b15a653 kernel-rt-64k-modules-extra-5.14.0-687.5.3.el9_8.aarch64.rpm 8abf2d950782d4556390d12b9f3b4f2281038bf99de98f5cd859f11b142e9d1e kernel-rt-debug-core-5.14.0-687.5.3.el9_8.aarch64.rpm 935d9b5db74983dfc998f9dec9ca98fd49e091fe9243ba2c76e4a20663b587ee kernel-rt-64k-debug-modules-extra-5.14.0-687.5.3.el9_8.aarch64.rpm 9be298287cd6554684e253c19f982432c63b2733281b8029a797991ee95bc7df kernel-rt-modules-5.14.0-687.5.3.el9_8.aarch64.rpm 9e5f130fef75eb0ba81881b837e5dc5bb82bbc245a2d4381dc6818fabd980552 kernel-rt-64k-modules-core-5.14.0-687.5.3.el9_8.aarch64.rpm c78f544eaf3c5fee38669f0d7ddc3f208626cdcfca657f906e7a1b18993b6a57 kernel-rt-debug-modules-core-5.14.0-687.5.3.el9_8.aarch64.rpm cadd186074b66d439f3c61ca6fd484c2170f044049ecb4dc7559c89ec0c9ac75 kernel-rt-debug-5.14.0-687.5.3.el9_8.aarch64.rpm d2b2eec4cd229a6a247e60a28a12329a71bbbb861818657e23d32d2c75511bfa kernel-rt-64k-core-5.14.0-687.5.3.el9_8.aarch64.rpm d4ce952cef61ad295b5b208bd6702372ee27bdc3fa4686b0af89f89f1f18ecfa kernel-rt-debug-modules-5.14.0-687.5.3.el9_8.aarch64.rpm d64b0758fee33b916c81622d7b32ddb636f0ca7b40111b58542a859b6051735e kernel-rt-64k-devel-5.14.0-687.5.3.el9_8.aarch64.rpm f1ec5bfa00f0bcbeeedc77c2e3162072872d50ded4944783f741fca7f9d7569d kernel-rt-5.14.0-687.5.3.el9_8.aarch64.rpm f21d8b4c852c1feced4dd8e140470324b170333e84b615cfcbbe2967c419ba6a ALSA-2026:19568 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-modules-extra-5.14.0-687.10.1.el9_8.aarch64.rpm 18593bbdab1165abc0fa76a135f857ee297b0b3c143b997d4a5512581250ffa2 kernel-rt-64k-devel-5.14.0-687.10.1.el9_8.aarch64.rpm 1b2a5ef1ab62d092c28ceeb145327c8570121ee1a9005bdb43befd3d0ebdbf1a kernel-rt-core-5.14.0-687.10.1.el9_8.aarch64.rpm 2248662c6a5040a48b14f9de091b848535a89252f3ef85b23146817de84d9571 kernel-rt-64k-debug-modules-5.14.0-687.10.1.el9_8.aarch64.rpm 38897143ea92e442e89768755d2af015f58932c294e1c0114791f54052e02ae4 kernel-rt-modules-5.14.0-687.10.1.el9_8.aarch64.rpm 40a79ce35592a13e2e6a696b72c44a4b577c5b8cdfb3d5cdb797d013b6575055 kernel-rt-modules-extra-5.14.0-687.10.1.el9_8.aarch64.rpm 455479931d4d9cfdab551a30c409cad20653c92024e774ec9c537cee31e867b7 kernel-rt-64k-debug-core-5.14.0-687.10.1.el9_8.aarch64.rpm 47773472bfa7db7efbb9fdbe6a8190d6671c3199bfc450336be3e435abac4239 kernel-rt-64k-modules-extra-5.14.0-687.10.1.el9_8.aarch64.rpm 48cc95b808f6651697363815ee1fc02dd18623f06e79b79739dc138057065066 kernel-rt-devel-5.14.0-687.10.1.el9_8.aarch64.rpm 5b7bc001974ecc44432cada22581aafe3d6d31010d5e95258261040de7f62c1b kernel-rt-64k-debug-devel-5.14.0-687.10.1.el9_8.aarch64.rpm 628f9e18ea5288eacc194bc7458f4b16ec6037dd0c8903e8f183773c389ea06a kernel-rt-64k-debug-modules-core-5.14.0-687.10.1.el9_8.aarch64.rpm 62e311b99f0f34341e4f030e62da58ac81f67b249821dffa0bcb2f5337d97b14 kernel-rt-debug-devel-5.14.0-687.10.1.el9_8.aarch64.rpm 812bd0ff3710d05c3fff854c2451811c015d20c2c9f1ba4708aa8501ec20c02d kernel-rt-modules-core-5.14.0-687.10.1.el9_8.aarch64.rpm 8edca49d7f9b3ca27c4a866e7eb4d02c4e23b916a7aaf40518fd8f191a03e7af kernel-rt-debug-modules-5.14.0-687.10.1.el9_8.aarch64.rpm 910ad9d3200e6cc16c94dabf0959d669dde7fa3c4b9d7370ac358d3a392abbd7 kernel-rt-64k-modules-5.14.0-687.10.1.el9_8.aarch64.rpm 957724816112b861a7b79239df15989f613e9dd462ef420b8b12277aff3cbd1e kernel-rt-64k-modules-core-5.14.0-687.10.1.el9_8.aarch64.rpm 97593dbde2839cf6ab6b6e82444c9d1102ebd61e283126d31b87e9a2d7860ae4 kernel-rt-debug-modules-core-5.14.0-687.10.1.el9_8.aarch64.rpm a2737ed6aa46e4cddd8e82097b20500486362c42078e7da05a287e19f370e3c6 kernel-rt-64k-5.14.0-687.10.1.el9_8.aarch64.rpm a40c5dec9845912439aa162928031e292201ffe7891b7cc136ddd75711e32a3a kernel-rt-debug-5.14.0-687.10.1.el9_8.aarch64.rpm b3bea7e7a4d47105d42e97867cbb6741c1498119e199fb76bc2244282d5ad651 kernel-rt-64k-core-5.14.0-687.10.1.el9_8.aarch64.rpm b4dca2a382fb857e508e40357a0a96af98f06b56a157d3e4354e0ed2cbba167f kernel-rt-debug-core-5.14.0-687.10.1.el9_8.aarch64.rpm ccbfc69cb3f71fbd5a181f0fd8ceabb976e3e80d2cb0c19d21ca34a769aaf0e8 kernel-rt-64k-debug-5.14.0-687.10.1.el9_8.aarch64.rpm d8da591e022b454725a609f6204c7428c807404142e920164dadecc3e2beb044 kernel-rt-64k-debug-modules-extra-5.14.0-687.10.1.el9_8.aarch64.rpm eb2ad0b5c89f956cb294fd911b1be5fdf52826e6dc2cd31bc0701c80a1e9231c kernel-rt-5.14.0-687.10.1.el9_8.aarch64.rpm f2ccffcee08e2a07f98177bad8a7f21c140b362391ef5161d800a6aa3688fd33 ALSA-2026:21556 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653) * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089) * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020) * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023) * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) * kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.aarch64.rpm 05466044c9d58af37d6d35c457f6f4ecf1632e7927a535a6df1e7a14f1e75475 kernel-rt-64k-debug-core-5.14.0-687.12.1.el9_8.aarch64.rpm 349dd00f68d6c033baa7172708756778343cb7682931e7be5937ceaa7e5f1aa0 kernel-rt-64k-devel-5.14.0-687.12.1.el9_8.aarch64.rpm 4677d2619e403cbed2b166aadf22d83917ad0016f895162539815c8ceb93e956 kernel-rt-64k-modules-extra-5.14.0-687.12.1.el9_8.aarch64.rpm 49ff8d32abda54e84076d8fe43e6c35276e38770466f93f8357754850a3b43ee kernel-rt-debug-core-5.14.0-687.12.1.el9_8.aarch64.rpm 507a528d7991dbeeb32aa3abd80350b251023914be2da578a53a349c4e282023 kernel-rt-64k-modules-5.14.0-687.12.1.el9_8.aarch64.rpm 5135f11b8ce3f2df1718203e494f3f07c0420fba93f67e55100dde215798663d kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.aarch64.rpm 5a5f29a723646b8b63f3348684f373ed06caeebf20accfd581f89f84f29b5e5c kernel-rt-64k-debug-devel-5.14.0-687.12.1.el9_8.aarch64.rpm 5ebf20202b6ba0cfc01a1405366d4b7693f5fbd0356e362d617d672ead505478 kernel-rt-64k-debug-modules-extra-5.14.0-687.12.1.el9_8.aarch64.rpm 804b5febfc9722d73276432412357af6ab85035167a0af3479a771703a42ecd7 kernel-rt-64k-debug-5.14.0-687.12.1.el9_8.aarch64.rpm 8db2d38dd2ba28071c760267a779b6db975f94af7500f44cac3cabadc9b42316 kernel-rt-modules-core-5.14.0-687.12.1.el9_8.aarch64.rpm 941db071db47152cf3339a782edf8901856794eafcbe1f212b9311c2de15db15 kernel-rt-64k-modules-core-5.14.0-687.12.1.el9_8.aarch64.rpm 97cda370cfa4627fe27d4f1f4dc5c09dc3f0c8aa12124186d82b7e9168069dd4 kernel-rt-64k-debug-modules-core-5.14.0-687.12.1.el9_8.aarch64.rpm 99671b01eec2f989601f6f37a83cd6fcb338c051004a064f853f1832c8faed77 kernel-rt-64k-debug-modules-5.14.0-687.12.1.el9_8.aarch64.rpm a4d25c77e01ddf79a93da0b23816e3352bfc189af0c111f424b113a05ab89b87 kernel-rt-modules-5.14.0-687.12.1.el9_8.aarch64.rpm abb283c67b64c0126c033c6738965fa2dcc06f57210abfc87488f982ca8246d5 kernel-rt-debug-5.14.0-687.12.1.el9_8.aarch64.rpm b9c5e24882bba09a8f0e74be52eb36ded9cd60a33c9a0841045b692c3427b877 kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.aarch64.rpm c2a3fd600247e98f8aa1e37c269d6ecf41780c3f43959092c7dcc13ff1be50ea kernel-rt-core-5.14.0-687.12.1.el9_8.aarch64.rpm cf3b4e7751fbeec240d13a7ff9ea3e331412b4ab9afd49db7ed6152fc1ab4587 kernel-rt-5.14.0-687.12.1.el9_8.aarch64.rpm dd65b135b119da2f2056209ef588cb9ea7901d4bf9298c2c0f27ea5cda9546d6 kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.aarch64.rpm e4406bffc884a15379f95a400c327712d950ea208c2f2f4292eadefa17882a1d kernel-rt-devel-5.14.0-687.12.1.el9_8.aarch64.rpm ec614130f681dcf124d990257c87fd801978dae30b5e77407e8486bf9cdaa3d8 kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.aarch64.rpm ee881ffa24750408404dca617e579e4a832b7b341acc5481e0d031515a91b34d kernel-rt-64k-5.14.0-687.12.1.el9_8.aarch64.rpm fa1280511686e95606111d5f8e5b126cb0b2133f0dcc75037ac5884959d49acc kernel-rt-64k-core-5.14.0-687.12.1.el9_8.aarch64.rpm fe92e0e1f6f6131ac64d85e1b41631e4382264ed3330df1d0a514556ee384206 ALSA-2026:2212 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789) * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819) * kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022) * kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024) * kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415) * kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403) * kernel: Linux kernel: Denial of Service in ATM CLIP module via infinite recursion (CVE-2025-38459) * kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730) * kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760) * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170) * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135) * kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141) * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158) * kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271) * kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269) * kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-debug-core-5.14.0-611.30.1.el9_7.aarch64.rpm 05db339057d2f6fef619c6f8a1354deb7b58ec7d8e55dee14038d9318cbd8ec6 kernel-rt-64k-debug-modules-extra-5.14.0-611.30.1.el9_7.aarch64.rpm 11fccdce3f09367bfae98b1417df66eb6a0c0489cd63431a0e0274cf6c615126 kernel-rt-debug-devel-5.14.0-611.30.1.el9_7.aarch64.rpm 196e0a6adbbd60639aea4cc2ca0b3a7559fd7c6640b3a1149f3194a43adfa84e kernel-rt-devel-5.14.0-611.30.1.el9_7.aarch64.rpm 2da4d9a2acb6f33850a80941227f9bd16df8b1b74faa1bebd382afd58ebe5b2c kernel-rt-64k-modules-core-5.14.0-611.30.1.el9_7.aarch64.rpm 335ea74b67f6454d3f9ea52e8080eecdf5906af478448e4e741b7df12ffc6e8c kernel-rt-64k-debug-devel-5.14.0-611.30.1.el9_7.aarch64.rpm 3cc401e20d21ef3cc0f41b187a831c4a7127bd59e7441076e12b22228f2f20f2 kernel-rt-64k-debug-5.14.0-611.30.1.el9_7.aarch64.rpm 3d52f3778c5758260dbdc4641244572c4020200f39937cbb1926b4425ed3ea0f kernel-rt-modules-5.14.0-611.30.1.el9_7.aarch64.rpm 3f260ecba7ededafedb7f0ced48229df16624e05055fba1a4e8ab119c9677040 kernel-rt-modules-core-5.14.0-611.30.1.el9_7.aarch64.rpm 436d2e7a12bade5275a7f9b9a498f9d1b2b2f25dfc6e47a20b05d191c59273fa kernel-rt-64k-5.14.0-611.30.1.el9_7.aarch64.rpm 471eaa58e7627b15396f594dfb6cd0c699531089b56d88633c05b290cb2a9a9f kernel-rt-64k-core-5.14.0-611.30.1.el9_7.aarch64.rpm 50a39ac54d6c13a8f3a9225835945ca00cd3f23ee33586de2ce14caf91af0894 kernel-rt-64k-modules-extra-5.14.0-611.30.1.el9_7.aarch64.rpm 544ab0e797b1fd51ac830982d3997872f1022982098158581e8c5696d9eab46a kernel-rt-modules-extra-5.14.0-611.30.1.el9_7.aarch64.rpm 5b8ded40c5fab3d9ce97272f238e92b25ae22bd36d043526bac72a161c5e1d44 kernel-rt-core-5.14.0-611.30.1.el9_7.aarch64.rpm 5c92b7f9430e4bf3b42a55a65c0a63b681e5f3f872ad5e0c0316718ca45fdc52 kernel-rt-64k-debug-modules-core-5.14.0-611.30.1.el9_7.aarch64.rpm 6312223da4f3482ad5b0cecbaa41bfa521b893281c699bdb70ecfe5357ec6570 kernel-rt-64k-modules-5.14.0-611.30.1.el9_7.aarch64.rpm 681f38305b4299a02dfc5bfd744b0e846c4c55f18226b6f9954e7b186afc3105 kernel-rt-debug-5.14.0-611.30.1.el9_7.aarch64.rpm 6b5ad5ef3a425cf54d574334d98e46ca15d069b17bf55158894bdc1cf16a79d2 kernel-rt-debug-modules-core-5.14.0-611.30.1.el9_7.aarch64.rpm 9a7df5016bf2a53d2ecd883b67c6343a504d73c07535ec55fc189b1182d76321 kernel-rt-64k-debug-core-5.14.0-611.30.1.el9_7.aarch64.rpm b3ba94ccd9021848b1e6155808de7c61bbe8a0138f3cc82269b57e53ca91d82e kernel-rt-debug-modules-extra-5.14.0-611.30.1.el9_7.aarch64.rpm d8d1d933a5845f99ebc58207a4c11c6fabedcc03df9dfdc319cf3f039d25e81b kernel-rt-64k-devel-5.14.0-611.30.1.el9_7.aarch64.rpm e7c59acc509139cfde70c381be1a5c705acdb92ed4b3bf102a65df4daacad458 kernel-rt-debug-modules-5.14.0-611.30.1.el9_7.aarch64.rpm e86f3a90ee7fb2e7a10ad262cb8e4e7a3a9a0218b8d6e360fcae0016f653f69a kernel-rt-64k-debug-modules-5.14.0-611.30.1.el9_7.aarch64.rpm f3566509e6e42b68792628a2eaa46342111c73b1a61fa2484a4fb7030950cba4 kernel-rt-5.14.0-611.30.1.el9_7.aarch64.rpm f76b8ef1bd3ac29f80debc12922e80303b418fec0c70dad59624068bde501e7e ALSA-2026:24381 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-debug-modules-extra-5.14.0-687.13.1.el9_8.aarch64.rpm 0a9e596394a70e26148d7b124e33cdc3564950cf050197c1abede7ff8a7e5fb5 kernel-rt-devel-5.14.0-687.13.1.el9_8.aarch64.rpm 30c46dc3e1bf19a29cb5f58f041cbe47ff04b7f0c113c2a518e766bb9a601f3e kernel-rt-64k-core-5.14.0-687.13.1.el9_8.aarch64.rpm 3739a7f67171624812d5d30ea9ff4516743e4c7d14cba2dd397fc9addeec6fa5 kernel-rt-5.14.0-687.13.1.el9_8.aarch64.rpm 3ef49d26f68da425b53a701373235babc5adff8151349db600ca4fb8301de4d1 kernel-rt-64k-debug-modules-5.14.0-687.13.1.el9_8.aarch64.rpm 43d71e7b4952aa99d64c239dcc1d5a525703b7f451995497482983a2625bc458 kernel-rt-debug-modules-extra-5.14.0-687.13.1.el9_8.aarch64.rpm 465adea6af6868e2b6e1cf5e99f63fc2b12db155e5298fb7c672017b2d4240db kernel-rt-debug-core-5.14.0-687.13.1.el9_8.aarch64.rpm 50b7f66cfdefb8c639970cbcc1b0bf4e313d59b70e70e0b81637ba412e954e84 kernel-rt-64k-modules-extra-5.14.0-687.13.1.el9_8.aarch64.rpm 5a46b2dc631dbd2bae1251f9e233b808e132d3559bcf10bd9b579bd71d3c9165 kernel-rt-debug-modules-5.14.0-687.13.1.el9_8.aarch64.rpm 647750c2de8d22c11cc0b0dc01b4e4e29ca8cd8636f67b4b16e7731d58e92af7 kernel-rt-modules-5.14.0-687.13.1.el9_8.aarch64.rpm 90d0337077cbf4fc1da791885cee96921f53ed852aaeaaeb582c92950333f41a kernel-rt-debug-devel-5.14.0-687.13.1.el9_8.aarch64.rpm 937f5739945e3c07fa35b7abeccc3f767f803c3fb5df4e04891231e172760d0a kernel-rt-debug-modules-core-5.14.0-687.13.1.el9_8.aarch64.rpm 95ed06ca317055ed00eff36860f7d7dd94bd54718925889250d42c084e7293b4 kernel-rt-core-5.14.0-687.13.1.el9_8.aarch64.rpm a29a5dadf6bb45a938acc6614ce5c6b69390613b78244955a1bc43248fd492c6 kernel-rt-64k-debug-core-5.14.0-687.13.1.el9_8.aarch64.rpm a4a70198012a569886ff3662a08ae55617572de71f7da9a37303c627b820a515 kernel-rt-64k-5.14.0-687.13.1.el9_8.aarch64.rpm a4c70ac9b8ae43ce61ddaa54b664df70628ebb6f834eb49f643bc0680ee0405b kernel-rt-modules-extra-5.14.0-687.13.1.el9_8.aarch64.rpm a96615d2693833930d1735ef5c2f1019ad8213ab86f144a3f1b8c93340af184b kernel-rt-64k-modules-5.14.0-687.13.1.el9_8.aarch64.rpm a9fc6d62264cc7615e31ae6fe286c31d2adf7a9199ebba0880f2f3ee7d4461c7 kernel-rt-64k-devel-5.14.0-687.13.1.el9_8.aarch64.rpm ab0755bc2f7b69fabbce9f068b87ae364b021d169cadfa4a9f3d7c13f8293b8a kernel-rt-64k-debug-devel-5.14.0-687.13.1.el9_8.aarch64.rpm b0c10042d974bc75203e830a8773cf350c40a6d96c484f3fc030b4e14556c8e6 kernel-rt-64k-debug-5.14.0-687.13.1.el9_8.aarch64.rpm c2d03fd5889681aa152afe0d9d2ceb38434b17444baf25a20833496ad69664ba kernel-rt-64k-modules-core-5.14.0-687.13.1.el9_8.aarch64.rpm df7c049b0f08ef5fcba9e056096142a507f4d25dbeef5dbf9ea86617b95053b2 kernel-rt-debug-5.14.0-687.13.1.el9_8.aarch64.rpm e17aa8168d58bbc298e921e52ea3ded6371f1d279b2048542f03b44c027d6b0a kernel-rt-64k-debug-modules-core-5.14.0-687.13.1.el9_8.aarch64.rpm e3909bbd6cf721e2ed629c9a5c88963597dd727b72c73fa571b618e025c67ece kernel-rt-modules-core-5.14.0-687.13.1.el9_8.aarch64.rpm fbd9f31318451f8da4fb7a2fd6b031a4139089969f263f62f73566d9bd60e167 ALSA-2026:25217 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216) * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508) * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) * kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125) * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) * kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852) * kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-debug-5.14.0-687.15.1.el9_8.aarch64.rpm 02be92911e48830a8e7afd91b0c8b8c2a06fdd2517acd17963f01b8689bc9199 kernel-rt-64k-debug-modules-core-5.14.0-687.15.1.el9_8.aarch64.rpm 08469141fbdbfcfbb3999b1c665aa1d166cb2a746f91f385ef7012c30dba0282 kernel-rt-64k-core-5.14.0-687.15.1.el9_8.aarch64.rpm 0923c0fa87c6479003a866af06992c72c71e9c203e20c4d425c115320f84ffda kernel-rt-devel-5.14.0-687.15.1.el9_8.aarch64.rpm 1b7b29c828db4b83cf59712e5a5f0f38fcfb161633ea9c55fb8a83fe2980ceba kernel-rt-debug-5.14.0-687.15.1.el9_8.aarch64.rpm 1ed9426bbdf8e2a11f7f3004669c36ec21f13491efbc9883e8bd7eb2671d7436 kernel-rt-64k-debug-modules-5.14.0-687.15.1.el9_8.aarch64.rpm 2a8cc89684ea78de252cd7694e8dd9ec52cfa8042bf11c4fb628d8445059dd10 kernel-rt-debug-modules-extra-5.14.0-687.15.1.el9_8.aarch64.rpm 41e1c37637176af36d9ac27beedbc1c4f846bbe29ac49dcb3dc3465f38552835 kernel-rt-debug-modules-5.14.0-687.15.1.el9_8.aarch64.rpm 49c6468182aac5025e03b99622d08f4394114d2a871c7e2970cda3db7e03e22a kernel-rt-modules-core-5.14.0-687.15.1.el9_8.aarch64.rpm 4b45be5a562daab33bf1640835e0b1ec7eef6adbfede7ce74d2de7510b0a87ac kernel-rt-debug-modules-core-5.14.0-687.15.1.el9_8.aarch64.rpm 4debbbcf4564fab642f4d63f199825cc57a02b5764c03fbbd40577e94510ee05 kernel-rt-64k-5.14.0-687.15.1.el9_8.aarch64.rpm 57a2863e1eb7fadfccd2bf17d725e33998ea7ff5d50238b1f558a3f42e2b2c3a kernel-rt-modules-extra-5.14.0-687.15.1.el9_8.aarch64.rpm 676995cc437d82b5e55ae7322f7f84cfefe522cc48d891b667cd7e2bb5acce9e kernel-rt-debug-devel-5.14.0-687.15.1.el9_8.aarch64.rpm 7dd265441e1bafb44492700a47991eb7c948b17166ed2a547480db30dbc6af68 kernel-rt-modules-5.14.0-687.15.1.el9_8.aarch64.rpm 8ad5e093c8d90e8c5951253a6a02df286a6315de3b96bad9f985974be96ab335 kernel-rt-64k-modules-extra-5.14.0-687.15.1.el9_8.aarch64.rpm b6c0a4a608054d8523d3e12139028a0ed9cbb7f42e1a7380ee0f446a6f393ac0 kernel-rt-64k-modules-core-5.14.0-687.15.1.el9_8.aarch64.rpm b7b980a9b504b1386882012b467ae108b8790d3d2a3e43fe1b23d7b99eb21f39 kernel-rt-64k-modules-5.14.0-687.15.1.el9_8.aarch64.rpm cf0763c869fb297499bd4c27e13630396d8c6f60085d8abacccc66f9689458d2 kernel-rt-debug-core-5.14.0-687.15.1.el9_8.aarch64.rpm cf373fb3ac100ea9bc09888acefafda86c71c9c60cffeee5521a62cd9045495e kernel-rt-64k-devel-5.14.0-687.15.1.el9_8.aarch64.rpm d3fbe358430fec8fff1836a141f37a565879082b6a74da29285d92ee0a46ffb3 kernel-rt-5.14.0-687.15.1.el9_8.aarch64.rpm de1fa14db7f7cec6816bae8b022ff242d91f563e941675f9e88fc846315656e9 kernel-rt-core-5.14.0-687.15.1.el9_8.aarch64.rpm def8d7f0df7f683485a51c964cace9a0613042333b413295554dafb705227e7e kernel-rt-64k-debug-modules-extra-5.14.0-687.15.1.el9_8.aarch64.rpm e1a4b05669e0636a7978c8be3580441958c83246de241e1b47dc6a4f92c395bc kernel-rt-64k-debug-devel-5.14.0-687.15.1.el9_8.aarch64.rpm e8570f766e7e14aef52a248ce8e051e4d5d4cfb5d75f69a03027b36a8bde3590 kernel-rt-64k-debug-core-5.14.0-687.15.1.el9_8.aarch64.rpm f3075f0cf15d69a0212a5f46e485fb6147bf183621693e81e1262ca3dbe9ea5a ALSA-2026:2722 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034) * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064) * kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304) * kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322) * kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349) * kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811) * kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-debug-modules-5.14.0-611.34.1.el9_7.aarch64.rpm 046099fe47bd31291c57373a12eeecfd480de4dd620f312e0602e3247d210eea kernel-rt-64k-modules-core-5.14.0-611.34.1.el9_7.aarch64.rpm 063ae343fb85e3128cb7b6e34fab2beecd96109efabfc8b3c9c4005b545667e3 kernel-rt-64k-debug-modules-extra-5.14.0-611.34.1.el9_7.aarch64.rpm 0e8eceb1744a3d3e80f2efa16dfcc1dc91cb68996eb94d7cef4a3abca53ef1e9 kernel-rt-modules-extra-5.14.0-611.34.1.el9_7.aarch64.rpm 17ac026b2cdf8f4437cda6d0cbdec57cd21a30d6bf424d5352bf3686d3d1b6ff kernel-rt-64k-modules-5.14.0-611.34.1.el9_7.aarch64.rpm 22a34de71784595b48c53f629243b9dbf18f2d0fcbbef30dfde8f8167f8814fa kernel-rt-debug-devel-5.14.0-611.34.1.el9_7.aarch64.rpm 27917f3fcf6a8a2053009f4003dd1cd8393ec94c370df56e245ce1ac754991bf kernel-rt-debug-modules-core-5.14.0-611.34.1.el9_7.aarch64.rpm 46e0fe7ce250b57eb211e2194287524885035a1d3a8b9dffa16ee983b461931e kernel-rt-64k-debug-devel-5.14.0-611.34.1.el9_7.aarch64.rpm 526f471548804948a5aa6d4efb58fdb7eff3e1549abcbb78707d954f1da5fa22 kernel-rt-64k-debug-modules-core-5.14.0-611.34.1.el9_7.aarch64.rpm 66c51f3749f23e2eb5fb04d5f3bb68b18fda07211286a8927f25d094fc51d23a kernel-rt-core-5.14.0-611.34.1.el9_7.aarch64.rpm 688a766e8715f0d5d2cb593cf85b6c4284bef0bfb879aa1894bb3ae7412d546c kernel-rt-modules-5.14.0-611.34.1.el9_7.aarch64.rpm 7afc78e7f319345850de99a87a7ebf1aad8071cd896aa7a140eeda134d00e6b9 kernel-rt-modules-core-5.14.0-611.34.1.el9_7.aarch64.rpm 8b315f8b02c469a45dccf23533ec5fe2aed117c51d0d1251b95ea42aad3d74a4 kernel-rt-64k-5.14.0-611.34.1.el9_7.aarch64.rpm 8e798a18977d452bac1c87e2c5cf45f6d86eecafadd0f96024d47536482d180c kernel-rt-debug-modules-extra-5.14.0-611.34.1.el9_7.aarch64.rpm 91fc5c0af4380d4d9a678e332099c6982fd4d22bd0fc9bf6ee0441ba40adf3ad kernel-rt-64k-core-5.14.0-611.34.1.el9_7.aarch64.rpm 9658d0bb80df54fd7bb3ac7855168a6785127bb666c81bd3db71b0c5547bf86f kernel-rt-debug-core-5.14.0-611.34.1.el9_7.aarch64.rpm 96b98cba6799c83995dc0d85a199c684f009b0fce6f1bcd2b69bd449a8f2cd00 kernel-rt-64k-debug-5.14.0-611.34.1.el9_7.aarch64.rpm a0ae47098309caf574c47e767957cb451b439e1ae7f4cab8f45233ce36a0854f kernel-rt-5.14.0-611.34.1.el9_7.aarch64.rpm a79218261b07b9aea8c4168c8bf73d9c7401dd04f0ba718c5e453aeb50d084ec kernel-rt-debug-5.14.0-611.34.1.el9_7.aarch64.rpm d20209c5fb2ebc21541ac924935043ce80cc4d3673edfd1cd06462278f3d8185 kernel-rt-64k-debug-modules-5.14.0-611.34.1.el9_7.aarch64.rpm d87a62725d7b83398c132e48b5bf165c50c3ee6a3774527ba60a4728f34c77f0 kernel-rt-64k-debug-core-5.14.0-611.34.1.el9_7.aarch64.rpm ddb971cb87d9804416d573f42437f8cbe9656844d6e75aaab267ad91756bb7b2 kernel-rt-devel-5.14.0-611.34.1.el9_7.aarch64.rpm df7339fbf88abe0f9bcdede5a5f44bdb559dbb36c8584069265dc7db7793a47a kernel-rt-64k-modules-extra-5.14.0-611.34.1.el9_7.aarch64.rpm f6f40965096961e6a575262b249dee42cf00f9ed547f1573aea6cab17deebbdd kernel-rt-64k-devel-5.14.0-611.34.1.el9_7.aarch64.rpm fc4a7e463048ff02ae2193f5c2db3b27dab81200a7aeb1deb823e0a2b9435eab ALSA-2026:27789 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474) * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772) * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260) * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414) * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) * kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984) * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166) * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) Bug Fix(es) and Enhancement(s): * AlmaLinux9.4 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-9.8.z] (JIRA:AlmaLinux-166048) * [AlmaLinux 9.8] Hung tasks during both suspend and hibernate operations on systems with Intel E810 NICs [almalinux-9.8.z] (JIRA:AlmaLinux-175699) * DPLL: Add support for pin operational state [almalinux-9.8.z] (JIRA:AlmaLinux-175820) * DPLL: Add support for fractional frequency offset between pin and device [almalinux-9.8.z] (JIRA:AlmaLinux-175823) * ibmveth Adapter Freeze with Small MSS [almalinux-9.8.z] (JIRA:AlmaLinux-178308) * AlmaLinux9.4 - s390/mm: Add missing secure storage access fixups [almalinux-9.8.z] (JIRA:AlmaLinux-183317) * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-9.8.z] (JIRA:AlmaLinux-183130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-5.14.0-687.17.1.el9_8.aarch64.rpm 0187f0b54ff75b42015ba4c0ae1154e5fe3647d4a062ba6a8e62550cd8cca172 kernel-rt-64k-debug-core-5.14.0-687.17.1.el9_8.aarch64.rpm 06d0152e643bc5d1a7d8e4133f8808d4197595d7925ee1e2958cd143d125b208 kernel-rt-64k-modules-5.14.0-687.17.1.el9_8.aarch64.rpm 06f7658cc7a67eb12cae894e36321964ed15cadb3b6580358cb4ea44f6578ba1 kernel-rt-debug-modules-extra-5.14.0-687.17.1.el9_8.aarch64.rpm 0de5cd125b659fd1846afa2e1f697aea4b93f035fc1dd2803037dd34ebf4a595 kernel-rt-64k-debug-5.14.0-687.17.1.el9_8.aarch64.rpm 1575951d3236602c76ed4391747d58d1f0c559ad1be8aa3ce3e6d09de42e1e32 kernel-rt-debug-core-5.14.0-687.17.1.el9_8.aarch64.rpm 192c42116a702eef1dd0b0c82449423894a3a5d869e5966ba389641f72a3c0a5 kernel-rt-64k-debug-modules-core-5.14.0-687.17.1.el9_8.aarch64.rpm 1fdc6ffc654eb3d963178ff6471041f97afd568fa49a56fcf1d063485a744bde kernel-rt-debug-devel-5.14.0-687.17.1.el9_8.aarch64.rpm 2557ecfe365a1ed97c366149c68812166de6dee1018b4bf35d96b414e91d61f9 kernel-rt-64k-debug-modules-extra-5.14.0-687.17.1.el9_8.aarch64.rpm 297813ad86647c1688b8bebb5b642fbb346fccfd37f210b80aef7059358a4b27 kernel-rt-64k-modules-extra-5.14.0-687.17.1.el9_8.aarch64.rpm 42c117de2f80f380a0045a85fdb6689ef57caa449817586b9703f994ce7c4e44 kernel-rt-debug-modules-core-5.14.0-687.17.1.el9_8.aarch64.rpm 4744e2397d9d05dff97b1e2f55e010298036e1239a39c67b4bb8c2b16cb27f17 kernel-rt-devel-5.14.0-687.17.1.el9_8.aarch64.rpm 49516295d7afd365e3328300c5d87e2d8a5776a8a7af830693a920881a4ff375 kernel-rt-64k-debug-modules-5.14.0-687.17.1.el9_8.aarch64.rpm 4c828eb03a3baf06ccf5a3add8c04b88acc8d156ef7f298f059c4a34f6e6d2a7 kernel-rt-modules-5.14.0-687.17.1.el9_8.aarch64.rpm 53ae1fefef2f8bf188b67c3eb703d0b4fcd9baae982a8bcf1cfd8849299db793 kernel-rt-64k-debug-devel-5.14.0-687.17.1.el9_8.aarch64.rpm 759b56ce12f31bba8e83370d8e2d64de987b3bf13e63518b4d7209f2d2ca7973 kernel-rt-modules-extra-5.14.0-687.17.1.el9_8.aarch64.rpm 828b5aca952742e5298c2c444c08ebfacd7d9100b67031db98ec358b79400060 kernel-rt-debug-modules-5.14.0-687.17.1.el9_8.aarch64.rpm 98fe486af336554ab564e3c88a9a101af2d70c51b507ddffebffb9ffaad0dbee kernel-rt-5.14.0-687.17.1.el9_8.aarch64.rpm 9bb9839a26a1afd4fa6c657d14e9dafa5b7373d4aaa7766b7644abecafdff994 kernel-rt-64k-modules-core-5.14.0-687.17.1.el9_8.aarch64.rpm b24158012987405a6a14e0a8a3e0b42e1d01877d858efbf8fdfd295832df2e3b kernel-rt-64k-core-5.14.0-687.17.1.el9_8.aarch64.rpm cbefd7d50e7678491d2e012daa7d77a9ea9613444f50ddd10a72094bac7527c0 kernel-rt-64k-devel-5.14.0-687.17.1.el9_8.aarch64.rpm cfe26c5a07e82dd0977db130331aeae787bde681b426609bfe76f3799cb015ee kernel-rt-modules-core-5.14.0-687.17.1.el9_8.aarch64.rpm da7c200f9c657cd1496de169a69e16641950c47d3b5fc4de4a4f47d7a12f2d0b kernel-rt-64k-5.14.0-687.17.1.el9_8.aarch64.rpm e4b80923256d956685b089d43a85828d0c78f5d76577e5dab4998d12e663c729 kernel-rt-core-5.14.0-687.17.1.el9_8.aarch64.rpm efcdbaef2f889de2322872e63fd59aebfa0f2408daf3e199682edb60c96a4d54 ALSA-2026:3066 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129) * kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service (CVE-2025-38206) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-modules-core-5.14.0-611.35.1.el9_7.aarch64.rpm 060fcd1a6d0b781fe5d736ea47d25bb215619412d3c6b9a6d072edda8368e375 kernel-rt-devel-5.14.0-611.35.1.el9_7.aarch64.rpm 0968e92275e6b7e1fe68e6bb60cb1c0d5aa9a3a3f207f25c6366cbe916f21aba kernel-rt-debug-core-5.14.0-611.35.1.el9_7.aarch64.rpm 12bfd9983091d014378786069d0b583ca7d50358ae7dc3645adbe2d805538d4c kernel-rt-modules-extra-5.14.0-611.35.1.el9_7.aarch64.rpm 20f841cfe9c57b12ed4b721a5b48e3d83e0f026d4c9e177f577f453f06756207 kernel-rt-64k-debug-modules-5.14.0-611.35.1.el9_7.aarch64.rpm 34cf7ddd1058b59b38d24d9de93c2703d9c26fb127dd736e8b42e83c32b70b99 kernel-rt-64k-modules-extra-5.14.0-611.35.1.el9_7.aarch64.rpm 41d19e92d67e4931d58b29d20b3bc63b598ad9bd5d43b3640402276da20e9026 kernel-rt-64k-5.14.0-611.35.1.el9_7.aarch64.rpm 4e339d06ca0a30068ff1181a51723f18f3ba8b51f1b3f37f8a02f61afa952cc7 kernel-rt-64k-devel-5.14.0-611.35.1.el9_7.aarch64.rpm 4fa2ebbe72423ca283a17f5a4721daff9d0026df6eb450e3800821abdb16645d kernel-rt-64k-debug-modules-core-5.14.0-611.35.1.el9_7.aarch64.rpm 52b4de0ec26ec8eb771e853f6f225f49e9395a74f51559dbed420633cba28613 kernel-rt-64k-debug-modules-extra-5.14.0-611.35.1.el9_7.aarch64.rpm 5df69700429c604e6ee8837f2f4c0987551c64b388a2be9cb123449fe9578912 kernel-rt-64k-debug-devel-5.14.0-611.35.1.el9_7.aarch64.rpm 5f0ee8fb833c2c9c978f758b33e01848a58221c90c2beb0dadc09ead63d38c5e kernel-rt-debug-modules-core-5.14.0-611.35.1.el9_7.aarch64.rpm 60891e96f8e538ebbfc18ba730c84b79ad1dd0cb929c842e68ed8929839e387d kernel-rt-64k-debug-core-5.14.0-611.35.1.el9_7.aarch64.rpm 6267a0ad0d903cf7af64b2b86d2d7e2d9f6535707a04a4c24977ebe76773b094 kernel-rt-debug-modules-extra-5.14.0-611.35.1.el9_7.aarch64.rpm 728c43dbde1faf4066abf3fe341be09cef39a5924f4db85e9e889e5474d28670 kernel-rt-64k-modules-core-5.14.0-611.35.1.el9_7.aarch64.rpm 7f91ddbdd015ced88451a689954fa1f3c4d368f8e1471b3ac62a458b471086f9 kernel-rt-5.14.0-611.35.1.el9_7.aarch64.rpm 80263a6c1c3bcb4d470f54130ec62eb327852f933d7382f39decafb95a8ea11d kernel-rt-modules-5.14.0-611.35.1.el9_7.aarch64.rpm 92059f2a7ebce410d1c84ef8411db8975ca3303ee39b73383a4026a0198672c7 kernel-rt-debug-devel-5.14.0-611.35.1.el9_7.aarch64.rpm 97af3e8683492b36cdfe227d6fc94a864a4d9cfc00b6766c41a0ca7ee495ac82 kernel-rt-64k-modules-5.14.0-611.35.1.el9_7.aarch64.rpm aec6360d85d1e6b1409205bf5a8bdd9f47552883d5346fa3fbb1687e640f4cb2 kernel-rt-64k-debug-5.14.0-611.35.1.el9_7.aarch64.rpm b9e0be8dfd6558d55818eee0f05c1457e5b56a6ba05c87ad83f1f4d2feac2d4d kernel-rt-debug-modules-5.14.0-611.35.1.el9_7.aarch64.rpm c3de4626d57d06586ff006ec653032acd62731a008acb75d8cec90d112d5f685 kernel-rt-core-5.14.0-611.35.1.el9_7.aarch64.rpm c8406f65717cd3a911eee3a8ee627c5a6152f80673472c8be13403441ec8cf15 kernel-rt-64k-core-5.14.0-611.35.1.el9_7.aarch64.rpm d9d2a386be8dd8b3e949d7b7d8b5eb76974061e9267d712422863db546b2d0ef kernel-rt-debug-5.14.0-611.35.1.el9_7.aarch64.rpm ed0dd5dd8e1ec68dc45813b5a6f9f59ccee4b3691b95f7fd773d904033b2d633 ALSA-2026:30848 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898) * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * [AlmaLinux-9.8.z]: Update the mlx5 drivers to v6.19 (JIRA:AlmaLinux-169057) * iavf: during POD churn vlan filters may not be added for a vlan interface, spoofchk drops subsequent packets [almalinux-9.8.z] (JIRA:AlmaLinux-172993) * nf_conntrack_sctp: vtag corruption with late INIT in ESTABLISHED state across conntrack zones [almalinux-9.8.z] (JIRA:AlmaLinux-178273) * sched/fair: Skip sched_balance_running cmpxchg when balance is not due [almalinux-9.8.z] (JIRA:AlmaLinux-182776) * [REGRESSION] ISST-Spyre: Jenkins workload causes soft lock warning to appear on screen. Workload hangs. [almalinux-9.8.z] (JIRA:AlmaLinux-183183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-modules-core-5.14.0-687.19.1.el9_8.aarch64.rpm 0cc441f453144329f8bcfddbc2880a02968c77b7457f68bc3bce3c2c45f7a246 kernel-rt-64k-5.14.0-687.19.1.el9_8.aarch64.rpm 0d3f51ee07ed785b15c3490410d4a596256857327fee2118283a928369ecfa5d kernel-rt-debug-modules-5.14.0-687.19.1.el9_8.aarch64.rpm 2329ff97ac2ad72983e4e293c8095b75028a4ea584770214f913f2eba851e221 kernel-rt-64k-modules-5.14.0-687.19.1.el9_8.aarch64.rpm 5047e2cd9767f4c5f827499a281921bc48e1a38c14564d6e5df6ed51f911d0b1 kernel-rt-64k-devel-5.14.0-687.19.1.el9_8.aarch64.rpm 641f6af5fc2caf79ae9a9068069605cf9bd4cdcfde7bb67f26f3193603f81865 kernel-rt-64k-debug-devel-5.14.0-687.19.1.el9_8.aarch64.rpm 819c26ef70157ec7730241e7253518571c719212958b4f5b7c1057e0163b4030 kernel-rt-64k-modules-extra-5.14.0-687.19.1.el9_8.aarch64.rpm 82fc6dac5918ce30903eeaa330cca2b958b05dd486909c6bf71aeb46381e0e34 kernel-rt-debug-modules-core-5.14.0-687.19.1.el9_8.aarch64.rpm 88c895df8c8777ada7e0f30978818c9cc4a37764b1b7c62ef199ea0578921997 kernel-rt-debug-modules-extra-5.14.0-687.19.1.el9_8.aarch64.rpm 8c87da7290aca99a826a7feedc83b9511b7a882659344c57975cb5284858f012 kernel-rt-core-5.14.0-687.19.1.el9_8.aarch64.rpm 8fe0dead7e5063ab78b94051c845badad1977fcd2fad3e057d766d105966d14f kernel-rt-64k-debug-core-5.14.0-687.19.1.el9_8.aarch64.rpm 97619965ff347295eff6fa7b3c6fec73c85276ebea45530a1040451c175840ac kernel-rt-modules-5.14.0-687.19.1.el9_8.aarch64.rpm a352560896aed021d77e67c3e1c398ad680029bd3066b769acd93ff88ac1c71e kernel-rt-devel-5.14.0-687.19.1.el9_8.aarch64.rpm b381e6877e96544c5245340daa87be0ea642d3ac634679e2dc8028db16df1cc4 kernel-rt-64k-debug-5.14.0-687.19.1.el9_8.aarch64.rpm b3e046bcaada06b8e39fe313639c252067f096712e8b44f67b511f48de5e7c5e kernel-rt-64k-debug-modules-5.14.0-687.19.1.el9_8.aarch64.rpm b693ce9c2b2edbb98d0b82aeb823eb3f9a3691b6469e08dd141f3b3f86e7ed21 kernel-rt-64k-debug-modules-extra-5.14.0-687.19.1.el9_8.aarch64.rpm ba4a542ef7209e0f5eb95b5f4a31d8f7fbf77b76266e6a43fd2083586262b62d kernel-rt-5.14.0-687.19.1.el9_8.aarch64.rpm bc297d7674be7798187051715fafdde4b374dea8157b5c03e5140194af229760 kernel-rt-64k-modules-core-5.14.0-687.19.1.el9_8.aarch64.rpm bc425545e08f37127b275e198a987ce916486122d9a0eacc18485143ed76e652 kernel-rt-64k-core-5.14.0-687.19.1.el9_8.aarch64.rpm c354ce331af302edc0253aff6ccc27c6009569d44c265314b3467c4f2eca8c30 kernel-rt-modules-extra-5.14.0-687.19.1.el9_8.aarch64.rpm cb880dbd6e3b7748f314e9a1c18b48f9ba99da2434754df31d8d6d56411d5c73 kernel-rt-debug-core-5.14.0-687.19.1.el9_8.aarch64.rpm db8e8a36e628ac4c199bacb5d15cf0f85e3b9e74308624ccdf8045378bcbef1d kernel-rt-64k-debug-modules-core-5.14.0-687.19.1.el9_8.aarch64.rpm eadbd7d1f919cb2a90de3772502638c959a939bce73e5e68dcc0bfd4c6732361 kernel-rt-debug-devel-5.14.0-687.19.1.el9_8.aarch64.rpm ef9e5c441af59866872f9a8134c98475b03311aaa12c7beb0fd48c8df2846f56 kernel-rt-debug-5.14.0-687.19.1.el9_8.aarch64.rpm f2a7538f2d9a824d74baad91554b0905efc55eb5f5fd0b4292c9d471669e1753 ALSA-2026:33285 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411) * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) Bug Fix(es) and Enhancement(s): * [AlmaLinux 9.8 Bug] qla2xxx flash image validation failure [almalinux-9.8.z] (JIRA:AlmaLinux-181886) * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-9.8.z] (JIRA:AlmaLinux-182540) * tegra-se fixes and updates [almalinux-9.8.z] (JIRA:AlmaLinux-182760) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-modules-extra-5.14.0-687.20.1.el9_8.aarch64.rpm 01a8c42a6f1595ca0ab1e0e2646ba154657185ce15622642c743e850b72c59e2 kernel-rt-64k-core-5.14.0-687.20.1.el9_8.aarch64.rpm 01d3f03aa529ac179c9c832136cd984945e8e223e5dc9c876c625fbfed8da1da kernel-rt-debug-core-5.14.0-687.20.1.el9_8.aarch64.rpm 21b5fea071552fc3ba2aefb1d02b0f6cbcd7435355deba00180b3ee46bc47615 kernel-rt-debug-modules-5.14.0-687.20.1.el9_8.aarch64.rpm 2ca514fa7d1c2318e3cfeccc58fe0a2e1dfa9bc8a7f3c993519e261bf563a5bc kernel-rt-64k-debug-devel-5.14.0-687.20.1.el9_8.aarch64.rpm 371d6aff0d3ea7a15fafc87ce430da5aea5b8efd5091237c770458796baa06ea kernel-rt-64k-devel-5.14.0-687.20.1.el9_8.aarch64.rpm 3cbcf58875e08d64a68fd3e63fe63d2e10843f4d55c407eedad9fedec263f458 kernel-rt-debug-modules-core-5.14.0-687.20.1.el9_8.aarch64.rpm 4481b3c04dca8eb4943528cb61777c82894d1fad80127de1bdc03ac951b99d19 kernel-rt-5.14.0-687.20.1.el9_8.aarch64.rpm 479d8ff0f1f193f579b7b52dd954cfd3eef43fea4726c3774a88bc14cbc64430 kernel-rt-64k-5.14.0-687.20.1.el9_8.aarch64.rpm 4d3072f5f968d3848361bd4b94b15778b051b6fd4dd24056f73196e12ef41c54 kernel-rt-64k-debug-core-5.14.0-687.20.1.el9_8.aarch64.rpm 4fef5e84f64f17ec8880ac92696b2766516ed55523c927b0e6264a8e1e36b31d kernel-rt-core-5.14.0-687.20.1.el9_8.aarch64.rpm 7aafbb5ff1d941f3081aa98b6c2fc52619d959cae95564550fe775010089650a kernel-rt-64k-modules-5.14.0-687.20.1.el9_8.aarch64.rpm 88a00a31af5bf17b012c7c208d9ef66cf69d281c90df05b7548c6ef94da15c74 kernel-rt-modules-5.14.0-687.20.1.el9_8.aarch64.rpm a58e28585ce1efb213bb1286ff92c8c04eafe56e15b4653271881409852b1166 kernel-rt-debug-devel-5.14.0-687.20.1.el9_8.aarch64.rpm a5c14acdcb094bb0476bddb5b22129d158d560ae82cd1d6c12347e9d1aae5617 kernel-rt-devel-5.14.0-687.20.1.el9_8.aarch64.rpm b1f5fcb08cdae4898dec78198d2edaa1b4d1bfe11cfebef12c32db01843bf115 kernel-rt-64k-debug-modules-5.14.0-687.20.1.el9_8.aarch64.rpm b3227b7f157028462222403c29ac73c115f9e0a53e0b13d7a38d4b2b69728a38 kernel-rt-64k-debug-modules-core-5.14.0-687.20.1.el9_8.aarch64.rpm b45f331dff99dadaed753eaec7b9cfe9483349cd2e9f368979cfa564abba4b26 kernel-rt-64k-modules-extra-5.14.0-687.20.1.el9_8.aarch64.rpm bf1d7462591c9ac9964059a3e65698bdba56647851e4f6b3e20096a7dbbc11e3 kernel-rt-modules-core-5.14.0-687.20.1.el9_8.aarch64.rpm d24324d30486e2a25773b6f0caa6540fb33343e78ea76f67b140b7bc058f2314 kernel-rt-64k-modules-core-5.14.0-687.20.1.el9_8.aarch64.rpm d93d405530043061ff6a97f1dbee1f7590ccbae01bd91136c0cf54f5589d3e4a kernel-rt-debug-modules-extra-5.14.0-687.20.1.el9_8.aarch64.rpm e0a06412c3fd21e76bdb2c321b6a412162042f4d5e87189f93d8140343aae196 kernel-rt-debug-5.14.0-687.20.1.el9_8.aarch64.rpm e3cbb1f1101a75b17246a952923f8bade98e74cbc43e4711d86f3e1bd1f347c4 kernel-rt-64k-debug-modules-extra-5.14.0-687.20.1.el9_8.aarch64.rpm ecdff1f12ec77054df08855af6ac159c842b64bf10a7c6c35bdfeb5abe94df60 kernel-rt-64k-debug-5.14.0-687.20.1.el9_8.aarch64.rpm f807854fd509400c73eef8d777ca95d8f4c509ee13f5c5b9e2838d06bed2660a ALSA-2026:3488 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168) * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085) * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-core-5.14.0-611.36.1.el9_7.aarch64.rpm 09d8365dce7d967e5a6be291bd24dd17da5b87785500e68261ebf11147ceb187 kernel-rt-64k-devel-5.14.0-611.36.1.el9_7.aarch64.rpm 1365896b33d1ec2a9bdae7ab14b0852e2e08dc0ff67ff2d825bba8f0c1be1817 kernel-rt-64k-5.14.0-611.36.1.el9_7.aarch64.rpm 15a2c9065083bc85287ca76105dc2df445a43810548edb89e0bd736197629527 kernel-rt-devel-5.14.0-611.36.1.el9_7.aarch64.rpm 1b3ebcf0597b8ce74adad66d7269837545ba54672027cb3020aca2f0ed1dc2db kernel-rt-64k-modules-5.14.0-611.36.1.el9_7.aarch64.rpm 2564b83e0dc44f1d57771b9b069cb56ca66caca65ef8bfe460b49130256d7be2 kernel-rt-debug-modules-extra-5.14.0-611.36.1.el9_7.aarch64.rpm 33ebcf0a168ee229f0d061612eae515514f87ca4b4570b8f0b687d50d07a98e8 kernel-rt-debug-5.14.0-611.36.1.el9_7.aarch64.rpm 4102fbdeb51ece7ca50c43c797eb191cbb048155612c44f9181a24c1bf2d7248 kernel-rt-64k-debug-5.14.0-611.36.1.el9_7.aarch64.rpm 448cc774b28cd324965ced43be25af6ddb7c5959dc9568d04ec0f964e83cd810 kernel-rt-64k-debug-core-5.14.0-611.36.1.el9_7.aarch64.rpm 6335260f0d32aa98ffa54593c03baf1d22491e91d90622515f0d5c0c9d8df31e kernel-rt-64k-debug-devel-5.14.0-611.36.1.el9_7.aarch64.rpm 666f85f45964d119d7767e8f4fafb863ce4560f34a8b5ef47cde4bff01e89c18 kernel-rt-modules-core-5.14.0-611.36.1.el9_7.aarch64.rpm 694adc8ee5fa4579e25a5e29e97cd59853ab166e425d8d7c3e3a2cba83eb5126 kernel-rt-64k-modules-extra-5.14.0-611.36.1.el9_7.aarch64.rpm 7d623b16d049d339db5d12c32c444b371e57fd9ef2a7859a8147a86531317d85 kernel-rt-modules-extra-5.14.0-611.36.1.el9_7.aarch64.rpm 8c2332c4cd45e89982beb70baf6c84be5de9421cf244b6672351244f2bee1a5f kernel-rt-modules-5.14.0-611.36.1.el9_7.aarch64.rpm 91ff4641932c66561d0ab21b6949056dfc9cc38da3baa0d5a09a7e201e445ff5 kernel-rt-64k-debug-modules-extra-5.14.0-611.36.1.el9_7.aarch64.rpm 9442e7a8b8845fdfbc74c92689c8bc0d50a8774e163848143414cb0e7356cb05 kernel-rt-debug-core-5.14.0-611.36.1.el9_7.aarch64.rpm 9928774be63d65d7239c2555e78280d0bb7a453e415245f24a9e6f7f1c08fa1b kernel-rt-64k-modules-core-5.14.0-611.36.1.el9_7.aarch64.rpm a8b4e10091c166d23cb7478b7f887d1ee4c4ee3f491f4a1e1f68349b461a6d2e kernel-rt-debug-devel-5.14.0-611.36.1.el9_7.aarch64.rpm ab7f1212c4e66dc128d090edca45996eee596aee493ca6580590e6ed8ed2a595 kernel-rt-debug-modules-5.14.0-611.36.1.el9_7.aarch64.rpm db4905a6dcc0ca0c5e1fab92632af276f448d41fb315742d9a9ae575e4fad82d kernel-rt-64k-core-5.14.0-611.36.1.el9_7.aarch64.rpm db93f27cd9e86e2f178c48e072f9af025d6fda47a2fdb6b6e75cb2718394db01 kernel-rt-5.14.0-611.36.1.el9_7.aarch64.rpm dd65f3946320c506e90a632261a219dd81b5d0a5f163c486365e573cfb200665 kernel-rt-64k-debug-modules-core-5.14.0-611.36.1.el9_7.aarch64.rpm e7facc6c424e83174e34ab72ef65633a5b223d4f5791d9fddd9d719f3891571b kernel-rt-64k-debug-modules-5.14.0-611.36.1.el9_7.aarch64.rpm ec1a000ede0b011a8d354818b4af7cc4a08971a9fa3b1d0b7a846b621afbd348 kernel-rt-debug-modules-core-5.14.0-611.36.1.el9_7.aarch64.rpm fe71667bf774f8eb0e1f9c9e43425c9f94a1b319e67fbe711443ba0e897ea1b4 ALSA-2026:36018 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276) * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244) * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259) * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * WARNING at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c:1585 r535_gsp_fini+0x2fb/0x310 [nouveau] [almalinux-9.8.z] (JIRA:AlmaLinux-160966) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-modules-extra-5.14.0-687.22.1.el9_8.aarch64.rpm 04449bf0429303aef6176af8f22eb2d81b17f9ca22507c9a1872277db57460b1 kernel-rt-64k-5.14.0-687.22.1.el9_8.aarch64.rpm 11cc16c709d9b92029805bb0174f9a1bbf15b1ff69be4f8a0930793594a00512 kernel-rt-64k-debug-modules-5.14.0-687.22.1.el9_8.aarch64.rpm 12d64e9b791b19953bb563776ca346165c16c5b6a972d523ff3128a4b564f097 kernel-rt-debug-devel-5.14.0-687.22.1.el9_8.aarch64.rpm 1adb5dd7cc3f6b48dd5a7a65322f2a48ff6c7a8f28aac9564a579532f9875171 kernel-rt-devel-5.14.0-687.22.1.el9_8.aarch64.rpm 3d95ea581560e244e1edac487d317e9a0b80607c709ccdbb465394e29098b3d6 kernel-rt-debug-modules-5.14.0-687.22.1.el9_8.aarch64.rpm 460cc30b5812f2f72c537200824ad63b5a849c4823656168128ae8928ab0ac57 kernel-rt-64k-core-5.14.0-687.22.1.el9_8.aarch64.rpm 496ee0478f1cc46c8bccb890ab19a946f5a38df87326966f4e1cf1e2a2def4a5 kernel-rt-debug-5.14.0-687.22.1.el9_8.aarch64.rpm 64501f0e796dac69157945ee9b60c67387c65667682ee387c67e7bf6ea425dfd kernel-rt-64k-debug-modules-core-5.14.0-687.22.1.el9_8.aarch64.rpm 71d3909ac000c6b7a6ca2cba15936120fc708bd272462a0bb4e367f36469100a kernel-rt-64k-modules-extra-5.14.0-687.22.1.el9_8.aarch64.rpm 7832504b7da9c29a9ebe8c57b5756caea9d90fcdc864d9dc2c2c3b2d6b8291a6 kernel-rt-64k-devel-5.14.0-687.22.1.el9_8.aarch64.rpm 7ef47aad1d7d444ea2c3180aca9180d7949abce7f38982c095a9cda3521d69e4 kernel-rt-64k-modules-5.14.0-687.22.1.el9_8.aarch64.rpm 8eccb6d7c24fb44531ea415420b4827d495a48a76a46b0db989a66dd7c4dce15 kernel-rt-64k-debug-core-5.14.0-687.22.1.el9_8.aarch64.rpm a1aced7e483156342b6d7597b7c5647f9b088eb4e25dfeaf218163a53743b20b kernel-rt-core-5.14.0-687.22.1.el9_8.aarch64.rpm a8b5abcc126155d5c7f240812f46475572c0864dc2a7c9cb6809e1d624855a5a kernel-rt-5.14.0-687.22.1.el9_8.aarch64.rpm a9aee5e920e7ca92e8c027ac6a846b274572a660ba6e892862e4753b0b1ef23b kernel-rt-debug-modules-core-5.14.0-687.22.1.el9_8.aarch64.rpm ac04905ea82ebf273db527d7a0751051a1da172a6efba61dabd1e284531c5ef9 kernel-rt-debug-core-5.14.0-687.22.1.el9_8.aarch64.rpm b7df697346c25e436986cdca05a350b2528a9e0a44c83154c3e12cae36059ac9 kernel-rt-64k-debug-devel-5.14.0-687.22.1.el9_8.aarch64.rpm bbad1178f2d880739d742a555b5fee8c319422e08e8fe0bed4eb4cb540f7584e kernel-rt-64k-debug-5.14.0-687.22.1.el9_8.aarch64.rpm c31aafcf9ea48aa6105a1943f18fa565b73c7d9cc217f26cb41ee36ad36595d9 kernel-rt-64k-debug-modules-extra-5.14.0-687.22.1.el9_8.aarch64.rpm d5c255945257f42145f136b632ab035fe51fd0b693231fafbe108ff0fee8d701 kernel-rt-modules-core-5.14.0-687.22.1.el9_8.aarch64.rpm d65bd775e5a7de94d52256bb48d31dbb5aaab8585f1cff23aac91bea3428d5d8 kernel-rt-modules-extra-5.14.0-687.22.1.el9_8.aarch64.rpm d77be23ed31257d47ea0a403ed1875a9f2da56ac26b922620e189bbb8ad8640b kernel-rt-modules-5.14.0-687.22.1.el9_8.aarch64.rpm f139a7e3a65b973b606456c6c970371b51ef02befc673a6df3539ebef3d38a4a kernel-rt-64k-modules-core-5.14.0-687.22.1.el9_8.aarch64.rpm f9f0952ecd10ad5215b3c38f356b00e347eaee8ebd83cc65a851775d4feab053 ALSA-2026:36645 Copyright 2026 AlmaLinux OS 0 1 Important

kernel update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite (CVE-2026-53266) Bug Fix(es) and Enhancement(s): * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite [almalinux-9.8.z] (JIRA:AlmaLinux-182344) * [AlmaLinux 9] Bonding reports unknown speed/duplex for tg3 interface [almalinux-9.8.z] (JIRA:AlmaLinux-182768) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-core-5.14.0-687.23.1.el9_8.aarch64.rpm 15101b055e07d4ca156d894d1d58ff0be063537065389d8a8e806691d78ab3a8 kernel-rt-debug-modules-core-5.14.0-687.23.1.el9_8.aarch64.rpm 174aa3646ac574f56c4fd407f7862e96bd9d5955992870033344d50eb483bf2d kernel-rt-modules-extra-5.14.0-687.23.1.el9_8.aarch64.rpm 202b9bb42fa4f248337b13b562be0425683c04a618e8e19e8927c96995a57467 kernel-rt-64k-debug-modules-5.14.0-687.23.1.el9_8.aarch64.rpm 255a1bd683ccf8c7ed4cc22557eafdbbdf1e39b0405a96ca18b455b1634e26ee kernel-rt-devel-5.14.0-687.23.1.el9_8.aarch64.rpm 4110ebbe3764dba4d55f198f0e8d1629be5fc27a9517b3086cdace2bb607386a kernel-rt-64k-devel-5.14.0-687.23.1.el9_8.aarch64.rpm 41909928a470ad2397407c3757d47ccbaf739b7738c1f1e0903089bc43e44f24 kernel-rt-debug-modules-extra-5.14.0-687.23.1.el9_8.aarch64.rpm 4955de7c73b55caaa09d75c08a89c1602f8b87798ccb88f0835d599ccc97d0c3 kernel-rt-64k-modules-extra-5.14.0-687.23.1.el9_8.aarch64.rpm 63bf9190664480606361f41f2a2ba0780807d7010200ba3ee0718b2b09ed9060 kernel-rt-64k-5.14.0-687.23.1.el9_8.aarch64.rpm 69b011dc0fa50feb6a05366ed08ea259c86036049807aacb840fc707616b5c1a kernel-rt-64k-debug-modules-extra-5.14.0-687.23.1.el9_8.aarch64.rpm 72fc353f66a7560168818c04ec09d78bfd37b3f8d9172f858b91158fe913deed kernel-rt-64k-debug-5.14.0-687.23.1.el9_8.aarch64.rpm 84b5009583042de387e4712b903739d9aab728c895d392eb2d5e030ce6323584 kernel-rt-debug-core-5.14.0-687.23.1.el9_8.aarch64.rpm 89accfe24909c3fc379f7032a367c46e4d9dbdc731eaaba203cb00cebed8d191 kernel-rt-debug-modules-5.14.0-687.23.1.el9_8.aarch64.rpm 8c93642717ed4ca8bd749eb8608d490cd61ae3c673eab67f41ffd5c6b1c170ea kernel-rt-64k-debug-modules-core-5.14.0-687.23.1.el9_8.aarch64.rpm 9bf0eda04c31ec0a412959988cfbd9001fef2e0cb2c76132cebc4ebcb9169ce9 kernel-rt-debug-devel-5.14.0-687.23.1.el9_8.aarch64.rpm a125a634f0e2a9867a1df987af303205a16512aafe2988a35bcb9f00c3cb5b87 kernel-rt-modules-core-5.14.0-687.23.1.el9_8.aarch64.rpm a8945c5c943ced7fead083219b83c13c6177b7c46e20d0e0156d24b920448f74 kernel-rt-64k-modules-core-5.14.0-687.23.1.el9_8.aarch64.rpm aa4ee0a92a44e536978e6c9ec64aa8880e4a732c3fc91fdab708cc09154b1750 kernel-rt-modules-5.14.0-687.23.1.el9_8.aarch64.rpm adfdab602a1294849aa6bc144cce1481535c7d83a55891f9e3a6cd1b1d968ce5 kernel-rt-64k-debug-core-5.14.0-687.23.1.el9_8.aarch64.rpm c8769f02967a762ce0790b7663804dc6385751c86cc03fc265f253f54d7ec48c kernel-rt-5.14.0-687.23.1.el9_8.aarch64.rpm cc80c2ca60a78cfde626f70c392decd4bdd3858e03e9a5e7e5468108b1fc778a kernel-rt-core-5.14.0-687.23.1.el9_8.aarch64.rpm dffadd555fceaa39dc865317bc2a24791cdfe7c80ca7f668383573a184ebc24a kernel-rt-64k-debug-devel-5.14.0-687.23.1.el9_8.aarch64.rpm e4017493c4410e6809fe1c5b685e5027433cdab23f06f2cc6f7b0c7350c07f40 kernel-rt-64k-modules-5.14.0-687.23.1.el9_8.aarch64.rpm e4aecc177f916cfb1ab04bc08c570356df65573c33f97977e75549254329975e kernel-rt-debug-5.14.0-687.23.1.el9_8.aarch64.rpm f1566e53cdc4484878f805ede4dd142e2dab71da11e457ca30776aaa2c9aa434 ALSA-2026:36957 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-core-5.14.0-687.24.1.el9_8.aarch64.rpm 046ad6b969de56cbc428c468ddd8b2750baa7dbc01785b4fd1a1a89c37d222b5 kernel-rt-64k-5.14.0-687.24.1.el9_8.aarch64.rpm 0cb1a5182e7d4aab39bd143c88059b0043ca89bd419e56e182f176f1616df472 kernel-rt-64k-modules-5.14.0-687.24.1.el9_8.aarch64.rpm 193551b8d8996451c32bcddd0f7e6a1b6a66cd01ef3f0ebeb614735dadf7b4e4 kernel-rt-modules-core-5.14.0-687.24.1.el9_8.aarch64.rpm 2fc03f45e21ddd379d6f11432c47429302557f06a53cf0d8dcba9791ee1f7e26 kernel-rt-64k-debug-modules-5.14.0-687.24.1.el9_8.aarch64.rpm 32e59dfbf2fc6b783b006e629d39587a6296c0dd6ca37b789eaf8a94c0ef9c70 kernel-rt-64k-debug-devel-5.14.0-687.24.1.el9_8.aarch64.rpm 4679a33f748ed6b5976b0f8c9fb47ed05083f4100ca9f42e999188e6043f3db7 kernel-rt-64k-debug-core-5.14.0-687.24.1.el9_8.aarch64.rpm 49f26ebdaf5065d72c9c176dc6550f8fa34495196823c97e6677925127e71c07 kernel-rt-64k-debug-modules-extra-5.14.0-687.24.1.el9_8.aarch64.rpm 4dd6808c4d29fb649c1f904dad244f4e5abbc12dbb3e51b4eb1423761572d2b2 kernel-rt-64k-modules-extra-5.14.0-687.24.1.el9_8.aarch64.rpm 6b34148d5958c2742c31e8c27115e823516ba373ffeeba39e7f000097ded2618 kernel-rt-debug-modules-5.14.0-687.24.1.el9_8.aarch64.rpm 87e31625f6c6b85decb187bd5b3a3b40b6e3df7b9fc9c11c8e06fc6a59730e92 kernel-rt-64k-devel-5.14.0-687.24.1.el9_8.aarch64.rpm 96eae699796646f517297e3cc2fa5a3eaf1f6942616206066c413f19b7d7fc24 kernel-rt-devel-5.14.0-687.24.1.el9_8.aarch64.rpm 9739ef7e7c4549cee316416093435bf0ae986ae3cb2f74ad7d18425f50a9f054 kernel-rt-debug-modules-core-5.14.0-687.24.1.el9_8.aarch64.rpm 9811dbe9432bab476666bb87160f7f9c0fcfdcd09e6a7ec3355c1a5b663bc3c7 kernel-rt-64k-modules-core-5.14.0-687.24.1.el9_8.aarch64.rpm 9e0d104a20c7a43bf0ea5c72d4bd45719b8f1eb7fa2f4e2f75cd5b41b32bf21f kernel-rt-modules-extra-5.14.0-687.24.1.el9_8.aarch64.rpm 9f716a1080312c36ba80d697dfa850251b1edab1187b32478e79e041a9234d95 kernel-rt-modules-5.14.0-687.24.1.el9_8.aarch64.rpm a0109d0c8e7333bfc112d97580a2cc3a7a4c9b19ab6b769a6c201add3d721db5 kernel-rt-core-5.14.0-687.24.1.el9_8.aarch64.rpm a517281b6ce5cbf41249d32d75efebec5eddb5033d43cc31725d460b56108d19 kernel-rt-debug-core-5.14.0-687.24.1.el9_8.aarch64.rpm ada1461b5ca54e0c473f0479aed739b59bd4d513493586656bdee28fa7759da6 kernel-rt-5.14.0-687.24.1.el9_8.aarch64.rpm ade7507d1b6d6630d25d9be89112341e4929ebec988e0e99d78b8bd7a3f207d5 kernel-rt-debug-modules-extra-5.14.0-687.24.1.el9_8.aarch64.rpm bd82a5e2d41560cca2ff193314121aeb71359c63db7a2fca2d8ec1ca4afcd6dd kernel-rt-64k-debug-modules-core-5.14.0-687.24.1.el9_8.aarch64.rpm c5cf2b2dad0c24f853db635ceb3750ebc885538308b5ba241457249425cf1f1c kernel-rt-debug-devel-5.14.0-687.24.1.el9_8.aarch64.rpm c957d795a3da4cf0ccb4b0b2b7cd43ab5f31cc6c07eb040ce621193f7985614e kernel-rt-64k-debug-5.14.0-687.24.1.el9_8.aarch64.rpm d24d5ec5a85e03d1158bd6b1d51c3fcf780cdbabcad79c724f4d58cd628035f1 kernel-rt-debug-5.14.0-687.24.1.el9_8.aarch64.rpm e7697a2645d1769a20c8416ff79d6f75bc63176435f42fcce83e762af47e48c4 ALSA-2026:38491 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling (CVE-2026-22979) * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) Bug Fix(es) and Enhancement(s): * Kernel panic very early during boot while reading a tracefs file (available_filter_functions) due to invalid module name pointer [9.8.z] (JIRA:AlmaLinux-183236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-debug-modules-5.14.0-687.25.1.el9_8.aarch64.rpm 02ed4b256954af39ee4cbb3a5694dccce27ae460b13c05593decafdb4dffc35b kernel-rt-64k-debug-devel-5.14.0-687.25.1.el9_8.aarch64.rpm 08c17a50094cac8ed84ece15f1e45893aceca949d31fe6562d4a04ac982b2415 kernel-rt-64k-modules-5.14.0-687.25.1.el9_8.aarch64.rpm 0b4ac834b9d4f6806d122ebb2b4f749c517dae27a113a522c305220fc45d2ea0 kernel-rt-64k-debug-modules-core-5.14.0-687.25.1.el9_8.aarch64.rpm 0ddc6d1e9d16ca02c568769a9f1c753ea2752448be2f71673d55f3a40c564a57 kernel-rt-5.14.0-687.25.1.el9_8.aarch64.rpm 1f53a5dd47bca26a89d2132a87441cfcfdb80bcae963bf4448be6bdf1e937d14 kernel-rt-debug-5.14.0-687.25.1.el9_8.aarch64.rpm 24c0e97274736e04abffa38f5a3472acf6aa18a5a320c989b4f037700aa368cd kernel-rt-debug-modules-5.14.0-687.25.1.el9_8.aarch64.rpm 293091ce030fe7e84fca537bc41887abe48026d732535ee903af52e811108e08 kernel-rt-debug-modules-extra-5.14.0-687.25.1.el9_8.aarch64.rpm 38f656e192a672766d54ef277ad7d9494def7dd2e08cce20de08048ac9b57344 kernel-rt-modules-5.14.0-687.25.1.el9_8.aarch64.rpm 5a9cf55356f3d9dacf4ae768a8ed81ddc8c8bdd106c9c3a5e279439464f48b10 kernel-rt-modules-extra-5.14.0-687.25.1.el9_8.aarch64.rpm 6609d8e4bef23ce593f3e751c272352b2bd6ccbc1bf08ff8c01640fa6980780c kernel-rt-64k-debug-core-5.14.0-687.25.1.el9_8.aarch64.rpm 6daf8919170d18bd6d284dc3ff2cd9f6071c28ef2e933de834e11d1c26ed137d kernel-rt-modules-core-5.14.0-687.25.1.el9_8.aarch64.rpm 6fbf78776365cf5c4613c6c4529e7ba15a270f742fd1c0dff4ed20c54f84b124 kernel-rt-core-5.14.0-687.25.1.el9_8.aarch64.rpm 712c5b94fc9a89a7324f6653e75e3e050839ec151d2038a0510f2f167306e3d8 kernel-rt-64k-core-5.14.0-687.25.1.el9_8.aarch64.rpm 900ebd7207f85051c73d801c2fe4c8df46225a1ab679eaf5fb864a75889a08f0 kernel-rt-debug-core-5.14.0-687.25.1.el9_8.aarch64.rpm 9ad347416aab759b4173041d23829c46edb16fe74a7c15ba5eaa65397eb871d2 kernel-rt-devel-5.14.0-687.25.1.el9_8.aarch64.rpm c3fc5628e8e19c4bdbedb40abc1d0981222b55bc3247567466265deedc27c03e kernel-rt-64k-debug-modules-extra-5.14.0-687.25.1.el9_8.aarch64.rpm cd1d190f3d3ce2963cba3a1f1d5b84e0bf115556bff1e860785ce34b999c3a57 kernel-rt-64k-debug-5.14.0-687.25.1.el9_8.aarch64.rpm d06aa802eac0e2d806ee3348590c09fc1ca6c36573b4eab26b80b981004f6b14 kernel-rt-64k-devel-5.14.0-687.25.1.el9_8.aarch64.rpm df3e555e52b0dc754dd2e687a3cb5b47bc928d7a5da03d789dc5f56395346290 kernel-rt-64k-modules-core-5.14.0-687.25.1.el9_8.aarch64.rpm e2d9abf2e382416dd347738e0cfaa3997fa0d01d8b4929c92d8fee0c14c0a877 kernel-rt-64k-modules-extra-5.14.0-687.25.1.el9_8.aarch64.rpm e415fe4c850ba56b0bbc807599c5623e5f54e68640290ee96fd7f633e5406c3d kernel-rt-debug-modules-core-5.14.0-687.25.1.el9_8.aarch64.rpm e7c88b37376eaf3278f0b4d52a8533fc8f1e8ed8164910148a5348f79454c5e3 kernel-rt-debug-devel-5.14.0-687.25.1.el9_8.aarch64.rpm ed177a48c60c7200b39e960c5554a205eddc65405f6c390af944ab87c2a4bd65 kernel-rt-64k-5.14.0-687.25.1.el9_8.aarch64.rpm f4f818e1c22ae3d9dd28c715714f775755a0d0b5e7b77d4ba88f34b9f2d6b614 ALSA-2026:3966 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free (CVE-2025-38106) * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-debug-modules-extra-5.14.0-611.38.1.el9_7.aarch64.rpm 0f5a3bbb565589e4d07fd287e3cb00ab8bef88706f8ef4d18c350028ae2e2f0b kernel-rt-debug-5.14.0-611.38.1.el9_7.aarch64.rpm 13710c202a642c611d11e0b2b37f32488e5e7414e87aecf97d0929379309305a kernel-rt-64k-modules-core-5.14.0-611.38.1.el9_7.aarch64.rpm 2d1b7cfeec95c271de3c37330f83c0ecec4177c4847f900ae323054eeea1e06a kernel-rt-64k-debug-modules-5.14.0-611.38.1.el9_7.aarch64.rpm 2f33d8e60ffe1cf4a1e24dee5eeae7bebaefd8756d990f329a2d4c03db078801 kernel-rt-64k-5.14.0-611.38.1.el9_7.aarch64.rpm 31dd02829844b49d06fc94cdea23655d1d6e68fe241925dcdee256a33b42f537 kernel-rt-core-5.14.0-611.38.1.el9_7.aarch64.rpm 34f37afc8812532f18e630edc5a93248beac8dcac1d956948e753f88ce098c3e kernel-rt-64k-debug-modules-extra-5.14.0-611.38.1.el9_7.aarch64.rpm 4625cf5b93a79988e05713a017d59194904fd989b8cbd7a00de862830f259fab kernel-rt-64k-debug-5.14.0-611.38.1.el9_7.aarch64.rpm 4e203a3175d81030549afd83ca480dc5cae6f9251d8b21819227e22dafd59568 kernel-rt-64k-modules-5.14.0-611.38.1.el9_7.aarch64.rpm 6024a6405396da360fd583243ca0d824799faa7e6442fbc6050372dde1af1421 kernel-rt-modules-extra-5.14.0-611.38.1.el9_7.aarch64.rpm 7359c49fed2b5d9733b56815136b49cc3aa14487f29445958c5a4c1801d2fd39 kernel-rt-64k-modules-extra-5.14.0-611.38.1.el9_7.aarch64.rpm 7c2a25d4313b55e445ef1d86553a708a219be982304ee540e7b09d0df2b27612 kernel-rt-devel-5.14.0-611.38.1.el9_7.aarch64.rpm 8cc4558316519b803394f67d85295728eac28fae9af6a6d71e0f5bea46c25f27 kernel-rt-5.14.0-611.38.1.el9_7.aarch64.rpm 8e0707e8609068ab881b9d65cb9c4f7c2e3996e1813d169edb3cb401a57f1c84 kernel-rt-64k-core-5.14.0-611.38.1.el9_7.aarch64.rpm 90aa28da8fd56c744fddd57cea19bc3688eda02be1ee3b0a3f8f5565f41da65a kernel-rt-debug-core-5.14.0-611.38.1.el9_7.aarch64.rpm 9156318bc0665ad21d1d8b3b5a19b4366b2e77363ad455b00690c1d0d990e15a kernel-rt-64k-debug-modules-core-5.14.0-611.38.1.el9_7.aarch64.rpm 9a68eefd93797b771caf5dbfb6eab507eaf725aa3bafcbb83998f26be21609f1 kernel-rt-64k-devel-5.14.0-611.38.1.el9_7.aarch64.rpm 9ba8ed903139a598234a0a0999fcc89feb26a6bf148f862f5aaf241840eb0496 kernel-rt-debug-modules-5.14.0-611.38.1.el9_7.aarch64.rpm a0b132c28c79e4ee35584e439a4700a2e6ee27978c5c70d236acd9fdadf9be95 kernel-rt-debug-devel-5.14.0-611.38.1.el9_7.aarch64.rpm aa4cb2401150db17aa2f291f4e3bab05ae7021e6c355cc516a2ebca111c6a03c kernel-rt-debug-modules-core-5.14.0-611.38.1.el9_7.aarch64.rpm b980842347f6c0d4047a2e14a8efcc8e6cb04e5e0101a104b0c9a2590d252f3c kernel-rt-64k-debug-devel-5.14.0-611.38.1.el9_7.aarch64.rpm bad310ff7546122a7d94e6cbad29bc31953830ea2c9cbf934502fb6c0275b4a2 kernel-rt-modules-5.14.0-611.38.1.el9_7.aarch64.rpm bf853c5e5468ff551f9ab7f77305c847ea45b247ed0e47085bd25ef0fa42969c kernel-rt-modules-core-5.14.0-611.38.1.el9_7.aarch64.rpm d360cc91b9c038d9f68211ade7cb62c01b49ecdcaa278bae8df69113af6c1f3e kernel-rt-64k-debug-core-5.14.0-611.38.1.el9_7.aarch64.rpm fdb401c0311a3616921b1e54a58e49d7e68b5c30ff4004293c0ac0e891b7bed7 ALSA-2026:43307 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: fanotify: fix false positive on permission events (CVE-2026-46150) * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215) * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-9.8.z] (JIRA:AlmaLinux-183980) * [AlmaLinux-9.8.z]: mlx5: include bug fixes (JIRA:AlmaLinux-188121) * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-9.8.z] (JIRA:AlmaLinux-212061) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-modules-core-5.14.0-687.29.1.el9_8.aarch64.rpm 0357f94548eb197552aba6cde9fc51c5843a709adb03b19dc06da8851282bb06 kernel-rt-64k-devel-5.14.0-687.29.1.el9_8.aarch64.rpm 15271c2afdf2c12751776d976cf9e6a35dd91f543adedba27b4db9646b295843 kernel-rt-debug-devel-5.14.0-687.29.1.el9_8.aarch64.rpm 16562e5c40fda2a454419bf382f510ae5dcfeee5dde21c0e665c419b36470da5 kernel-rt-64k-5.14.0-687.29.1.el9_8.aarch64.rpm 2abba0a08d3006343986760593b2cfd3e0c052efcb601580ef2041b55c29b032 kernel-rt-debug-modules-extra-5.14.0-687.29.1.el9_8.aarch64.rpm 2d81b8433be7f54f8660d74b0f10a6fda317c798263ea1b062ae4aa15cee130d kernel-rt-64k-debug-core-5.14.0-687.29.1.el9_8.aarch64.rpm 44cf1f8f28d16604f16577c678d5d8e70f50224f2b78f2be480316a0dfd88728 kernel-rt-modules-5.14.0-687.29.1.el9_8.aarch64.rpm 44e78e60e2218cedc649a49ab86863466d4be60dc035c798e30e953a7991d607 kernel-rt-64k-modules-5.14.0-687.29.1.el9_8.aarch64.rpm 4a385f7d4d0de1c13bafdc54ed03f198f3eb65aae1809534486132bb764c7468 kernel-rt-64k-debug-modules-5.14.0-687.29.1.el9_8.aarch64.rpm 4c33f8fcbe93b37f5ede8795f57772fa144e84c8d7043f8be4d10b67a1b28df6 kernel-rt-debug-core-5.14.0-687.29.1.el9_8.aarch64.rpm 6baa1f8d31047765e381a2d0db0696014ceb384ed9cbcffeb22afa9df6db4fa6 kernel-rt-64k-debug-modules-extra-5.14.0-687.29.1.el9_8.aarch64.rpm 8a3a50f0ba9827d77b6a8d080e66aacc6f15dce476301860f37ed0f9196c243d kernel-rt-64k-debug-modules-core-5.14.0-687.29.1.el9_8.aarch64.rpm 8df7a28ff47ab8b83e3169476714c78f0706c023fc13658f2345c3edec3bfb7e kernel-rt-devel-5.14.0-687.29.1.el9_8.aarch64.rpm 93ac943be48284e36fb753b9b1f28462954a72dbc49af5824bafb36ccb761cf8 kernel-rt-modules-extra-5.14.0-687.29.1.el9_8.aarch64.rpm 969fae1ab5282ff139f5433a5f94a1e0204d3261b4ef97db88ddc89e0e56d813 kernel-rt-64k-debug-5.14.0-687.29.1.el9_8.aarch64.rpm 96fd93947407be63d0b811400a5138b93d55cb177dc5e05d9bb17c896ca8987c kernel-rt-debug-modules-5.14.0-687.29.1.el9_8.aarch64.rpm a9de28115d5971c8008c008c91036f025cbac03d005c8c65a631c715c164a79a kernel-rt-modules-core-5.14.0-687.29.1.el9_8.aarch64.rpm c50bf4efb853ba23aacadd27430fb4711cb5ac297713cc79feb7ed8149780dc8 kernel-rt-5.14.0-687.29.1.el9_8.aarch64.rpm ceea3407d4789b90bcb44a1555850d045ecb8dc607666412f5fe522abd473f83 kernel-rt-64k-debug-devel-5.14.0-687.29.1.el9_8.aarch64.rpm cef1619a8c32d91071bede7ec1d91d718f7a21b68a0950b2380a34af2bbc615f kernel-rt-64k-modules-core-5.14.0-687.29.1.el9_8.aarch64.rpm db4977246a6e1c92e0d4b4a0b9f38f87402cbca60f69cc36abac0ee92764f521 kernel-rt-core-5.14.0-687.29.1.el9_8.aarch64.rpm f274e55023a1161b6f1e08993d72ef6c692d0876292f13ea5d16e435dcb54a6d kernel-rt-debug-5.14.0-687.29.1.el9_8.aarch64.rpm f8a9c27efee88dc2ce50e432304f750dc41dcd837ba2b401806cb4bf9845accd kernel-rt-64k-modules-extra-5.14.0-687.29.1.el9_8.aarch64.rpm f8ca33707416ece3097b39b03373c546685ecc3cad07d34cdf0821eb5b794d14 kernel-rt-64k-core-5.14.0-687.29.1.el9_8.aarch64.rpm f8d5c449e75d551eecd67967bb6d84434fc136fa227fc38dea7e729e6a5c8bd9 ALSA-2026:45192 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976) * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950) * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) Bug Fix(es) and Enhancement(s): * scsi device removal may hang from race with error recovery [almalinux-9.8.z] (JIRA:AlmaLinux-187412) * [AlmaLinux9] kvm fixes for 2026-07-21 [almalinux-9.8.z] (JIRA:AlmaLinux-213468) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-devel-5.14.0-687.30.1.el9_8.aarch64.rpm 1ded98004335c8d31e50f21f19d0b5adc507cfe9a4226b1e791c58183b8df2bf kernel-rt-64k-devel-5.14.0-687.30.1.el9_8.aarch64.rpm 27ecd7e9bc49194adfa99154ea664e45f50ebbe78a2335dc5b9a8cb6f49d3fdc kernel-rt-64k-debug-modules-extra-5.14.0-687.30.1.el9_8.aarch64.rpm 321eb38eb57b10ce09ad41cec07afcf458e438b0f191c49b8ba29f6f1e275749 kernel-rt-64k-debug-modules-core-5.14.0-687.30.1.el9_8.aarch64.rpm 37b307b28e5db9c9a8a7c9169a6a7baa82ddf6ce3140527ded548ed0a07a6126 kernel-rt-modules-extra-5.14.0-687.30.1.el9_8.aarch64.rpm 3879a1947bd648a04de77d24bb5ecf91845a82044bf5a531e769808a19869bea kernel-rt-64k-core-5.14.0-687.30.1.el9_8.aarch64.rpm 53bd4bbde83fd686f252845a3635af332a7f4d9256183a4dfce1c663c0f5b5cf kernel-rt-debug-5.14.0-687.30.1.el9_8.aarch64.rpm 586d3de43b2057dcac0a2831ca1672a7651965a6b1032bb1bb6e65b186b29569 kernel-rt-debug-modules-5.14.0-687.30.1.el9_8.aarch64.rpm 591c5218993689c6855e842b59c8a18308e0ae47b8814f33d87704641c46ae2f kernel-rt-64k-debug-core-5.14.0-687.30.1.el9_8.aarch64.rpm 6bf6a6519b5d315b7064099aa62b7ce1465b8325fc73eedfa274aed4a53ef9fd kernel-rt-debug-modules-extra-5.14.0-687.30.1.el9_8.aarch64.rpm 7e5135cd3de8b6a5a9ff0aeb1eb2b9d1b112f8d9984e977b1ed0cb9e52844d1f kernel-rt-64k-modules-core-5.14.0-687.30.1.el9_8.aarch64.rpm 895a31a35de02f1562ad6e9641a539410557a32eba7613222177e60e017f80ed kernel-rt-debug-modules-core-5.14.0-687.30.1.el9_8.aarch64.rpm 8bdbe8bdec6a1b9b7206e592057bed08d1bad617889644b4942a8f6c5c0ccd39 kernel-rt-devel-5.14.0-687.30.1.el9_8.aarch64.rpm 9115e6fd5d131d4b3711cae12990fbbfe245aa482f3ce96353f1e17acf0b5a44 kernel-rt-debug-core-5.14.0-687.30.1.el9_8.aarch64.rpm 99bf802a27dccedbe7c0f335673aa6d1cf3f25e9f3b1e3d41abcc8d6342fc383 kernel-rt-64k-modules-5.14.0-687.30.1.el9_8.aarch64.rpm a00830fc2e45ff51f90ad84d77e7bbe51719c83ad6830579f501cf309190eee2 kernel-rt-64k-modules-extra-5.14.0-687.30.1.el9_8.aarch64.rpm a9a0109c28050b2636db39d145098e4ebdb6e1a6967178d443f5626da1f3dd56 kernel-rt-modules-core-5.14.0-687.30.1.el9_8.aarch64.rpm aeb7e15a2b7e956227e223dc7e261a3725741b32a5850cb0ca8a58b85ef525a0 kernel-rt-64k-debug-modules-5.14.0-687.30.1.el9_8.aarch64.rpm b1ba5b9cce17d1b5ff89d50be03af6d1608a9d12422b1b6ebf0669549812c5ae kernel-rt-core-5.14.0-687.30.1.el9_8.aarch64.rpm b22cf544f22f5605d90b75813687d84874cf832585c1eddfb49c0a09584caa41 kernel-rt-64k-debug-5.14.0-687.30.1.el9_8.aarch64.rpm b4244be30f0c0e7bde10a1c4885c0681af00cdf687ccc2ff42125e4d478a52dc kernel-rt-64k-5.14.0-687.30.1.el9_8.aarch64.rpm b76f9f9685b149d576630e809de079d49cc2cefe8f5854494a96449b2e191f28 kernel-rt-64k-debug-devel-5.14.0-687.30.1.el9_8.aarch64.rpm c5ecc783c60b1d2391a46cdabeefcd5e10f8830940f444de6b03af16e4820631 kernel-rt-5.14.0-687.30.1.el9_8.aarch64.rpm e3eda9cf7b0fe22bcfc91141831212f3a382c490ee8267ef3377b3809cf23b1d kernel-rt-modules-5.14.0-687.30.1.el9_8.aarch64.rpm eb57c08a34342b31222f2b24c419f40fd28c0b7206ec569711c3d241f1ae3fe3 ALSA-2026:47040 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797) * kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281) * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017) Bug Fix(es) and Enhancement(s): * general protection fault during exportfs / nfsd4_revoke_states [almalinux-9.8.z] (JIRA:AlmaLinux-188257) * Enable Pretimeout Watchdog Panic Functionality on x86 [almalinux-9.8.z] (JIRA:AlmaLinux-193729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-debug-modules-core-5.14.0-687.31.1.el9_8.aarch64.rpm 17f69c053f46b8956065d1a1a6ec9b6a4d33a6184502b7cf882d57a2324cf7de kernel-rt-64k-debug-modules-5.14.0-687.31.1.el9_8.aarch64.rpm 18c4f517ea5f4d8956c90f111b71ad657a35d71241285e5825b8df0226dcd4f5 kernel-rt-64k-debug-core-5.14.0-687.31.1.el9_8.aarch64.rpm 2d710f3fddd93fa1c91eb0dce26dc9999c08aaff765f8bdbd237bf9a7043f2f4 kernel-rt-devel-5.14.0-687.31.1.el9_8.aarch64.rpm 38a596db06d2c4bf10b5f08c7555981eb3f682a43d5cd162a849deb791a3e9a3 kernel-rt-64k-modules-5.14.0-687.31.1.el9_8.aarch64.rpm 38d01ad83c40c48f8bad25b31ad8604ec1680ccda9c495ab2b8e9bf4c0dcfb8a kernel-rt-64k-debug-5.14.0-687.31.1.el9_8.aarch64.rpm 540e3bf4d41f9973867b1bcfdd7b95f8e6bcfc5242bfed2af3abb845a5ba97d5 kernel-rt-debug-modules-5.14.0-687.31.1.el9_8.aarch64.rpm 54f17e477f2cc3fe6609c801d287b937f2a2033b3e19f0b68eccdcccaba99988 kernel-rt-debug-modules-extra-5.14.0-687.31.1.el9_8.aarch64.rpm 68ccff232ed4b2d508a9b4189b09383522817f2391806fb90e690350232e702a kernel-rt-64k-debug-modules-extra-5.14.0-687.31.1.el9_8.aarch64.rpm 6930f8a144241532f4a08e5a1d1c59c2bb249666f187bf2a8d02d4383e2da70f kernel-rt-64k-core-5.14.0-687.31.1.el9_8.aarch64.rpm 78afe8e676793cb86f9b847ed842a64df78c2b227685f734769c4779cb8b908c kernel-rt-64k-devel-5.14.0-687.31.1.el9_8.aarch64.rpm 83979b2f879e362155eba6ffd03530ce00ac7604bce24912e7534571689f922a kernel-rt-debug-core-5.14.0-687.31.1.el9_8.aarch64.rpm 8ef0d27da144a85c2f9763f50a019f9238eb06a793cc85141507fa93b3d81735 kernel-rt-64k-5.14.0-687.31.1.el9_8.aarch64.rpm a16adf9ead0442aff0e92eb280b708ea01adb927a8300b62de6ed0e95047ffcd kernel-rt-64k-modules-extra-5.14.0-687.31.1.el9_8.aarch64.rpm a340a4bae91aeb0ff1d7d396eab4c7ee789f9b5ea9c2e71510e2cc4eccb036f0 kernel-rt-64k-debug-devel-5.14.0-687.31.1.el9_8.aarch64.rpm a41b8bd3ae3c0cfaa9543950aa260629407c6de074b7b2b47704a5a9d067faa8 kernel-rt-64k-modules-core-5.14.0-687.31.1.el9_8.aarch64.rpm a69d62641338e3c38dc97ae4eaf601cc128bf39c08b8c95112900a6cdb7c848d kernel-rt-debug-modules-core-5.14.0-687.31.1.el9_8.aarch64.rpm ad999b5e05238673454861db575226a27bc122b1e2660b271d90ced59133b81b kernel-rt-modules-5.14.0-687.31.1.el9_8.aarch64.rpm bd23635b858c5fcdf54c3cf45c083a89de28520fa9da48aaf763beecf04024b4 kernel-rt-modules-extra-5.14.0-687.31.1.el9_8.aarch64.rpm c6ab94e8de1d37e617793718f4a82c5fcc353be122262fb58b142c03f9e81fd4 kernel-rt-debug-devel-5.14.0-687.31.1.el9_8.aarch64.rpm ca0865acc0c487682917c0b03c75a736584be5138db1cb56ed905473e739a358 kernel-rt-core-5.14.0-687.31.1.el9_8.aarch64.rpm cd9dc7d8ceec9a4fc274ef0430fcc58db6ddf5e92bc18e457646b719a7eea0f9 kernel-rt-modules-core-5.14.0-687.31.1.el9_8.aarch64.rpm d375e40b57971c9cf93873047108d57b1f6bf095af3beb927df140f00d7bed03 kernel-rt-debug-5.14.0-687.31.1.el9_8.aarch64.rpm f06ab745dd993bfe2ecff37dd5abd82d27cbb884dc55055e69cd733d6a54f73f kernel-rt-5.14.0-687.31.1.el9_8.aarch64.rpm ff0eec35796bc09e4c0f44cd3fea1528db6bcd8e43c6e20aaca08aaa9f9e40b2 ALSA-2026:4759 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CVE-2025-39818) * kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-debug-modules-core-5.14.0-611.41.1.el9_7.aarch64.rpm 0171aa068b36df76355e27f75bd4068d18412a23ccac25f07774bb9035058fd3 kernel-rt-64k-modules-5.14.0-611.41.1.el9_7.aarch64.rpm 0b7c265483f0ecb2e2eaea103c6afa387f8d50c0683a9841300303b10a171e6c kernel-rt-64k-modules-core-5.14.0-611.41.1.el9_7.aarch64.rpm 29e6be3d38d39ee250f171212888010b6879e4c9310571abdcab88cd6d6f7b8b kernel-rt-64k-5.14.0-611.41.1.el9_7.aarch64.rpm 302c06b522ebb609c5396cea692947204a3d5cbc080c2d6d4e059bff9884c6ea kernel-rt-64k-debug-modules-core-5.14.0-611.41.1.el9_7.aarch64.rpm 34b891417ec63ed9d17c43a55ad377c8c606da155796ca61b0506bf13e44a70b kernel-rt-devel-5.14.0-611.41.1.el9_7.aarch64.rpm 471a04f72e990d554af434bbe4141ea5c8730987bab9288c4303cc5fc69fee19 kernel-rt-64k-debug-modules-extra-5.14.0-611.41.1.el9_7.aarch64.rpm 4b1d77c0f79b6fe866addf6334b29eba0d96571b080fba99c8d6c17b2610ba54 kernel-rt-5.14.0-611.41.1.el9_7.aarch64.rpm 53f21b4502b31163eeb44a65bf0332b2b864814c62541a4b70032058bdd49e34 kernel-rt-debug-modules-extra-5.14.0-611.41.1.el9_7.aarch64.rpm 58a5cf2cb67f500be3e329e929c90cbc55c9cd14c690a22f8ca2af7aa6ccb07b kernel-rt-modules-5.14.0-611.41.1.el9_7.aarch64.rpm 66bd8d159562204116320113ef26935661c7a1909fc820b8a93bb406fca68b28 kernel-rt-64k-modules-extra-5.14.0-611.41.1.el9_7.aarch64.rpm 7dd7f731f334b3b1eea543586e37a5a8079315af44438fe9211007d0586dae61 kernel-rt-64k-debug-devel-5.14.0-611.41.1.el9_7.aarch64.rpm 7efb01f3ca6da987a293302525dd5666284798a75d5c69760068ee2acf4a958f kernel-rt-core-5.14.0-611.41.1.el9_7.aarch64.rpm 8831a1e83bb5e95c43f3dad71d5f1e43bd5e2cbdf4c1f5f8f43dc4f326d0a5f0 kernel-rt-debug-core-5.14.0-611.41.1.el9_7.aarch64.rpm a270479dbd762d35083c0b43e50590392e0b393d33d3ca4491618a8fd0b7f3c6 kernel-rt-64k-debug-5.14.0-611.41.1.el9_7.aarch64.rpm ad956f0dedb2eea6df4a15effeae0035839eefedf76d41c2ce9a41766a840a6b kernel-rt-64k-debug-modules-5.14.0-611.41.1.el9_7.aarch64.rpm b7540c53e68d7568f5ed087873fad930bf071d671f238951a446722ec54604be kernel-rt-debug-devel-5.14.0-611.41.1.el9_7.aarch64.rpm ba4493cefcdd41b5fdf12f10705508f8cbc8bfd63e0a8777b5c487d805786b30 kernel-rt-modules-extra-5.14.0-611.41.1.el9_7.aarch64.rpm bb8e9152f63778c711b684630696fdf210e18e3e0caf5ad49efb2ecf1e39217e kernel-rt-debug-5.14.0-611.41.1.el9_7.aarch64.rpm cdeb207091a3c5789582fdcfd2e942c32e519dcbefd5283cdc7b8da5a38478cf kernel-rt-debug-modules-5.14.0-611.41.1.el9_7.aarch64.rpm d23d902649305d14ea0b8c9005c2423c7689da5c93cc8f36b81a62392bf72afe kernel-rt-64k-devel-5.14.0-611.41.1.el9_7.aarch64.rpm d573f616c47cdebf1458b55ab4ce70ed67e6c3613b08624d7183d30b8c76e7a7 kernel-rt-64k-core-5.14.0-611.41.1.el9_7.aarch64.rpm d8c478f911b9dfdcc642f21194ceac9a2898aff8219e455921167c6891daa069 kernel-rt-64k-debug-core-5.14.0-611.41.1.el9_7.aarch64.rpm fb5798b0d4642ad0838d8c95bb8d566982c9d679799eec61d537e80478fe92f7 kernel-rt-modules-core-5.14.0-611.41.1.el9_7.aarch64.rpm ff7eabfc2f94c2a5d4dd67335d5608c58b7eefeae01ff379245c3491af15eaec ALSA-2026:4760 Copyright 2026 AlmaLinux OS 0 1 Moderate

grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: Missing unregister call for gettext command may lead to use-after-free (CVE-2025-61662) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default grub2-pc-modules-2.06-114.el9_7.1.alma.1.noarch.rpm 07f3c4d11cfb3c9c18de75619310901be03ba88b91860f6af22eee5435cd9eb2 grub2-ppc64le-modules-2.06-114.el9_7.1.alma.1.noarch.rpm f13ce2aa16994df090d24fe542a11bf1c5539259be2a796e549043bab49b5613 ALSA-2026:49212 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () * kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CVE-2026-64530) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-devel-5.14.0-687.33.1.el9_8.aarch64.rpm 004392b37519b752111f66fa90551f07645ec5a387f197219edee5b3cb3ebb66 kernel-rt-debug-modules-extra-5.14.0-687.33.1.el9_8.aarch64.rpm 018f1a033c2af6a185be7c458f46057b29db61d6656120dce89fcad9ff4c4583 kernel-rt-64k-modules-core-5.14.0-687.33.1.el9_8.aarch64.rpm 067f1c23715962cb406ff3b757d5c357578915adbdf6a3db00d3894ff6f92670 kernel-rt-64k-debug-modules-core-5.14.0-687.33.1.el9_8.aarch64.rpm 0e4b8227cea7d39c03fee59f08e9c169dc2094f191e925e64d9966b9c88ec5ec kernel-rt-modules-core-5.14.0-687.33.1.el9_8.aarch64.rpm 1a00224deb1e6c7cae0c213f2db163a5d4a4c7c177ad168f55773ea70994fecc kernel-rt-modules-5.14.0-687.33.1.el9_8.aarch64.rpm 2209f4a9357461c2229e99f0a1775eeac5da951b2a64388bc2f07fb47eaed1ec kernel-rt-5.14.0-687.33.1.el9_8.aarch64.rpm 24ef42122a285a2f0921501d2c065d3895be1b57a77efb883e17b0cda2c84486 kernel-rt-debug-devel-5.14.0-687.33.1.el9_8.aarch64.rpm 2bb71e7ef3f22647c4d6c51a7dc2ee067daa1dbbe7541444013b7f5b3014b0d9 kernel-rt-64k-core-5.14.0-687.33.1.el9_8.aarch64.rpm 42dd2c9d06049159d1bed8bc8cc5dcb6a9918d96e49750d12a1efdbe3bc8e963 kernel-rt-modules-extra-5.14.0-687.33.1.el9_8.aarch64.rpm 47a68348d92d9182d10d28613e90f4ff815b6209c2edf862ca092b4151c4c4b5 kernel-rt-64k-debug-core-5.14.0-687.33.1.el9_8.aarch64.rpm 4a2c2c9d14fdf1d67f6178bc25e18fb46ed99fac0ca4f94ce624acc07b6677ff kernel-rt-64k-debug-devel-5.14.0-687.33.1.el9_8.aarch64.rpm 4aee876bb881bdc61c7704fa54f0cbd1c1ad20201eb92c0e4a3ed200b024e988 kernel-rt-64k-debug-modules-extra-5.14.0-687.33.1.el9_8.aarch64.rpm 4cf68fa64f508cc28ebaa4649eba9920446841e3e6f2f0d9d75f90e3e9b4c740 kernel-rt-debug-modules-5.14.0-687.33.1.el9_8.aarch64.rpm 4ed48b2251da62f8c5ad1e5623c571fdaa447aab3ccf0811f3452b2c23dca716 kernel-rt-64k-debug-modules-5.14.0-687.33.1.el9_8.aarch64.rpm 61754ff70a06e9fcdf8aa6ca45e8021028d6ed2e350e3090ae585f21dd50575b kernel-rt-64k-modules-5.14.0-687.33.1.el9_8.aarch64.rpm 625b1c0176386ff8f36a32c382a36afc4b94a575b5ef7db2a2b839b907717ce7 kernel-rt-core-5.14.0-687.33.1.el9_8.aarch64.rpm 9acb7b13402294d5a687003b020c7a306ad238963558e47a935f24b4849801fb kernel-rt-debug-core-5.14.0-687.33.1.el9_8.aarch64.rpm adb38262f36c9dfc4e5476dc6ccb2b3db2197902f8a11a6b4e036523c53492b0 kernel-rt-64k-debug-5.14.0-687.33.1.el9_8.aarch64.rpm b4e3450ba4fb138ab8c7bbddefb2c51f57313e5b31207b67ed0e56f6f87fd78d kernel-rt-64k-modules-extra-5.14.0-687.33.1.el9_8.aarch64.rpm c4ffdc72d77ec0031937f76aa4998a66b8c184f01ee78da6f3cf9beca0d27ffb kernel-rt-64k-devel-5.14.0-687.33.1.el9_8.aarch64.rpm ebf02f06ac429d12e7db8de34599d5b085c9e06789c42ba05ff482e0baa28e73 kernel-rt-64k-5.14.0-687.33.1.el9_8.aarch64.rpm f1e89a1ef56ae244efcac2d4468eaecb946227293f769b1a8601040758ddabe9 kernel-rt-debug-5.14.0-687.33.1.el9_8.aarch64.rpm f4ae1bd01f290783625085cde45f48fa0640c8d6f106caf656321a6bf56f9638 kernel-rt-debug-modules-core-5.14.0-687.33.1.el9_8.aarch64.rpm f8174f8c9758eb454d42166f90393a59678d4c11c5ee926ae6e615fb1cf636f6 ALSA-2026:49870 Copyright 2026 AlmaLinux OS 0 1 Low

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214) Bug Fix(es) and Enhancement(s): * Possible regression with FM350GL [almalinux-9.8.z] (JIRA:AlmaLinux-184273) * AlmaLinux9: Fix downstream-only regression from 532af53c [almalinux-9.8.z] (JIRA:AlmaLinux-192430) * gfs2: xfstests generic/363 failure [almalinux-9.8.z] (JIRA:AlmaLinux-214021) * AlmaLinux 9: Backport b95e0e792822 [almalinux-9.8.z] (JIRA:AlmaLinux-216471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-debug-devel-5.14.0-687.34.1.el9_8.aarch64.rpm 036d461c2a672ae88ea20439c823bf73440da7ee559b4c132fa107f4adf963e6 kernel-rt-64k-modules-5.14.0-687.34.1.el9_8.aarch64.rpm 05b74a4738393d2763c95cbee235cf86af21dd5351b34f459b6649ef2d95771e kernel-rt-64k-debug-modules-core-5.14.0-687.34.1.el9_8.aarch64.rpm 05fc75d32f7df011565258384c6efe20b851bfe9e6ae3cbde002ce911656397d kernel-rt-debug-modules-extra-5.14.0-687.34.1.el9_8.aarch64.rpm 18030ca00c27631e84c896e00da60ec580b1033c255bdf0119179a860aa86c70 kernel-rt-64k-core-5.14.0-687.34.1.el9_8.aarch64.rpm 18dbe253fb5a763bcb6228566aa69278c20d02b36f071ba20ad256170734ccc2 kernel-rt-debug-5.14.0-687.34.1.el9_8.aarch64.rpm 1b0563b3dfc4d6e79bf332b96d983239168bcaf479fc50b0ac663e98bb24212d kernel-rt-devel-5.14.0-687.34.1.el9_8.aarch64.rpm 1b465a1dea3f168b8dc165acd52af9da325b6ea5bdc17d96b4a650a15b319561 kernel-rt-modules-5.14.0-687.34.1.el9_8.aarch64.rpm 23f3fec2bd6cdadc4a5708adac2494fe63c2712bef04e1f3758becbd8823c20f kernel-rt-debug-core-5.14.0-687.34.1.el9_8.aarch64.rpm 2ccd6ee1d687680602897c2c62867dc576757e1fb92e2e314784fa9d152392bc kernel-rt-64k-modules-core-5.14.0-687.34.1.el9_8.aarch64.rpm 307cc1ae8d93dcb853182cbf43988f61967d47421062a88ce32ead548b4c1087 kernel-rt-64k-5.14.0-687.34.1.el9_8.aarch64.rpm 45120be079fbf56f32356f2fa209dc114906310b28be13e8c8ba9ef40a2edabd kernel-rt-debug-modules-core-5.14.0-687.34.1.el9_8.aarch64.rpm 615ad398a1554d4b70987de84af9bb06e93ddf876e669ef4fe2824b9335612e4 kernel-rt-5.14.0-687.34.1.el9_8.aarch64.rpm 6e0d846830bc1e922046795437fe277fb31d547d23bb65bc21b566b2f7bc1d5a kernel-rt-64k-debug-modules-5.14.0-687.34.1.el9_8.aarch64.rpm 74b7c5046065ea8ad480a4029aff71edac4a51bdcf8ef3a72b8de70ab53bae35 kernel-rt-core-5.14.0-687.34.1.el9_8.aarch64.rpm 74e66c1e38c9ea87f9f200175c41fc31c0b122f99b509db21067779d5b745eda kernel-rt-debug-modules-5.14.0-687.34.1.el9_8.aarch64.rpm 913abe28a81d130fead618afe55f448766c29c6af48faf73019ec26252fddd0b kernel-rt-modules-extra-5.14.0-687.34.1.el9_8.aarch64.rpm 95513660fb8542f984adeed00dd8f24b1fb8be300f2c52819bae2af8827cb7c8 kernel-rt-64k-debug-5.14.0-687.34.1.el9_8.aarch64.rpm 97fd21348c5d604edf8728992f240a5698f9febfd670386788f46980c7f7a3b8 kernel-rt-64k-modules-extra-5.14.0-687.34.1.el9_8.aarch64.rpm 9c35b575d1ba4caffbd2749052dcd49d94a0ad17002cb237fdf28ac0080ce74f kernel-rt-debug-devel-5.14.0-687.34.1.el9_8.aarch64.rpm a2dc9d3bdbfa5f63095d6fc75b2d0ca370717ca12afad1585dff16d932f8ed2a kernel-rt-64k-debug-core-5.14.0-687.34.1.el9_8.aarch64.rpm af5d32263d0e40db68a30c38486b6dc197cf98d4c2dc4445f169421ed94b84fb kernel-rt-64k-devel-5.14.0-687.34.1.el9_8.aarch64.rpm aff6e66d7e7744b3048dfd198e97b7db631215562f6a2c280e2f523416780bb3 kernel-rt-modules-core-5.14.0-687.34.1.el9_8.aarch64.rpm c07634d85ae64863bb0c12f686bb9c99074d197416b591a0241ada5b169e2dde kernel-rt-64k-debug-modules-extra-5.14.0-687.34.1.el9_8.aarch64.rpm deb90c9ef8f3594bb858f1a97611e6e38b9a5b70eef66755e7f7ece5539c8c96 ALSA-2026:51035 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415) * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-9.8.z] (JIRA:AlmaLinux-186331) * [AlmaLinux 9.4] Kernel memory reclaim bug [almalinux-9.8.z] (JIRA:AlmaLinux-211058) * Bond network interface is not coming up with MTU 9000 while vPMEM is enabled [almalinux-9.8.z] (JIRA:AlmaLinux-215575) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-devel-5.14.0-687.36.1.el9_8.aarch64.rpm 0cc4ea33bc55981805b989b67d97aeef28673a4194c0880c843f67882f3a46f1 kernel-rt-debug-devel-5.14.0-687.36.1.el9_8.aarch64.rpm 1c4fdc2f44feec14922a06400dcd092cbae14503617d6a161942e77d1c3d55fd kernel-rt-debug-5.14.0-687.36.1.el9_8.aarch64.rpm 250db0292eb4da88bb631d28cd5df72207348713816b5aae78622f884ab0a52c kernel-rt-64k-core-5.14.0-687.36.1.el9_8.aarch64.rpm 288c6184477bee0860f5844156d23ff20a04c0aba7b57226e1a79b8d48c25a1f kernel-rt-modules-core-5.14.0-687.36.1.el9_8.aarch64.rpm 296e6661d0eaa02790454812de0dceb85f8225c4f36c0a15942d6660505ef6b1 kernel-rt-64k-debug-devel-5.14.0-687.36.1.el9_8.aarch64.rpm 298596e97c55e96875c464568cdc1ee2a8d28fcbcccaf5e28251f9d759d04784 kernel-rt-64k-debug-modules-extra-5.14.0-687.36.1.el9_8.aarch64.rpm 2b50ea26bf41fb46c6dff4e8aa8ac7b3e26614a8ae40d46bf624b6204a9bde35 kernel-rt-64k-modules-core-5.14.0-687.36.1.el9_8.aarch64.rpm 44f5f0f77a78cd9554fc428012b9e658b3f92d14fd6704a037f8fade2180f599 kernel-rt-core-5.14.0-687.36.1.el9_8.aarch64.rpm 513c440b1db28ddcfd759c0f0ee9f9bdf39e1e87d38dfc16a35f0925285d5804 kernel-rt-64k-modules-5.14.0-687.36.1.el9_8.aarch64.rpm 59f8f0146857aee1d29e139b9fa66202a9e9cc27369259e739813a9c9850b7f1 kernel-rt-debug-modules-5.14.0-687.36.1.el9_8.aarch64.rpm 64328e63c62c57e8b95efb22d668793b84c305cd6fbbc02e1892fe283146b49d kernel-rt-devel-5.14.0-687.36.1.el9_8.aarch64.rpm 6addb59e68a199c8ba28e08ce678793d1e09a9da9716c330ffa736853d8a33a5 kernel-rt-64k-modules-extra-5.14.0-687.36.1.el9_8.aarch64.rpm 6d7bb8cd6e99b824a80fcc3690d7e34c124ccae14e257c3961cc24e90e2b92be kernel-rt-debug-core-5.14.0-687.36.1.el9_8.aarch64.rpm 6de4e0b23009361fa3e6a6d76ec10229d179fec0e39423a218667d0e282caa33 kernel-rt-64k-debug-modules-core-5.14.0-687.36.1.el9_8.aarch64.rpm 71c8f1e9c3151eaa2c603fc1f6ee8fd8b8c9a61767339a307fdbaf8c24f9440b kernel-rt-debug-modules-core-5.14.0-687.36.1.el9_8.aarch64.rpm 7bbf341be5ee1217fcb4f0342f82fa016bb77aa9541edff70ed90fe393c030bc kernel-rt-64k-debug-5.14.0-687.36.1.el9_8.aarch64.rpm 7f9cfe56aba937cbdba3881b1cc4ce80b097c9873a3944ba9fee20e4040da6ce kernel-rt-modules-extra-5.14.0-687.36.1.el9_8.aarch64.rpm 9aa386ff193ed7c9d4a494c65683da9109a844a0925251293980ca06ad23237b kernel-rt-5.14.0-687.36.1.el9_8.aarch64.rpm 9be608c61424bc172eb5ba488f0158981de94889c7fdedf6e65e916d0f69c613 kernel-rt-modules-5.14.0-687.36.1.el9_8.aarch64.rpm b65d72c77446a01b446215e88a8e817b29898888b4b03d70826a918caa2d477e kernel-rt-64k-debug-core-5.14.0-687.36.1.el9_8.aarch64.rpm bca80383dc3b07b093b03ce3d0b8141685b3ed9ff4612311a2915f40ec667045 kernel-rt-debug-modules-extra-5.14.0-687.36.1.el9_8.aarch64.rpm d5c30241f307b82de97ec6b2acfb7c2bd23a352296bc626ec66fa46a7462f145 kernel-rt-64k-debug-modules-5.14.0-687.36.1.el9_8.aarch64.rpm ed491e24086a53aa088df4a28395780445306a2fd5887bcf4af95b687f289c32 kernel-rt-64k-5.14.0-687.36.1.el9_8.aarch64.rpm ee0df683b045652e11c0c79f963b5e2a2b0e51fb40ccc73f5208519bfa72e719 ALSA-2026:53329 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530) * kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation (CVE-2025-54518) * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368) * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) Bug Fix(es) and Enhancement(s): * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-9.8.z] (JIRA:AlmaLinux-213036) * AlmaLinux9.4 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-9.8.z] (JIRA:AlmaLinux-215578) * AlmaLinux9.4 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-9.8.z] (JIRA:AlmaLinux-215580) * cifs: periodic IO errors when rename races with lease break (JIRA:AlmaLinux-192999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-modules-extra-5.14.0-687.38.1.el9_8.aarch64.rpm 128574a8c0f4f24251285a06a3dfe556e7082e3d3b74d1a8a019e56d7ff6dcbb kernel-rt-64k-core-5.14.0-687.38.1.el9_8.aarch64.rpm 1524fa4aca22f844e735cf2c2bab89a4515c5fd93412b6919bb37fb0e514236c kernel-rt-64k-debug-5.14.0-687.38.1.el9_8.aarch64.rpm 207b47282c2af4cd31836f186b17108cff169fa72f93beb6b396b2930d60adb4 kernel-rt-debug-5.14.0-687.38.1.el9_8.aarch64.rpm 345f23b2ca606bc3cd9742ffb07b2f240b2afa3a2bb41217e1acc37d60b5aba3 kernel-rt-64k-devel-5.14.0-687.38.1.el9_8.aarch64.rpm 3cfb5b42f9641389587f3e03e10f471f6bfaaf5a18af2aca5d54065282e5ddea kernel-rt-64k-5.14.0-687.38.1.el9_8.aarch64.rpm 3fb1fcdc621c70187c0cb5362b813b334d9e1f0f827ad85c007558e1b800f81e kernel-rt-64k-debug-modules-extra-5.14.0-687.38.1.el9_8.aarch64.rpm 4ac37e1b110fdf83d7f29e4c7b8500a72d6bb1e4b408040001a8c124e384365e kernel-rt-debug-devel-5.14.0-687.38.1.el9_8.aarch64.rpm 50ebeb4f1791cbc7954c41f3d7cedc91c354057078376792efda69bdb7afa64f kernel-rt-modules-extra-5.14.0-687.38.1.el9_8.aarch64.rpm 59c5e8f2329dc0024421de1af295fbb45bfc3d7436cfa150adf70e9500af1960 kernel-rt-64k-modules-5.14.0-687.38.1.el9_8.aarch64.rpm 5efb9fc6cce254793619c0a0cb8d6d701940948d4b19364bce1f997e2c7bb6d7 kernel-rt-debug-core-5.14.0-687.38.1.el9_8.aarch64.rpm 602c8e34feb17489eefd4791f1b5b78aa277feb9021077cf6a5d74ac5725ece5 kernel-rt-debug-modules-5.14.0-687.38.1.el9_8.aarch64.rpm 62e5a11f01c6427a315fd1f538e86d886f24b480d7170411f0ff7200b5b90694 kernel-rt-modules-core-5.14.0-687.38.1.el9_8.aarch64.rpm 6331e7edc7b13fcc79154128eae6b819d8c371afee6bf3a7fc9fd3ef2e73adef kernel-rt-64k-debug-modules-5.14.0-687.38.1.el9_8.aarch64.rpm 6559dde82edf4621090c969bc37cad84be72844ee9c13334ea23c16ccf9ad6bf kernel-rt-5.14.0-687.38.1.el9_8.aarch64.rpm 76df67e7331404af16d5a5c12cfd59358e8d09264865cb20ce9f2b1822857c76 kernel-rt-64k-debug-core-5.14.0-687.38.1.el9_8.aarch64.rpm 927139c5eac9cec27d805dca5569475ef92e7ffe4e31265150421f7cc179946c kernel-rt-64k-modules-extra-5.14.0-687.38.1.el9_8.aarch64.rpm 92b6b25321b181e7ddae360a0db80a1c098d85b2e28dfec1d730abc444469502 kernel-rt-debug-modules-core-5.14.0-687.38.1.el9_8.aarch64.rpm 9ba3cb06c9b7e6a982133ac4bf4bb89e56831b004411acafc7b85ea656a599df kernel-rt-64k-modules-core-5.14.0-687.38.1.el9_8.aarch64.rpm a36cda354dd05ccaf47e017fd460e64935b2bdabcaf0a999458d914583cd898f kernel-rt-devel-5.14.0-687.38.1.el9_8.aarch64.rpm abf5951df1a8a35570ffd55c0bf921d5cdf1b739fdfaaac0ea90ff73a5507f81 kernel-rt-core-5.14.0-687.38.1.el9_8.aarch64.rpm b535f2a648bb9572f2f78f480d7aa5d95d1bab7e066fad80ab6c45d3bf3c6ed7 kernel-rt-modules-5.14.0-687.38.1.el9_8.aarch64.rpm b76f023e95e452bcc6a1c7bd04823f63803a626ad30a677771d30364d02e5e8b kernel-rt-64k-debug-modules-core-5.14.0-687.38.1.el9_8.aarch64.rpm b7bb5551dc803ec8f8f025706afe691a6a0e95ddbada94b8c5d05273d24f6f89 kernel-rt-64k-debug-devel-5.14.0-687.38.1.el9_8.aarch64.rpm ebb0612aeb3561939b4e70cfc52ec5b87c076cd093058385a79da681d684ac14 ALSA-2026:54443 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202) * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264) Bug Fix(es) and Enhancement(s): * [AlmaLinux9] tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-9.8.z] (JIRA:AlmaLinux-214434) * Kernels 5.14.0-434+ may lose page table dirty bit (and page data) [almalinux-9.8.z] (JIRA:AlmaLinux-220787) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-modules-extra-5.14.0-687.39.1.el9_8.aarch64.rpm 047643d92ed3229d01e4a9e6270d71305795c341cdc68aadd1e024ff122be39e kernel-rt-debug-5.14.0-687.39.1.el9_8.aarch64.rpm 05ba561189d117668a87ea969e2712aa42dccdc3c2a6da4d507c3db8fa4eded6 kernel-rt-64k-debug-5.14.0-687.39.1.el9_8.aarch64.rpm 0db435531b3b6241b7ecd8f2ef4425e8bd22af1b46399221f42b0669bda23d2e kernel-rt-modules-5.14.0-687.39.1.el9_8.aarch64.rpm 1768f70d50d2f48c1938a91d332c88e070f8a2bb286a4ce0a7375943fa4ef123 kernel-rt-64k-5.14.0-687.39.1.el9_8.aarch64.rpm 1e1207715500f8de5d07a25956923afa5ad35ee59cf4acac2726e9e97be19e92 kernel-rt-64k-devel-5.14.0-687.39.1.el9_8.aarch64.rpm 2042ca6140e49efc1fe658f0cc761b0d658088bcefbf7073e370d9ce7d42aaa0 kernel-rt-core-5.14.0-687.39.1.el9_8.aarch64.rpm 27f44279e79a81dc95c12946f419603f7020046191ad41d27c3766d2b1b491eb kernel-rt-debug-modules-core-5.14.0-687.39.1.el9_8.aarch64.rpm 42ff010364f2714300e8d1d4ffbffa8d9b8e69bafa20708359a5f0eac3b880ac kernel-rt-64k-modules-core-5.14.0-687.39.1.el9_8.aarch64.rpm 58a4a1896976b4a624c8316028d8f6acb58db72b4bb9f0100a71281836abf013 kernel-rt-64k-modules-5.14.0-687.39.1.el9_8.aarch64.rpm 72f153c718fa22013b57565e78daca3e47816dae67cc3f8a0088aa05943ab7f6 kernel-rt-5.14.0-687.39.1.el9_8.aarch64.rpm 7799eb466e9a1186939ace7e904aba28e83b36658ac30f4b6816c027de02f6e4 kernel-rt-64k-debug-modules-extra-5.14.0-687.39.1.el9_8.aarch64.rpm 7e4104fb65ae434ab27937ef544c5af24bd2585c64b3444d0cc1f70d5d17191e kernel-rt-64k-debug-modules-core-5.14.0-687.39.1.el9_8.aarch64.rpm 7f04b808e571e55ebfe9f473bbe9676df5bb81cd2e176a9371c3e67164337153 kernel-rt-64k-debug-modules-5.14.0-687.39.1.el9_8.aarch64.rpm 990f5afcb119c684905a0f736945af4aacdf526332b978ce7172c1bef7c22e28 kernel-rt-64k-core-5.14.0-687.39.1.el9_8.aarch64.rpm 9a983db8c24b2644b9fac17e374a4eb3a6a83cf3601ffe1d229674eb7c7d4ff7 kernel-rt-debug-core-5.14.0-687.39.1.el9_8.aarch64.rpm a38243a402315dbb430fa54657b1eca1aa0b8fa1b874707af493ed831fb91efe kernel-rt-debug-modules-extra-5.14.0-687.39.1.el9_8.aarch64.rpm a57981aa616311b821c9d29ff51209a1fb5d8d2a2e1c261a0dba5797fde854f1 kernel-rt-64k-debug-core-5.14.0-687.39.1.el9_8.aarch64.rpm a863006ee954bcd801a8452505e24f8ff5ef4b994b87892ce380c46cc0348450 kernel-rt-modules-core-5.14.0-687.39.1.el9_8.aarch64.rpm b5ddb1135c082d00d9da64eaaf562df0fa9745cab904461331e41961d58ac8df kernel-rt-debug-modules-5.14.0-687.39.1.el9_8.aarch64.rpm b7417c52832594ac1a699aad8d2c72f43fa636cad7aef7917ddea91ab40040c3 kernel-rt-devel-5.14.0-687.39.1.el9_8.aarch64.rpm b79295c5abd81735e6fd7b1ddc648a1c04469bf3e15193ee771049bc4f4b947b kernel-rt-modules-extra-5.14.0-687.39.1.el9_8.aarch64.rpm cb19efb637723576b01b8dce289843da4280a60e7d98a45354f3c792ee6d520a kernel-rt-64k-debug-devel-5.14.0-687.39.1.el9_8.aarch64.rpm cdcebfa1c6d7bafbde184700f238f6804276150a566244da1310c463796e2dd5 kernel-rt-debug-devel-5.14.0-687.39.1.el9_8.aarch64.rpm d726f6ed72ab803bc994d028767314c748754edc42b5c2a7e1a722bd07b2e9a5 ALSA-2026:57252 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233) * kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206) * kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237) * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991) * kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878) * kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120) * kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991) * kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143) * kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136) * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189) * kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329) * kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356) * kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374) * kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884) * kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007) * kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952) * kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888) * kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879) * kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048) * kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219) * kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382) * kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379) * kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386) * kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560) * kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343) * kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388) Bug Fix(es) and Enhancement(s): * kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:AlmaLinux-181065) * vhost: reset the vring metadata cache on vring reconfiguration [almalinux-9.8.z] (JIRA:AlmaLinux-224549) * cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-9.8.z] (JIRA:AlmaLinux-235811) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-modules-5.14.0-687.41.1.el9_8.aarch64.rpm 2ec4bb8c2ee5c6612feb61486691e6284f6c46adfd5b636495d447160f3b1f45 kernel-rt-64k-debug-5.14.0-687.41.1.el9_8.aarch64.rpm 30db266f114fe055795631eb20aa9c4272df6a30a1a02c7f5b8bd373afc8788e kernel-rt-64k-modules-extra-5.14.0-687.41.1.el9_8.aarch64.rpm 3151906ccbfa39ab7e91baac41b558364879902a4d275b1f9dc54900c23c9119 kernel-rt-64k-debug-modules-5.14.0-687.41.1.el9_8.aarch64.rpm 39d123c4771574112d98318b0a2f0a37f3da270212b2ddde4f4fa23a316aff44 kernel-rt-modules-extra-5.14.0-687.41.1.el9_8.aarch64.rpm 4d4931eaf5f96f4f2be41e519f548a8fc70cc3adbd0ef8bdb2b0bfbcbd69c173 kernel-rt-debug-5.14.0-687.41.1.el9_8.aarch64.rpm 4dd1b04c0270a3b553a7a0e6738fc2a107ad9ebfad31d758ba1ffe6d7b6b50da kernel-rt-debug-modules-core-5.14.0-687.41.1.el9_8.aarch64.rpm 603c8580965b7c4bdd32c2d32a7994d0894d9c2ff93bdc24094b4def0f946acf kernel-rt-modules-5.14.0-687.41.1.el9_8.aarch64.rpm 6899d73393823f2cbc1ff0c5e6d8159925706e1f1cfa7bb3c40ea06ef68463ea kernel-rt-64k-modules-core-5.14.0-687.41.1.el9_8.aarch64.rpm 6b8c85e2d28189ea7a6788606eb1c11c7fb0e97c61f4283b4e0bacccaa106534 kernel-rt-64k-debug-modules-extra-5.14.0-687.41.1.el9_8.aarch64.rpm 8dca3c8da37ca23ec12193f57e92b592b918b9502244ae13ad0bd4b392240cbd kernel-rt-devel-5.14.0-687.41.1.el9_8.aarch64.rpm 8f8e6652c1dd50605a14b44f2e3db3fc1b111c75b0401961558b6937aa528468 kernel-rt-debug-devel-5.14.0-687.41.1.el9_8.aarch64.rpm 94733427e2ad8a2958dccc290a9e3159202b460cef98a433263dddc19f696101 kernel-rt-debug-modules-5.14.0-687.41.1.el9_8.aarch64.rpm a7e0d704dbc9531faca968bbf5a5152f7272986812860d6a510942300d679fb9 kernel-rt-modules-core-5.14.0-687.41.1.el9_8.aarch64.rpm a9dd1271b312cc703d2c5672f2eb0ecfbca8b4b0fab427fcc4ade8351fca3012 kernel-rt-64k-devel-5.14.0-687.41.1.el9_8.aarch64.rpm ac92c512fee6c29a45b76c6c1f805465f81b20317b2b598d791df6af06663240 kernel-rt-debug-modules-extra-5.14.0-687.41.1.el9_8.aarch64.rpm b49ddc567d8e3fe9794056d44664df441696c4881b1ffa9a2b7a9e64d7380389 kernel-rt-64k-core-5.14.0-687.41.1.el9_8.aarch64.rpm bb4ff558d9f05697bd5e71f981b775e78baa6a168c36a9b4a1bd25f9a2e6de51 kernel-rt-64k-debug-core-5.14.0-687.41.1.el9_8.aarch64.rpm c2e0d8b7ff216a8bff1e827a7efef2ced908df3144db8048a701ea08c6554239 kernel-rt-5.14.0-687.41.1.el9_8.aarch64.rpm c7a817839a341957f97c1ea0d1fc8c5db7b461e03041223fdf455a4a77283faa kernel-rt-core-5.14.0-687.41.1.el9_8.aarch64.rpm ceaa9499b136b35a66358093c5f4ba67cdc5113b1d19e5810a1b80273d53e9c6 kernel-rt-64k-5.14.0-687.41.1.el9_8.aarch64.rpm dbeb08a918d005ed4fd2720687c147773a330b421da942e642c696fefd589833 kernel-rt-64k-debug-devel-5.14.0-687.41.1.el9_8.aarch64.rpm de1723939c48149993837e53d9941336515cf29923d9016ede3ad94b403dfc52 kernel-rt-64k-debug-modules-core-5.14.0-687.41.1.el9_8.aarch64.rpm e21fd79966b847d42f6ecf62ae25b0f4e44be4b93e0250ae1e1d2d4eb847b5a7 kernel-rt-debug-core-5.14.0-687.41.1.el9_8.aarch64.rpm e3cca15de84ffaeb54e153bc3f26d5c7ddd2b685fd67c644bdd5c1bac68ddd0b ALSA-2026:59723 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211) * kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003) * kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114) * kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924) * kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920) * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185) * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131) * kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268) * kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191) * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189) * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277) * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276) * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581) Bug Fix(es) and Enhancement(s): * [AlmaLinux-9.8.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-166118) * ss core dumped when there is an SCTP session [almalinux-9.8.z] (JIRA:AlmaLinux-212398) * [IBM 9.9 FEAT] zcrypt driver overwrite function - kernel part [almalinux-9.8.z] (JIRA:AlmaLinux-245333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-modules-core-5.14.0-687.42.1.el9_8.aarch64.rpm 086423af27e10766a63ee861b2b5abf0a2bce974489809380216e2b23cb93999 kernel-rt-debug-modules-5.14.0-687.42.1.el9_8.aarch64.rpm 22a6021d435000a302aafb6a1bb913f02b5adb71a961efefd6d6414df870ab19 kernel-rt-64k-debug-core-5.14.0-687.42.1.el9_8.aarch64.rpm 2b68faa00c3257b91acf3e4b9e5dde718d25a57cec0bd53f931d3b868361a9e5 kernel-rt-modules-core-5.14.0-687.42.1.el9_8.aarch64.rpm 38568f447139684e036068b98ce564eadf39aeec2cf204d3255dbf152173fa2a kernel-rt-5.14.0-687.42.1.el9_8.aarch64.rpm 4231e4f14fa7e471b93c8c61ab9c701776d7a53f1f8095299b5c0c5ff8fcc776 kernel-rt-debug-modules-extra-5.14.0-687.42.1.el9_8.aarch64.rpm 48ebfcf1b7fb25daa5065739abde77f541ae21f07ecb922d99f72e563b7c8ae7 kernel-rt-debug-devel-5.14.0-687.42.1.el9_8.aarch64.rpm 49dbebe1ab988d7e73f830148942019f4a9ac188ffa5ed23a4deee3fa7d5da5e kernel-rt-64k-modules-extra-5.14.0-687.42.1.el9_8.aarch64.rpm 4b53c3c8bdb3e37d092256f2cb6c118261d8e50ea0a3665411901e1feda78141 kernel-rt-64k-debug-modules-core-5.14.0-687.42.1.el9_8.aarch64.rpm 70a018cc57c994bec84d751113c01dd788748f0c28ffe9c860a0c0449eb29a1b kernel-rt-64k-debug-devel-5.14.0-687.42.1.el9_8.aarch64.rpm 711d9ccbffaeae5459bff1c83244dc4117295245e85d30e015aa935423deb7e3 kernel-rt-64k-debug-5.14.0-687.42.1.el9_8.aarch64.rpm 8d5547c9a95d3cdff92490eae3e631b0afce7877ffeb91f4331ffe3de21fb618 kernel-rt-64k-debug-modules-extra-5.14.0-687.42.1.el9_8.aarch64.rpm 9b8f3b644c04a5afa578aacd536d9f3868af9b5b4a758a62b63c4b1954ae95cb kernel-rt-devel-5.14.0-687.42.1.el9_8.aarch64.rpm a6b9f9ae82e4fdba41f74be0ae3607bedf79a870b5eb13780017da8b2ffac183 kernel-rt-debug-5.14.0-687.42.1.el9_8.aarch64.rpm a79ff17005f4f6db2d096ca2c3a4b8e4f782bf7bd56d834eb96b0a0181c19f40 kernel-rt-core-5.14.0-687.42.1.el9_8.aarch64.rpm a93758b70e2f219812aa0046feabfed64c58a633c086a6b9fd68d5492925adc3 kernel-rt-64k-modules-5.14.0-687.42.1.el9_8.aarch64.rpm b34bd1284f7b172350a013eadaee091a8e3399b0be39d14b34d107ee1d1250f3 kernel-rt-debug-core-5.14.0-687.42.1.el9_8.aarch64.rpm b840cc690b5479da652f45354c776509f1beff401e8765b08ef18e771e6f9fa1 kernel-rt-64k-devel-5.14.0-687.42.1.el9_8.aarch64.rpm be941990c281a126c9f074e1bc795b2d9c0a148ad5b39102414cdbf9d96254d5 kernel-rt-debug-modules-core-5.14.0-687.42.1.el9_8.aarch64.rpm c1edeaf4042be3fc7ffc354155246cfb8810c41b615e911eb41f14b195e5c16d kernel-rt-64k-debug-modules-5.14.0-687.42.1.el9_8.aarch64.rpm d3062ddcab98ed2186dd3906a6dfc9d01c280926822d2da9cd86b6a582d3bc35 kernel-rt-64k-5.14.0-687.42.1.el9_8.aarch64.rpm dd0c44b7a11d7dbc31dffa65a1083b7793e3f744695d03ed28e6cc5636df0ae2 kernel-rt-modules-5.14.0-687.42.1.el9_8.aarch64.rpm e337988b173ab8cc94ec08d939c09d5fe4696c04dc01659eae5e2e2b75f3753d kernel-rt-modules-extra-5.14.0-687.42.1.el9_8.aarch64.rpm fcafaf519416e0e6c296b3244c0c599834a82cd7acd4d20774ca5c88fb2d7dc3 kernel-rt-64k-core-5.14.0-687.42.1.el9_8.aarch64.rpm fd789c87611a7a179a143cb93d41ec25b79d52d6c2e8d87e5432d3ae7e643c2d ALSA-2026:6153 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem (CVE-2025-38180) * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096) * kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144) * kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171) * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193) * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209) * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204) * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-64k-5.14.0-611.45.1.el9_7.aarch64.rpm 1050a497ccd4fc6fa5ff3cb1416eefb115ce4895335a4689880955535f715bf2 kernel-rt-64k-core-5.14.0-611.45.1.el9_7.aarch64.rpm 228638373c9472516e6a11785730002e08721706477b94c08e2d046509b4da00 kernel-rt-64k-debug-devel-5.14.0-611.45.1.el9_7.aarch64.rpm 42400802d07b6ef3623fb802e7d61bf3175e461bf952445e195df49337bba9b7 kernel-rt-debug-modules-5.14.0-611.45.1.el9_7.aarch64.rpm 42d600182aca4e3c68bd423be82eb29363f0720ac9cabf329b24a8430169afe4 kernel-rt-64k-debug-modules-extra-5.14.0-611.45.1.el9_7.aarch64.rpm 4b211fc2f3383727fbee1ada0beeb7ccf7bfd55c760b5725837b2f135d90c547 kernel-rt-debug-core-5.14.0-611.45.1.el9_7.aarch64.rpm 4e0950cd94169c3fe6c8b1b339a8aca477186ed7c253457665b3223e431b9d66 kernel-rt-64k-devel-5.14.0-611.45.1.el9_7.aarch64.rpm 64fbfa07205e69492e661cec9c98900e4acaabdaf074b79e0258b8a37d2dc4d4 kernel-rt-modules-5.14.0-611.45.1.el9_7.aarch64.rpm 686b47614c50c27b9d0fb771e767ff43b84be602a691fd62303726d5b1c2239b kernel-rt-64k-modules-5.14.0-611.45.1.el9_7.aarch64.rpm 7f16ada0750bcdf51e4c183ef88f21df99f221637d5e4b86cf3a53e808d9b828 kernel-rt-devel-5.14.0-611.45.1.el9_7.aarch64.rpm 80121de1183182da5bdfd2336117daafc8c4a8ed27d97b3c53a31d6b4e1a5c47 kernel-rt-64k-modules-core-5.14.0-611.45.1.el9_7.aarch64.rpm 8439e93dc6e1bd90150637125c020abbc7fdfa56e173bb5e359f77fd2bbf471c kernel-rt-64k-debug-core-5.14.0-611.45.1.el9_7.aarch64.rpm 86ceed58e357658d39c61f1ab7110b4c4f5b4b66db160a65279044ec1ec0160b kernel-rt-debug-5.14.0-611.45.1.el9_7.aarch64.rpm 990292f277ef989f9a441d91af03544a1f3a652be66e3bdeea4164086d6a3997 kernel-rt-64k-modules-extra-5.14.0-611.45.1.el9_7.aarch64.rpm 9a6b25362a79746dd8976d8bbbd3a5507cd5790b837a5116e9e5893fa2c3806c kernel-rt-debug-modules-core-5.14.0-611.45.1.el9_7.aarch64.rpm be5e5f7b9535d9b8bef82b073c02f6fae8550153527228a8766491a5fb511ca6 kernel-rt-64k-debug-modules-core-5.14.0-611.45.1.el9_7.aarch64.rpm cb851279edcd09d2033873d8b8eac63e5631978252653c66177e9011f5bac549 kernel-rt-64k-debug-5.14.0-611.45.1.el9_7.aarch64.rpm cbd46bfd5b56e10d5aed43d371928373b27f6c7554fc29ecb7d54ff3dbcc3150 kernel-rt-64k-debug-modules-5.14.0-611.45.1.el9_7.aarch64.rpm d0072d630a392ddd790c2a4170542e84bc6ce212fc922be065f08e8bd08dc5c3 kernel-rt-debug-modules-extra-5.14.0-611.45.1.el9_7.aarch64.rpm d7618410f078bf0c049f2b7dffcd4908316eaf23b8475740580a0750d8e16552 kernel-rt-core-5.14.0-611.45.1.el9_7.aarch64.rpm db9789448184b67455caf6f26ece65cc61e11ac968f03bcd7b1394eb1fbe7be7 kernel-rt-modules-core-5.14.0-611.45.1.el9_7.aarch64.rpm e41dc839c7bdee181d1206799d8be8f319a97a6a659323ea76a025e519c4963f kernel-rt-modules-extra-5.14.0-611.45.1.el9_7.aarch64.rpm e670140f05f0b313f775405efd614890e68e20950565b6ab600addb3b17ef731 kernel-rt-5.14.0-611.45.1.el9_7.aarch64.rpm ebad85a701aef576b230a6366c903c775c8221ef12cd31faefcc65afe6aea93f kernel-rt-debug-devel-5.14.0-611.45.1.el9_7.aarch64.rpm f63d53b963de7bc209f69d7bfdf219faab9f3115fceaa6ae7900cc855cbac5c5 ALSA-2026:63129 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064) * kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147) * kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970) * kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185) * kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073) * kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800) * kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397) * kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808) * kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399) * kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392) * kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824) * kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391) * kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886) * kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002) * kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018) * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) * kernel: smb: client: fix query directory replay double-free (CVE-2026-64387) * kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268) * kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438) * kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304) * kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298) * kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490) * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480) * kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166) * kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145) * kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069) * kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130) Bug Fix(es) and Enhancement(s): * [AlmaLinux 9] TPM becomes completely unresponsive and requires a full reboot to clear [almalinux-9.8.z] (JIRA:AlmaLinux-213940) * RT scheduler livelock caused by missing backport of 94894c9c477e [almalinux-9.8.z] (JIRA:AlmaLinux-240634) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-modules-core-5.14.0-687.44.1.el9_8.aarch64.rpm 12b8cf6515a2c355fdda4f4f805edfbe409700bf2dfcbb6754bf22bad7265d7f kernel-rt-64k-debug-modules-core-5.14.0-687.44.1.el9_8.aarch64.rpm 1e4ce18c2ae337f1d82459deb2a3e41651bf227780486e43b66a54a3f3091c33 kernel-rt-64k-devel-5.14.0-687.44.1.el9_8.aarch64.rpm 363bc77185c005731c2b1355f5c7d5721af410354c05af4e076a6d03c7c63fc1 kernel-rt-debug-5.14.0-687.44.1.el9_8.aarch64.rpm 3960007eabd325b593d6b7141b2be106a9e4bd4c4c9dcaa03dad815eba4d54ee kernel-rt-64k-debug-devel-5.14.0-687.44.1.el9_8.aarch64.rpm 3ca13c7b30e55b69b74c66b948e5a28d6f81f08ac62714fbe59365ee389736d0 kernel-rt-debug-devel-5.14.0-687.44.1.el9_8.aarch64.rpm 40d70ee23d387bf018576be1592b16ca98fbcc38534c758de4d8b356fbe0faa5 kernel-rt-64k-modules-5.14.0-687.44.1.el9_8.aarch64.rpm 47367af26a37258b2c1c700df3d7d77d19622ac0319bfa24293c1caeb0c83a23 kernel-rt-devel-5.14.0-687.44.1.el9_8.aarch64.rpm 4946f2977d0ea0bdfa35521223e8c528af011c818d04dbe27907421a67dcee2a kernel-rt-64k-debug-modules-5.14.0-687.44.1.el9_8.aarch64.rpm 57b974c777135cb40c987fab21d4601a3e2cbe48ee5c8efb35d63b82967fd734 kernel-rt-debug-modules-extra-5.14.0-687.44.1.el9_8.aarch64.rpm 5f04e316ec03fb32cd44979d875c5bd95f7f5cf02394a611f2f523a7371f6509 kernel-rt-5.14.0-687.44.1.el9_8.aarch64.rpm 6189abc0cdc761d7b5a4d3bb1b067c3119dc1fa61812df56c6351b10b7dcde9c kernel-rt-64k-debug-modules-extra-5.14.0-687.44.1.el9_8.aarch64.rpm 70f8bb923e1de745e3dcec7895237408cd4028ef6b382ef4f20b6af4eca90a1f kernel-rt-core-5.14.0-687.44.1.el9_8.aarch64.rpm 881061c9daf35fdf6d70bd1457135663f7dee48039b4b2f35de0fb1547aa0d08 kernel-rt-modules-core-5.14.0-687.44.1.el9_8.aarch64.rpm 8e67d81d470d2859973e21cdd3a99d3b3f892b3faf32e25a2e35f13c7923a09c kernel-rt-64k-modules-core-5.14.0-687.44.1.el9_8.aarch64.rpm abf1bc2966cb17a653ec37908c01b5fb40d2b66bac899f282c07ba12100e5ee9 kernel-rt-64k-modules-extra-5.14.0-687.44.1.el9_8.aarch64.rpm b92952aeddf65caf3a758e8cd57bcdcfc17997c6ea6e27f8849e36d38fbd0fe9 kernel-rt-64k-core-5.14.0-687.44.1.el9_8.aarch64.rpm c648498739a9fe79aee69fd88de369f4d323f49750c8f7e6461105a40f1e7248 kernel-rt-debug-modules-5.14.0-687.44.1.el9_8.aarch64.rpm ca11df518a61c4a526eaa6b3f257401046b145b4f3e3f5d8437b079d350bcf3a kernel-rt-modules-extra-5.14.0-687.44.1.el9_8.aarch64.rpm ceb0e6ab840177c4be71a534badbc6eac80a8e29e637d3d5a1e43b18c6d76206 kernel-rt-64k-debug-core-5.14.0-687.44.1.el9_8.aarch64.rpm d7dc0e0947e286b996458e59d12bd08f92bf4e8df4bfd5e3ff203003340118a8 kernel-rt-modules-5.14.0-687.44.1.el9_8.aarch64.rpm d88e6615bc61b483406974e75b4a5afe0eff6223bb83692c7e767044c583d20d kernel-rt-64k-debug-5.14.0-687.44.1.el9_8.aarch64.rpm e0a886bbbea0389d6a92aef532dd06400bd163fd55be9c2d590c891eb37629e1 kernel-rt-debug-core-5.14.0-687.44.1.el9_8.aarch64.rpm ed4b1607b344373bf38666c4ff8e87d396f4ca1d76b0700f8205cabe999aa03d kernel-rt-64k-5.14.0-687.44.1.el9_8.aarch64.rpm fc0285550a51a3e45a44d540f12631b060b30b79a093c4f29e75a6ff7b965d5f ALSA-2026:64808 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004) * kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933) * kernel: netfilter: nat: use kfree_rcu to release ops (CVE-2026-53000) * kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136) * kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320) * kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319) * kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287) * kernel: smb: client: fix change notify replay double-free (CVE-2026-64384) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-devel-5.14.0-687.45.1.el9_8.aarch64.rpm 0e172a763285a0e5dea4b2e14bcbfb5ab53547285c39086ed25d09f6125f7ec2 kernel-rt-debug-modules-core-5.14.0-687.45.1.el9_8.aarch64.rpm 1ed4c14e8b24f0f4bf0a9657a1d6ffc769a11a2944f8d27948d9becb06433f25 kernel-rt-modules-core-5.14.0-687.45.1.el9_8.aarch64.rpm 2f9857d3097258d7c326d54d8a6d18dac590026c5ae7ad031b74437c5dde54fd kernel-rt-64k-modules-core-5.14.0-687.45.1.el9_8.aarch64.rpm 306c98965eca7ccc00e8386b67b8887103b2c5537663b29e17a731518308893e kernel-rt-64k-debug-devel-5.14.0-687.45.1.el9_8.aarch64.rpm 465a62ef9b59e8eb6bbe731847f6f41d6118787e84e949f4ef514384dcc2da42 kernel-rt-debug-5.14.0-687.45.1.el9_8.aarch64.rpm 478380ee3ce5b0cba9bbb5932de68cab1b6de1e07fa1ff9a24214cc1d6d55308 kernel-rt-64k-5.14.0-687.45.1.el9_8.aarch64.rpm 526e54f95a937f65e7533ac9dbe5b70d81689725e2f70d6d55a387d2f29aa1b9 kernel-rt-5.14.0-687.45.1.el9_8.aarch64.rpm 5602c6af1c6157c8a442fa5a890684749a9ff89d72d7ef8daf89844ba8f2e9d7 kernel-rt-64k-modules-extra-5.14.0-687.45.1.el9_8.aarch64.rpm 6799b7457c77870c6067d1eeb5f421a08d73d1fefefb229734f9b80fe75a6ee7 kernel-rt-core-5.14.0-687.45.1.el9_8.aarch64.rpm 67fd01c262e3b5e85afc2b6823edae40162ca5f170453b257808cdd98cc49bcb kernel-rt-64k-modules-5.14.0-687.45.1.el9_8.aarch64.rpm 75e468b56f5abbef6c666ae10bf65e88618750a6cde0b3155efb925170f25e98 kernel-rt-64k-debug-modules-5.14.0-687.45.1.el9_8.aarch64.rpm 8d8acde01b0be4275e2ef85557d827331a5539a95b263627213ea69b60fcb52e kernel-rt-64k-debug-modules-core-5.14.0-687.45.1.el9_8.aarch64.rpm a3164c7aacc5022a16c5e7c2fd647bdba4939754bb5452acb62d048f24ce29c2 kernel-rt-modules-extra-5.14.0-687.45.1.el9_8.aarch64.rpm abfa5c129b1faa3d2063a9e7cb2a8825d5b259478d88bc4f627edd4cb5b09215 kernel-rt-64k-debug-core-5.14.0-687.45.1.el9_8.aarch64.rpm ba350a76c616569b8677164731aab8a9a2a6113c15bc2faf372175a3d938704c kernel-rt-64k-core-5.14.0-687.45.1.el9_8.aarch64.rpm c142f734660e76cf23303b7ff2c458c730ff2a89846727cba08f9ce115dff74a kernel-rt-64k-debug-modules-extra-5.14.0-687.45.1.el9_8.aarch64.rpm c796288d48d4bf4b491ee052e4db04aab4cff4c8352c4e093fac928cda939dad kernel-rt-debug-core-5.14.0-687.45.1.el9_8.aarch64.rpm ceed6f37ce2436c1f0201c8a5bb73579a9c697ac676c7a3f9ebf21399516bfa5 kernel-rt-64k-devel-5.14.0-687.45.1.el9_8.aarch64.rpm d2eb12ebd3760f3d0d272accac30b31c2f6dc009795d1dffce56498242eb0e76 kernel-rt-64k-debug-5.14.0-687.45.1.el9_8.aarch64.rpm d7e32ff49be7e7375618c9c8c8cc8e088bb57a926902d35d9b089f57e3240b1c kernel-rt-debug-devel-5.14.0-687.45.1.el9_8.aarch64.rpm d865dfe454d8f10861885241366b4d4b0e30dfc07b214f27b4f1f74b90305e06 kernel-rt-debug-modules-extra-5.14.0-687.45.1.el9_8.aarch64.rpm ddce812174bf8c7ec7fef6eb1948ed99416e239c8460b4920f80be356a74ddd9 kernel-rt-debug-modules-5.14.0-687.45.1.el9_8.aarch64.rpm e7b08f462ce6ca69393edecbff74206596aacbebf62be7f61e3682fde833b24d kernel-rt-modules-5.14.0-687.45.1.el9_8.aarch64.rpm f1571d07e75e71f9691e5ce0774dd63d5e054f0313e356ae7560f52fcfcc9bcc ALSA-2026:6570 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109) * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111) * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210) * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-64k-core-5.14.0-611.47.1.el9_7.aarch64.rpm 0a51768b8158c9566942a8519f398fd4d1b029d84b980d7f7bc72da572955c79 kernel-rt-5.14.0-611.47.1.el9_7.aarch64.rpm 2d57b18900831989d7c127db913aa585aa0dd37da0b1cced75a78c54f1dae689 kernel-rt-modules-5.14.0-611.47.1.el9_7.aarch64.rpm 32ee6eebd38957e912d359f4bac059a3ccdf20b4f81e9e4f3e85886cc4c0daa7 kernel-rt-debug-5.14.0-611.47.1.el9_7.aarch64.rpm 3d2775b462c23d4ea6c1fc41bf18f2ca70ce098bf92bacc3c00631a17c16c256 kernel-rt-debug-modules-5.14.0-611.47.1.el9_7.aarch64.rpm 3e047b078e86f17ddbe871a6e3eb6fc7bf36058a59a8363794065b8530330aba kernel-rt-64k-debug-devel-5.14.0-611.47.1.el9_7.aarch64.rpm 54d551efa7923b99e9e3d524fa0f0b18ccd590a172a5cab9c8944aa339bbc800 kernel-rt-debug-modules-extra-5.14.0-611.47.1.el9_7.aarch64.rpm 5f67eed837068fd0e84096e1399df829f05ff46b80ed9be56eaf4f69a844d409 kernel-rt-64k-debug-modules-5.14.0-611.47.1.el9_7.aarch64.rpm 67a4da522670ff86941434f6c21397097507745074677e572e26822ad4b74168 kernel-rt-64k-debug-core-5.14.0-611.47.1.el9_7.aarch64.rpm 682608219e4c1d76d103250f7483e84d49f9d9b055fb99ac91db3ec6aab4b2b9 kernel-rt-debug-modules-core-5.14.0-611.47.1.el9_7.aarch64.rpm 709910f4c6442996d12d214d95e7c6992f73dcf549d16de0584a7dedc2364b81 kernel-rt-modules-core-5.14.0-611.47.1.el9_7.aarch64.rpm 76d1582c5971e3d82221a77b6848d9c2935a69417e02c161bed091ccfaf0c3bb kernel-rt-debug-devel-5.14.0-611.47.1.el9_7.aarch64.rpm 7c61a76f715b6f484767b44c7fbf23b6f675ea476c2f99b81960e71e4d630ea9 kernel-rt-64k-modules-5.14.0-611.47.1.el9_7.aarch64.rpm 7f30d952e858250fa562b6cd593d7f0020121feca5d836b85bc9bc929c6e5d5f kernel-rt-64k-debug-modules-core-5.14.0-611.47.1.el9_7.aarch64.rpm 8db55a8c13f731eb12c0b873843c4690045d317d2a41e48190766ef784dbc9b0 kernel-rt-64k-modules-core-5.14.0-611.47.1.el9_7.aarch64.rpm 95317d97d7217d60cdcc66ab580b03a182a1678c7e66d7fb5416b566d27341b0 kernel-rt-64k-devel-5.14.0-611.47.1.el9_7.aarch64.rpm 97a170121fce97ccdd377980522beee578d50eb3830a1ce70102b0444988e035 kernel-rt-64k-modules-extra-5.14.0-611.47.1.el9_7.aarch64.rpm 9da6fbc9b1fad2f59265b56024506d34660ab96406a78fc8be7f3ef2949a2451 kernel-rt-devel-5.14.0-611.47.1.el9_7.aarch64.rpm aff01f38c4a06028d207da4f32de095bdd8827bd8a6b1d8dba20ca9b82ac29b8 kernel-rt-core-5.14.0-611.47.1.el9_7.aarch64.rpm b1f7a83fda6711d3ac42dbbd09b9162db82b8d703c69479dfa90e1c8e8c88be2 kernel-rt-64k-debug-5.14.0-611.47.1.el9_7.aarch64.rpm bf0ec2d1310473bedd3367c55750e32bc79fb7741b7900b917aa081a3624b581 kernel-rt-debug-core-5.14.0-611.47.1.el9_7.aarch64.rpm bf242df8a4f7ba79afa7d63fbb64a1317ea79cf07e68891bd752c20e01f97daa kernel-rt-64k-5.14.0-611.47.1.el9_7.aarch64.rpm c1ce9738f347e221d985161c3324d2d1f49f776bae935c7c7a2475d63d4c09ca kernel-rt-64k-debug-modules-extra-5.14.0-611.47.1.el9_7.aarch64.rpm e21d5c840cf0c6ae190321a23e8a5740dc19f598fafb88d5a52e089fb06d58bd kernel-rt-modules-extra-5.14.0-611.47.1.el9_7.aarch64.rpm e875782fa4de0e03efa5aa06b059f9c765cafb7aba60f19e5cc3ba6b12822e74 ALSA-2026:66180 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339) * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) * kernel: tcp: call sk_data_ready() after listener migration (CVE-2026-46015) * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149) * kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266) * kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306) * kernel: Revert "net/smc: Introduce TCP ULP support" (CVE-2026-46330) * kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002) * kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223) * kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275) * kernel: ipv4: account for fraggap on the paged allocation path (CVE-2026-53366) * kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034) * kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563) * kernel: smb: client: fix double-free in SMB2_close() replay (CVE-2026-64597) * kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129) * kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) Bug Fix(es) and Enhancement(s): * KSM to deduplicate only zero pages [almalinux-9.8.z] (JIRA:AlmaLinux-249161) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-devel-5.14.0-687.46.1.el9_8.aarch64.rpm 05fb72f0deeaa9c290640b3123b0489958b68c0f4403433317f0fa49976e10ba kernel-rt-modules-core-5.14.0-687.46.1.el9_8.aarch64.rpm 08f6da83eb76a66044571d051a57dfb2a5d6103680fa810d717dcd9777a70c88 kernel-rt-debug-5.14.0-687.46.1.el9_8.aarch64.rpm 13a1d42a39781abd0ad29d10cef5b1e438d1bbfb184c69e8637d98f839c9f789 kernel-rt-64k-modules-core-5.14.0-687.46.1.el9_8.aarch64.rpm 220ddbabc7a2f30ac84f21a78094008a4f29ca82129cbbec3cdbae36ad1995ae kernel-rt-64k-debug-modules-5.14.0-687.46.1.el9_8.aarch64.rpm 29536396761e01db5bea5999a2618b6e2d806bdf79c9e12dc65e3257b1b75ae4 kernel-rt-debug-modules-extra-5.14.0-687.46.1.el9_8.aarch64.rpm 4196b96b86d35aa6489e9eddc5027ec1efacaebb4c521124cdb537628f8e56be kernel-rt-64k-modules-5.14.0-687.46.1.el9_8.aarch64.rpm 60ff89afead78bf8dd68f07d63d47df3ba1e5a44ca5e39633b37256b6aa38b01 kernel-rt-debug-core-5.14.0-687.46.1.el9_8.aarch64.rpm 65702e06dcc4755b1c72c5432e91d711fd7323d653c52d3686b263429f3e7bac kernel-rt-64k-devel-5.14.0-687.46.1.el9_8.aarch64.rpm 6a198a36ada3cd1b989d89a4bfcdb6977ddae68df058e9c0c97b3e9f61011a73 kernel-rt-modules-5.14.0-687.46.1.el9_8.aarch64.rpm 6eb2e364398cbf49a056625fd22547f59a15f42c6ef05c398c6de05c6b5f5f90 kernel-rt-64k-debug-modules-extra-5.14.0-687.46.1.el9_8.aarch64.rpm 7277394ba43ecb7ad593238e7de082ec9e6db353b9a3176a8350feda026836d1 kernel-rt-64k-modules-extra-5.14.0-687.46.1.el9_8.aarch64.rpm 7a802ae2f7faf648cf35d9a6a4eeae8b4abe353ea0f8eab6e8bedc1d23d6fbf0 kernel-rt-64k-debug-core-5.14.0-687.46.1.el9_8.aarch64.rpm 7f3f732a429c8385231d90854f7c67e2cd8e8bec3700a4ef3bad49838c16e7cb kernel-rt-core-5.14.0-687.46.1.el9_8.aarch64.rpm 8904c35ea75b2af65cef299eb408a48fea84733cc626e8f860b393b6491e6327 kernel-rt-modules-extra-5.14.0-687.46.1.el9_8.aarch64.rpm 89a075d4adb8e8c66213d139d63d61fe263ec9a499de32b6083165209d58f76a kernel-rt-5.14.0-687.46.1.el9_8.aarch64.rpm abbe62827438bb56f967725c02507ffd349f82e7db99c6d4697e3fb93c28c04a kernel-rt-debug-modules-5.14.0-687.46.1.el9_8.aarch64.rpm b5ebb77699a8fe18d5ca070d9aaeb14a8f237d1559e53ceeb3424a9e77c62afb kernel-rt-64k-5.14.0-687.46.1.el9_8.aarch64.rpm b94a9d21b62b5b3aacda8bc0cfca115e1e26175fa997b916d779f4b8d31d1f08 kernel-rt-debug-modules-core-5.14.0-687.46.1.el9_8.aarch64.rpm c886eb8c13ea81a0f4270d25996c87dc4bcbdac3003e5bf1143ec40c6ae9d9b9 kernel-rt-64k-debug-modules-core-5.14.0-687.46.1.el9_8.aarch64.rpm ce99be42f3dacb304d4a4219f9e8f30a4e0de8c72ebb156cf7c52250b064431e kernel-rt-64k-debug-devel-5.14.0-687.46.1.el9_8.aarch64.rpm e05d23b1b23c6296e4961411870e5b81a6af547568d29b19d33307ae6a054802 kernel-rt-debug-devel-5.14.0-687.46.1.el9_8.aarch64.rpm e12e716f7204b583dda7cd6cdd527c859341b4a8ef9ea7be402ddbdb25a1a776 kernel-rt-64k-debug-5.14.0-687.46.1.el9_8.aarch64.rpm ebf8628d636283c735e25539675b822edf3f36fb0ffdcb5265c91e5be99d3fa2 kernel-rt-64k-core-5.14.0-687.46.1.el9_8.aarch64.rpm ed727e5bdbd6ccf2e35025f18f4323ce2b466661e563251312e728f0f8fd5604 ALSA-2026:67150 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745) * kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466) * kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479) * kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566) * kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334) * kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368) * kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370) * kernel: Bluetooth: serialize accept_q access (CVE-2026-52918) * kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917) * kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091) * kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053) * kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CVE-2026-53072) * kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (CVE-2026-52947) * kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256) * kernel: wifi: nl80211: reject oversized EMA RNR lists (CVE-2026-53182) * kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CVE-2026-53209) * kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246) * kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254) * kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801) * kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889) * kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971) * kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975) * kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947) * kernel: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CVE-2026-63944) * kernel: Bluetooth: ISO: fix UAF in iso_recv_frame (CVE-2026-63946) * kernel: Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CVE-2026-63945) * kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (CVE-2026-64117) * kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (CVE-2026-64037) * kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113) * kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (CVE-2026-64255) * kernel: wifi: mac80211: fix MLE defragmentation (CVE-2026-64515) * kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086) * kernel: Linux kernel: Wi-Fi subsystem out-of-bounds read via crafted frames (CVE-2026-68402) * kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376) * kernel: wifi: cfg80211: validate PMSR FTM preamble range (CVE-2026-68406) * kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117) * kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300) * kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264) * kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315) * kernel: dm-verity: fix buffer overflow in FEC calculation (CVE-2026-72098) Bug Fix(es) and Enhancement(s): * gfs2: Various xfstests fixes [almalinux-9.8.z] (JIRA:AlmaLinux-178219) * rtla-timerlat-top doesn't stop properly when threshold is reached on multiple CPUs at once [almalinux-9.8.z] (JIRA:AlmaLinux-193025) * qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-9.8.z] (JIRA:AlmaLinux-193050) * Customer needs "netfilter: nfnetlink_queue: optimize verdict lookup with hash table" patch [almalinux-9.8.z] (JIRA:AlmaLinux-224489) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-core-5.14.0-687.47.1.el9_8.aarch64.rpm 0e59e4f63f0d67896e25b48f4c9595cafaa9c3873f2f9197dc6f5324207653d2 kernel-rt-modules-5.14.0-687.47.1.el9_8.aarch64.rpm 0ee6e5173776f902f2c090a2d4fc189a60363b494058a9a9faed65b1d3d81f78 kernel-rt-debug-modules-extra-5.14.0-687.47.1.el9_8.aarch64.rpm 1fd8870a96d57691ac226b0e4c7d854a34f62e038069eda54977a9a93013bf62 kernel-rt-modules-core-5.14.0-687.47.1.el9_8.aarch64.rpm 2089e551ba79805c96e4958ad1cc93f841d4952a895684d7f8af106704880db3 kernel-rt-modules-extra-5.14.0-687.47.1.el9_8.aarch64.rpm 29d3e927d5472cb8c3d12d67bdcdd8e094f85aebdb84e41863d7245a48e66554 kernel-rt-debug-5.14.0-687.47.1.el9_8.aarch64.rpm 2b0b40c079c472745bced1709f7e8ed023ad1babc8af8505dfa54d5232b21ebf kernel-rt-debug-core-5.14.0-687.47.1.el9_8.aarch64.rpm 46dff42c8e791a830821080ceda997a2e79fe42814129d4887ff008b5aad0b5e kernel-rt-64k-debug-modules-core-5.14.0-687.47.1.el9_8.aarch64.rpm 57d4e2bab129f50394bb121cae9cf4ebeff9d4f6e39f8e2599dec952727d57d9 kernel-rt-64k-debug-devel-5.14.0-687.47.1.el9_8.aarch64.rpm 6c65d8e207c3c5773126eb19ea06fc1d0178f6001854985c84558c0e77a99e19 kernel-rt-debug-modules-5.14.0-687.47.1.el9_8.aarch64.rpm 6d74cf33993266506642aab078adadcb052de7c4073e4ec80b28c36305f9ceae kernel-rt-64k-modules-core-5.14.0-687.47.1.el9_8.aarch64.rpm 7687db863af86d5a0ee891e9fff5f6e3d8e00c4e393334d37d223348cb9da5ce kernel-rt-64k-debug-5.14.0-687.47.1.el9_8.aarch64.rpm 7a2722f60e71392374619ad4ba9f92ccabdbaf9b2ef70a852568aa6b4fbf6d6a kernel-rt-64k-modules-5.14.0-687.47.1.el9_8.aarch64.rpm 9b8a799a407ad213a3ab7abf0644bfd65d3cef48f883a2b0b4c78ef86b181aba kernel-rt-64k-devel-5.14.0-687.47.1.el9_8.aarch64.rpm 9f8347f29bc09d3b9458f68de5a9e66950ff857bc38084027b8ecd59e9b481fc kernel-rt-debug-modules-core-5.14.0-687.47.1.el9_8.aarch64.rpm c5ef7e0b9c4865319819bee56eaac1d45e8b5cbb9d87cc49f709f2c9e545a6d7 kernel-rt-64k-modules-extra-5.14.0-687.47.1.el9_8.aarch64.rpm c6151e82c6997368a151f8fcd7546b285d7dfbb3ac53114d2ce7aa70486fa965 kernel-rt-debug-devel-5.14.0-687.47.1.el9_8.aarch64.rpm ca36a40da96b3caff57ca7512b5408b377932e7999fbb183e10c522f7e76e34c kernel-rt-5.14.0-687.47.1.el9_8.aarch64.rpm cd62393d57756b25cde9c119c61cee5248da852603ec3eb91118e2f1de3b6a97 kernel-rt-devel-5.14.0-687.47.1.el9_8.aarch64.rpm d59acd41a5078a20aba8779afad52b98e07ef9ce1d883430213b4b008838dfc0 kernel-rt-64k-debug-modules-5.14.0-687.47.1.el9_8.aarch64.rpm d8804315ab5e5a4af9fd88bd14be318495d1696346d06326adaa37e320ac1145 kernel-rt-64k-debug-modules-extra-5.14.0-687.47.1.el9_8.aarch64.rpm da9e168e2e759f9c70ad4608434b4f5b878bf46cb6cbe475b1367d96f3e05a9d kernel-rt-64k-debug-core-5.14.0-687.47.1.el9_8.aarch64.rpm e03765072ad07d3ce917972f6f6c18937d573df56389f18a2f2022deef29a400 kernel-rt-64k-5.14.0-687.47.1.el9_8.aarch64.rpm e29751e313271f73c78b577d65b3cf3275e13a59fc4e6ccab60bd1033cc0873a kernel-rt-core-5.14.0-687.47.1.el9_8.aarch64.rpm f68d27b4173fb3359a2d1e140665b939fedaffcd0e8615a91d2d5a9e92f5751c ALSA-2026:67470 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248) * kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015) * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923) * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143) * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294) * kernel: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (CVE-2026-72045) * kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556) Bug Fix(es) and Enhancement(s): * gfs2: bufdata leaks [almalinux-9.8.z] (JIRA:AlmaLinux-178223) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-modules-extra-5.14.0-687.48.1.el9_8.aarch64.rpm 0a4b4088ceb89cc17f7140e91182033c04081d31d350e1a1eb91dd7b55e8d839 kernel-rt-debug-modules-extra-5.14.0-687.48.1.el9_8.aarch64.rpm 23f15758e87ccbf674efd41c5ee5d776d68d7d06f278d5c4fc5811a8261ecbe5 kernel-rt-64k-debug-5.14.0-687.48.1.el9_8.aarch64.rpm 301580961a4ba48fda5397ea06d91745be235b6bba685df5e9e882acb0067b28 kernel-rt-64k-debug-modules-extra-5.14.0-687.48.1.el9_8.aarch64.rpm 32c30a8a0eb740487a6b7787a217039d40bcb1dea95c27e16829397ef58d118b kernel-rt-modules-core-5.14.0-687.48.1.el9_8.aarch64.rpm 36381e57f7ee3a0ac9649864c3253b373ca3c79067cc4bc0f50d0119484f8ca5 kernel-rt-debug-5.14.0-687.48.1.el9_8.aarch64.rpm 3bdf79ed4d7ca90146fb7dc6ea6575421248c79df47b087d63ac1d6deb7d127b kernel-rt-core-5.14.0-687.48.1.el9_8.aarch64.rpm 419b422daea0f5a2613c4e0d698a4b3559258589d3b844cc9eaed8c23ba54b19 kernel-rt-modules-5.14.0-687.48.1.el9_8.aarch64.rpm 537aa6cd34405dbb85ee525d7bb058cafaea9051e323e6ee2c64703aa049b679 kernel-rt-64k-modules-5.14.0-687.48.1.el9_8.aarch64.rpm 5d242c99c4317619cbbf5b7d2fa1f40657caf253b3ba83f5be984315089d2b2e kernel-rt-64k-debug-modules-core-5.14.0-687.48.1.el9_8.aarch64.rpm 69941de2f52cfe990f1a2293c39117975fe946e0001876590e850e41ad21e2e0 kernel-rt-debug-devel-5.14.0-687.48.1.el9_8.aarch64.rpm 9378c239f84730ed9e51e7d8f13ed702d4826a7567fb5459d71afad7d0f7d5c2 kernel-rt-debug-modules-core-5.14.0-687.48.1.el9_8.aarch64.rpm 9579bfcb74fce49e6127710000d0f0680cf0d764bc3dbaefe86e29434deb75ac kernel-rt-64k-5.14.0-687.48.1.el9_8.aarch64.rpm 97c801583dbeba033ded0f7e358edce6d39f06fd617fe82454b4f9d0e00fdb47 kernel-rt-debug-core-5.14.0-687.48.1.el9_8.aarch64.rpm 9fc6510ec55c25bee2b21a74c88edc1316d4cef1436a7f283a4f6cf7a1d45cbb kernel-rt-64k-debug-modules-5.14.0-687.48.1.el9_8.aarch64.rpm a5acf2bfd7d6d6fe5196be405777d192ea80e45154867d1209fcf69c94345d2a kernel-rt-64k-core-5.14.0-687.48.1.el9_8.aarch64.rpm acaaac4511d0d7acefb66b16c1bcdd7e2c8109183c2e66adbfa8a4196489ace4 kernel-rt-64k-modules-core-5.14.0-687.48.1.el9_8.aarch64.rpm c07136892785fa459df10c9d460df93829acdb7a139e4f10958c0a1ca14a1934 kernel-rt-64k-devel-5.14.0-687.48.1.el9_8.aarch64.rpm c848afdb9a473e88cf6871d0d4d837c232b1defddc35757816c018d19fbe1d37 kernel-rt-modules-extra-5.14.0-687.48.1.el9_8.aarch64.rpm cc9fb6304e5177eab583e3429b9a8a5fa9bfb88d6588fdb0b071f6242cb9aea8 kernel-rt-64k-debug-devel-5.14.0-687.48.1.el9_8.aarch64.rpm d2f4569d11645fcf8ad99d929cdec71a18724bcfe9ce8870919d266153fb78ef kernel-rt-devel-5.14.0-687.48.1.el9_8.aarch64.rpm d5965f0353652b91e2cd2f6c990091c5dbae839427348ec6132730d4614cda14 kernel-rt-5.14.0-687.48.1.el9_8.aarch64.rpm d76f83c4bd15f34f59076e72a7d6fa410e0f961e158b6a88fa00b9cfd7a56dad kernel-rt-64k-debug-core-5.14.0-687.48.1.el9_8.aarch64.rpm e24b95eaf811961eb5672b99f70c18dd440202cbd4ddb605f01302c43a5020b1 kernel-rt-debug-modules-5.14.0-687.48.1.el9_8.aarch64.rpm eb69d836997fce314188a4297d7866cf8d5fdee837b35bcb807acb90756b8167 ALSA-2026:68011 Copyright 2026 AlmaLinux OS 0 1 Important

microcode_ctl security, bug fix, and enhancement update

The microcode_ctl packages provide microcode updates for Intel and AMD processors. Security Fix(es): * kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling (CVE-2025-35973) * kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM (CVE-2025-31936) Bug Fix(es) and Enhancement(s): * [AlmaLinux 9.8.z] Update Intel CPU microcode to the latest version (JIRA:AlmaLinux-260496) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default microcode_ctl-20260210-1.20260812.1.el9_8.noarch.rpm a3c5216b4990315750227dfe5e44ffe647507fce16836082212f280793ffde5c ALSA-2026:68570 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172) * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663) * kernel: RDMA/rxe: Fix race condition in QP timer handlers (CVE-2026-45910) * kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043) * kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133) * kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (CVE-2026-46114) * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971) * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176) * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193) * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239) * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192) * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869) * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029) * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921) * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919) * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917) * kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913) * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176) * kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (CVE-2026-64174) * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175) * kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582) * kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159) * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation (CVE-2026-68200) * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128) * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363) * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426) * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102) * kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298) * kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (CVE-2026-72003) * kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243) Bug Fix(es) and Enhancement(s): * gfs2: filesystem withdrawal rework [almalinux-9.8.z] (JIRA:AlmaLinux-252540) * The slab cache entries for gfs2 and dlm grow very large for gfs2 filesystems [almalinux-9.8.z] (JIRA:AlmaLinux-252544) * gfs2: Get rid of sd_async_glock_wait [almalinux-9.8.z] (JIRA:AlmaLinux-253986) * [AlmaLinux9.8z] watchdog: System panics during reboot when pretimeout is disabled (0) (JIRA:AlmaLinux-255217) * [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [almalinux-9.8.z] (JIRA:AlmaLinux-256733) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-core-5.14.0-687.49.1.el9_8.aarch64.rpm 00cb1f728c22e7078cd72eb999c726a56516441481b6865255eb50358dad944b kernel-rt-modules-extra-5.14.0-687.49.1.el9_8.aarch64.rpm 10a09ac32de8b0cd9c3d7ad7c3899cfbf8d764347fc46122f8254c2250243530 kernel-rt-64k-debug-devel-5.14.0-687.49.1.el9_8.aarch64.rpm 17fb15d5fb5d26eea982a43ebab7228c6366b287782f20f6d34977a0360c1801 kernel-rt-64k-5.14.0-687.49.1.el9_8.aarch64.rpm 1a1cc53ce068c94c8b078b8b5ceeb1cfb5587461959e3b995bb123275eca114d kernel-rt-debug-modules-extra-5.14.0-687.49.1.el9_8.aarch64.rpm 1a50656f8753c7e2f1101bc025fa6475fa6813f589b65b8787530deee5f63de1 kernel-rt-64k-debug-modules-5.14.0-687.49.1.el9_8.aarch64.rpm 2372707c176886a0a8a63355cf7f1575dbd828d15312e8937ca7dd61c9edf5d6 kernel-rt-64k-modules-core-5.14.0-687.49.1.el9_8.aarch64.rpm 24e8d2a59013452e11c694d90a81489d5a6d19ea3e35a8c22b957dd7e7f7f956 kernel-rt-64k-modules-extra-5.14.0-687.49.1.el9_8.aarch64.rpm 45bf7d26fece475be27d1efb1c99971fff6a3a2a04282d517a88813db5fb7e75 kernel-rt-64k-modules-5.14.0-687.49.1.el9_8.aarch64.rpm 4f9b89eacc87940d2750523f03b6b86c1c06124bec2f7dd85c158fbe9bb461ea kernel-rt-64k-debug-modules-core-5.14.0-687.49.1.el9_8.aarch64.rpm 5bac1fad277dcf3cfe6c5b8d5196697938e02f253c679e1063407705f5b75f4a kernel-rt-64k-debug-core-5.14.0-687.49.1.el9_8.aarch64.rpm 5f74ec4936d3ea41f86907cb8bd72c94e38f1fdbdf5f46484b1bbeb943f325ff kernel-rt-64k-debug-5.14.0-687.49.1.el9_8.aarch64.rpm 624236479696c08ae5114d886ede8993b8ff1455304d795825f8e000b519c085 kernel-rt-5.14.0-687.49.1.el9_8.aarch64.rpm 6280f3d117d6c58b3020d24c6f123c3e123fc8a224d87d5344b72af538f78c57 kernel-rt-modules-5.14.0-687.49.1.el9_8.aarch64.rpm 8295784fc16e0d7dc96b68edfbdb8a3df29ccc4515c5cc5edc6dd6fdf61a697d kernel-rt-debug-devel-5.14.0-687.49.1.el9_8.aarch64.rpm 918b39cbb74f73045c3336a8a15c1a5d008e969030ea52e2269fe22867289d8c kernel-rt-modules-core-5.14.0-687.49.1.el9_8.aarch64.rpm 9f5b8c43f7528a8c93a9a09bf3e527018e1c75c022dab9c1c90e44f94d96e47a kernel-rt-debug-core-5.14.0-687.49.1.el9_8.aarch64.rpm a191afb689ffe2343a2661fe364b51e1240e46975ad6d06d398ea2d401811d32 kernel-rt-64k-devel-5.14.0-687.49.1.el9_8.aarch64.rpm b04c5c7217533ed5432fab6a32c4667f96d1696aeed51b65d5c2b303ce869a17 kernel-rt-debug-modules-core-5.14.0-687.49.1.el9_8.aarch64.rpm c91ccd363ad2d1dfefc3686fa5a1aae258e84e83c907f01f6ee90bd30f6768bd kernel-rt-devel-5.14.0-687.49.1.el9_8.aarch64.rpm cbf55abada9b210528456191ed1c87db7ead3e12beb07ce4eae0e20af8f9bf5d kernel-rt-64k-core-5.14.0-687.49.1.el9_8.aarch64.rpm da69ef762761cfc63eea80035035984a110960a8edc279643b8c8e0f7fb9333e kernel-rt-debug-5.14.0-687.49.1.el9_8.aarch64.rpm e1dcf04231d1652a0d1a3c46586d9c337efe9caad98ec08d66957af2eb7238db kernel-rt-debug-modules-5.14.0-687.49.1.el9_8.aarch64.rpm f800451625ce373bc7f0d854cd0856d097fdccace5d8b31f937e8d5ec3d07ef4 kernel-rt-64k-debug-modules-extra-5.14.0-687.49.1.el9_8.aarch64.rpm ff60cb5ea7423b0c3fccd7912188492ede7bb3537bcf6cb88c9ac96a9ee8b12f ALSA-2026:70459 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964) * kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894) * kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959) * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062) * kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823) * kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293) * kernel: Linux kernel: libceph null pointer dereference leads to denial of service (CVE-2026-68157) * kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188) * kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156) * kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155) * kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391) * kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (CVE-2026-72072) * kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518) Bug Fix(es) and Enhancement(s): * [Intel 9.8 FEAT] ice: Driver Update [almalinux-9.8.z] (JIRA:AlmaLinux-213003) * AlmaLinux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [almalinux-9.8.z] (JIRA:AlmaLinux-254108) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-debug-devel-5.14.0-687.50.1.el9_8.aarch64.rpm 02f6b0f7c455cafb0d5ef219dca7f28e010ec0db050f6e4d68139b358aee9249 kernel-rt-debug-core-5.14.0-687.50.1.el9_8.aarch64.rpm 1e61c78dc7451da0f0496dbcf0ec6061ba46ff81df4d172ae99db8c9b15dca1f kernel-rt-core-5.14.0-687.50.1.el9_8.aarch64.rpm 2e72a057e4b01a7e0da109562cd4dc9beac289e3cd577e7501cd0f20ba9234da kernel-rt-64k-modules-core-5.14.0-687.50.1.el9_8.aarch64.rpm 46494a1eb6e50ae243c5892cfc14f061873dc1905b7ce14482bfe4beda2b42af kernel-rt-64k-modules-extra-5.14.0-687.50.1.el9_8.aarch64.rpm 4aa86fc77fcbb8bc9161d5d267be82be87a17ac0b0bc2c5218e76b2e518c134d kernel-rt-64k-core-5.14.0-687.50.1.el9_8.aarch64.rpm 5a3d249e0b77ddbe36212140d4f3e6e59165ae06c9d577f582c7a1c693d792d1 kernel-rt-modules-core-5.14.0-687.50.1.el9_8.aarch64.rpm 5b9f4ae0b644d58bf1a34fe7ddd387f407c3cffed7dce305b2cc07591f739284 kernel-rt-debug-modules-core-5.14.0-687.50.1.el9_8.aarch64.rpm 5e036ae9197004e0fb46d4e57da4a204f093bbd1254b0183133d50b27be2ce44 kernel-rt-64k-debug-core-5.14.0-687.50.1.el9_8.aarch64.rpm 5e789c83d9fc444c6dcc8c56400eeb08728bb9ad5955feef55d4a5b01dfda72c kernel-rt-debug-modules-extra-5.14.0-687.50.1.el9_8.aarch64.rpm 732b130d36343d6a673e612d5b47441126842c80a58ccb5b856ec89bac3ee793 kernel-rt-64k-5.14.0-687.50.1.el9_8.aarch64.rpm 79d97918e37eeec01664561502b57fb313c86f480746a93edf8e2d59b747545e kernel-rt-64k-debug-modules-5.14.0-687.50.1.el9_8.aarch64.rpm 7de7a22b652530674fb16e141514ee3190ab22531c37142c33ecd7e93226e948 kernel-rt-debug-devel-5.14.0-687.50.1.el9_8.aarch64.rpm 7e85aff2d7f3b65ee673cb92c9a49daf352b0dd8110ad63a718620b6dcf247b3 kernel-rt-debug-5.14.0-687.50.1.el9_8.aarch64.rpm 8a77ae42e32310bf85d513ff00379759a2c1e42589573dbe2d9062ac9e9bd57e kernel-rt-modules-5.14.0-687.50.1.el9_8.aarch64.rpm a5216bf1beb3ebda6f40aa098c4ba0f4b110da9b5e0d9e4a0ac9faea94e71203 kernel-rt-devel-5.14.0-687.50.1.el9_8.aarch64.rpm a6b507846aa4680cdd84169fb38fc33d0299597f2e382b44f2d4badc04d87ae6 kernel-rt-modules-extra-5.14.0-687.50.1.el9_8.aarch64.rpm ba982d1352b788af3fa68df14db3dd7782cb7490ecfad614834542f8206c26c6 kernel-rt-64k-devel-5.14.0-687.50.1.el9_8.aarch64.rpm cb76a70db1924b852e0977aac8a1535e5ec7a257e8312c8bfbb7ffbbd8401f91 kernel-rt-64k-debug-5.14.0-687.50.1.el9_8.aarch64.rpm d9eefbce985b2b4d045f7ff34b3d649a08dd5fa60f976714130455d41719231c kernel-rt-64k-debug-modules-extra-5.14.0-687.50.1.el9_8.aarch64.rpm deb0ec0f2c9465399d2207ec19f0fd8475a840c75cae98ab4f347654cadd46b7 kernel-rt-debug-modules-5.14.0-687.50.1.el9_8.aarch64.rpm e9c3d6bb457c857237cf96ec32460313323c7c78a017c3bc8f011e59caa61bb9 kernel-rt-5.14.0-687.50.1.el9_8.aarch64.rpm e9d56677ae45cb7ea6ae60c4dbf0e767ed80abdda19816dfa32db1ba1d1c22f3 kernel-rt-64k-debug-modules-core-5.14.0-687.50.1.el9_8.aarch64.rpm f295dd91add84597191e3dd7a0158c6a2e736a7de477c81fc7b1dbdcc1ac0e37 kernel-rt-64k-modules-5.14.0-687.50.1.el9_8.aarch64.rpm f7af5e0166cedcdb0ccf1d6ba475a7165db2bd23526045710a69a5686b50d17f ALSA-2026:71700 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323) * kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539) * kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199) * kernel: drm/amdgpu/userq: fix access to stale wptr mapping (CVE-2026-46311) * kernel: netfilter: nf_queue: hold bridge skb->dev while queued (CVE-2026-52912) * kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CVE-2026-53203) * kernel: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CVE-2026-53290) * kernel: drm/virtio: use uninterruptible resv lock for plane updates (CVE-2026-64098) * kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121) * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108) * kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CVE-2026-68257) * kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CVE-2026-68267) * kernel: drm/xe: Hold a dma-buf reference for imported BOs (CVE-2026-68266) * kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273) * kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714) Bug Fix(es) and Enhancement(s): * MADVISE i/o size in AlmaLinux 9 additionally limited by read_ahead_kb - Was addressed in AlmaLinux8 via AlmaLinux-22476 [almalinux-9.8.z] (JIRA:AlmaLinux-260938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-modules-5.14.0-687.52.1.el9_8.aarch64.rpm 01b7bc809f5658c713d292b9dce39d161420d29f3f8d1765731caabffddd23b5 kernel-rt-debug-modules-extra-5.14.0-687.52.1.el9_8.aarch64.rpm 06baf4f5d3b2a81ce1a9922b6dd2b0566445e2ca0de26f85e0397186e64d5db0 kernel-rt-64k-debug-core-5.14.0-687.52.1.el9_8.aarch64.rpm 0c74bccfc7288ce2298117dccb9c6be0c4515ac1f37e2d46f4d59b4a3ac64d8a kernel-rt-debug-5.14.0-687.52.1.el9_8.aarch64.rpm 27dcce314088bd74de405a1393a40b2ed9541002b023dfd84eee3f1a867a8f9f kernel-rt-modules-5.14.0-687.52.1.el9_8.aarch64.rpm 283b9c075e57c26668e8994b6a3d386998ae1ce04e71ff26e54b5a65ff20cef6 kernel-rt-debug-core-5.14.0-687.52.1.el9_8.aarch64.rpm 3a3f15c46727482d607ce79ff4f3c94cf07e05422d722306445e7b9c456790d4 kernel-rt-devel-5.14.0-687.52.1.el9_8.aarch64.rpm 4522c225f9000c1660d8d9c96eb3cdf3adc19e3f72fd789b5cbe23f3fee330a4 kernel-rt-debug-devel-5.14.0-687.52.1.el9_8.aarch64.rpm 4df1655e0d7f7f366ac1074ccef214e27f38c50e9185a00f90db2301eecd26ea kernel-rt-64k-debug-devel-5.14.0-687.52.1.el9_8.aarch64.rpm 4fdda7951ef9e7ac937e15508eefa7d47be827b7872319a36160e5d7403dd26c kernel-rt-debug-modules-core-5.14.0-687.52.1.el9_8.aarch64.rpm 520dfa46d0e14310909a72938442741bca88930f5da02a5425050679dcddf979 kernel-rt-64k-modules-core-5.14.0-687.52.1.el9_8.aarch64.rpm 55731010f448b779296abc6233f7c41a402a13645499232dafe4ceceaa72524c kernel-rt-64k-core-5.14.0-687.52.1.el9_8.aarch64.rpm 593c48159ad2f8e310aaf5c44d91cd0dc78d96ef71de81027b76a529fcd45b7d kernel-rt-64k-modules-extra-5.14.0-687.52.1.el9_8.aarch64.rpm 613d69997a7f79d9cd44bf84718f5e1a6184ad083fea85e62f3a3fd07c6f44c0 kernel-rt-64k-debug-modules-extra-5.14.0-687.52.1.el9_8.aarch64.rpm 6e7cf60fddcd19c2685ac79e52f2d1b59986cf0d8e280b2f505ea5156ce02fa9 kernel-rt-64k-devel-5.14.0-687.52.1.el9_8.aarch64.rpm 755174d9777074d0f2ac494bcb00a3371420b6a98d892d557b1355ba19ec990e kernel-rt-64k-5.14.0-687.52.1.el9_8.aarch64.rpm 76b821d090154b73c9085c2a0ffe7483d3e4a4d0334b8a7ce83c6f3a58939801 kernel-rt-64k-debug-5.14.0-687.52.1.el9_8.aarch64.rpm 77ee0a88200e4a33ce007879de8a2915117ca118a685348b73dd5f07455256e0 kernel-rt-modules-extra-5.14.0-687.52.1.el9_8.aarch64.rpm 7888a913468d5fe076c245cfab5b4ad0982cc6b5caa5d95fbe2d26da7efb35dd kernel-rt-64k-debug-modules-5.14.0-687.52.1.el9_8.aarch64.rpm afc4e0043adb81989be1e754c6026c8cd89b1080e1f1f18fa0812a77e3ded633 kernel-rt-5.14.0-687.52.1.el9_8.aarch64.rpm c409a9092efbe6076d701863b47c2f8d2079e089de68dfd6d8470044c7d2d060 kernel-rt-64k-debug-modules-core-5.14.0-687.52.1.el9_8.aarch64.rpm d5f4ae6a2fe54ad7382d265fdcfcc6d19f82ccd4734af444c19c85b1efc2d611 kernel-rt-modules-core-5.14.0-687.52.1.el9_8.aarch64.rpm d796c5c28686ae7142b402cd585429627cfeb76240ade093b44ae8d4ba670ee4 kernel-rt-core-5.14.0-687.52.1.el9_8.aarch64.rpm e29c10c7b47be2a0ecd4ca90c7d1b48348458400bbe183c42a8b86932d762bf3 kernel-rt-64k-modules-5.14.0-687.52.1.el9_8.aarch64.rpm fc41cc9a16ec394e4885cdf822de5ad2f3c6a2974a7033c6bece02f3cab17c9e ALSA-2026:72623 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942) * kernel: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (CVE-2026-46325) * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972) * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341) * kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875) * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102) * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556) * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522) * kernel: perf: Reject exited events as group leaders (CVE-2026-74753) Bug Fix(es) and Enhancement(s): * KVM: s390: Limit adapter indicator access to mapped page [almalinux-9.8.z] (JIRA:AlmaLinux-188656) * crypto: xxhash64 should not be fips approved [almalinux-9.8.z] (JIRA:AlmaLinux-256437) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-modules-core-5.14.0-687.53.1.el9_8.aarch64.rpm 05fde85950aba84509da7b83af4675ab78cca16d250fd442173471d70d7dac47 kernel-rt-64k-devel-5.14.0-687.53.1.el9_8.aarch64.rpm 1198d633eda0b0a9614ebf6d6776dbddb2dfd316bb218610701190c99136a3d9 kernel-rt-debug-modules-extra-5.14.0-687.53.1.el9_8.aarch64.rpm 133ac53d08201e329cf44feaf7eb59f13b101c1eab0fcfb80d6383fe1e84e9d4 kernel-rt-debug-5.14.0-687.53.1.el9_8.aarch64.rpm 15b4c88c9df5ba18a2aacde5cc5f65b52451db4e2fb0de7b03a2b03840356f3c kernel-rt-5.14.0-687.53.1.el9_8.aarch64.rpm 19999930cf479094ead53d4e69dbdcea73c7994ed388b9afe47240430e12343f kernel-rt-core-5.14.0-687.53.1.el9_8.aarch64.rpm 296125e1ac8a5f0bde50f5fce112cab31b1e3d95de5dbf7dec6d02c69e15a856 kernel-rt-64k-5.14.0-687.53.1.el9_8.aarch64.rpm 2baad143ab4e8cbb003381138888715667eb302e18e7f6239c367ec2ee7274a5 kernel-rt-64k-modules-core-5.14.0-687.53.1.el9_8.aarch64.rpm 2f78d05359496d74a7ff941e51661d8c0fb74d9198b647a03c299ef1f692a380 kernel-rt-modules-5.14.0-687.53.1.el9_8.aarch64.rpm 39e20a1ab5c0886a0d9e3452bf02de3b3e345123cc370c9aeb1eb26747a9e8cc kernel-rt-modules-core-5.14.0-687.53.1.el9_8.aarch64.rpm 47e9d8b506cf975a665a2b487c9113219c40a77ca0f37b580057a98f73658cf4 kernel-rt-64k-modules-5.14.0-687.53.1.el9_8.aarch64.rpm 5055b39317ba6bac16c725cae214fd402c2832055fba3b0cf7f5a78baeb99e4c kernel-rt-debug-devel-5.14.0-687.53.1.el9_8.aarch64.rpm 50a1eaa3f982bed2fc44b5ea25a415c928cf8f4124e03601dc0fa80c62349343 kernel-rt-debug-core-5.14.0-687.53.1.el9_8.aarch64.rpm 5de7f525d0fb75714eb8f4354b908c41a494404241716cbc73ac448efb8c08fb kernel-rt-64k-debug-core-5.14.0-687.53.1.el9_8.aarch64.rpm 78405b0b5b559c9dd7e9352d38ba7284fb3bc091c9fb5a4bab5a0cfbb319b525 kernel-rt-64k-debug-devel-5.14.0-687.53.1.el9_8.aarch64.rpm 85b7e347ee3a65d277a139f81e812f007aed77fc4d539bf204b39741d2bf3979 kernel-rt-64k-debug-5.14.0-687.53.1.el9_8.aarch64.rpm a7b446b5d928760e7eb2cd69b16febcc67be2a044de4f6c725ce642a10bc4765 kernel-rt-modules-extra-5.14.0-687.53.1.el9_8.aarch64.rpm ab0e17b900fb51485e3149f507f3298e931ed9b106f68cf0d7098647ae22abc3 kernel-rt-64k-debug-modules-5.14.0-687.53.1.el9_8.aarch64.rpm aee670b56fb140c2faa356ba523051813afa8550a7cb0620b4f865258b1a4a99 kernel-rt-64k-core-5.14.0-687.53.1.el9_8.aarch64.rpm c2dac4b7145ab496e282914ffd5eee6b4c83cc2c88aba836331a43fe7192b491 kernel-rt-64k-debug-modules-core-5.14.0-687.53.1.el9_8.aarch64.rpm d6aa670879a47e0ff698312380a55a8a10c384a1b7e1e8e691e657893fe6b2c1 kernel-rt-debug-modules-5.14.0-687.53.1.el9_8.aarch64.rpm d7d0ccab402d87ff5319fea35447f2de7e7aefecd06b72b6f292bca709abb38f kernel-rt-devel-5.14.0-687.53.1.el9_8.aarch64.rpm d9f2bc774e2453b30e9aa74951a490563ba0f73923f2e4512a14e9c604f09257 kernel-rt-64k-modules-extra-5.14.0-687.53.1.el9_8.aarch64.rpm db1b637f6b2bc156ffcf351ad32c6fb12caada554ff0c4f63bfb1d2567598ff1 kernel-rt-64k-debug-modules-extra-5.14.0-687.53.1.el9_8.aarch64.rpm f8093b7e7aaffb9ad1da3ee46cd366b1f81a3ad63a100fbc27505ff39e54f060 ALSA-2026:74438 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856) * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794) * kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775) Bug Fix(es) and Enhancement(s): * Backport of protocol attribute to IP addresses (IFA_PROTO) [almalinux-9.8.z] (JIRA:AlmaLinux-169936) * try_charge_memcg() refactor in kernel 5.14.0-687.36.1 causes premature memcg OOM with GiB of clean page cache present [almalinux-9.8.z] (JIRA:AlmaLinux-269060) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-modules-extra-5.14.0-687.54.1.el9_8.aarch64.rpm 01dca324b525068b820bec28cb9056814f6f7dec566693f169eae2367229295a kernel-rt-5.14.0-687.54.1.el9_8.aarch64.rpm 042b731de924c2ba51e8f1c756cadd7a32ed355d7883c9f22f90daa4dd6db24e kernel-rt-64k-debug-modules-extra-5.14.0-687.54.1.el9_8.aarch64.rpm 06303b31017295f980fad670537369c9b3df068979f80a983af4a245512ee6e7 kernel-rt-64k-debug-modules-5.14.0-687.54.1.el9_8.aarch64.rpm 0e91a5bb184db87e80a2745c657e18b00f01345ba55e5dd70d058140940ea29d kernel-rt-64k-debug-devel-5.14.0-687.54.1.el9_8.aarch64.rpm 286ca1631d5946b81da989b1598512a5f9137180591236774c10a71773981636 kernel-rt-devel-5.14.0-687.54.1.el9_8.aarch64.rpm 342ce842634b0e3b109f7394f48d01c7e7ea274e1814c54b12e7087c7f277aa5 kernel-rt-modules-5.14.0-687.54.1.el9_8.aarch64.rpm 5359563a9fb9367a413656f57df0945806ed094fda1b4cb46b3182003db969ae kernel-rt-debug-modules-5.14.0-687.54.1.el9_8.aarch64.rpm 5f28ccdc3146bfb5e6166d72193e0ce168f81f4e380040ab4ccfd741e67c90e9 kernel-rt-debug-core-5.14.0-687.54.1.el9_8.aarch64.rpm 632bce62e81b86f021d4536fc97344366d888876a7492e31fa29c92fc595440d kernel-rt-64k-modules-extra-5.14.0-687.54.1.el9_8.aarch64.rpm 66dff0cc24bfbb55d2bf5fe3cea7dfc3f26b9b02b4cdbb39ecc8f3d1909df0d8 kernel-rt-64k-5.14.0-687.54.1.el9_8.aarch64.rpm 6e214d1beeed6c9f3832bbc4da9a2199a4660fd898d1753cddb6821b5d5b7fa2 kernel-rt-debug-modules-core-5.14.0-687.54.1.el9_8.aarch64.rpm 6e29862f164e4aa63f79e260548026f3ddf1c976bc484a4c9d58cd1a0bedc129 kernel-rt-64k-modules-core-5.14.0-687.54.1.el9_8.aarch64.rpm 793b0bcf6f6bf09be3005cfa48855aa9b531ea10b7b4d5a5cbf690bc21101d42 kernel-rt-64k-debug-core-5.14.0-687.54.1.el9_8.aarch64.rpm 811c481fd63f2090e598d1cd5c179233729b6d83fa7ef26f98182456ad7c5b72 kernel-rt-debug-modules-extra-5.14.0-687.54.1.el9_8.aarch64.rpm 89fe0e2ce70591ef84d43a7101d30ed12c551d1b92033b241049c86562db2c3d kernel-rt-debug-devel-5.14.0-687.54.1.el9_8.aarch64.rpm 90429c53b78f04576400d3f0c152c2ffb94ac86e64c4eb33d72e8fda4ecf68e7 kernel-rt-core-5.14.0-687.54.1.el9_8.aarch64.rpm 9332e8831260e7eb35a488221fafd74ce30b5166c951735f419cb81ed65baa37 kernel-rt-64k-core-5.14.0-687.54.1.el9_8.aarch64.rpm 97ff26973141124a6ec293b75ab9add5de63a2de5ab772ed7ca5df56f7f0ef6c kernel-rt-64k-devel-5.14.0-687.54.1.el9_8.aarch64.rpm a9a4f5bf5d13183207b9a98cb52c76217d57153bff026f116f05fca73a69c061 kernel-rt-64k-debug-modules-core-5.14.0-687.54.1.el9_8.aarch64.rpm b8f04ebf0bae60914c63e030bee14faa7a3c9b5bafc80e3dbc88da49309b2acc kernel-rt-64k-modules-5.14.0-687.54.1.el9_8.aarch64.rpm cbe993771e8ed34f7d6bc2391e4e63e7c66c71e1345ab8c95e677a3d5b2739cf kernel-rt-64k-debug-5.14.0-687.54.1.el9_8.aarch64.rpm de246bef7023e6c3b7d1a66aba65fa7a780ceae79dd0c65a2dbc196efcd0e8bf kernel-rt-modules-core-5.14.0-687.54.1.el9_8.aarch64.rpm deffc76b80fd0f596d7ecc0e411e26427b7e3e39aaee0d6fcb4ae05f0a8018e8 kernel-rt-debug-5.14.0-687.54.1.el9_8.aarch64.rpm e05579bba55ceb295e154d6ed80b1d111b307e0aa5dc1613539cec2872d9f34e ALSA-2026:77689 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) * kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365) * kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398) * kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970) * kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035) * kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162) * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317) * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744) * kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690) * kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669) * kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530) * kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663) Bug Fix(es) and Enhancement(s): * "iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors" broke rx-vlan-offload on almalinux-9.7 [almalinux-9.8.z] (JIRA:AlmaLinux-169480) * [GNR-D] missing interfaces tspll_cfg (JIRA:AlmaLinux-183201) * AlmaLinux9.8z KVM guest panicked in vmmouse driver (JIRA:AlmaLinux-186577) * Add Epson RX8111 support to AlmaLinux9.9 [almalinux-9.8.z] (JIRA:AlmaLinux-212014) * RT scheduler livelock: migrate-disabled task at pushable-list head causes repeated RT push/stopper retries, starving a critical RT task (remaining issue after CVE-2026-45919 fix in 94894c9c477e) [almalinux-9.8.z] (JIRA:AlmaLinux-256279) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-modules-extra-5.14.0-687.56.1.el9_8.aarch64.rpm 052876963ae6bb05e16adde02b9f0df37f30e1227d9d32554465db7b2a2cb33f kernel-rt-debug-modules-extra-5.14.0-687.56.1.el9_8.aarch64.rpm 14c15055488bbbb86c6f441aaa3effe3ac0c88db4671d31856f4f6aa66c87a4e kernel-rt-modules-5.14.0-687.56.1.el9_8.aarch64.rpm 1eed1cfbbd9131be09830bdd861408b95e70ead3b378125e245e5a216254eb8f kernel-rt-5.14.0-687.56.1.el9_8.aarch64.rpm 24c6d73bf167d0a905162134601ffc8a979ddfddf11152be9e075fa1f44aa99d kernel-rt-64k-debug-modules-5.14.0-687.56.1.el9_8.aarch64.rpm 29a890433d5ec1e56fe8c0b060fbe26cd9a2b23c2cdd432af3458e1bd964b3c9 kernel-rt-debug-5.14.0-687.56.1.el9_8.aarch64.rpm 35a61c412817b4f698a92478f3660fb83ee76222b1fa19d62908f2f5bcd55e96 kernel-rt-64k-core-5.14.0-687.56.1.el9_8.aarch64.rpm 50d91615b83f32fb747cb9df0b8735948d1146ecdd42ac51dae3e594249490c1 kernel-rt-debug-devel-5.14.0-687.56.1.el9_8.aarch64.rpm 5418a1ff856888d90512e1e1dce0192cbeefd1a8484ca8048158e40b2a804a90 kernel-rt-64k-5.14.0-687.56.1.el9_8.aarch64.rpm 59df3e21047cabe08f61522aca361591fa56cdebb677980bdbe7f72f49345aa3 kernel-rt-64k-debug-5.14.0-687.56.1.el9_8.aarch64.rpm 6cefebc171069a50f7d32dd206aa12d0d19710e6baa4fea8ca0c4b3d03ffbfa5 kernel-rt-64k-devel-5.14.0-687.56.1.el9_8.aarch64.rpm 724a62a4db74f73a4fd12cf14a5f10c0cd3f25096aebb250e5a0634427db9028 kernel-rt-debug-modules-core-5.14.0-687.56.1.el9_8.aarch64.rpm 730068bdf4eba9dbcbcd86c6d4c7b32d3aef2cb7641169b7ec80a25bdd53d6af kernel-rt-64k-modules-core-5.14.0-687.56.1.el9_8.aarch64.rpm 8f52dddeb2ac3ea12f63d4bd0fc8d03e84c5aaabec3857f126a8a203d57e7bc9 kernel-rt-devel-5.14.0-687.56.1.el9_8.aarch64.rpm 9442529798684fd7cd5a8233960bda9c82194f53c16e1a74bef18862e7c010c3 kernel-rt-64k-debug-core-5.14.0-687.56.1.el9_8.aarch64.rpm 9cc8e2a4a80fb382711e1e0a146deef05d377b177adc8a5c89d500e17e8e5e34 kernel-rt-64k-debug-devel-5.14.0-687.56.1.el9_8.aarch64.rpm 9e12a4ede52776b1b411f9497c6cc23d76787ac2a917a50c121098f1452cd004 kernel-rt-modules-core-5.14.0-687.56.1.el9_8.aarch64.rpm bc4ceaf9d1f1fb9199de99efa0e9fd04f36db3c2a59e583e5921f0c67396b7b0 kernel-rt-64k-debug-modules-core-5.14.0-687.56.1.el9_8.aarch64.rpm bf3f38d804b672edc23e7168a34756f3d1d7d516c9fdf7663bfe2819b68fe087 kernel-rt-core-5.14.0-687.56.1.el9_8.aarch64.rpm c12c56ebd55c1f8249f16dac0ebe21efc83eff7c47727524e53ba377bcbc6698 kernel-rt-64k-modules-extra-5.14.0-687.56.1.el9_8.aarch64.rpm cbde4d2d3445b2d4d24d283343edc04011452cf0e59d6319efe86d6d321e5e88 kernel-rt-64k-modules-5.14.0-687.56.1.el9_8.aarch64.rpm d7ce22cdbe9b8eca1c3ee391d5455f9db552515533d286592de9cc0c828cd4b2 kernel-rt-64k-debug-modules-extra-5.14.0-687.56.1.el9_8.aarch64.rpm dd2dbdea9931293e1188e1d0ed407d0272c313220a1ec2ddf8e32c226116f08f kernel-rt-debug-core-5.14.0-687.56.1.el9_8.aarch64.rpm e003e51172a3c43c204408d2586ca4aa1037f49679d8ba92e748b87c2aad68b5 kernel-rt-debug-modules-5.14.0-687.56.1.el9_8.aarch64.rpm e8b8e80be53e15a59a1069c82c1431b0ad9a5a6d842d1d33773e46993af295e4 ALSA-2026:83156 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319) * kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011) * kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030) * kernel: wifi: cfg80211: use wiphy work for socket owner autodisconnect (CVE-2026-68404) * kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377) * kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140) * kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409) * kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288) * kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262) * kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320) * kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641) * kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705) * kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985) * kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526) * kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CVE-2026-81003) * kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036) * kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207) * kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-modules-core-5.14.0-687.58.1.el9_8.aarch64.rpm 13be2e8e3c952a43c49e6c70956c4e6298e0d922ad59fcc60d3cc1447804f6b4 kernel-rt-debug-modules-core-5.14.0-687.58.1.el9_8.aarch64.rpm 1c13f5fffe1c2b9249f85a486a7ca3b6d4291737c322814d757b251c5cee84ef kernel-rt-5.14.0-687.58.1.el9_8.aarch64.rpm 1dd29724e062f4811d4fb1d0eaf5a41920ba41bdab5fa9857a8efdf1c69c891f kernel-rt-modules-extra-5.14.0-687.58.1.el9_8.aarch64.rpm 1fb7bdce616edf260f437555d9c5fe7ce5750a51e54544e1cb30a62bb56cb326 kernel-rt-64k-modules-extra-5.14.0-687.58.1.el9_8.aarch64.rpm 3a37d5ab299ff0bafbe977fb178c6abb1d356dc5825807ec63bd07f811d887e4 kernel-rt-debug-devel-5.14.0-687.58.1.el9_8.aarch64.rpm 3cf9b8dd4b01d2a53b3208039000e8a49d138c38e8a156164e7a8676132bef4d kernel-rt-64k-debug-modules-extra-5.14.0-687.58.1.el9_8.aarch64.rpm 4778784c3521e7043c890fd1040321d60f8cded52aa5e5588c03454b6eb8d21c kernel-rt-64k-debug-core-5.14.0-687.58.1.el9_8.aarch64.rpm 76f8aed5fecd458c870fd9cefbd1b8b4247bcfecf04254fbebcf2809fff3e73c kernel-rt-core-5.14.0-687.58.1.el9_8.aarch64.rpm 788bd2c71531b1f25c4f4dcd9f8db3d5f1f4bd2f1dcfe46c95043a45083f852f kernel-rt-64k-modules-core-5.14.0-687.58.1.el9_8.aarch64.rpm 889069a8039883b6ebdafa5438c87a5a903378f7d1ff7c1b93b989aea98e100f kernel-rt-debug-modules-extra-5.14.0-687.58.1.el9_8.aarch64.rpm 8f4432e0ff143f8bfde34a732e9481171909aff12ded982e07721401393787cf kernel-rt-modules-5.14.0-687.58.1.el9_8.aarch64.rpm 9533eb755cd11f078f2905b1ffd2b5257f310d53437e6994622cd37a6dffc83e kernel-rt-debug-5.14.0-687.58.1.el9_8.aarch64.rpm a0393ab13e6e890bdecf0d0a2560b9ce6833d47390f25922b48b9164ad8f3846 kernel-rt-64k-debug-modules-5.14.0-687.58.1.el9_8.aarch64.rpm a0b4214a5fcf25dad23172764b54d720650f48731a45bb14e37d871d76dc7a99 kernel-rt-64k-devel-5.14.0-687.58.1.el9_8.aarch64.rpm a48925683a51f011e73ea7772563a2a83dc9b6883398dd854cd2b1cf75753cf2 kernel-rt-64k-debug-modules-core-5.14.0-687.58.1.el9_8.aarch64.rpm addbcea258f9378afa5856f0bbd4287a9b59ad4ec43fe070fd41c3318aa44e79 kernel-rt-64k-debug-devel-5.14.0-687.58.1.el9_8.aarch64.rpm b9e674d29f664cc7b4bf2eb4ccded710671f689f793508e30371e37607be5fe7 kernel-rt-64k-debug-5.14.0-687.58.1.el9_8.aarch64.rpm bdcd7290579c6f5ef6087a74397d22d11e3288eb6e80d6b346f80aa575308835 kernel-rt-64k-5.14.0-687.58.1.el9_8.aarch64.rpm d237e0b239df7d719a7c9efb8f804136f49d59c0d2ac9bdc375d59c4a4d911d3 kernel-rt-devel-5.14.0-687.58.1.el9_8.aarch64.rpm d5b80bebf73459c81ad803f4a2b97024ca23825e79c30055c6e69ac754886de0 kernel-rt-64k-core-5.14.0-687.58.1.el9_8.aarch64.rpm df43100d77f1650c3b3bb46d3b651a55237b9c8b1714f890bd8f362d1291e43d kernel-rt-debug-core-5.14.0-687.58.1.el9_8.aarch64.rpm f4b575387328dc82217453e6334fbe2f7ad5cc77258be106cfe5119c7bf3707a kernel-rt-debug-modules-5.14.0-687.58.1.el9_8.aarch64.rpm f85118c80aef792a977c1e45b77aaa21aee7783e818f9e8d2a3bbb2dbb0cbcd8 kernel-rt-64k-modules-5.14.0-687.58.1.el9_8.aarch64.rpm fdb48ebc4fe6bbe60076e70e269583af8fe4006c2c02920108fd4594030dcdef ALSA-2026:86033 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935) * kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899) * kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032) * kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024) * kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962) * kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974) * kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (CVE-2026-64114) * kernel: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (CVE-2026-64572) * kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509) * kernel: Linux kernel: Denial of Service due to incorrect GSO state handling in network fragment reassembly (CVE-2026-80590) * kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633) * kernel: perf: Fix addr_filter_ranges lifetime (CVE-2026-93817) * kernel: kernel: strparser: use-after-free via msg_timer_work rearm after strp_done() cancellation () * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260) * kernel: ipv4: validate checksum_start before completing checksum (CVE-2026-99999) Bug Fix(es) and Enhancement(s): * Batch: z-stream xfrm - almalinux-9.8.z (NST-Core-26W38) (JIRA:AlmaLinux-256697) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-debug-modules-5.14.0-687.59.1.el9_8.aarch64.rpm 0039bfc8159f8dc8b2272e3dc5ba628c530d9a455c32f1ac8a7f1ad2cf281ff8 kernel-rt-64k-modules-5.14.0-687.59.1.el9_8.aarch64.rpm 082b1a3763f3b5106d1d2457e1c861f523794b6885f25210b91a8f7c401b99ee kernel-rt-64k-core-5.14.0-687.59.1.el9_8.aarch64.rpm 14aadef9fdc7e56884dd6d657072ff9cd46c87537147466331febc93b102468e kernel-rt-64k-debug-core-5.14.0-687.59.1.el9_8.aarch64.rpm 1d6e7ff6fd2c326ae1ec73556d1b90e8c3fddc263c2a26f3fd0b8289cbee8070 kernel-rt-64k-debug-modules-extra-5.14.0-687.59.1.el9_8.aarch64.rpm 1d98a0d6f4de37112b6e0d5306292a649f41596a66a8c92793fa72c1b3b9ad12 kernel-rt-64k-devel-5.14.0-687.59.1.el9_8.aarch64.rpm 2142c6b0fb24c44521072847601152c8f186a89609ab2dfd3934a0258ad3caf6 kernel-rt-debug-core-5.14.0-687.59.1.el9_8.aarch64.rpm 4788b74d7d4fe67a13f8e138a3a0ea47ec7e5ba41a9037266930226b6df8e35c kernel-rt-modules-5.14.0-687.59.1.el9_8.aarch64.rpm 4bbd4ddf7d800c126c009091042d79fd1a57c4b30fbccb478bd30d0eae3c0004 kernel-rt-debug-devel-5.14.0-687.59.1.el9_8.aarch64.rpm 4ed9da69e272303a229d6066b19215f23fc690804f273ca3ef235c8ad400ce09 kernel-rt-modules-extra-5.14.0-687.59.1.el9_8.aarch64.rpm 6e728bc50e8ebfc564ecfca3c0fd4fd8554d7e34400478dd25c37f700b52394e kernel-rt-devel-5.14.0-687.59.1.el9_8.aarch64.rpm 734a6b83590e45a03e1fe7b3f4b981e5bcd7c2499d77e7d5e2786b18abf9d1b6 kernel-rt-core-5.14.0-687.59.1.el9_8.aarch64.rpm 7ae9f10ef26549dc6519427eb301e36ac2c00977060d6fb8e963fe0377804fab kernel-rt-64k-modules-extra-5.14.0-687.59.1.el9_8.aarch64.rpm 8031a84f7fd1d937d93d2d4fd8ec14a80e2a1af484265f4e76722c5afb28e367 kernel-rt-debug-modules-core-5.14.0-687.59.1.el9_8.aarch64.rpm 85f17faf86cae810b966b9e6b96c24b5e8c4ae58135b64cc891b1f344c6b35ce kernel-rt-64k-debug-modules-5.14.0-687.59.1.el9_8.aarch64.rpm 960b40fa5bf0c4b8e62eb8e82c5fd857d0f1b4c850f57bc04cdd652477f296c1 kernel-rt-5.14.0-687.59.1.el9_8.aarch64.rpm 9f629c102f8cbf54f083ec7d9c0a8a27ae04a0e024d46bb8b1d7e941d607bdc3 kernel-rt-debug-5.14.0-687.59.1.el9_8.aarch64.rpm c647fc9e8580e6b927341fd6f4b0d10ab9e667c526b04abeadb86378745b0980 kernel-rt-64k-5.14.0-687.59.1.el9_8.aarch64.rpm c658b3d2a140bcec9b36b23f4fec7c5bf7a1aff42c5f98217d84ba4a070ef961 kernel-rt-debug-modules-extra-5.14.0-687.59.1.el9_8.aarch64.rpm c8bd701620c71ded74059ad18c2925618670080b6fdfdfa7b9449b67874d2586 kernel-rt-64k-modules-core-5.14.0-687.59.1.el9_8.aarch64.rpm dc61178eeb55e82a1c927d88e664d2ec9f7a9b3b9bad851e15aa714bb65dcd6d kernel-rt-64k-debug-5.14.0-687.59.1.el9_8.aarch64.rpm e0ef3b87c846934869c2f5d8f76b7c07ddf2335828da7745bcd49bc81310b3fc kernel-rt-modules-core-5.14.0-687.59.1.el9_8.aarch64.rpm e52dc8505b6f175cb0b486a88f7c898d664c01d8df323d8d53c8b21c524992d2 kernel-rt-64k-debug-modules-core-5.14.0-687.59.1.el9_8.aarch64.rpm ee0af9b5992adab63ae59d5295ada879516cdaca5ea248c0b0f8535e09ea4954 kernel-rt-64k-debug-devel-5.14.0-687.59.1.el9_8.aarch64.rpm f92e5f2b279ad2b33461132c464fe41e6fd75ade4b35dd0a1e9adf2a8644ccee ALSA-2026:86970 Copyright 2026 AlmaLinux OS 0 1 Moderate

cockpit-machines security update

Cockpit component for managing libvirt virtual machines. Security Fix(es): * cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments (CVE-2026-92768) * cockpit-machines: cockpit-machines: Sensitive Data Exposure of guest credentials via JSON argument in process list (CVE-2026-92747) * cockpit-machines: cockpit-machines: Information Disclosure of RHSM Offline Token via Process Arguments (CVE-2026-92745) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default cockpit-machines-348.1-1.el9_8.noarch.rpm e1b2a04fc6678778e67aecaf3383310a09c8859aa8532ef1ba59042ce682ef4d ALSA-2026:87805 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CVE-2025-22063) * kernel: calipso: Don't call calipso functions for AF_INET sk. (CVE-2025-38147) * kernel: ALSA: hda/cs35l41: Fix firmware load work teardown (CVE-2026-64481) * kernel: ALSA: seq: close a re-opened queue timer in the destructor (CVE-2026-68202) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299) * kernel: ovl: check access to copy_file_range source with src mounter creds (CVE-2026-68448) * kernel: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CVE-2026-80530) * kernel: xfs: bounds-check buffer log item's dirty bitmap (CVE-2026-80536) Bug Fix(es) and Enhancement(s): * RTLA segfaults on freed memory access on double SIGINT [almalinux-9.8.z] (JIRA:AlmaLinux-193029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-devel-5.14.0-687.60.1.el9_8.aarch64.rpm 048f873f2de29bd0b6c1b44d86a1904ae488d2cec0c355a434d8766a7ee5db5d kernel-rt-debug-core-5.14.0-687.60.1.el9_8.aarch64.rpm 32cb3afb0fcd8fbe9be18d9deaec53fc2f0816e520a3e06a1eed071da74e31ab kernel-rt-devel-5.14.0-687.60.1.el9_8.aarch64.rpm 32e7af8317b71c631f4ab610c68e06f879cff78040d820afaf11803dc2605bf0 kernel-rt-64k-debug-modules-5.14.0-687.60.1.el9_8.aarch64.rpm 33869cc379155223ab2cfd55be6048f1a2d2bf9a196ec38ccf7ac3c1b2e3e6b0 kernel-rt-64k-debug-devel-5.14.0-687.60.1.el9_8.aarch64.rpm 4227beaf80396c01017dfb8cf28d988dc9f1d165b2f59e014d3aeaec8f1fbe6c kernel-rt-64k-debug-modules-core-5.14.0-687.60.1.el9_8.aarch64.rpm 42d440e8e5fd584c240e7becb4c85acc40b9c3c21a467230c1a01e10dfe9f8a3 kernel-rt-64k-core-5.14.0-687.60.1.el9_8.aarch64.rpm 48bd535e26f8ea21414bb0d1b8daf2d37dc0e0fb7d31ba32a63d14878241c5ce kernel-rt-64k-modules-core-5.14.0-687.60.1.el9_8.aarch64.rpm 4eaea8e1230fa9eaa398043bbe6dc8b59330638c8f2656ecb0fd4a7bfdb8aea3 kernel-rt-debug-modules-core-5.14.0-687.60.1.el9_8.aarch64.rpm 52bff7b7695c3419b6cc6c6a3ff1da95d3ddd83c029193a938d23887d8baa7dc kernel-rt-64k-debug-5.14.0-687.60.1.el9_8.aarch64.rpm 52c411c14c93be413d6a5f3aa59180d53ebc5940df6cc66d42259679d2b1a275 kernel-rt-64k-modules-5.14.0-687.60.1.el9_8.aarch64.rpm 57748398de5c563d2fad428bf1074647ce224717805a85a06737d17f0ca5092a kernel-rt-64k-modules-extra-5.14.0-687.60.1.el9_8.aarch64.rpm 606bcaa23fcbf277b0de9e1ee6819e1f324c3750205f907d8b78ca9d9e4047f8 kernel-rt-core-5.14.0-687.60.1.el9_8.aarch64.rpm 647cf6c7d7ce02d0f141be59e1f38247f917c3845f605b636285c370a3015770 kernel-rt-5.14.0-687.60.1.el9_8.aarch64.rpm 6889cdbadc8bb142edcbef94623e70e273ab3b75c3da2ebddf1d1404b2a1bc1c kernel-rt-modules-extra-5.14.0-687.60.1.el9_8.aarch64.rpm 73dc8e8fd4286f2ea33901b6a8d82638648821f5aa7167dfe382c545b441c272 kernel-rt-debug-modules-5.14.0-687.60.1.el9_8.aarch64.rpm 779d5ce03050321d3f4a32fbd6de7a84f168d445a0388f954fcea757ccce62eb kernel-rt-debug-devel-5.14.0-687.60.1.el9_8.aarch64.rpm 78454daf7088330ec6954054f44bb2fdfdd6ea5f3b0f21a18f168f8c8ddc471e kernel-rt-debug-5.14.0-687.60.1.el9_8.aarch64.rpm 991321900e9369f18b46e83c1fa05ff74f6be6efb2fe37002b3d0e20172e817c kernel-rt-modules-5.14.0-687.60.1.el9_8.aarch64.rpm a03edc3de6ceb269ff155c60525fca4c6745e8c9c952502a1d5562eb862262de kernel-rt-64k-debug-core-5.14.0-687.60.1.el9_8.aarch64.rpm bafa0f0311a43ebe5ecc6584fdda9c148dd03e2739b072f75dde55557e37c5ea kernel-rt-64k-debug-modules-extra-5.14.0-687.60.1.el9_8.aarch64.rpm c2498261927af7ebedbbb8d43cc2c3e59fd61363a00a906e573047eca887c4f1 kernel-rt-debug-modules-extra-5.14.0-687.60.1.el9_8.aarch64.rpm c905659e404e9089d0fb1973fd1b771f6390a1e5dcbaee6a04418c14440f820e kernel-rt-64k-5.14.0-687.60.1.el9_8.aarch64.rpm cf7312ab8186c67454b6464a1730922113831ead0511ce45d234db76010283e1 kernel-rt-modules-core-5.14.0-687.60.1.el9_8.aarch64.rpm d784b3cf6e53845f83f8e9cb45ea0fd90767384c81425eda933d8bfd9ba2ad23 ALSA-2026:8921 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-debug-modules-extra-5.14.0-611.49.1.el9_7.aarch64.rpm 03ada887f31ffc62de1af53c6c792c1e2c88b9608ed063af4412cec39121e4de kernel-rt-debug-modules-5.14.0-611.49.1.el9_7.aarch64.rpm 072d7ba19d429725956fdfec5f1b28656155951e9a9b69840214691f082d237a kernel-rt-64k-core-5.14.0-611.49.1.el9_7.aarch64.rpm 0c0b4df69526c8a4098ea139141522a2cdcb85e94691cde3b017fbb42d58f4b2 kernel-rt-modules-extra-5.14.0-611.49.1.el9_7.aarch64.rpm 0d6ec78da09ec1713619c366bff8a23599349549825a4f0ea89677d184aa3e27 kernel-rt-5.14.0-611.49.1.el9_7.aarch64.rpm 206be04246e935db1d2aa6dce6211f6c9139882550e0a8084e25ca0d27164643 kernel-rt-64k-modules-5.14.0-611.49.1.el9_7.aarch64.rpm 3c64b2e3ba574e13f1b6098f74dc67c67846681be94b038fc2471a40406763b1 kernel-rt-64k-debug-modules-5.14.0-611.49.1.el9_7.aarch64.rpm 3dfe91fd43ccd88502adad8b52be76f401a407ce2ca9d3edfaf8affbd5576bff kernel-rt-64k-debug-5.14.0-611.49.1.el9_7.aarch64.rpm 41fc187563613e6363a3a5d4239b39d7ba3c837f910d85d96de084af900d0c75 kernel-rt-debug-core-5.14.0-611.49.1.el9_7.aarch64.rpm 4b538439934a1e8c6c2f0b5c962a3dba52d7ba73c74eed3bdc678a96804fa043 kernel-rt-64k-debug-modules-core-5.14.0-611.49.1.el9_7.aarch64.rpm 577587b09e4e8eecd29fb987692717f3eb15b878626ac8e116063d2dc9571036 kernel-rt-debug-modules-core-5.14.0-611.49.1.el9_7.aarch64.rpm 5ff478903a3509fbfdaf0d3b0c4a4322a9589ea5a0a5f4bfb2209bf01763d48f kernel-rt-64k-modules-extra-5.14.0-611.49.1.el9_7.aarch64.rpm 660a8300475d0862829cda20b13edd660ab20a3adf4fa11024a5619d65078481 kernel-rt-debug-devel-5.14.0-611.49.1.el9_7.aarch64.rpm 88eec15451a88fc81eff86c6129d9588b8eb89d6c01c6f54d9b476ff27b8d2e1 kernel-rt-modules-core-5.14.0-611.49.1.el9_7.aarch64.rpm 9751a14cf33b7fa7bf19dfd7505884bff0ca83edfb1b0eaa5137d55cbf4fc255 kernel-rt-core-5.14.0-611.49.1.el9_7.aarch64.rpm 9931e4539caf1143fbabd8b635c1e9599ca505f355173fd939a4caebe25e29b1 kernel-rt-64k-modules-core-5.14.0-611.49.1.el9_7.aarch64.rpm b29b3f2e321d6c43b278ef9b2bfdeb60112053c1747a0ccce6db9122e60cd1e6 kernel-rt-64k-debug-modules-extra-5.14.0-611.49.1.el9_7.aarch64.rpm be5647ee66f1db67ca5100db61e1cd56b3970a23b653f9a3447a706fe71e68ce kernel-rt-64k-5.14.0-611.49.1.el9_7.aarch64.rpm c372dcb6f7dd935ca3f39a9cf1b0bbaf034bd26cebf8a3824ec6b52832c29b38 kernel-rt-debug-5.14.0-611.49.1.el9_7.aarch64.rpm c81d16e8d2eb1a5fa202dfae1cab04e71a2144f3c6b7d96e1d6c6c9da827b646 kernel-rt-64k-debug-core-5.14.0-611.49.1.el9_7.aarch64.rpm e5cba9e38c90cb446c22a5c9d363a5163617af9763e32cc12421b051d1200f04 kernel-rt-64k-debug-devel-5.14.0-611.49.1.el9_7.aarch64.rpm ebe52622bf7fc4089f439274c021f38986adc32788b381aa9fc12bd5d0ec47ef kernel-rt-64k-devel-5.14.0-611.49.1.el9_7.aarch64.rpm ec65b75feca0c07cd808c743cad25a3a664d216b129048b9782a515a51029466 kernel-rt-modules-5.14.0-611.49.1.el9_7.aarch64.rpm ef111b83c8bf1721a58ff6906df9dd3b93661daf80fc486b48858af05eeab649 kernel-rt-devel-5.14.0-611.49.1.el9_7.aarch64.rpm fa4d27514af08da9c659ffa11ae9ef11c732c497aa08286ede403dafcc611ed2 ALSA-2026:90365 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: udp: Deal with race between UDP socket address change and rehash (CVE-2024-57974) * kernel: fuse: re-lock request before replacing page cache folio (CVE-2026-53388) * kernel: net/handshake: hand off the pinned file reference to accept_doit (CVE-2026-63979) * kernel: net/handshake: Drain pending requests at net namespace exit (CVE-2026-63978) * kernel: fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266) * kernel: net/handshake: Take a long-lived file reference at submit (CVE-2026-64523) * kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476) * kernel: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CVE-2026-72242) * kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CVE-2026-74515) * kernel: usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CVE-2026-80824) * kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CVE-2026-89638) * kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure (CVE-2026-89777) * kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262) * kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222) * kernel: netfilter: flowtable: hold reference on ct until flow is released (CVE-2026-98320) Bug Fix(es) and Enhancement(s): * kernel panic at __crypto_xor+0x2 after a number of out-of-bounds read and use-after-free read (JIRA:AlmaLinux-257205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_8_default kernel-rt-64k-5.14.0-687.61.1.el9_8.aarch64.rpm 0584424da7e767417fd3b8d46b8d37ad7326825c479d9fa1f4f6b9439f55c7d8 kernel-rt-debug-core-5.14.0-687.61.1.el9_8.aarch64.rpm 0b9186367fd58cb26782ad091b7a2d1ac558c72066bbea51b46d918cf902963f kernel-rt-debug-modules-5.14.0-687.61.1.el9_8.aarch64.rpm 109af431be934ad3f410038443032adc6304e40ce07c2da049dd77ac8578501f kernel-rt-64k-debug-modules-core-5.14.0-687.61.1.el9_8.aarch64.rpm 19a9d83eda30f7ca29451bebd7158d873f9d0adac2905555d5186ef3910570d9 kernel-rt-64k-modules-core-5.14.0-687.61.1.el9_8.aarch64.rpm 37da9f487f98da2f16f913cf13934bc06f8286cdaa4f8e69ad29a02f16371b6a kernel-rt-core-5.14.0-687.61.1.el9_8.aarch64.rpm 3cb96e8b9c2e83c2b96a842f0dddc1ec846b880f570c392ba41ba59f1d5cfc32 kernel-rt-modules-5.14.0-687.61.1.el9_8.aarch64.rpm 4565008455ba7f8337f3a0527a50160a93780bbd5449133d957a6224060cd8a7 kernel-rt-debug-devel-5.14.0-687.61.1.el9_8.aarch64.rpm 4d9e5a92ed0114dc2349868d760446787909eb0dcd3d6b1710e5f4655a7ed5cd kernel-rt-debug-modules-extra-5.14.0-687.61.1.el9_8.aarch64.rpm 568cb203ad4cd34d89d0d690df39e217286c339df70e66036903f507d5f3b556 kernel-rt-64k-modules-extra-5.14.0-687.61.1.el9_8.aarch64.rpm 5deb5cc870caa6d759e1c345c402d05b7ffa6ec01aad693fe38bb3b3aa52b7cd kernel-rt-debug-5.14.0-687.61.1.el9_8.aarch64.rpm 7aeac36fb248b965d0f6a3bf5bcd7709ebbb213f574a463cd01f203319efba4f kernel-rt-64k-debug-5.14.0-687.61.1.el9_8.aarch64.rpm 8030768c17b4b1f3cedecc2eb82a62294c65251da593bde13a191c40fa8fe2bb kernel-rt-debug-modules-core-5.14.0-687.61.1.el9_8.aarch64.rpm 86b4ae0036d053cb9d94aed587f70b351c0dae1d0a28ce88515725a5502af484 kernel-rt-64k-debug-modules-extra-5.14.0-687.61.1.el9_8.aarch64.rpm 8dfa372b413559d2621cfa8bc22af845bcfc4f7aef33d7f84624fa369d0f4a3c kernel-rt-64k-core-5.14.0-687.61.1.el9_8.aarch64.rpm 966cec42df006af72b804e101e40f14f075823398bd350388d0ad8a45ee56233 kernel-rt-64k-devel-5.14.0-687.61.1.el9_8.aarch64.rpm c0001192efb6904eb0971d693e5a2e62ed8c0488fd219773b9dfe62801e0c984 kernel-rt-64k-modules-5.14.0-687.61.1.el9_8.aarch64.rpm c4e7696bbe6c890e69e436bc3e1fa7046aad79d9e4316c57c680a68c526e3917 kernel-rt-devel-5.14.0-687.61.1.el9_8.aarch64.rpm c99356861befc0cae1ac6183466160f9ea20da43bb6ba5dbf4e4fa57ac7cfdcd kernel-rt-5.14.0-687.61.1.el9_8.aarch64.rpm ccedd2732f76a75e8bbe9dc84bb92a2fa0e1e4a37e82a38b34f04429ffbf056d kernel-rt-64k-debug-devel-5.14.0-687.61.1.el9_8.aarch64.rpm d4677dc2d94fc7f8a6c6bf6117034ef784d91d19ced84e94b4bab50dd2a01d69 kernel-rt-64k-debug-modules-5.14.0-687.61.1.el9_8.aarch64.rpm d574c814b5896b8002907f59c4f81a1a946e88e043fa58a2beb66894eaf00e8e kernel-rt-64k-debug-core-5.14.0-687.61.1.el9_8.aarch64.rpm db8ad36b2511e8f8762a1882fecf749ade0cd5a2b9c51fad56c6b25e2f68ad3f kernel-rt-modules-extra-5.14.0-687.61.1.el9_8.aarch64.rpm f54d3a76bff6b204b6745c03190d85274950d0090fae82b09d72407703db6253 kernel-rt-modules-core-5.14.0-687.61.1.el9_8.aarch64.rpm fb78a1e08bc6083fd78d86a38c2bdaccd0aabd04d4b771d0e40193ee10c9aac1 ALSA-2026:9693 Copyright 2026 AlmaLinux OS 0 1 Important

java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): * JDK: Enhance crypto algorithm support (CVE-2026-22007) * JDK: Improved Arena allocations (CVE-2026-22008) * JDK: Improve Kerberos credentialing (CVE-2026-22013) * JDK: Enhance Path Factories Redux (CVE-2026-22016) * JDK: Enhance Zip file reading (CVE-2026-22018) * JDK: Enhance certificate chain validation (CVE-2026-22021) * JDK: Updating FreeType 2.14.1 (CVE-2026-23865) * JDK: Enhance TLS connection handling (CVE-2026-34282) * JDK: Enhance key generation (CVE-2026-34268) This release also updates a number of third-party libraries included in the JDK. The libraries themselves are affected by the following CVEs, but this is not a statement that the JDK itself is affected: * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740) * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) Bug Fix(es): * When copying files, OpenJDK 25 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 25 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169939, AlmaLinux-169937) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default java-25-openjdk-crypto-adapter-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 173f48dd6a2b321b4b2d10db4902fa6c145effbbf5eaf04e9745ba5432615445 java-25-openjdk-crypto-adapter-slowdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm 9968c1f50b601d803ba1d73b9a3624738c9b26d67e36e2a0a1f08fb95f97267f java-25-openjdk-crypto-adapter-fastdebug-25.0.3.0.9-1.el9.alma.1.aarch64.rpm d2bf8f23e0dc5bb38979d9d56c2d848480bf2bab757a9149697f472b32de67cb ALSA-2026:A002 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-64k-debug-modules-core-5.14.0-611.49.2.el9_7.aarch64.rpm 00583fc0ab00f84235f9864ea56cb886bf2b9027e9afa719f9a882ad3a198559 kernel-rt-debug-modules-internal-5.14.0-611.49.2.el9_7.aarch64.rpm 0948effa14c8b34c4c2ea8059d9f12c536c2952a234c5e7f32cfbdc421f32042 kernel-rt-debug-modules-5.14.0-611.49.2.el9_7.aarch64.rpm 16139f7f581da44a8acd154aa732c69218561084a3c5d48331bd7bd4000dab29 kernel-rt-debug-modules-partner-5.14.0-611.49.2.el9_7.aarch64.rpm 33a6c88157445f8fbdd4eeeb4d935265dfb03ceb554fadf62615c35a53a68a99 kernel-64k-debug-modules-internal-5.14.0-611.49.2.el9_7.aarch64.rpm 35db6b4e4182c31235045ff06c2ddfe402354807324091f1152709c0c185d313 kernel-rt-64k-modules-partner-5.14.0-611.49.2.el9_7.aarch64.rpm 366c83bc974bd3a5355537cf85394e1fcbc558649bdb75209ae6105a2173dff8 kernel-rt-64k-devel-5.14.0-611.49.2.el9_7.aarch64.rpm 3912cd6c79ab86720d26642934c82cd913a2cbab54a6c2ad43477708bde228ba kernel-rt-modules-partner-5.14.0-611.49.2.el9_7.aarch64.rpm 3bd082d293ededde4c57c391cc7810866beb4c63d3376ca7999b0c127b1d74ae kernel-rt-debug-5.14.0-611.49.2.el9_7.aarch64.rpm 42bd20808d1d5f9f2df94e3850994f29f5a91882ea93d97adb9cea6d301b3d2c kernel-rt-debug-core-5.14.0-611.49.2.el9_7.aarch64.rpm 480e0196fb67e68381736f12788865cbb3a8724283f0e4dfdf42da1d354ed113 kernel-64k-modules-internal-5.14.0-611.49.2.el9_7.aarch64.rpm 4b567873d0c8edffa9cf566735a9f26f4cf55096084fae6304bc01fd308e6bb8 kernel-rt-64k-debug-core-5.14.0-611.49.2.el9_7.aarch64.rpm 517734ac844403eeffbf4bc4c571083d84100a4201a458de0cde71bac1b0db45 kernel-64k-debug-modules-partner-5.14.0-611.49.2.el9_7.aarch64.rpm 5256a512e4cf903d246be643cac9db58fdad9c51914ba0fef0df2b6169b0f1b8 kernel-debug-modules-internal-5.14.0-611.49.2.el9_7.aarch64.rpm 53e3a13f3bae848a726cf205b6bccd9fd9c2184b6eb4504639153d175f2e87cb kernel-rt-5.14.0-611.49.2.el9_7.aarch64.rpm 59a363efeb690f2766e469a07d78ce7aaf07701a39e41a30fc1898551009592b kernel-rt-64k-debug-modules-partner-5.14.0-611.49.2.el9_7.aarch64.rpm 662618a34e24c75aff68c9ac2914bd48c9dca6764747ca59f861693de52591d7 kernel-selftests-internal-5.14.0-611.49.2.el9_7.aarch64.rpm 6a1135db5600bbd3962c5cbb54df92707cfc4b57226ba9a8f728cc83b0c02a7e kernel-rt-64k-debug-modules-extra-5.14.0-611.49.2.el9_7.aarch64.rpm 6de79172da785046be03922b710df3ef52f57c7cf23c871adee3a426a90f96fa kernel-rt-64k-debug-modules-internal-5.14.0-611.49.2.el9_7.aarch64.rpm 6e5f12fb1bc33d64ab8701f2b23bd58f448ad28ac68fbad051d3297930f8530e kernel-rt-64k-modules-5.14.0-611.49.2.el9_7.aarch64.rpm 71a501777a2d9c20db3e8d747b900e049a3647a1d63e04ef75562db86aeb745a kernel-rt-64k-debug-modules-5.14.0-611.49.2.el9_7.aarch64.rpm 725d87cedc9cf2d1617f57344e91f1e9c0feca234e216b9382771f1924d71035 kernel-rt-64k-debug-devel-5.14.0-611.49.2.el9_7.aarch64.rpm 831810b5f93f891e81ea65b73c7a04b587c051a83f90af9480bf804af044ca38 kernel-rt-modules-5.14.0-611.49.2.el9_7.aarch64.rpm 871eb76c5c68c69975cd27d7828b29cd04d8724525896f65c2fe1730a85130ca kernel-rt-debug-devel-5.14.0-611.49.2.el9_7.aarch64.rpm 890df5a6d3025a5bbcfb624523203f262ae14ce160cc994fc12b203442f8bbae kernel-rt-64k-devel-matched-5.14.0-611.49.2.el9_7.aarch64.rpm 8b32f395dd95f36fc99880b943ad09a368db59abbb1a032bb4cd3ae20e0c8afe kernel-rt-64k-modules-internal-5.14.0-611.49.2.el9_7.aarch64.rpm 8f10e75ebbd98f6b2a8ced9db40dc508fc7a5a5a31e8c67ab71bb91ca8af7a42 kernel-rt-devel-5.14.0-611.49.2.el9_7.aarch64.rpm a21c8ef0c2010b26a3ea0b03083360d00ff38b7f8d4da216c97b44324485ae19 kernel-rt-modules-extra-5.14.0-611.49.2.el9_7.aarch64.rpm a37a82a584b26e9cc8313457d33e279cf1a65f650bd1fb89b62cc0d2d8a6dc37 kernel-rt-core-5.14.0-611.49.2.el9_7.aarch64.rpm a5fe08572c11a7eb3483ea35923e66f2fd6140370fd4e7c11479cc03414588f1 kernel-rt-64k-modules-extra-5.14.0-611.49.2.el9_7.aarch64.rpm b683b8ee0514d9a81e910f90fe9a94debbff9006b0c7a196486e4a11df92c548 kernel-64k-modules-partner-5.14.0-611.49.2.el9_7.aarch64.rpm bbbb204279a336ef4efe29b6411e790cb326170aa49229e6c5b74c6c0d76aca2 kernel-rt-64k-5.14.0-611.49.2.el9_7.aarch64.rpm bd0bc38aaa870b15d0098a9c5b832ba5dce317eb9e60d31310bec593a193b83a libperf-devel-5.14.0-611.49.2.el9_7.aarch64.rpm c0dceefd09cc679e586101a7a0531d1f74e9dd3caaa58ba7bcb6be1e4c4d1bc6 kernel-rt-debug-modules-core-5.14.0-611.49.2.el9_7.aarch64.rpm c14ab86a9306be8056a96145d27876c006cc8784be86773105a22dda76f98f1b kernel-rt-devel-matched-5.14.0-611.49.2.el9_7.aarch64.rpm c570fe7611b26955a43717624b016137d1e717bf672859e531a8521513052f45 kernel-rt-modules-internal-5.14.0-611.49.2.el9_7.aarch64.rpm cbb0e31ba0045a56fa246b8c10aa477866aca32211a2ef6eb8cb7b593af4cd03 kernel-rt-64k-debug-5.14.0-611.49.2.el9_7.aarch64.rpm cdf64ebaf135775a18eea294f34631ab612dfc10cddf40eccc1d3e62bece6a97 kernel-rt-debug-devel-matched-5.14.0-611.49.2.el9_7.aarch64.rpm cf628d5bbba5ef374bcfbe51b5310eab0ec7782de62c5f3876d1b8b3964dcd26 kernel-rt-modules-core-5.14.0-611.49.2.el9_7.aarch64.rpm d6c2bf8247a0f3ee77c5f7ef1c1ef57c2f787c81de76c23a1e23ba138cee0839 kernel-debug-modules-partner-5.14.0-611.49.2.el9_7.aarch64.rpm dbe78d01d457b6a5feee2027bf527432507d5d5b8ab79b2c31ef0a6ad5ba86e7 kernel-rt-64k-core-5.14.0-611.49.2.el9_7.aarch64.rpm df84d9d4435cf110497c2abd4ffd0b8ecc642878486bf054c8f1a296b4b51b47 kernel-modules-partner-5.14.0-611.49.2.el9_7.aarch64.rpm e3267a345758a351552888d1c740968d584af8e70e29d6ab07f9b7a64ad3a6a9 kernel-modules-internal-5.14.0-611.49.2.el9_7.aarch64.rpm eb55071ec7de5c0b9c2d64462e16e486aa1146c93a02cc5be008554d13365fcf kernel-rt-64k-debug-devel-matched-5.14.0-611.49.2.el9_7.aarch64.rpm f8b41afbf9931f6a981a665abd4182a32cefe556e329fdbd67513601a9b66a7f kernel-rt-64k-modules-core-5.14.0-611.49.2.el9_7.aarch64.rpm fb6fc7a7e630dae37304fd4cad1a79cb2f99692cf4fe38cbb4c33a8c682eb045 kernel-rt-debug-modules-extra-5.14.0-611.49.2.el9_7.aarch64.rpm ff9daaa307a9d6215eb912abc824a9a5db7fea548d2e1551987572033ea34a62 ALSA-2026:A005 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-debug-modules-internal-5.14.0-611.54.3.el9_7.aarch64.rpm 03a3be520c9e25a96feb67dc08db6c629666b71fe99ea55e567e98a3ea44cf8b kernel-rt-modules-5.14.0-611.54.3.el9_7.aarch64.rpm 058645ed0e9f7f29f50e4443a5262a0a43abeb9522cbdb655c3b2f69fe6e42fb kernel-rt-64k-modules-extra-5.14.0-611.54.3.el9_7.aarch64.rpm 0b6204dda59bc8e8e92bb5ab73048cce4d04d9f3f332747823ff4e2685f662f7 kernel-rt-debug-modules-internal-5.14.0-611.54.3.el9_7.aarch64.rpm 14f6b618f9f90f0afc51c2f52f183d9a9aaaea4e8f82ec4efacf2c72f46ada0e kernel-rt-debug-devel-5.14.0-611.54.3.el9_7.aarch64.rpm 1cee02737c377a114bca76cfc99015798c41cd69c842dfe3c3adf1e0c3162c4c kernel-selftests-internal-5.14.0-611.54.3.el9_7.aarch64.rpm 23c9f656f748ffa2e67a9ce32f919015a3e65d8312347fcd72b52f719d180d1d kernel-rt-debug-core-5.14.0-611.54.3.el9_7.aarch64.rpm 2577d23df0fb1da4b69a9b406704fa24b52acdf1502baa75be2ea968ef8b101c kernel-rt-core-5.14.0-611.54.3.el9_7.aarch64.rpm 3ac279c06887e553a5886aeabdd774be2aae939b54d0afbd64d6142ebbd259a6 kernel-rt-debug-modules-core-5.14.0-611.54.3.el9_7.aarch64.rpm 45d326937ceaf82241387b685b640dfc168339c1c8ae43eca5cbe4656eee412b kernel-rt-modules-core-5.14.0-611.54.3.el9_7.aarch64.rpm 49cbc67f46fc5dcc99ac92e24b57e58b36ea12f806c3c2cfae99fa24c43d1a32 kernel-debug-modules-partner-5.14.0-611.54.3.el9_7.aarch64.rpm 4c97123d873a18557d92dd310196bb7041a378f8a9245488dd276d2e91575c1f kernel-rt-modules-partner-5.14.0-611.54.3.el9_7.aarch64.rpm 5321bf35494233b3eea658142e0af5c1d3ecb737de97d09b82e52b2574710933 kernel-rt-modules-extra-5.14.0-611.54.3.el9_7.aarch64.rpm 554bed6e52e0cb20109c97a5b3790bf5e46bfeb7fbb3baff089128b9566e31a5 kernel-64k-debug-modules-partner-5.14.0-611.54.3.el9_7.aarch64.rpm 55894cc9e92fa5ef55c973f601fa1438ee191746e42f00d762b6af58edcbad08 kernel-rt-debug-modules-partner-5.14.0-611.54.3.el9_7.aarch64.rpm 5f6f4d2fccf9f8b79f73b56a4561818a273ee0fca62fe4336fdf66c665c8e660 kernel-rt-devel-matched-5.14.0-611.54.3.el9_7.aarch64.rpm 62e56ebede463e2d658a83fbfff99681790add04aad756cd57e4090037e3ee00 kernel-rt-64k-debug-modules-partner-5.14.0-611.54.3.el9_7.aarch64.rpm 65d930962e3a9cc068bd538581d28dc6720bb425f1510e9ebc8e47a25d132e36 kernel-rt-debug-devel-matched-5.14.0-611.54.3.el9_7.aarch64.rpm 6a27b8add7a5c0035160a40af4d23fa5a3ce1edb2b70cfe902144c50e4108ed2 kernel-modules-internal-5.14.0-611.54.3.el9_7.aarch64.rpm 6bf49ccf9753d62a974dd4dfd40da0fa4c8fd0d169f696c5133017737faf15fb kernel-rt-64k-debug-modules-5.14.0-611.54.3.el9_7.aarch64.rpm 7d15d0fbed2977ac75536316f87cc111e5154496035785367faef974c30e87a6 kernel-rt-64k-debug-core-5.14.0-611.54.3.el9_7.aarch64.rpm 7e2066a0284c917ee649065a9c64db823de3242ac678a88c8dd4c35fd90f586f kernel-rt-5.14.0-611.54.3.el9_7.aarch64.rpm 7efc75a83a59f3e1fbc514c24887a0587ea8b6a07bbd7e7c8335bd813ca801e8 kernel-64k-modules-internal-5.14.0-611.54.3.el9_7.aarch64.rpm 866244926ddb52857874ea9386ca197e1e173f0bd08d865918e421af5aac15b9 kernel-rt-debug-modules-extra-5.14.0-611.54.3.el9_7.aarch64.rpm 877d9f5d0351bcb9542070a508b7279e099d4c0e1b04971b481e7f34cf159261 kernel-rt-64k-5.14.0-611.54.3.el9_7.aarch64.rpm 8bdf175eaba1f4adbe4f1799ca99f97336062a3772ca656ce7671d8f7a0f472a kernel-64k-debug-modules-internal-5.14.0-611.54.3.el9_7.aarch64.rpm 91424826a0e52bd22aad53bf694f33ef8f74dcda22dd577e61b6e9f10564367e kernel-rt-64k-modules-5.14.0-611.54.3.el9_7.aarch64.rpm 979b147409a7ac6b876769d11f9d2216e962b309009a2c3a7abff3d603559376 libperf-devel-5.14.0-611.54.3.el9_7.aarch64.rpm 9b567fc3b5639d04fffd2e5b03af355da870bfacaf491dcd36398b6e584131c4 kernel-rt-64k-debug-modules-core-5.14.0-611.54.3.el9_7.aarch64.rpm a0f6193f411bd914bba924c6e4deac74edb283c8a9b6ff6933740ff356d0a266 kernel-rt-modules-internal-5.14.0-611.54.3.el9_7.aarch64.rpm af2ce57c52c5013c6a844ee0ba113ff21434eeaeaf997c1d831a3ed83b7f2125 kernel-rt-64k-debug-5.14.0-611.54.3.el9_7.aarch64.rpm b3437d6beaf5092ea11bf8f0ed8c4f18b1ed5d6fdb845f0764d115633a7f1046 kernel-rt-64k-devel-matched-5.14.0-611.54.3.el9_7.aarch64.rpm b50df10d76a496ab78385adf95d1b0b7210d98051f932ce3a36eee47cd1ccc6a kernel-rt-64k-debug-modules-extra-5.14.0-611.54.3.el9_7.aarch64.rpm b91529eb235567dcf9297915fb77fcf412766eb227edeae4cabbf9285ed86fb9 kernel-rt-debug-modules-5.14.0-611.54.3.el9_7.aarch64.rpm cb4480635e5302b080498eaae9a601d88b6580cecd663af6c55420b2f5694a31 kernel-rt-64k-core-5.14.0-611.54.3.el9_7.aarch64.rpm cd446eed774e3c5256a12381d9a86084ee46c802394068c706107d24c704a096 kernel-modules-partner-5.14.0-611.54.3.el9_7.aarch64.rpm d4baf83375dc4553fb5eb7046ed8f1d7411382b5f8596a2344008f43882daa4d kernel-rt-64k-modules-core-5.14.0-611.54.3.el9_7.aarch64.rpm d535232b4148846b4c4e26ab1508ff6c1065fa3b5b12df1fe91c5e375ea01b81 kernel-rt-64k-devel-5.14.0-611.54.3.el9_7.aarch64.rpm d59fbb35c55a28b13a42f6a34c72778593b4af584ec6a026ebba8acab19f97ab kernel-rt-debug-5.14.0-611.54.3.el9_7.aarch64.rpm e494a60b18c3ea175e3feebe868461c456cc021b9990cd6fafe47beb814dcb32 kernel-rt-64k-debug-devel-5.14.0-611.54.3.el9_7.aarch64.rpm e617b54d50e0ccfbda0a285492649b8fb5c0043853cc6a800b03c7ea2f6215b3 kernel-64k-modules-partner-5.14.0-611.54.3.el9_7.aarch64.rpm e6e76c21c1591a9a425c9909db159568859234a793bf21f80b10d284b1204ad7 kernel-rt-64k-debug-devel-matched-5.14.0-611.54.3.el9_7.aarch64.rpm ee771dc51945c8c1ef10e0457a72039fc80449ad7ab12835224e48e83c1349ef kernel-rt-64k-modules-internal-5.14.0-611.54.3.el9_7.aarch64.rpm f1a3485b97d58cdcc69edabd3212f0de9bfc17e66d85af58cf7af954a53555d2 kernel-rt-64k-debug-modules-internal-5.14.0-611.54.3.el9_7.aarch64.rpm f6e172e4ca1563e464cc4a9bf9cc3551c6d047a681142af5d042402286e86332 kernel-rt-64k-modules-partner-5.14.0-611.54.3.el9_7.aarch64.rpm f875e5a30661db93a638c472de05694576c70bac0236720cf487f3e66ef13092 kernel-rt-devel-5.14.0-611.54.3.el9_7.aarch64.rpm f8e012da45a4d98f2a26a26c6bffe8d85daa66ad35767a5834be922df9ce9742 ALSA-2026:A009 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300) * kernel: ptrace: require CAP_SYS_PTRACE when task has no mm (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-9-for-aarch64-devel-rpms__9_7_default kernel-rt-modules-5.14.0-611.54.6.el9_7.aarch64.rpm 016baf8019d3439094e3b45e61c64d6ac15d967c49b05c775a986ea35c23cc1a kernel-rt-64k-debug-5.14.0-611.54.6.el9_7.aarch64.rpm 0c3e3294c6b6516bb78d2c216cac3892547e151fbf35cc75b1d1e07c7f880f72 kernel-rt-64k-modules-extra-5.14.0-611.54.6.el9_7.aarch64.rpm 15079ab785aca04cd0411c8041460212c3bfe5904927a052e445b6edf34d547e kernel-rt-64k-modules-5.14.0-611.54.6.el9_7.aarch64.rpm 1580b00659b455bbf9b24698f5a7dcc756f7062d8d5c932dd97bc1f026ad7d04 kernel-rt-debug-modules-extra-5.14.0-611.54.6.el9_7.aarch64.rpm 18360369f44758fd6feb5ee7d0a9f5b6a6914f1d1518d54c9fe4217997709285 kernel-rt-debug-modules-5.14.0-611.54.6.el9_7.aarch64.rpm 19caed880b59f22fe710cf8469fedcc23b58182eca89a1a5de9278329da99d84 kernel-rt-64k-debug-core-5.14.0-611.54.6.el9_7.aarch64.rpm 1b6edde4e6974ef1df79dfce3d153022fd609a845f7c5a41870d44e3c3452811 kernel-rt-debug-5.14.0-611.54.6.el9_7.aarch64.rpm 1ed9083e3817fee9d07aff46b64be63f7c9e7b80c6fcf45dca13ceb601aac290 kernel-rt-64k-core-5.14.0-611.54.6.el9_7.aarch64.rpm 1ff54c0f39101905e0174b5eb9c80e5259b521d584ab998103406d013e9b8ea0 kernel-debug-modules-partner-5.14.0-611.54.6.el9_7.aarch64.rpm 29656be8848799a2b7982de98b4d29c24bb094cc05fe882d38223c66db2d5b1c kernel-64k-modules-internal-5.14.0-611.54.6.el9_7.aarch64.rpm 298a14e1f8d08f04b94266b9e6a0ced150250fc454989d8916eccfd47026c7fe kernel-64k-debug-modules-internal-5.14.0-611.54.6.el9_7.aarch64.rpm 2a6a2483b9b558d9d26eda7b82d8a8cd2fd2b11c1b9c6633a0993a7757343fc0 kernel-rt-64k-debug-modules-internal-5.14.0-611.54.6.el9_7.aarch64.rpm 2cea1cbedeed751f6d8db1b21e452cc629590a5f9c6ee878bd6f807205ad214d kernel-rt-64k-modules-partner-5.14.0-611.54.6.el9_7.aarch64.rpm 2df5015e826e403c00602d8804c283301c1ec0070473fd00dd9eccb3657ca16c kernel-rt-debug-modules-core-5.14.0-611.54.6.el9_7.aarch64.rpm 384436d2d7abc733d694779873bc59104eba931748a77b5e28747b28e6f09768 kernel-rt-modules-partner-5.14.0-611.54.6.el9_7.aarch64.rpm 3e29cd008bc0c1486c71cf16db2fd82925a877dcff666340a5cc6ec954d66a21 kernel-rt-devel-5.14.0-611.54.6.el9_7.aarch64.rpm 46734f2818142247fb0e03158ce3406ebdf4c53117cb5dd71fb9556892b5248a kernel-rt-devel-matched-5.14.0-611.54.6.el9_7.aarch64.rpm 4aa5f582c61a3456f555d71656a2b2c747481a01b5cfe95771fbc0788c3b31f7 kernel-rt-64k-5.14.0-611.54.6.el9_7.aarch64.rpm 4b5d2bf9d111b1d9e256f6f844ac6c17ffa9a74d1d9b19de6ffcc32fd546c34c kernel-rt-64k-devel-5.14.0-611.54.6.el9_7.aarch64.rpm 55a3acb0525f4769cd3c4ca0cf28d34a77988df1e1aea13bf4c62f7ad0c360ca kernel-rt-64k-debug-devel-5.14.0-611.54.6.el9_7.aarch64.rpm 560b81b5c0eda3a2681f53017730cc34d4bc49e7e1f577c8c4889877ea36cd8f kernel-debug-modules-internal-5.14.0-611.54.6.el9_7.aarch64.rpm 697590303702c4e36159bcd43e351378eb6896fbc1eeff2f87d0258faa78ffa3 kernel-rt-modules-internal-5.14.0-611.54.6.el9_7.aarch64.rpm 6d0885b1e9fc2998210483cb5cdd492da97027f25bad1f700c161c0366161e94 kernel-rt-64k-debug-modules-5.14.0-611.54.6.el9_7.aarch64.rpm 78b7c6316ecfbd01c78998c129e1abd8574edd5660aa66a258d987b4d1a83bef kernel-modules-partner-5.14.0-611.54.6.el9_7.aarch64.rpm 82dc9a8be2f6bebcef4afce9f6971bcb5f2da2d6a860afa75d117e74cdf5fd26 kernel-modules-internal-5.14.0-611.54.6.el9_7.aarch64.rpm 842b1527a4fe8bfabce9ff471aee0f0ef28d271f6f4873f3bf56630f378b3821 kernel-rt-64k-devel-matched-5.14.0-611.54.6.el9_7.aarch64.rpm 877c9047fb826175889331ebac87e9d94ae6c5a3746ea839e974fc4381c70429 kernel-64k-debug-modules-partner-5.14.0-611.54.6.el9_7.aarch64.rpm 8940562408717c683f486ded790c6ecdc9ae510f6ea3e8d16b6283ef3bbdeccf kernel-64k-modules-partner-5.14.0-611.54.6.el9_7.aarch64.rpm 8ff3727d8514e6c1cbdf815af79a865671169d1fc6c968dc229eb6adb8e752d0 kernel-rt-modules-core-5.14.0-611.54.6.el9_7.aarch64.rpm 98c512aa22a19916f702680bb445a8ce6c55f8300027c8d2b908d7eae80f1b1d libperf-devel-5.14.0-611.54.6.el9_7.aarch64.rpm 9eec785a5a8f6c4eb075606a5467a0d41b80ab82a8971d5c277fe215111bbab1 kernel-rt-debug-modules-partner-5.14.0-611.54.6.el9_7.aarch64.rpm a02572c693ac385267ce07ad2add29193eac5f26110853f4994dc27622f6bfa3 kernel-rt-64k-debug-modules-core-5.14.0-611.54.6.el9_7.aarch64.rpm ab1562ef7069bd3d9205d06efff0bba8805161c4780f964ddc389517752e829a kernel-rt-debug-core-5.14.0-611.54.6.el9_7.aarch64.rpm ab232546cb6ea69258f67d0a774a33e9a278cb1aca428699aa06b842f4f7f158 kernel-selftests-internal-5.14.0-611.54.6.el9_7.aarch64.rpm ae07468ae8ab48664898f5076bfce5df98f00bea4849f0d901b729e9c3fbb34a kernel-rt-64k-debug-modules-extra-5.14.0-611.54.6.el9_7.aarch64.rpm ae3fbf12d5a718317b46e4565d6adc4787f528ea065f5023f069d87b53fc536c kernel-rt-64k-debug-modules-partner-5.14.0-611.54.6.el9_7.aarch64.rpm bbe081cbeabc9af4becfcaa952efb3df43448fe7b569ee97057f8b55864b5520 kernel-rt-debug-devel-matched-5.14.0-611.54.6.el9_7.aarch64.rpm c2491638adadfcbd99d50cf25cb069292027bbfbbaaa419c1d71366e9947418c kernel-rt-core-5.14.0-611.54.6.el9_7.aarch64.rpm cbc692de9496d492b5473d393ebc5e8425d55c4419940ee476511592d50e27da kernel-rt-debug-modules-internal-5.14.0-611.54.6.el9_7.aarch64.rpm e20d8b05ae4f0d513965f7d1a90903b22885cdf8dd9176bd745b30480701be9c kernel-rt-5.14.0-611.54.6.el9_7.aarch64.rpm e252e1e04571b9ca3aa7d8eec604569703d7657373e6938a599f1d61050f0d65 kernel-rt-modules-extra-5.14.0-611.54.6.el9_7.aarch64.rpm e620cb7d5824a87d12ba78759b4c363f3c7c972ebeec5cb2fa163060e7782a08 kernel-rt-64k-modules-core-5.14.0-611.54.6.el9_7.aarch64.rpm e83746661a8c51ad05bc8df0e8ab0d0ef09b6ba4df5b644ad2d162353f20345a kernel-rt-debug-devel-5.14.0-611.54.6.el9_7.aarch64.rpm e84d540f9f9a4ea230ea875d3d5040d0c5b6f68e11b20e1a479af0efd9c0f752 kernel-rt-64k-modules-internal-5.14.0-611.54.6.el9_7.aarch64.rpm eb9ea70b659f7fa9d3edfb9b93cf55485a7d722e7cc4027c2575ee9a15d5ddfb kernel-rt-64k-debug-devel-matched-5.14.0-611.54.6.el9_7.aarch64.rpm ed746a95b0dfe22bfd3bb8da34b3ac7ad8d7de2e936fdd4646452c9816803244