ALSA-2026:18134 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (CVE-2024-56633) * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839) * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980) * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015) * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097) * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166) * kernel: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (CVE-2025-38202) * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279) * kernel: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (CVE-2025-38267) * kernel: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (CVE-2025-38275) * kernel: ftrace: Fix UAF when lookup kallsym after ftrace disabled (CVE-2025-38346) * kernel: ACPICA: fix acpi operand cache leak in dswstate.c (CVE-2025-38345) * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405) * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441) * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470) * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866) * kernel: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (CVE-2025-40034) * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134) * kernel: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" (CVE-2025-40210) * kernel: Linux kernel MPTCP: Privilege escalation or denial of service via use-after-free in timer handling (CVE-2025-40257) * kernel: smb: client: fix potential cfid UAF in smb2_query_info_compound (CVE-2025-40320) * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040) * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111) * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.7.1.el10_2.x86_64.rpm 1af20bd78542d8b751a7086c4ad0fef4ad0c2fae3c441e3a7161302786b132db kernel-rt-debug-core-6.12.0-211.7.1.el10_2.x86_64.rpm 41be60aab2b6500ced9e94af0ecdb90167a12af115ef4a978c469d656a587fd5 kernel-rt-debug-devel-6.12.0-211.7.1.el10_2.x86_64.rpm 557dbb0a0f61299e0eb16e8dc7a1bf8ad6919ddd96cd4775318e99f69ac9b598 kernel-rt-debug-modules-extra-6.12.0-211.7.1.el10_2.x86_64.rpm 5ddd39d9933eecddd0870a4e0df17bf15e6f54846d6e12cb19e9a54a7b560a01 kernel-rt-devel-6.12.0-211.7.1.el10_2.x86_64.rpm 618b98f77fa175b00a40acd7026c12156af34cd360d1729d6cc468b5c6ac675d kernel-rt-core-6.12.0-211.7.1.el10_2.x86_64.rpm 667b8f5914486f8f7e38039190fa6e19c66c0eb8469196fea5119e38edf8570b kernel-rt-modules-core-6.12.0-211.7.1.el10_2.x86_64.rpm 7551afa6d690514db5c0c5f167bfe79f829776308103b2d5c5f636a095c13619 kernel-rt-debug-modules-6.12.0-211.7.1.el10_2.x86_64.rpm 7f57b795820ebf07d77703f6ea714177b4ab6d53077b09a77c7ace90a803494f kernel-rt-modules-extra-6.12.0-211.7.1.el10_2.x86_64.rpm b219a16d9eaca02cfcc9c52682403c45e00cf50deefc04fd5fe7dc119ad8d6c5 kernel-rt-6.12.0-211.7.1.el10_2.x86_64.rpm c29541a2fc12b5d4bc7ace39bef77bbbe65ce1985f5d92c915bad560a1cc6ef6 kernel-rt-modules-6.12.0-211.7.1.el10_2.x86_64.rpm e481156f760793c4cf7a9e86efaeb60ce4da2c6bb589422deca4e00469cf572e kernel-rt-debug-6.12.0-211.7.1.el10_2.x86_64.rpm ec17b6ac1f42ba21edf5cc5ea838449ceb2559da3339e8a6f2ba8ac6bfca9760 ALSA-2026:19074 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677) * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-debug-devel-6.12.0-211.7.3.el10_2.x86_64.rpm 033b02bdd7a71193e5988c167265a3f5060ab92a44267c0cb9284a6450558127 kernel-rt-modules-extra-6.12.0-211.7.3.el10_2.x86_64.rpm 0fe00864ea985b92d4730d4d4330c0ed9cf066f3fa7d43106b5a15771d89122a kernel-rt-debug-modules-6.12.0-211.7.3.el10_2.x86_64.rpm 28ad8a72f6798c18bc176e2589b3cc6d123eb9507ff2ce789cc1c2db2cbf9c29 kernel-rt-debug-modules-core-6.12.0-211.7.3.el10_2.x86_64.rpm 32d1b12d3d13a9b039227cd1792b2b6cd5bf64045970b969e11f5ee32e47bd33 kernel-rt-debug-core-6.12.0-211.7.3.el10_2.x86_64.rpm 3cce146047967a9486ab272717544a50f4549b58561829443272e668efff67e3 kernel-rt-debug-6.12.0-211.7.3.el10_2.x86_64.rpm 49258b36d88971030f492aa5c701be7d6f5c04287c432aae6764196bf540970c kernel-rt-devel-6.12.0-211.7.3.el10_2.x86_64.rpm 6cbbfd253ea7386d8ca1fb1192aaebddee8929130f829feea5300a562b4d52eb kernel-rt-modules-6.12.0-211.7.3.el10_2.x86_64.rpm 6fc6e2719192d3fb89f4f0c550bbfbbf7daaccf1702d9ce539a3bc177cbfdae7 kernel-rt-modules-core-6.12.0-211.7.3.el10_2.x86_64.rpm 7ced5c41beae13497b82d841ba3750657cc0444b7511463a05e22d69f5b093ff kernel-rt-core-6.12.0-211.7.3.el10_2.x86_64.rpm c1586de754517eaa93ee82bdc70befc069ff11439c9a6c4565d88edb3597e0c3 kernel-rt-debug-modules-extra-6.12.0-211.7.3.el10_2.x86_64.rpm df10d9bce5ee1c7fb7bf88a2e84eed504ea7a5531b42783561593bd49b4ee288 kernel-rt-6.12.0-211.7.3.el10_2.x86_64.rpm e9a6031c3bfdd1f831e846c3824569bc7edefc0fd31b7de9130f1c8fd09b9b7b ALSA-2026:19569 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-modules-core-6.12.0-211.16.1.el10_2.x86_64.rpm 243b03974febc6542efc40b91458e6d63ea89e48919cd17b4739af164b31d918 kernel-rt-debug-modules-extra-6.12.0-211.16.1.el10_2.x86_64.rpm 2bd810e6498d0c13e112764e4f13048c09cae0973114115b37262091730ed11d kernel-rt-modules-extra-6.12.0-211.16.1.el10_2.x86_64.rpm 31e5318b39a87d89f10b409308b532fb667384c4cb5dc88392c30a3f69c4d6b9 kernel-rt-core-6.12.0-211.16.1.el10_2.x86_64.rpm 396d9290fd3cb5446013d6ccbfa94ff6060e32433aaec4802dc76e39595d818f kernel-rt-debug-6.12.0-211.16.1.el10_2.x86_64.rpm 3b3591b4b4acd4049deb9b5d26ce172588a28262250999892576300cda52e9e1 kernel-rt-6.12.0-211.16.1.el10_2.x86_64.rpm 4a7b923759de5f61655c9d301e94309369bce7e45a504443076f4b875877bb79 kernel-rt-debug-core-6.12.0-211.16.1.el10_2.x86_64.rpm 62bb5043c4be916427fe587fe723fa94940275a25fb9eebf96f5503bf8c70279 kernel-rt-debug-devel-6.12.0-211.16.1.el10_2.x86_64.rpm 780042d3b3fd3c147cd984b8bd7a79a7b64ea559e0567220737ee91aaa4ff6e0 kernel-rt-modules-6.12.0-211.16.1.el10_2.x86_64.rpm ca055282072a1e35976c2925136390123bf09a9a97dcd860f4038f37ee01b465 kernel-rt-debug-modules-core-6.12.0-211.16.1.el10_2.x86_64.rpm d182d5d6fc6e7c75ac3f09ab8a43ddb50caf810a3b59ed72aea1d92144af962f kernel-rt-debug-modules-6.12.0-211.16.1.el10_2.x86_64.rpm d243b3bd27ac2f9895fcc8e7e38eefa3aa11f8fd415182e32820094590cd338b kernel-rt-devel-6.12.0-211.16.1.el10_2.x86_64.rpm d78799d5967ed0ff47065b92dae85d0ff5a7c99d05b8e301511a14151c65ccc2 ALSA-2026:21557 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645) * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) * kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375) * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) * kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006) * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020) * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051) * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023) * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) * kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205) * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) * kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-devel-6.12.0-211.18.1.el10_2.x86_64.rpm 0431b4a7af999a2f4fc5a4159b2a78a0ba10aa48036fb6fe70ae0f75efb0c4f2 kernel-rt-modules-core-6.12.0-211.18.1.el10_2.x86_64.rpm 0fea4d445706f82ef074778d4590f86f749d2709196ba4b5f05d75ddcd3d66d8 kernel-rt-debug-modules-6.12.0-211.18.1.el10_2.x86_64.rpm 1977a4d4623ae88331509ca08a4278632beb84906de1a55cad96c35d145cdeed kernel-rt-modules-6.12.0-211.18.1.el10_2.x86_64.rpm 2c00d859a894566e6ed59d3555d9d1154c891d9c27739a78b717798a1bd3b291 kernel-rt-core-6.12.0-211.18.1.el10_2.x86_64.rpm 365b4db0936bc97408968f7ca2f1df1e624af20c8c3b755d40cc1a679c10f8ba kernel-rt-debug-core-6.12.0-211.18.1.el10_2.x86_64.rpm 7f783ede4280143e0fdbc6c7521bff652b812c2df92530a6ff5ea82bb5ba67f4 kernel-rt-debug-devel-6.12.0-211.18.1.el10_2.x86_64.rpm ada3048729e846e95938bb88b7bd3ac6cd96bcc8d026f485e9e9403f9040aae7 kernel-rt-debug-modules-core-6.12.0-211.18.1.el10_2.x86_64.rpm b635ee8932513576efe39a88b73d981044a7bbf24a21103c903b11cf7b2c910e kernel-rt-debug-6.12.0-211.18.1.el10_2.x86_64.rpm b6d555d4e331f084b040f5b2822d0c0ed6fc20e1846507e7c47ae9ad455ed863 kernel-rt-debug-modules-extra-6.12.0-211.18.1.el10_2.x86_64.rpm cb36dd6836f430417dfb5b01daac32f98d797ddf52416b95e72eeb885efb01fb kernel-rt-modules-extra-6.12.0-211.18.1.el10_2.x86_64.rpm d7ffc325d94f1057ccf7de8ff47338577c2f693500d17d4f6e87ffe25dd74132 kernel-rt-6.12.0-211.18.1.el10_2.x86_64.rpm da4bb6d5109a06b2c811872dbde61f1b2ed9f248f5c096eda3260f75540d5f2e ALSA-2026:23329 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653) * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) * kernel: Bluetooth: hci_sync: Fix UAF in le_read_features_complete (CVE-2026-43322) * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-debug-modules-extra-6.12.0-211.20.1.el10_2.x86_64.rpm 383c6e6030122a2fc713bd48ec0892c0a572d8d910ea50e808d91f9e4b6978ab kernel-rt-debug-core-6.12.0-211.20.1.el10_2.x86_64.rpm 5512ee7d4b6f904d746db1517f76d80cc9bddf9ab1fe3737b8ff11dc5de140e5 kernel-rt-core-6.12.0-211.20.1.el10_2.x86_64.rpm 66ef83fd81d93f2877856a4841a09633b3d81d7ae900f72e234867e0db233e26 kernel-rt-modules-6.12.0-211.20.1.el10_2.x86_64.rpm 8718c3618ed45a5af6dfbaa455347150eb00c45f51f8a9ca91743991c5272a39 kernel-rt-debug-devel-6.12.0-211.20.1.el10_2.x86_64.rpm 95c60f87489abaacd811e3e6d3642c45e5de1802f6ac8777c2cf9915302800d3 kernel-rt-debug-modules-core-6.12.0-211.20.1.el10_2.x86_64.rpm 9ef21826df0cd26bbd1c70d9a6cee30815f31b866543ae01d8da261cce4e1527 kernel-rt-devel-6.12.0-211.20.1.el10_2.x86_64.rpm a5d243440eaac4ab1fcd1f310dc8366fcebaeee92b26d539a605fe1569ea5c33 kernel-rt-debug-modules-6.12.0-211.20.1.el10_2.x86_64.rpm b1f389d5d74c7d35046a4dad6d83108b3ad888aed22e4daedd2bd5c0f816ff6d kernel-rt-modules-core-6.12.0-211.20.1.el10_2.x86_64.rpm bf7653088aac80c040ceafba211d60b3e731979041aa07808302321a016e92ab kernel-rt-debug-6.12.0-211.20.1.el10_2.x86_64.rpm e0239b43ab8c3a9d865a1154d778e0f44e6e058c5014fd5f6ee17a2db64dc18c kernel-rt-modules-extra-6.12.0-211.20.1.el10_2.x86_64.rpm f25b9426fa21ec96fb31d55755bb5594ea6f8cce537add993d07a2e133537ba5 kernel-rt-6.12.0-211.20.1.el10_2.x86_64.rpm fe9357e7c85b49d076a4c3a26afc56bac992016b9a4415896ed13369ed4e602e ALSA-2026:25191 Copyright 2026 AlmaLinux OS 0 1 Critical

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: Linux kernel: Denial of Service in erofs filesystem (CVE-2026-31467) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-debug-devel-6.12.0-211.22.1.el10_2.x86_64.rpm 031effb808d2372390a6f9e801a4dbe2d68eb467b2ef6c58d0566146b9bfad68 kernel-rt-core-6.12.0-211.22.1.el10_2.x86_64.rpm 11d04035dd3775840fe9c64d88dd380036653357de1b3e27a84365e75d9f6004 kernel-rt-debug-modules-extra-6.12.0-211.22.1.el10_2.x86_64.rpm 3d8313689c176e770de18ceb869c38a24a4d86a439868621e7e8d6158f76913e kernel-rt-devel-6.12.0-211.22.1.el10_2.x86_64.rpm 58a9128051f9e469a22dcda564064ded8bdffb62ba35a756edac9b27a69e6a80 kernel-rt-debug-core-6.12.0-211.22.1.el10_2.x86_64.rpm 6c1bb38860979493ce699f83650bfd3f405bf4307092eaf92379160fcb2d6eb5 kernel-rt-debug-modules-6.12.0-211.22.1.el10_2.x86_64.rpm 82cb898cbb9116305759dac0b14e9cd7341f5f513c3556a6e544d2098bef9c45 kernel-rt-modules-extra-6.12.0-211.22.1.el10_2.x86_64.rpm 898b2c411ea3eea285ca838a5431859777bfc67bb098511c83a6494abfa6f33a kernel-rt-debug-modules-core-6.12.0-211.22.1.el10_2.x86_64.rpm be80f70cc23c0f7a53f11507b72c026eca9079a7d650c2088f56d65a7c0f08b6 kernel-rt-modules-6.12.0-211.22.1.el10_2.x86_64.rpm c669b59f56876479f7c629a2cf137520fb11abf7280ce993c46591cea49d79c6 kernel-rt-modules-core-6.12.0-211.22.1.el10_2.x86_64.rpm cfd17409b82dcb0b98d9f457048d909936daff70ff26594aa029e6f867c1da30 kernel-rt-debug-6.12.0-211.22.1.el10_2.x86_64.rpm d30dbccee53bd9891f7e833694d54044d587de7e694fc6084bcc6f93e9ff3f85 kernel-rt-6.12.0-211.22.1.el10_2.x86_64.rpm e3f7625e8c0e624ebfa65395cdd3f9ca9f740ce4678698591db8f4418bcbc2d8 ALSA-2026:27288 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474) * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) * kernel: rxrpc: Fix RxGK token loading to check bounds (CVE-2026-31641) * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772) * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260) * kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330) * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166) Bug Fix(es) and Enhancement(s): * AlmaLinux10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-10.2.z] (JIRA:AlmaLinux-166047) * AlmaLinux9.5 crash due to lpfc NULL ndlp->vport [almalinux-10.2.z] (JIRA:AlmaLinux-171774) * objtool static_call check blocks build of out-of-tree livepatch modules on AlmaLinux 10.2 GA kernels ? missing upstream revert f495054bd12e (JIRA:AlmaLinux-178495) * ibmveth Adapter Freeze with Small MSS [almalinux-10.2.z] (JIRA:AlmaLinux-179723) * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-10.2.z] (JIRA:AlmaLinux-183127) * AlmaLinux10.0 - s390/mm: Add missing secure storage access fixups [almalinux-10.2.z] (JIRA:AlmaLinux-183319) * [AlmaLinux10.2.z] Enable Pretimeout Watchdog Panic Functionality on x86 (JIRA:AlmaLinux-182299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-debug-6.12.0-211.26.1.el10_2.x86_64.rpm 2d02f289d1d0fbde8c7b66d51cb4681026df76342ec8a255f4322236747f4bad kernel-rt-debug-modules-extra-6.12.0-211.26.1.el10_2.x86_64.rpm 31e30c0882666feff97204f9de5b3b2ca47efbe3fdfd9bcbd3cfb75cc98d12d4 kernel-rt-debug-devel-6.12.0-211.26.1.el10_2.x86_64.rpm 3a34a488e0d9803a81aba438a6d589d1cee35a5c72ca958f4785017ad781ad1f kernel-rt-modules-core-6.12.0-211.26.1.el10_2.x86_64.rpm 6a9def7546d10e0db4e872ef7593fef867c38c3690179f14b74f7b4fa94e9cb6 kernel-rt-debug-modules-6.12.0-211.26.1.el10_2.x86_64.rpm 7be57ae48645c9e24f37d3a36acb6d3f0516e53ceb7be97e0564f3eaeed6d3d6 kernel-rt-debug-modules-core-6.12.0-211.26.1.el10_2.x86_64.rpm aa8bfa7a3f7f81f9cbbb58036b464a40427b35dbd690d98bf57aa55e69d482cd kernel-rt-modules-6.12.0-211.26.1.el10_2.x86_64.rpm abf3a0f933fd8ab2049ac817cfa1bb0ebd5aa517ccbcc44b459432346208b191 kernel-rt-modules-extra-6.12.0-211.26.1.el10_2.x86_64.rpm ad9a5c10c25285604cf9ddd73058b3bbce723af120fdf0f1e4cd80f5bdcec728 kernel-rt-core-6.12.0-211.26.1.el10_2.x86_64.rpm d1a15a93081026f52a572771915a0197ee55acf3a56d1088c62bab2b0a931139 kernel-rt-devel-6.12.0-211.26.1.el10_2.x86_64.rpm f3408f1a25e0f6cb6b561b1cc7064c918451bdb3a89c787377a91b023c6c01e9 kernel-rt-6.12.0-211.26.1.el10_2.x86_64.rpm f64811bf31004b2452c7e62bf573254fc1382cd0cff9caea90c08ffa5a41ea78 kernel-rt-debug-core-6.12.0-211.26.1.el10_2.x86_64.rpm f7ad2514276f83d4b91f60eb497c2495399c0f802f8b2bc2d16cf9e84379b6ae ALSA-2026:30129 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: rxrpc: fix RESPONSE authenticator parser OOB read (CVE-2026-31636) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414) * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898) * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * Unexpected execmem SELinux denials after CVE-2026-46054 fix [rhel-10.2.z] (JIRA:RHEL-185117) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.28.1.el10_2.x86_64.rpm 0f6174ad18c092314982ef8730d76b4b16a7a9095c2334bc71fe3168177ed8e0 kernel-rt-devel-6.12.0-211.28.1.el10_2.x86_64.rpm 5081abf1c1c51e92a4ab9b5433ca8617ff44e9ee7c8b5ee0352e75cc454de4c8 kernel-rt-modules-6.12.0-211.28.1.el10_2.x86_64.rpm 51ca1444a4df3397188e73237e2d0cec892dbe6c865e314b8a7d08f47ad779e3 kernel-rt-debug-modules-extra-6.12.0-211.28.1.el10_2.x86_64.rpm 5e2e64e0a6cfa432511b4e9ad406930a2b064e26983448b11193bd06cfc7477b kernel-rt-modules-extra-6.12.0-211.28.1.el10_2.x86_64.rpm 6c918281c16b755190ba36bbbe1c3bc492b837bc2539a92894b2a4187a7dc36a kernel-rt-6.12.0-211.28.1.el10_2.x86_64.rpm 75f0a950aa4fa35752a2ac70d1332fcffcb7dd22efc440f4f00d04514af04568 kernel-rt-debug-modules-core-6.12.0-211.28.1.el10_2.x86_64.rpm 866f443ef77f67e2239964cbd0f1608811844490cb17c9fd24844d455eb5a5a7 kernel-rt-debug-6.12.0-211.28.1.el10_2.x86_64.rpm ae3d49bd3f976728bea8fb37137b3b298fad33bdd3122c63d89c203bc00e16bb kernel-rt-debug-devel-6.12.0-211.28.1.el10_2.x86_64.rpm b26742727612b0d4ac3da2d5290783d42bd436c3c68774ff5e9deea7b190c40b kernel-rt-debug-core-6.12.0-211.28.1.el10_2.x86_64.rpm b4e78db159658d75fd85f2dc1e5225b78f86399f0fcd9055ff57523a1e3e0cb1 kernel-rt-core-6.12.0-211.28.1.el10_2.x86_64.rpm b7a9a44c696cc3c1b6027c911e602d83c14150d2c6d6108843ed28bb45abee72 kernel-rt-modules-core-6.12.0-211.28.1.el10_2.x86_64.rpm c65a7f01e9991b448481c378cb6730aca3c414a53416f19d6ad3150102a79910 ALSA-2026:33685 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176) Bug Fix(es) and Enhancement(s): * CLONE - [AlmaLinux 10.2 Bug] qla2xxx flash image validation failure [almalinux-10.2.z] (JIRA:AlmaLinux-181887) * tegra-se fixes and updates [almalinux-10.2.z] (JIRA:AlmaLinux-182759) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-devel-6.12.0-211.29.1.el10_2.x86_64.rpm 15080f308fad2f18b371e41bb6c18b63dad254dcca2dc2edc950d2549c2fbe48 kernel-rt-modules-6.12.0-211.29.1.el10_2.x86_64.rpm 1f6d65fbfc171a9dbcad3eccf4b561b8eb7cd22500f7877b1c2d964a44e731df kernel-rt-debug-modules-core-6.12.0-211.29.1.el10_2.x86_64.rpm 3c03d37f3e03f529cafd70c41f416c9d3c4b2782043fc253bbd7947e61569aa4 kernel-rt-debug-modules-extra-6.12.0-211.29.1.el10_2.x86_64.rpm 4c0d1e6d6db024fd46c02333c75c13af0d2f697948065bea98f5b83d9a20b06f kernel-rt-modules-core-6.12.0-211.29.1.el10_2.x86_64.rpm 71e552aff3917d5549f062666bff2a21afb68ad803eff6a31d61f7e32a0b6865 kernel-rt-debug-core-6.12.0-211.29.1.el10_2.x86_64.rpm 7d6c041cd36b0e844904a8d5ff8008eaacd4ceadd5705cc918a1dac0e7b60c66 kernel-rt-modules-extra-6.12.0-211.29.1.el10_2.x86_64.rpm 94b184c2c2c3afed01eafcddd263d5cfa1690e328386902857c03e0a708b4fce kernel-rt-debug-modules-6.12.0-211.29.1.el10_2.x86_64.rpm 9a80018f549f6c129c34d464ce7115ec3a6a8b2c64694c46802e9cdfea6ecd9a kernel-rt-core-6.12.0-211.29.1.el10_2.x86_64.rpm a943d0585e1e046e2043ebf8d1c44ad5f81588236b4033361fba0a778c5cfe19 kernel-rt-6.12.0-211.29.1.el10_2.x86_64.rpm d771d85ce901bf2e22b12170d3a8f0f5677ce28ad29ea78b4d6f3ae7aaddf52d kernel-rt-debug-6.12.0-211.29.1.el10_2.x86_64.rpm fefea2cc66608d9167bce52061fc435d1afe4e889b0932c4bab1cf7732306dcd kernel-rt-debug-devel-6.12.0-211.29.1.el10_2.x86_64.rpm ff0173d0c49da0e8af0b4d686fc91ab83b728a46b6caced1db01c807f99ac8d2 ALSA-2026:34911 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) * kernel: rxrpc: Fix potential UAF after skb_unshare() failure (CVE-2026-45998) * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244) * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) * kernel: kernel: ipv6 frag escape () Bug Fix(es) and Enhancement(s): * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-10.2.z] (JIRA:AlmaLinux-182537) * [ThinkPad Avon/Mario +AlmaLinux 10.2]The OS hang up with CapsLock fliker (JIRA:AlmaLinux-185110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-modules-core-6.12.0-211.30.1.el10_2.x86_64.rpm 03fc6db7d114f04f332e27de428db1d6089c601b2e95d26721189c78f2cfb9df kernel-rt-debug-devel-6.12.0-211.30.1.el10_2.x86_64.rpm 0cb5ccc2e650403ee7d995d2956535a6a2d3e74c791aa6b05dd6306134b9fb5e kernel-rt-modules-extra-6.12.0-211.30.1.el10_2.x86_64.rpm 31359c06d526d1bff4d5bc6729122405fac8e62b09eaca870aa8f36a19f7086b kernel-rt-debug-modules-extra-6.12.0-211.30.1.el10_2.x86_64.rpm 516e1b670064ab2154bbb0403db47873f5c31e63dc484d2a9196b22dc3cdff70 kernel-rt-debug-modules-core-6.12.0-211.30.1.el10_2.x86_64.rpm 6f9375c629242a827884b4d17d8cd9e71cd11354d20b72c425a14477318c984f kernel-rt-core-6.12.0-211.30.1.el10_2.x86_64.rpm 72f6691ef70c66dbc82e0c8b87c0e813d843b21c1adc2cab0427487b2e6a17af kernel-rt-6.12.0-211.30.1.el10_2.x86_64.rpm af9e2588f62e62d4dbf2b465bdf99f5dc6a025db623f27e602386eb342f22dd8 kernel-rt-debug-6.12.0-211.30.1.el10_2.x86_64.rpm c98d676471a70b9e62c3f034935d49afec83eae423a8eb9fecc3bb4b6acd90c1 kernel-rt-devel-6.12.0-211.30.1.el10_2.x86_64.rpm dd52e2c9cfe4c5b0a51a4b30d36f208f3092b532e0975bce74e8005347454394 kernel-rt-debug-modules-6.12.0-211.30.1.el10_2.x86_64.rpm e2c45d8fd04770154f38e053dc887fecd5a580c82fa7d620567a50eacfdf8a30 kernel-rt-modules-6.12.0-211.30.1.el10_2.x86_64.rpm f0683dd56f26134d692c4a00a404988b5b72c29dd4474b518bd315fbd0d7be50 kernel-rt-debug-core-6.12.0-211.30.1.el10_2.x86_64.rpm f3a33d61967ef7a009098d8509e1634614ccf3e40a53d391afb8aa7e38aa47f4 ALSA-2026:36541 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276) * kernel: net/ipv6: ioam6: prevent schema length wraparound in trace fill (CVE-2026-43341) * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259) Bug Fix(es) and Enhancement(s): * CNB103: net: page_pool: avoid false positive warning if NAPI was never added [almalinux-10.2.z] (JIRA:AlmaLinux-162140) * [AlmaLinux 10] Bonding reports unknown speed/duplex for tg3 interface [almalinux-10.2.z] (JIRA:AlmaLinux-182770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-core-6.12.0-211.31.1.el10_2.x86_64.rpm 0568009f3c1041614d9a078a0f7560825ff04e638efb9fc4050563debb447024 kernel-rt-debug-core-6.12.0-211.31.1.el10_2.x86_64.rpm 3263f90703735a9eda6b4573c3248f2d1dd83c9ba82c9c79ec98b98f3e91c526 kernel-rt-debug-modules-6.12.0-211.31.1.el10_2.x86_64.rpm 32670934fe783b2f1a6910aafb146e5402d1f6482a6dd43ec1f1ddf740f1107f kernel-rt-modules-core-6.12.0-211.31.1.el10_2.x86_64.rpm 3dda308766a43676ea1d2a7a0d31e790447ba28bdab8feae3f4925be7ac62694 kernel-rt-debug-devel-6.12.0-211.31.1.el10_2.x86_64.rpm 6a56851fd6258c60f3f77d734647bf365554f242a50096eded53e1536dccc962 kernel-rt-6.12.0-211.31.1.el10_2.x86_64.rpm 81d79accff76562a9533d6992d213505eca2e8c5009356f41e83d4e7b367fc17 kernel-rt-debug-modules-extra-6.12.0-211.31.1.el10_2.x86_64.rpm ac688cff5f1437e66fc883b5d106cb80ef0dcc1b982635fddfc26f93e2a8ee75 kernel-rt-modules-6.12.0-211.31.1.el10_2.x86_64.rpm af660faac03beae0650bfd5cc82552aec4ae6420ee4c27fd89c3165aa27b8f42 kernel-rt-modules-extra-6.12.0-211.31.1.el10_2.x86_64.rpm b9fcf9c634953cfd1a1c758c631f03beea048e960ba0079fcc3156725afc6f6e kernel-rt-debug-6.12.0-211.31.1.el10_2.x86_64.rpm c05b1761ac7f4845d1b2ef4760b5e10f56a1cbc9a77d6b8eb808949cecc9e1c2 kernel-rt-debug-modules-core-6.12.0-211.31.1.el10_2.x86_64.rpm e9a8b8679a6bf5170abb1c2c8cb570c4bab2fdaa3727a121c5c21fcb5cda66cd kernel-rt-devel-6.12.0-211.31.1.el10_2.x86_64.rpm eaec4d85fd5d120df6644f955552609e12a8a46480c08be296edda37587f42e7 ALSA-2026:36956 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.32.1.el10_2.x86_64.rpm 04f004d208dff68c404011aa051ed3e9e905a0f1e4ce33767610cf54a2a91570 kernel-rt-debug-modules-core-6.12.0-211.32.1.el10_2.x86_64.rpm 0548a2e78e9e1d3a0ee5efdb530553fb2826572b1f6dec07c3eb2c0113c98395 kernel-rt-debug-devel-6.12.0-211.32.1.el10_2.x86_64.rpm 3be990549566325249affcacaf89cce2cde7754b2608afa5daa3efc83eeeb1e0 kernel-rt-6.12.0-211.32.1.el10_2.x86_64.rpm 41f3a3db1f84bf9df9998cf962b849fdd1c5748ba678fde1f59f67f15a2e005f kernel-rt-modules-6.12.0-211.32.1.el10_2.x86_64.rpm 4d7479a62c8cf3f23dc76cab405542652929222583a7166cf7f8ad54222e9b5b kernel-rt-devel-6.12.0-211.32.1.el10_2.x86_64.rpm 5310f61d27079f94cefa60c6082d08460e98d2cc911f4ae54948c4d327fb3991 kernel-rt-debug-modules-extra-6.12.0-211.32.1.el10_2.x86_64.rpm 5f258e0a65f8d6ec1b3a290e6a7defdc14f871a16d90f0b3575a446a9d2fab60 kernel-rt-modules-extra-6.12.0-211.32.1.el10_2.x86_64.rpm 762ac63da122b5ac61d6956cc70754f165826fdd40b97bcc8cf97230d169008d kernel-rt-modules-core-6.12.0-211.32.1.el10_2.x86_64.rpm 87ff7205681713f1cded84a7328107c1e4015934e44e3237d1407971c7cd6c28 kernel-rt-debug-6.12.0-211.32.1.el10_2.x86_64.rpm 956ec6f823bbc4cdd5fbce3483347836856e9a12d455567c88bca437198b2d9d kernel-rt-core-6.12.0-211.32.1.el10_2.x86_64.rpm a52bfafae7aa77123ffb8703bb2a61b98823ba30ca014a42b36ed5380f4f0f38 kernel-rt-debug-core-6.12.0-211.32.1.el10_2.x86_64.rpm f83f0bc08f6a85c96aa06a352e365ee1f2ab8f96c0109e770d938e12d5f2f613 ALSA-2026:38492 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-modules-extra-6.12.0-211.33.1.el10_2.x86_64.rpm 18fdbfb88f183c515867ba92b9258d1a738294853dbb280344ecfde0d1e44221 kernel-rt-debug-modules-core-6.12.0-211.33.1.el10_2.x86_64.rpm 2032b59b3bf8f2d0b269474ca46c55d85a02ab160dc3adb4761a5dedb6179538 kernel-rt-debug-modules-6.12.0-211.33.1.el10_2.x86_64.rpm 23150f1e8f08342e12840b330228320fc72788f44a10f5355c3d32f3c8a280c4 kernel-rt-debug-6.12.0-211.33.1.el10_2.x86_64.rpm 411c98bb20669d79911ab26da12b738d4f962efaf8ed7e12d0f0e43465c717f8 kernel-rt-6.12.0-211.33.1.el10_2.x86_64.rpm 4b35c0367a1a9eadbac5bbb2e04ddb3efe9b45526efd078b5272f1f39c1be488 kernel-rt-modules-core-6.12.0-211.33.1.el10_2.x86_64.rpm 4be55e82082115eac0e64bf62ed03271ae9e9465f105be568e7213a5ab3ee10d kernel-rt-devel-6.12.0-211.33.1.el10_2.x86_64.rpm 84e355b3275752391e989aabe4705605bb2cff37a48ae4f80898ead60f3b8c36 kernel-rt-debug-devel-6.12.0-211.33.1.el10_2.x86_64.rpm a198a34e232fd8f1f148acc40112a3e023d54b7a37f875b6c89904fcee0b6fb0 kernel-rt-modules-6.12.0-211.33.1.el10_2.x86_64.rpm a4654944121e06ed84ed06ce93a1a9f37b9160515f8602cd828ede4e109b144c kernel-rt-core-6.12.0-211.33.1.el10_2.x86_64.rpm ca6a2a4f7dede626eb634e61b8c004c2dcea1afc78acab356b05df74d25564a8 kernel-rt-debug-core-6.12.0-211.33.1.el10_2.x86_64.rpm ceb4333ff2bd2ff473cd6adb60d49934330c3976fafa6b5503d213f180c1b0ba kernel-rt-debug-modules-extra-6.12.0-211.33.1.el10_2.x86_64.rpm e48f1139dab793e91fd941ee7dbf8b41eb4704893b09fd38f81fe5dc886610fd ALSA-2026:39494 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) * kernel: XFS data corruption using reflink () Bug Fix(es) and Enhancement(s): * [Exploits (KEV)] kernel: XFS data corruption using reflink [almalinux-10.2.z] (JIRA:AlmaLinux-193945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-modules-6.12.0-211.34.1.el10_2.x86_64.rpm 2a80b5d45cd372edf31fdefaa0d6f79cdaa89598ead0927a75a3d8fb2fccc57f kernel-rt-debug-core-6.12.0-211.34.1.el10_2.x86_64.rpm 3c2b441bd0fd39855ad2c97a31291eba06083b33035da8e19b5fa899aaf15892 kernel-rt-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm 63eee0b227f975d390eee29bec9c877ee30a85dfef3556006e9455cc454d9864 kernel-rt-6.12.0-211.34.1.el10_2.x86_64.rpm 64e46c3f0d840c26064072d8bcd1d2f5f921630688bdba917038ccf5c28edd20 kernel-rt-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm 795fa0bb38935effb2cd7432330d3150746b34c068c5f28c4fed6e68d16e6324 kernel-rt-core-6.12.0-211.34.1.el10_2.x86_64.rpm c6fed3e081f26d4bdf8fb64886b47dfe0b8d87e0bc86fd265e85f1595eb9777e kernel-rt-debug-6.12.0-211.34.1.el10_2.x86_64.rpm c93418c59d45e49d0e6ab4a89ebafde2a23c91a2a3bfe1d21338c7c13b2babfe kernel-rt-devel-6.12.0-211.34.1.el10_2.x86_64.rpm d1faf24b4d6fedb81f30c6f945ba2ce14d58526551055c60e0ac401ce2d7c515 kernel-rt-debug-modules-6.12.0-211.34.1.el10_2.x86_64.rpm d3137a82224314de8d9ac8891efc78b1d27f1bae1c5965e1033c59a6f25f8206 kernel-rt-debug-devel-6.12.0-211.34.1.el10_2.x86_64.rpm daeeae64b562d50badbbb53318f545b55a9f981f5854612b9b05638d522432aa kernel-rt-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm e3ce9b9cf8ec5fa1154e6121b0d86bcff99a9932eca5ab8a29311a5efb671ce8 kernel-rt-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm ed466b571529f6241b63fe9531de0395de72308aa036f86f4afdfdb6df4a16d6 ALSA-2026:42919 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113) * kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147) * kernel: flex_proportions: make fprop_new_period() hardirq safe (CVE-2026-23168) * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530) * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) * kernel: fanotify: fix false positive on permission events (CVE-2026-46150) * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215) * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976) * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950) * kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009) * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) * kernel: can: bcm: thrtimer use-after-free during RX operation teardown () Bug Fix(es) and Enhancement(s): * nfsd_file slab cache objects remaining on kmem_cache_shutdown during nfsd teardown while running bz1477872 testcase (JIRA:AlmaLinux-173103) * tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-10.2.z] (JIRA:AlmaLinux-183975) * [AlmaLinux10-debug]: BUG: KASAN: slab-use-after-free in __pv_queued_spin_lock_slowpath [almalinux-10.2.z] (JIRA:AlmaLinux-186311) * ice: driver update 2026-06, part 1 [almalinux-10.2.z] (JIRA:AlmaLinux-191324) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-modules-core-6.12.0-211.37.1.el10_2.x86_64.rpm 022ea7a952d78039394bcaa6200c6b0a4215d5c6f161ec8023fa48d05600036e kernel-rt-6.12.0-211.37.1.el10_2.x86_64.rpm 2343de2fdc1bfdd57e5ef191824d134b1e7c821e875f4f176682453c1d1665a9 kernel-rt-debug-devel-6.12.0-211.37.1.el10_2.x86_64.rpm 820d18d9fb5e081835dc034a29aea9a080544eae655d3f8bde7fdbce2e163c47 kernel-rt-modules-6.12.0-211.37.1.el10_2.x86_64.rpm 84b191f2af6617628e0d27769a84b27e023ff2e6de636a1c8e74a3e5e59cdbf3 kernel-rt-debug-modules-core-6.12.0-211.37.1.el10_2.x86_64.rpm 8ff6b7b9192785b5e309ed4774dfca89a74b1bef6d6b9538883802d454e09ced kernel-rt-debug-core-6.12.0-211.37.1.el10_2.x86_64.rpm 9935ef5eba08e5dca6d51521fa4985296ab65ad0f04d62f541fe039da47ada98 kernel-rt-devel-6.12.0-211.37.1.el10_2.x86_64.rpm a4f0d13680fe1caed17e6d1c79e8df577bd3eb69468999b8acf26df1d8ae08e2 kernel-rt-debug-modules-6.12.0-211.37.1.el10_2.x86_64.rpm cda86f3f0523f6767fcf33820eed5e3d08a925ea2306ee75ffdae70d86f6d247 kernel-rt-core-6.12.0-211.37.1.el10_2.x86_64.rpm cfdf8c10431f1f493c8d2ee171962791beab6a3fcca0c143de42e22c73bea8f3 kernel-rt-modules-extra-6.12.0-211.37.1.el10_2.x86_64.rpm deb6a5a6adc5deff265ac697e44bc6360b4d9a9a028144298af1c61db551b7d4 kernel-rt-debug-6.12.0-211.37.1.el10_2.x86_64.rpm f65eb4a3e4cabf84a126f58933ff07351f9b1488975252b83fcd6d1157c6b059 kernel-rt-debug-modules-extra-6.12.0-211.37.1.el10_2.x86_64.rpm fc9abe3726fb46959bf517e939fb2a694f65246877b73e0ee016b093a52fd437 ALSA-2026:44270 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.38.1.el10_2.x86_64.rpm 04bece38e06b4d151e07a125f3eab57c1f2f3bf5e791c5ee863fccd606a96376 kernel-rt-debug-6.12.0-211.38.1.el10_2.x86_64.rpm 07b1b47100057739258c90afb3ab5dc5f178d04daf4e640310cd9782d0a1e879 kernel-rt-debug-core-6.12.0-211.38.1.el10_2.x86_64.rpm 100e4618c6d3b5bd8c6a651a73f65295c32f28b040786a8787be393f93313af0 kernel-rt-modules-extra-6.12.0-211.38.1.el10_2.x86_64.rpm 2c314d410fac0b260385fd0f9d16bcd47abb4bc8727bf326bb8663b80c7d5c31 kernel-rt-devel-6.12.0-211.38.1.el10_2.x86_64.rpm 2e459ab8e5e102b3a51aeac19e56ab768eabc701305ec1bdadccb563187e9624 kernel-rt-debug-modules-6.12.0-211.38.1.el10_2.x86_64.rpm 7c4e1e64e06ecce793808feeee36b5246d2fcb6dedc70feaa569cadcca38abf0 kernel-rt-debug-modules-extra-6.12.0-211.38.1.el10_2.x86_64.rpm a64522c53d149a3323c63fc482b5983b802f42267f085c037f59313594c6cb1e kernel-rt-modules-6.12.0-211.38.1.el10_2.x86_64.rpm b1039418439f688a2c8cba6b72b019b6e272d657130d91f670f7b563c0437a94 kernel-rt-6.12.0-211.38.1.el10_2.x86_64.rpm be0b10c2efb3d82203331a083a622aca4ab9721cbd739f57f81faeadcfff680e kernel-rt-modules-core-6.12.0-211.38.1.el10_2.x86_64.rpm d6c7fc85979f6110cbfc190f4d5df426416f2fffe608619e69e016302e72dbc7 kernel-rt-core-6.12.0-211.38.1.el10_2.x86_64.rpm da6e348892176ff768da43a3f2af5b553c8d400ff222f8d81201223383425e93 kernel-rt-debug-devel-6.12.0-211.38.1.el10_2.x86_64.rpm f0b98ecc4ce0463548d2ada72e84589d694f30dc511e7627870f2824f4484c20 ALSA-2026:45114 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-devel-6.12.0-211.39.1.el10_2.x86_64.rpm 091bc0c13bb760a4a2c62f3d798e5c7f6d35e8e725a085bde73355c672a95553 kernel-rt-debug-modules-6.12.0-211.39.1.el10_2.x86_64.rpm 1d107297c30a0a558e2f74d14e7abe1bf0fadb6cfc678304386dac836d9e015d kernel-rt-debug-devel-6.12.0-211.39.1.el10_2.x86_64.rpm 1f5b608f7f0299cae5ed6aa5febf6479a091d28cce69b654bc3f48a174324d92 kernel-rt-core-6.12.0-211.39.1.el10_2.x86_64.rpm 25f8a8c23392aa90478eb61eab564975f5fe908b44c8058f1d47cfdfd425446b kernel-rt-modules-core-6.12.0-211.39.1.el10_2.x86_64.rpm 2c729137d340c9000cd4795594788954e7246043fe055671ff2a11225216077c kernel-rt-debug-6.12.0-211.39.1.el10_2.x86_64.rpm 2dc688f1c20ef220a3ced7b926d00d6839d365bac615c17cb79b59f5c5c3b1b0 kernel-rt-debug-modules-extra-6.12.0-211.39.1.el10_2.x86_64.rpm 4c18520a458cc2609a329b4540fcbd5690c0d9543e1b789aaf38b084b3a9068c kernel-rt-debug-core-6.12.0-211.39.1.el10_2.x86_64.rpm 5c4092e4b0ba0f508fedd0db2593719abf140bf413be5948f6cbf11fe0ad7977 kernel-rt-modules-6.12.0-211.39.1.el10_2.x86_64.rpm b71a38e857e7c59b55d870f5ab0634f3fe693f04cf60b0e2baabc82c756381a4 kernel-rt-debug-modules-core-6.12.0-211.39.1.el10_2.x86_64.rpm c9dac0fe0c780004becb04f83c1bf71943adb121316be07c196af957c5757021 kernel-rt-modules-extra-6.12.0-211.39.1.el10_2.x86_64.rpm da5588118b3e17c08e2645dda623e285298d7a6efe58d8cf71d688f93f12455b kernel-rt-6.12.0-211.39.1.el10_2.x86_64.rpm f4679f659bf9e6f6b99bd821a26680c7164d97e0f9c736f65ab954967c4f35da ALSA-2026:47017 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281) Bug Fix(es) and Enhancement(s): * rxrpc: Address CVE-2026-43500 [almalinux-10.2.z] (JIRA:AlmaLinux-178254) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-devel-6.12.0-211.40.1.el10_2.x86_64.rpm 05bebf4041e16b43ec0ff18deb4f2ce1bdec06de475f0bcf1b968cc7df351aa4 kernel-rt-debug-modules-extra-6.12.0-211.40.1.el10_2.x86_64.rpm 35b679fca06a8febe9b6a67e517f52e79769109c52855c9a813bfbd6d040f63b kernel-rt-debug-devel-6.12.0-211.40.1.el10_2.x86_64.rpm 3d3a09e3640b21b5f1a02c1d4fc9031a07cf01e9e8f8fb3c559941f9c3a48e0b kernel-rt-debug-modules-core-6.12.0-211.40.1.el10_2.x86_64.rpm 47870a8ac27809116db8d153555901ee1f8008cc337e274fad53a584c05104c6 kernel-rt-core-6.12.0-211.40.1.el10_2.x86_64.rpm 57d5ec0e9b0a4ff497661124b895db16db9acae5167dc11c0f73c37041a6fa6c kernel-rt-modules-extra-6.12.0-211.40.1.el10_2.x86_64.rpm 591a13ff43b3a079d1cee005743e893bcc01d4743adac3d8293f7c0e7dfa7c9e kernel-rt-debug-6.12.0-211.40.1.el10_2.x86_64.rpm 5f1eec4144c25c423fee8dc08dcc028ef0bc1952f10e0846ddddff1758da9f46 kernel-rt-debug-modules-6.12.0-211.40.1.el10_2.x86_64.rpm 660ce4fffbbfae1b00421ba66146604d87e99fafc3593c2305ac2e8251f1945d kernel-rt-6.12.0-211.40.1.el10_2.x86_64.rpm 6859d33560f847d1eb724be062f5c7d37187856e3daa5c7b22750cc068c02e87 kernel-rt-modules-6.12.0-211.40.1.el10_2.x86_64.rpm 773d6957d9a590ee6be55f3a2e109dedc8bee2111ebff5f34c9ecaa15024d10f kernel-rt-debug-core-6.12.0-211.40.1.el10_2.x86_64.rpm 8c91b59b61455048439896a54ba717c87e9e8c7c0633043ecc007598fc28e439 kernel-rt-modules-core-6.12.0-211.40.1.el10_2.x86_64.rpm cd8c5fd98e9a184a97b73b7b9e67b6115d9b5b16d30f8948485d2c9c843c82b9 ALSA-2026:49211 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211) * kernel: isofs: validate Rock Ridge CE continuation extent against volume size (CVE-2026-46303) * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () Bug Fix(es) and Enhancement(s): * [DELL 10.2 FEAT] [LATE-ADD] - Include support for Ghostrider PTL mini config SKU with Realtek IC Solution [almalinux-10.2.z] (JIRA:AlmaLinux-185669) * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-10.2.z] (JIRA:AlmaLinux-212063) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.42.1.el10_2.x86_64.rpm 04b4e1a45efd368781462bdec9e6ce871ec235c8584575c456b8eb7c1ed156e3 kernel-rt-core-6.12.0-211.42.1.el10_2.x86_64.rpm 1332274b14c7d2771b587bb2930244e33d45ee667935fe7433f1d8ca232b6a8c kernel-rt-modules-core-6.12.0-211.42.1.el10_2.x86_64.rpm 1866b0e7350a12547508ed0b94d84597b4846ac8530e61a77134f36d6469b380 kernel-rt-modules-extra-6.12.0-211.42.1.el10_2.x86_64.rpm 2c77ee2a900d23bd3f9218c25919e477f1bcb564acc492597c11f7c24d4c9dd3 kernel-rt-debug-6.12.0-211.42.1.el10_2.x86_64.rpm 2dec6fdb5ea7831351c51c694b1c93c3228c47987ab84a1a54f54d3120a0607b kernel-rt-debug-devel-6.12.0-211.42.1.el10_2.x86_64.rpm 4f338d0f0478417ff644fbfeaf19cc037d78b34b50394dba360eb8d86de55ef1 kernel-rt-debug-core-6.12.0-211.42.1.el10_2.x86_64.rpm 5d16fc35d96314740a0e16cfb766e35e7e048bd19c880edaa8fcd0a275b1b6eb kernel-rt-debug-modules-6.12.0-211.42.1.el10_2.x86_64.rpm 68a84c94fe3ddd6fb07190368aaad83d5cd08fec7949a222735a19e8b08d1744 kernel-rt-devel-6.12.0-211.42.1.el10_2.x86_64.rpm 8e3e0b351960b484cd80889401c65203924211dc88314087cc49c6b90cdccb9c kernel-rt-debug-modules-extra-6.12.0-211.42.1.el10_2.x86_64.rpm b4cf86a66263731005599606fb16d0ed524d8ad71174e5526a212ea8a145a0d8 kernel-rt-modules-6.12.0-211.42.1.el10_2.x86_64.rpm c0b694bcf8a9b3214184dc4cc0160c8716a26d63620c9a1a06fada9b1ee7ae5b kernel-rt-6.12.0-211.42.1.el10_2.x86_64.rpm d047de896b8af152e672ba721764b0732320ea249314d112269aa9016c11946c ALSA-2026:49871 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214) * kernel: procfs: avoid fetching build ID while holding VMA lock (CVE-2026-23199) Bug Fix(es) and Enhancement(s): * [Lenovo] Graphics not working on T14 G7 Intel (Pantherlake) (JIRA:AlmaLinux-172832) * Possible regression with FM350GL [almalinux-10.2.z] (JIRA:AlmaLinux-184266) * [10.2 FEAT] CNB102: dpll: sync with upstream (JIRA:AlmaLinux-211011) * backport make module and modules-core provides use variant [almalinux-10.2.z] (JIRA:AlmaLinux-213965) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-debug-modules-extra-6.12.0-211.43.1.el10_2.x86_64.rpm 0019f2615318a9bcc5ea2c25c19c372e3a3d5f9929136186dbce956730a444ad kernel-rt-debug-modules-core-6.12.0-211.43.1.el10_2.x86_64.rpm 2696bb93d046cdd8e7e5225f9aec681b5302aeffe820ad0f5bfe0ee7f0bc8750 kernel-rt-debug-modules-6.12.0-211.43.1.el10_2.x86_64.rpm 2e6a8c0a7684b59aa0776a4e70ae6aac9e8f4080a1ea7309884b5c4d4d0d3769 kernel-rt-modules-extra-6.12.0-211.43.1.el10_2.x86_64.rpm 611512e8066b39f2690d5e7f675d808adfdd1e5c28ef851c0a742ad1e53f0ca7 kernel-rt-debug-devel-6.12.0-211.43.1.el10_2.x86_64.rpm 7fa49b25f3675d8873db2e0cc8df5b571a0f3a8b850bea346dd72c1907538447 kernel-rt-modules-6.12.0-211.43.1.el10_2.x86_64.rpm 921fb50742e196281f9982161046c914a3013bdc408dcb92de3565c7cd3201c8 kernel-rt-6.12.0-211.43.1.el10_2.x86_64.rpm a823d172454106a80c84e45caaefdaed27f8168df230d4fe5482456a487508fb kernel-rt-debug-6.12.0-211.43.1.el10_2.x86_64.rpm aea0d81aa3ffbd5c5e96fb5c0b93026c56802553804d845b558b13b7964dd720 kernel-rt-modules-core-6.12.0-211.43.1.el10_2.x86_64.rpm c269f7802c0b55d21dd7a221fd8e54b93cfad52c76c20f4f8262c0d8a65c866c kernel-rt-debug-core-6.12.0-211.43.1.el10_2.x86_64.rpm c4ba08bcc9f9a92f977e6738aea74c176430e9bd133ef26940f49bf05fbd18a5 kernel-rt-devel-6.12.0-211.43.1.el10_2.x86_64.rpm c6e0a28e9e380f2d0b4f30c8b3a54ca92c2e2d621e3609da2f444315fc63e380 kernel-rt-core-6.12.0-211.43.1.el10_2.x86_64.rpm e2aa058b903088897bf1ae9701fba300058740cb458023fee3cc5527836b1fe0 ALSA-2026:51295 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CVE-2026-43186) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-10.2.z] (JIRA:AlmaLinux-186345) * ice: driver update 2026-06, part 2 [almalinux-10.2.z] (JIRA:AlmaLinux-193134) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-core-6.12.0-211.44.1.el10_2.x86_64.rpm 0873da9eb8edd45b39bc4af8ebb5df430bd16719cf814dccf161f4bba6d2aae7 kernel-rt-devel-6.12.0-211.44.1.el10_2.x86_64.rpm 20a78f9338c82ac7af7cae20f64d54ff626ee446058065e9a6f253f7234c36f1 kernel-rt-modules-extra-6.12.0-211.44.1.el10_2.x86_64.rpm 2f1425832923a3bc7a3b144e64ef98ac556d2eabf42d244a850c331f2fe6d342 kernel-rt-debug-modules-core-6.12.0-211.44.1.el10_2.x86_64.rpm 34a0da5dc4fa96876a52eb7db3ae8e061a6d7c7d008b5a597a89e482beb8637a kernel-rt-debug-core-6.12.0-211.44.1.el10_2.x86_64.rpm 35ea8439eb172f8ab9328d46a3e926b2f09163c55fdce30bb5f65ad59b033007 kernel-rt-6.12.0-211.44.1.el10_2.x86_64.rpm 4a4c024a1ef6f1f9282455518ca66cf58d06ff4b0dd05e25cdb2458fc7f0dd7a kernel-rt-debug-modules-extra-6.12.0-211.44.1.el10_2.x86_64.rpm 51463159b5a1ff00efd7c69b8051f9a1a106da14e7d720c33963071a6b1a5d4c kernel-rt-debug-modules-6.12.0-211.44.1.el10_2.x86_64.rpm 5bc74581577f9473638d6951b12928c99ad9111e7c62e15288d7dcebb34e8b54 kernel-rt-modules-6.12.0-211.44.1.el10_2.x86_64.rpm 749d2db6c672f6e3da1b3d677619d4c38a350384facad634927e36a3ddd73642 kernel-rt-debug-devel-6.12.0-211.44.1.el10_2.x86_64.rpm aa462a9d48c63613104a534573175ebe84bc575ba0635c5d0017f38e281ff25a kernel-rt-debug-6.12.0-211.44.1.el10_2.x86_64.rpm bce5ef50ac092a4e610947e0c3da4ed1ca7abac297763bb187e2b4afc49acb2e kernel-rt-modules-core-6.12.0-211.44.1.el10_2.x86_64.rpm ff41df0f381b5c506b4c75a32f516ba9ae336a8f363ae39495f7a990c587ca39 ALSA-2026:53330 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fsnotify: Fix ordering of iput() and watched_objects decrement (CVE-2024-53143) * kernel: shmem: fix recovery on rename failures (CVE-2025-71072) * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415) * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368) * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) Bug Fix(es) and Enhancement(s): * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-10.2.z] (JIRA:AlmaLinux-213035) * AlmaLinux10.0 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-10.2.z] (JIRA:AlmaLinux-222503) * AlmaLinux10.0 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-10.2.z] (JIRA:AlmaLinux-222505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-6.12.0-211.46.1.el10_2.x86_64.rpm 05457c8b55d35037ba203f82fb5dfafac13e76659674aa6dc76e01a19ec95915 kernel-rt-core-6.12.0-211.46.1.el10_2.x86_64.rpm 066283a18cbd48a28ac98cdfc08de5a473a317ff1b84208c42f63deb96c18a4f kernel-rt-debug-core-6.12.0-211.46.1.el10_2.x86_64.rpm 20adca8177e937bbd0d85bde108d35f54be88de0993e3fde93751d07b95abd77 kernel-rt-debug-modules-6.12.0-211.46.1.el10_2.x86_64.rpm 2dfe9097d1e9be862526afd3f88ac107baeb8b91e7cd4672a4b3d5b24f03b9c8 kernel-rt-debug-devel-6.12.0-211.46.1.el10_2.x86_64.rpm 48e72f804a190545998622a0ec2f9ef796e6c86df1f822663006dbda1e101250 kernel-rt-modules-extra-6.12.0-211.46.1.el10_2.x86_64.rpm 4c588a7b986e70068f13a191468e6d68738b0859d87893875c611687dcfc6274 kernel-rt-modules-core-6.12.0-211.46.1.el10_2.x86_64.rpm 626ca20e3521b7fef43fc9a98d2d3b04bd176bf14180d522a2d3027cab487513 kernel-rt-devel-6.12.0-211.46.1.el10_2.x86_64.rpm 684e08fea0ecbadb537856040b1038a5763f1c4faae26b18152d8e05790e4059 kernel-rt-debug-6.12.0-211.46.1.el10_2.x86_64.rpm b6b16342afadb64cf93ee47294f06183c4312bd295c8039b4f745c05f610351b kernel-rt-debug-modules-core-6.12.0-211.46.1.el10_2.x86_64.rpm bf9d626aa1dd9aea0d3ca4a3f9c859a7377facca986fd29b5c25de2e3acb2fe2 kernel-rt-modules-6.12.0-211.46.1.el10_2.x86_64.rpm c613ec52fc552438c41a5042276760a93099c65aa19197eafa8b5fa5489018d6 kernel-rt-debug-modules-extra-6.12.0-211.46.1.el10_2.x86_64.rpm c659cf7797e4891153d00e422855a7208ffaa9f45fb09cd31fa51fa86bb89485 ALSA-2026:54343 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202) * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264) * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) * kernel: perf/aux: Fix page UAF in map_range() (CVE-2026-64300) * kernel: af_unix: set gc_in_progress to true in unix_gc() (CVE-2026-53361) Bug Fix(es) and Enhancement(s): * netfilter: CVE backports for AlmaLinux 10.2.z (JIRA:AlmaLinux-185311) * tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-10.2.z] (JIRA:AlmaLinux-214436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-nfv-rpms__10_0_default kernel-rt-debug-6.12.0-211.47.1.el10_2.x86_64.rpm 444084ff127e1782ead7880570de415e27c6e829cf70a2876d1fd08d67fc6898 kernel-rt-debug-core-6.12.0-211.47.1.el10_2.x86_64.rpm 4bb967daad17fc0847284fe8bb02b5b2081c6bf2ad4ca0deac5e58df41d25d52 kernel-rt-debug-modules-extra-6.12.0-211.47.1.el10_2.x86_64.rpm 61954a90dc9794ad7ff7b0683853fa8b60a987b3c1c00a87506bf4e53452d2a3 kernel-rt-modules-core-6.12.0-211.47.1.el10_2.x86_64.rpm 64895223982e608719f58fc6930904811eb7bccebe2d15cde34dd4c2788e7097 kernel-rt-debug-modules-6.12.0-211.47.1.el10_2.x86_64.rpm 650319cf08c569239d6afd34e1a920c93152d827bbb804dc73f1d1e8b49062d4 kernel-rt-debug-modules-core-6.12.0-211.47.1.el10_2.x86_64.rpm 661929a6ad20d2c5332ed3fdb24c1e165677f16b208d7f1c28e6d5a88aa783c5 kernel-rt-6.12.0-211.47.1.el10_2.x86_64.rpm 79529ac5032343aada0ab85c10b8ee25374c5687766e956c106d7de2fea9450a kernel-rt-core-6.12.0-211.47.1.el10_2.x86_64.rpm 972d51f8cd21bbc23d4f1ab71f970b6be6c8d6a49b0bcb985471cad031248c5c kernel-rt-modules-6.12.0-211.47.1.el10_2.x86_64.rpm b19cdc58cbbc314fe84dca3c1b6928add9b62230903d0267042e4011f5e472c2 kernel-rt-modules-extra-6.12.0-211.47.1.el10_2.x86_64.rpm dbc856c06c382c42104c530e866ee41a1394c940aacec4919a73c24f6a7535ba kernel-rt-debug-devel-6.12.0-211.47.1.el10_2.x86_64.rpm dc2a555d57378f5a5c10cb90d5f3da23ceb6a07bb393b02f2a5c24ec07b9ab3d kernel-rt-devel-6.12.0-211.47.1.el10_2.x86_64.rpm efb797b6c52cabfc9c96e66a94a67218acc32bf3dfcb27f74a8519760dac6295