ALSA-2026:18134 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (CVE-2024-56633) * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839) * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980) * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015) * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097) * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166) * kernel: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (CVE-2025-38202) * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279) * kernel: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (CVE-2025-38267) * kernel: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (CVE-2025-38275) * kernel: ftrace: Fix UAF when lookup kallsym after ftrace disabled (CVE-2025-38346) * kernel: ACPICA: fix acpi operand cache leak in dswstate.c (CVE-2025-38345) * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405) * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441) * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470) * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866) * kernel: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (CVE-2025-40034) * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134) * kernel: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" (CVE-2025-40210) * kernel: Linux kernel MPTCP: Privilege escalation or denial of service via use-after-free in timer handling (CVE-2025-40257) * kernel: smb: client: fix potential cfid UAF in smb2_query_info_compound (CVE-2025-40320) * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040) * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111) * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.7.1.el10_2.x86_64.rpm 1af20bd78542d8b751a7086c4ad0fef4ad0c2fae3c441e3a7161302786b132db kernel-rt-debug-core-6.12.0-211.7.1.el10_2.x86_64.rpm 41be60aab2b6500ced9e94af0ecdb90167a12af115ef4a978c469d656a587fd5 kernel-rt-debug-devel-6.12.0-211.7.1.el10_2.x86_64.rpm 557dbb0a0f61299e0eb16e8dc7a1bf8ad6919ddd96cd4775318e99f69ac9b598 kernel-rt-debug-modules-extra-6.12.0-211.7.1.el10_2.x86_64.rpm 5ddd39d9933eecddd0870a4e0df17bf15e6f54846d6e12cb19e9a54a7b560a01 kernel-rt-devel-6.12.0-211.7.1.el10_2.x86_64.rpm 618b98f77fa175b00a40acd7026c12156af34cd360d1729d6cc468b5c6ac675d kernel-rt-core-6.12.0-211.7.1.el10_2.x86_64.rpm 667b8f5914486f8f7e38039190fa6e19c66c0eb8469196fea5119e38edf8570b kernel-rt-modules-core-6.12.0-211.7.1.el10_2.x86_64.rpm 7551afa6d690514db5c0c5f167bfe79f829776308103b2d5c5f636a095c13619 kernel-rt-debug-modules-6.12.0-211.7.1.el10_2.x86_64.rpm 7f57b795820ebf07d77703f6ea714177b4ab6d53077b09a77c7ace90a803494f kernel-rt-modules-extra-6.12.0-211.7.1.el10_2.x86_64.rpm b219a16d9eaca02cfcc9c52682403c45e00cf50deefc04fd5fe7dc119ad8d6c5 kernel-rt-6.12.0-211.7.1.el10_2.x86_64.rpm c29541a2fc12b5d4bc7ace39bef77bbbe65ce1985f5d92c915bad560a1cc6ef6 kernel-rt-modules-6.12.0-211.7.1.el10_2.x86_64.rpm e481156f760793c4cf7a9e86efaeb60ce4da2c6bb589422deca4e00469cf572e kernel-rt-debug-6.12.0-211.7.1.el10_2.x86_64.rpm ec17b6ac1f42ba21edf5cc5ea838449ceb2559da3339e8a6f2ba8ac6bfca9760 ALSA-2026:19074 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677) * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-devel-6.12.0-211.7.3.el10_2.x86_64.rpm 033b02bdd7a71193e5988c167265a3f5060ab92a44267c0cb9284a6450558127 kernel-rt-modules-extra-6.12.0-211.7.3.el10_2.x86_64.rpm 0fe00864ea985b92d4730d4d4330c0ed9cf066f3fa7d43106b5a15771d89122a kernel-rt-debug-modules-6.12.0-211.7.3.el10_2.x86_64.rpm 28ad8a72f6798c18bc176e2589b3cc6d123eb9507ff2ce789cc1c2db2cbf9c29 kernel-rt-debug-modules-core-6.12.0-211.7.3.el10_2.x86_64.rpm 32d1b12d3d13a9b039227cd1792b2b6cd5bf64045970b969e11f5ee32e47bd33 kernel-rt-debug-core-6.12.0-211.7.3.el10_2.x86_64.rpm 3cce146047967a9486ab272717544a50f4549b58561829443272e668efff67e3 kernel-rt-debug-6.12.0-211.7.3.el10_2.x86_64.rpm 49258b36d88971030f492aa5c701be7d6f5c04287c432aae6764196bf540970c kernel-rt-devel-6.12.0-211.7.3.el10_2.x86_64.rpm 6cbbfd253ea7386d8ca1fb1192aaebddee8929130f829feea5300a562b4d52eb kernel-rt-modules-6.12.0-211.7.3.el10_2.x86_64.rpm 6fc6e2719192d3fb89f4f0c550bbfbbf7daaccf1702d9ce539a3bc177cbfdae7 kernel-rt-modules-core-6.12.0-211.7.3.el10_2.x86_64.rpm 7ced5c41beae13497b82d841ba3750657cc0444b7511463a05e22d69f5b093ff kernel-rt-core-6.12.0-211.7.3.el10_2.x86_64.rpm c1586de754517eaa93ee82bdc70befc069ff11439c9a6c4565d88edb3597e0c3 kernel-rt-debug-modules-extra-6.12.0-211.7.3.el10_2.x86_64.rpm df10d9bce5ee1c7fb7bf88a2e84eed504ea7a5531b42783561593bd49b4ee288 kernel-rt-6.12.0-211.7.3.el10_2.x86_64.rpm e9a6031c3bfdd1f831e846c3824569bc7edefc0fd31b7de9130f1c8fd09b9b7b ALSA-2026:19569 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-modules-core-6.12.0-211.16.1.el10_2.x86_64.rpm 243b03974febc6542efc40b91458e6d63ea89e48919cd17b4739af164b31d918 kernel-rt-debug-modules-extra-6.12.0-211.16.1.el10_2.x86_64.rpm 2bd810e6498d0c13e112764e4f13048c09cae0973114115b37262091730ed11d kernel-rt-modules-extra-6.12.0-211.16.1.el10_2.x86_64.rpm 31e5318b39a87d89f10b409308b532fb667384c4cb5dc88392c30a3f69c4d6b9 kernel-rt-core-6.12.0-211.16.1.el10_2.x86_64.rpm 396d9290fd3cb5446013d6ccbfa94ff6060e32433aaec4802dc76e39595d818f kernel-rt-debug-6.12.0-211.16.1.el10_2.x86_64.rpm 3b3591b4b4acd4049deb9b5d26ce172588a28262250999892576300cda52e9e1 kernel-rt-6.12.0-211.16.1.el10_2.x86_64.rpm 4a7b923759de5f61655c9d301e94309369bce7e45a504443076f4b875877bb79 kernel-rt-debug-core-6.12.0-211.16.1.el10_2.x86_64.rpm 62bb5043c4be916427fe587fe723fa94940275a25fb9eebf96f5503bf8c70279 kernel-rt-debug-devel-6.12.0-211.16.1.el10_2.x86_64.rpm 780042d3b3fd3c147cd984b8bd7a79a7b64ea559e0567220737ee91aaa4ff6e0 kernel-rt-modules-6.12.0-211.16.1.el10_2.x86_64.rpm ca055282072a1e35976c2925136390123bf09a9a97dcd860f4038f37ee01b465 kernel-rt-debug-modules-core-6.12.0-211.16.1.el10_2.x86_64.rpm d182d5d6fc6e7c75ac3f09ab8a43ddb50caf810a3b59ed72aea1d92144af962f kernel-rt-debug-modules-6.12.0-211.16.1.el10_2.x86_64.rpm d243b3bd27ac2f9895fcc8e7e38eefa3aa11f8fd415182e32820094590cd338b kernel-rt-devel-6.12.0-211.16.1.el10_2.x86_64.rpm d78799d5967ed0ff47065b92dae85d0ff5a7c99d05b8e301511a14151c65ccc2 ALSA-2026:21557 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645) * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) * kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375) * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) * kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006) * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020) * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051) * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023) * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) * kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205) * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) * kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.18.1.el10_2.x86_64.rpm 0431b4a7af999a2f4fc5a4159b2a78a0ba10aa48036fb6fe70ae0f75efb0c4f2 kernel-rt-modules-core-6.12.0-211.18.1.el10_2.x86_64.rpm 0fea4d445706f82ef074778d4590f86f749d2709196ba4b5f05d75ddcd3d66d8 kernel-rt-debug-modules-6.12.0-211.18.1.el10_2.x86_64.rpm 1977a4d4623ae88331509ca08a4278632beb84906de1a55cad96c35d145cdeed kernel-rt-modules-6.12.0-211.18.1.el10_2.x86_64.rpm 2c00d859a894566e6ed59d3555d9d1154c891d9c27739a78b717798a1bd3b291 kernel-rt-core-6.12.0-211.18.1.el10_2.x86_64.rpm 365b4db0936bc97408968f7ca2f1df1e624af20c8c3b755d40cc1a679c10f8ba kernel-rt-debug-core-6.12.0-211.18.1.el10_2.x86_64.rpm 7f783ede4280143e0fdbc6c7521bff652b812c2df92530a6ff5ea82bb5ba67f4 kernel-rt-debug-devel-6.12.0-211.18.1.el10_2.x86_64.rpm ada3048729e846e95938bb88b7bd3ac6cd96bcc8d026f485e9e9403f9040aae7 kernel-rt-debug-modules-core-6.12.0-211.18.1.el10_2.x86_64.rpm b635ee8932513576efe39a88b73d981044a7bbf24a21103c903b11cf7b2c910e kernel-rt-debug-6.12.0-211.18.1.el10_2.x86_64.rpm b6d555d4e331f084b040f5b2822d0c0ed6fc20e1846507e7c47ae9ad455ed863 kernel-rt-debug-modules-extra-6.12.0-211.18.1.el10_2.x86_64.rpm cb36dd6836f430417dfb5b01daac32f98d797ddf52416b95e72eeb885efb01fb kernel-rt-modules-extra-6.12.0-211.18.1.el10_2.x86_64.rpm d7ffc325d94f1057ccf7de8ff47338577c2f693500d17d4f6e87ffe25dd74132 kernel-rt-6.12.0-211.18.1.el10_2.x86_64.rpm da4bb6d5109a06b2c811872dbde61f1b2ed9f248f5c096eda3260f75540d5f2e ALSA-2026:23329 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653) * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) * kernel: Bluetooth: hci_sync: Fix UAF in le_read_features_complete (CVE-2026-43322) * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-extra-6.12.0-211.20.1.el10_2.x86_64.rpm 383c6e6030122a2fc713bd48ec0892c0a572d8d910ea50e808d91f9e4b6978ab kernel-rt-debug-core-6.12.0-211.20.1.el10_2.x86_64.rpm 5512ee7d4b6f904d746db1517f76d80cc9bddf9ab1fe3737b8ff11dc5de140e5 kernel-rt-core-6.12.0-211.20.1.el10_2.x86_64.rpm 66ef83fd81d93f2877856a4841a09633b3d81d7ae900f72e234867e0db233e26 kernel-rt-modules-6.12.0-211.20.1.el10_2.x86_64.rpm 8718c3618ed45a5af6dfbaa455347150eb00c45f51f8a9ca91743991c5272a39 kernel-rt-debug-devel-6.12.0-211.20.1.el10_2.x86_64.rpm 95c60f87489abaacd811e3e6d3642c45e5de1802f6ac8777c2cf9915302800d3 kernel-rt-debug-modules-core-6.12.0-211.20.1.el10_2.x86_64.rpm 9ef21826df0cd26bbd1c70d9a6cee30815f31b866543ae01d8da261cce4e1527 kernel-rt-devel-6.12.0-211.20.1.el10_2.x86_64.rpm a5d243440eaac4ab1fcd1f310dc8366fcebaeee92b26d539a605fe1569ea5c33 kernel-rt-debug-modules-6.12.0-211.20.1.el10_2.x86_64.rpm b1f389d5d74c7d35046a4dad6d83108b3ad888aed22e4daedd2bd5c0f816ff6d kernel-rt-modules-core-6.12.0-211.20.1.el10_2.x86_64.rpm bf7653088aac80c040ceafba211d60b3e731979041aa07808302321a016e92ab kernel-rt-debug-6.12.0-211.20.1.el10_2.x86_64.rpm e0239b43ab8c3a9d865a1154d778e0f44e6e058c5014fd5f6ee17a2db64dc18c kernel-rt-modules-extra-6.12.0-211.20.1.el10_2.x86_64.rpm f25b9426fa21ec96fb31d55755bb5594ea6f8cce537add993d07a2e133537ba5 kernel-rt-6.12.0-211.20.1.el10_2.x86_64.rpm fe9357e7c85b49d076a4c3a26afc56bac992016b9a4415896ed13369ed4e602e ALSA-2026:25191 Copyright 2026 AlmaLinux OS 0 1 Critical

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: Linux kernel: Denial of Service in erofs filesystem (CVE-2026-31467) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-devel-6.12.0-211.22.1.el10_2.x86_64.rpm 031effb808d2372390a6f9e801a4dbe2d68eb467b2ef6c58d0566146b9bfad68 kernel-rt-core-6.12.0-211.22.1.el10_2.x86_64.rpm 11d04035dd3775840fe9c64d88dd380036653357de1b3e27a84365e75d9f6004 kernel-rt-debug-modules-extra-6.12.0-211.22.1.el10_2.x86_64.rpm 3d8313689c176e770de18ceb869c38a24a4d86a439868621e7e8d6158f76913e kernel-rt-devel-6.12.0-211.22.1.el10_2.x86_64.rpm 58a9128051f9e469a22dcda564064ded8bdffb62ba35a756edac9b27a69e6a80 kernel-rt-debug-core-6.12.0-211.22.1.el10_2.x86_64.rpm 6c1bb38860979493ce699f83650bfd3f405bf4307092eaf92379160fcb2d6eb5 kernel-rt-debug-modules-6.12.0-211.22.1.el10_2.x86_64.rpm 82cb898cbb9116305759dac0b14e9cd7341f5f513c3556a6e544d2098bef9c45 kernel-rt-modules-extra-6.12.0-211.22.1.el10_2.x86_64.rpm 898b2c411ea3eea285ca838a5431859777bfc67bb098511c83a6494abfa6f33a kernel-rt-debug-modules-core-6.12.0-211.22.1.el10_2.x86_64.rpm be80f70cc23c0f7a53f11507b72c026eca9079a7d650c2088f56d65a7c0f08b6 kernel-rt-modules-6.12.0-211.22.1.el10_2.x86_64.rpm c669b59f56876479f7c629a2cf137520fb11abf7280ce993c46591cea49d79c6 kernel-rt-modules-core-6.12.0-211.22.1.el10_2.x86_64.rpm cfd17409b82dcb0b98d9f457048d909936daff70ff26594aa029e6f867c1da30 kernel-rt-debug-6.12.0-211.22.1.el10_2.x86_64.rpm d30dbccee53bd9891f7e833694d54044d587de7e694fc6084bcc6f93e9ff3f85 kernel-rt-6.12.0-211.22.1.el10_2.x86_64.rpm e3f7625e8c0e624ebfa65395cdd3f9ca9f740ce4678698591db8f4418bcbc2d8 ALSA-2026:27288 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474) * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) * kernel: rxrpc: Fix RxGK token loading to check bounds (CVE-2026-31641) * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772) * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260) * kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330) * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166) Bug Fix(es) and Enhancement(s): * AlmaLinux10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-10.2.z] (JIRA:AlmaLinux-166047) * AlmaLinux9.5 crash due to lpfc NULL ndlp->vport [almalinux-10.2.z] (JIRA:AlmaLinux-171774) * objtool static_call check blocks build of out-of-tree livepatch modules on AlmaLinux 10.2 GA kernels ? missing upstream revert f495054bd12e (JIRA:AlmaLinux-178495) * ibmveth Adapter Freeze with Small MSS [almalinux-10.2.z] (JIRA:AlmaLinux-179723) * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-10.2.z] (JIRA:AlmaLinux-183127) * AlmaLinux10.0 - s390/mm: Add missing secure storage access fixups [almalinux-10.2.z] (JIRA:AlmaLinux-183319) * [AlmaLinux10.2.z] Enable Pretimeout Watchdog Panic Functionality on x86 (JIRA:AlmaLinux-182299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-6.12.0-211.26.1.el10_2.x86_64.rpm 2d02f289d1d0fbde8c7b66d51cb4681026df76342ec8a255f4322236747f4bad kernel-rt-debug-modules-extra-6.12.0-211.26.1.el10_2.x86_64.rpm 31e30c0882666feff97204f9de5b3b2ca47efbe3fdfd9bcbd3cfb75cc98d12d4 kernel-rt-debug-devel-6.12.0-211.26.1.el10_2.x86_64.rpm 3a34a488e0d9803a81aba438a6d589d1cee35a5c72ca958f4785017ad781ad1f kernel-rt-modules-core-6.12.0-211.26.1.el10_2.x86_64.rpm 6a9def7546d10e0db4e872ef7593fef867c38c3690179f14b74f7b4fa94e9cb6 kernel-rt-debug-modules-6.12.0-211.26.1.el10_2.x86_64.rpm 7be57ae48645c9e24f37d3a36acb6d3f0516e53ceb7be97e0564f3eaeed6d3d6 kernel-rt-debug-modules-core-6.12.0-211.26.1.el10_2.x86_64.rpm aa8bfa7a3f7f81f9cbbb58036b464a40427b35dbd690d98bf57aa55e69d482cd kernel-rt-modules-6.12.0-211.26.1.el10_2.x86_64.rpm abf3a0f933fd8ab2049ac817cfa1bb0ebd5aa517ccbcc44b459432346208b191 kernel-rt-modules-extra-6.12.0-211.26.1.el10_2.x86_64.rpm ad9a5c10c25285604cf9ddd73058b3bbce723af120fdf0f1e4cd80f5bdcec728 kernel-rt-core-6.12.0-211.26.1.el10_2.x86_64.rpm d1a15a93081026f52a572771915a0197ee55acf3a56d1088c62bab2b0a931139 kernel-rt-devel-6.12.0-211.26.1.el10_2.x86_64.rpm f3408f1a25e0f6cb6b561b1cc7064c918451bdb3a89c787377a91b023c6c01e9 kernel-rt-6.12.0-211.26.1.el10_2.x86_64.rpm f64811bf31004b2452c7e62bf573254fc1382cd0cff9caea90c08ffa5a41ea78 kernel-rt-debug-core-6.12.0-211.26.1.el10_2.x86_64.rpm f7ad2514276f83d4b91f60eb497c2495399c0f802f8b2bc2d16cf9e84379b6ae ALSA-2026:30129 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: rxrpc: fix RESPONSE authenticator parser OOB read (CVE-2026-31636) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414) * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898) * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * Unexpected execmem SELinux denials after CVE-2026-46054 fix [rhel-10.2.z] (JIRA:RHEL-185117) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.28.1.el10_2.x86_64.rpm 0f6174ad18c092314982ef8730d76b4b16a7a9095c2334bc71fe3168177ed8e0 kernel-rt-devel-6.12.0-211.28.1.el10_2.x86_64.rpm 5081abf1c1c51e92a4ab9b5433ca8617ff44e9ee7c8b5ee0352e75cc454de4c8 kernel-rt-modules-6.12.0-211.28.1.el10_2.x86_64.rpm 51ca1444a4df3397188e73237e2d0cec892dbe6c865e314b8a7d08f47ad779e3 kernel-rt-debug-modules-extra-6.12.0-211.28.1.el10_2.x86_64.rpm 5e2e64e0a6cfa432511b4e9ad406930a2b064e26983448b11193bd06cfc7477b kernel-rt-modules-extra-6.12.0-211.28.1.el10_2.x86_64.rpm 6c918281c16b755190ba36bbbe1c3bc492b837bc2539a92894b2a4187a7dc36a kernel-rt-6.12.0-211.28.1.el10_2.x86_64.rpm 75f0a950aa4fa35752a2ac70d1332fcffcb7dd22efc440f4f00d04514af04568 kernel-rt-debug-modules-core-6.12.0-211.28.1.el10_2.x86_64.rpm 866f443ef77f67e2239964cbd0f1608811844490cb17c9fd24844d455eb5a5a7 kernel-rt-debug-6.12.0-211.28.1.el10_2.x86_64.rpm ae3d49bd3f976728bea8fb37137b3b298fad33bdd3122c63d89c203bc00e16bb kernel-rt-debug-devel-6.12.0-211.28.1.el10_2.x86_64.rpm b26742727612b0d4ac3da2d5290783d42bd436c3c68774ff5e9deea7b190c40b kernel-rt-debug-core-6.12.0-211.28.1.el10_2.x86_64.rpm b4e78db159658d75fd85f2dc1e5225b78f86399f0fcd9055ff57523a1e3e0cb1 kernel-rt-core-6.12.0-211.28.1.el10_2.x86_64.rpm b7a9a44c696cc3c1b6027c911e602d83c14150d2c6d6108843ed28bb45abee72 kernel-rt-modules-core-6.12.0-211.28.1.el10_2.x86_64.rpm c65a7f01e9991b448481c378cb6730aca3c414a53416f19d6ad3150102a79910 ALSA-2026:33685 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176) Bug Fix(es) and Enhancement(s): * CLONE - [AlmaLinux 10.2 Bug] qla2xxx flash image validation failure [almalinux-10.2.z] (JIRA:AlmaLinux-181887) * tegra-se fixes and updates [almalinux-10.2.z] (JIRA:AlmaLinux-182759) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.29.1.el10_2.x86_64.rpm 15080f308fad2f18b371e41bb6c18b63dad254dcca2dc2edc950d2549c2fbe48 kernel-rt-modules-6.12.0-211.29.1.el10_2.x86_64.rpm 1f6d65fbfc171a9dbcad3eccf4b561b8eb7cd22500f7877b1c2d964a44e731df kernel-rt-debug-modules-core-6.12.0-211.29.1.el10_2.x86_64.rpm 3c03d37f3e03f529cafd70c41f416c9d3c4b2782043fc253bbd7947e61569aa4 kernel-rt-debug-modules-extra-6.12.0-211.29.1.el10_2.x86_64.rpm 4c0d1e6d6db024fd46c02333c75c13af0d2f697948065bea98f5b83d9a20b06f kernel-rt-modules-core-6.12.0-211.29.1.el10_2.x86_64.rpm 71e552aff3917d5549f062666bff2a21afb68ad803eff6a31d61f7e32a0b6865 kernel-rt-debug-core-6.12.0-211.29.1.el10_2.x86_64.rpm 7d6c041cd36b0e844904a8d5ff8008eaacd4ceadd5705cc918a1dac0e7b60c66 kernel-rt-modules-extra-6.12.0-211.29.1.el10_2.x86_64.rpm 94b184c2c2c3afed01eafcddd263d5cfa1690e328386902857c03e0a708b4fce kernel-rt-debug-modules-6.12.0-211.29.1.el10_2.x86_64.rpm 9a80018f549f6c129c34d464ce7115ec3a6a8b2c64694c46802e9cdfea6ecd9a kernel-rt-core-6.12.0-211.29.1.el10_2.x86_64.rpm a943d0585e1e046e2043ebf8d1c44ad5f81588236b4033361fba0a778c5cfe19 kernel-rt-6.12.0-211.29.1.el10_2.x86_64.rpm d771d85ce901bf2e22b12170d3a8f0f5677ce28ad29ea78b4d6f3ae7aaddf52d kernel-rt-debug-6.12.0-211.29.1.el10_2.x86_64.rpm fefea2cc66608d9167bce52061fc435d1afe4e889b0932c4bab1cf7732306dcd kernel-rt-debug-devel-6.12.0-211.29.1.el10_2.x86_64.rpm ff0173d0c49da0e8af0b4d686fc91ab83b728a46b6caced1db01c807f99ac8d2 ALSA-2026:34911 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) * kernel: rxrpc: Fix potential UAF after skb_unshare() failure (CVE-2026-45998) * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244) * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) * kernel: kernel: ipv6 frag escape () Bug Fix(es) and Enhancement(s): * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-10.2.z] (JIRA:AlmaLinux-182537) * [ThinkPad Avon/Mario +AlmaLinux 10.2]The OS hang up with CapsLock fliker (JIRA:AlmaLinux-185110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-modules-core-6.12.0-211.30.1.el10_2.x86_64.rpm 03fc6db7d114f04f332e27de428db1d6089c601b2e95d26721189c78f2cfb9df kernel-rt-debug-devel-6.12.0-211.30.1.el10_2.x86_64.rpm 0cb5ccc2e650403ee7d995d2956535a6a2d3e74c791aa6b05dd6306134b9fb5e kernel-rt-modules-extra-6.12.0-211.30.1.el10_2.x86_64.rpm 31359c06d526d1bff4d5bc6729122405fac8e62b09eaca870aa8f36a19f7086b kernel-rt-debug-modules-extra-6.12.0-211.30.1.el10_2.x86_64.rpm 516e1b670064ab2154bbb0403db47873f5c31e63dc484d2a9196b22dc3cdff70 kernel-rt-debug-modules-core-6.12.0-211.30.1.el10_2.x86_64.rpm 6f9375c629242a827884b4d17d8cd9e71cd11354d20b72c425a14477318c984f kernel-rt-core-6.12.0-211.30.1.el10_2.x86_64.rpm 72f6691ef70c66dbc82e0c8b87c0e813d843b21c1adc2cab0427487b2e6a17af kernel-rt-6.12.0-211.30.1.el10_2.x86_64.rpm af9e2588f62e62d4dbf2b465bdf99f5dc6a025db623f27e602386eb342f22dd8 kernel-rt-debug-6.12.0-211.30.1.el10_2.x86_64.rpm c98d676471a70b9e62c3f034935d49afec83eae423a8eb9fecc3bb4b6acd90c1 kernel-rt-devel-6.12.0-211.30.1.el10_2.x86_64.rpm dd52e2c9cfe4c5b0a51a4b30d36f208f3092b532e0975bce74e8005347454394 kernel-rt-debug-modules-6.12.0-211.30.1.el10_2.x86_64.rpm e2c45d8fd04770154f38e053dc887fecd5a580c82fa7d620567a50eacfdf8a30 kernel-rt-modules-6.12.0-211.30.1.el10_2.x86_64.rpm f0683dd56f26134d692c4a00a404988b5b72c29dd4474b518bd315fbd0d7be50 kernel-rt-debug-core-6.12.0-211.30.1.el10_2.x86_64.rpm f3a33d61967ef7a009098d8509e1634614ccf3e40a53d391afb8aa7e38aa47f4 ALSA-2026:36541 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276) * kernel: net/ipv6: ioam6: prevent schema length wraparound in trace fill (CVE-2026-43341) * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259) Bug Fix(es) and Enhancement(s): * CNB103: net: page_pool: avoid false positive warning if NAPI was never added [almalinux-10.2.z] (JIRA:AlmaLinux-162140) * [AlmaLinux 10] Bonding reports unknown speed/duplex for tg3 interface [almalinux-10.2.z] (JIRA:AlmaLinux-182770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-core-6.12.0-211.31.1.el10_2.x86_64.rpm 0568009f3c1041614d9a078a0f7560825ff04e638efb9fc4050563debb447024 kernel-rt-debug-core-6.12.0-211.31.1.el10_2.x86_64.rpm 3263f90703735a9eda6b4573c3248f2d1dd83c9ba82c9c79ec98b98f3e91c526 kernel-rt-debug-modules-6.12.0-211.31.1.el10_2.x86_64.rpm 32670934fe783b2f1a6910aafb146e5402d1f6482a6dd43ec1f1ddf740f1107f kernel-rt-modules-core-6.12.0-211.31.1.el10_2.x86_64.rpm 3dda308766a43676ea1d2a7a0d31e790447ba28bdab8feae3f4925be7ac62694 kernel-rt-debug-devel-6.12.0-211.31.1.el10_2.x86_64.rpm 6a56851fd6258c60f3f77d734647bf365554f242a50096eded53e1536dccc962 kernel-rt-6.12.0-211.31.1.el10_2.x86_64.rpm 81d79accff76562a9533d6992d213505eca2e8c5009356f41e83d4e7b367fc17 kernel-rt-debug-modules-extra-6.12.0-211.31.1.el10_2.x86_64.rpm ac688cff5f1437e66fc883b5d106cb80ef0dcc1b982635fddfc26f93e2a8ee75 kernel-rt-modules-6.12.0-211.31.1.el10_2.x86_64.rpm af660faac03beae0650bfd5cc82552aec4ae6420ee4c27fd89c3165aa27b8f42 kernel-rt-modules-extra-6.12.0-211.31.1.el10_2.x86_64.rpm b9fcf9c634953cfd1a1c758c631f03beea048e960ba0079fcc3156725afc6f6e kernel-rt-debug-6.12.0-211.31.1.el10_2.x86_64.rpm c05b1761ac7f4845d1b2ef4760b5e10f56a1cbc9a77d6b8eb808949cecc9e1c2 kernel-rt-debug-modules-core-6.12.0-211.31.1.el10_2.x86_64.rpm e9a8b8679a6bf5170abb1c2c8cb570c4bab2fdaa3727a121c5c21fcb5cda66cd kernel-rt-devel-6.12.0-211.31.1.el10_2.x86_64.rpm eaec4d85fd5d120df6644f955552609e12a8a46480c08be296edda37587f42e7 ALSA-2026:36956 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.32.1.el10_2.x86_64.rpm 04f004d208dff68c404011aa051ed3e9e905a0f1e4ce33767610cf54a2a91570 kernel-rt-debug-modules-core-6.12.0-211.32.1.el10_2.x86_64.rpm 0548a2e78e9e1d3a0ee5efdb530553fb2826572b1f6dec07c3eb2c0113c98395 kernel-rt-debug-devel-6.12.0-211.32.1.el10_2.x86_64.rpm 3be990549566325249affcacaf89cce2cde7754b2608afa5daa3efc83eeeb1e0 kernel-rt-6.12.0-211.32.1.el10_2.x86_64.rpm 41f3a3db1f84bf9df9998cf962b849fdd1c5748ba678fde1f59f67f15a2e005f kernel-rt-modules-6.12.0-211.32.1.el10_2.x86_64.rpm 4d7479a62c8cf3f23dc76cab405542652929222583a7166cf7f8ad54222e9b5b kernel-rt-devel-6.12.0-211.32.1.el10_2.x86_64.rpm 5310f61d27079f94cefa60c6082d08460e98d2cc911f4ae54948c4d327fb3991 kernel-rt-debug-modules-extra-6.12.0-211.32.1.el10_2.x86_64.rpm 5f258e0a65f8d6ec1b3a290e6a7defdc14f871a16d90f0b3575a446a9d2fab60 kernel-rt-modules-extra-6.12.0-211.32.1.el10_2.x86_64.rpm 762ac63da122b5ac61d6956cc70754f165826fdd40b97bcc8cf97230d169008d kernel-rt-modules-core-6.12.0-211.32.1.el10_2.x86_64.rpm 87ff7205681713f1cded84a7328107c1e4015934e44e3237d1407971c7cd6c28 kernel-rt-debug-6.12.0-211.32.1.el10_2.x86_64.rpm 956ec6f823bbc4cdd5fbce3483347836856e9a12d455567c88bca437198b2d9d kernel-rt-core-6.12.0-211.32.1.el10_2.x86_64.rpm a52bfafae7aa77123ffb8703bb2a61b98823ba30ca014a42b36ed5380f4f0f38 kernel-rt-debug-core-6.12.0-211.32.1.el10_2.x86_64.rpm f83f0bc08f6a85c96aa06a352e365ee1f2ab8f96c0109e770d938e12d5f2f613 ALSA-2026:38492 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-modules-extra-6.12.0-211.33.1.el10_2.x86_64.rpm 18fdbfb88f183c515867ba92b9258d1a738294853dbb280344ecfde0d1e44221 kernel-rt-debug-modules-core-6.12.0-211.33.1.el10_2.x86_64.rpm 2032b59b3bf8f2d0b269474ca46c55d85a02ab160dc3adb4761a5dedb6179538 kernel-rt-debug-modules-6.12.0-211.33.1.el10_2.x86_64.rpm 23150f1e8f08342e12840b330228320fc72788f44a10f5355c3d32f3c8a280c4 kernel-rt-debug-6.12.0-211.33.1.el10_2.x86_64.rpm 411c98bb20669d79911ab26da12b738d4f962efaf8ed7e12d0f0e43465c717f8 kernel-rt-6.12.0-211.33.1.el10_2.x86_64.rpm 4b35c0367a1a9eadbac5bbb2e04ddb3efe9b45526efd078b5272f1f39c1be488 kernel-rt-modules-core-6.12.0-211.33.1.el10_2.x86_64.rpm 4be55e82082115eac0e64bf62ed03271ae9e9465f105be568e7213a5ab3ee10d kernel-rt-devel-6.12.0-211.33.1.el10_2.x86_64.rpm 84e355b3275752391e989aabe4705605bb2cff37a48ae4f80898ead60f3b8c36 kernel-rt-debug-devel-6.12.0-211.33.1.el10_2.x86_64.rpm a198a34e232fd8f1f148acc40112a3e023d54b7a37f875b6c89904fcee0b6fb0 kernel-rt-modules-6.12.0-211.33.1.el10_2.x86_64.rpm a4654944121e06ed84ed06ce93a1a9f37b9160515f8602cd828ede4e109b144c kernel-rt-core-6.12.0-211.33.1.el10_2.x86_64.rpm ca6a2a4f7dede626eb634e61b8c004c2dcea1afc78acab356b05df74d25564a8 kernel-rt-debug-core-6.12.0-211.33.1.el10_2.x86_64.rpm ceb4333ff2bd2ff473cd6adb60d49934330c3976fafa6b5503d213f180c1b0ba kernel-rt-debug-modules-extra-6.12.0-211.33.1.el10_2.x86_64.rpm e48f1139dab793e91fd941ee7dbf8b41eb4704893b09fd38f81fe5dc886610fd ALSA-2026:39494 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) * kernel: XFS data corruption using reflink () Bug Fix(es) and Enhancement(s): * [Exploits (KEV)] kernel: XFS data corruption using reflink [almalinux-10.2.z] (JIRA:AlmaLinux-193945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-modules-6.12.0-211.34.1.el10_2.x86_64.rpm 2a80b5d45cd372edf31fdefaa0d6f79cdaa89598ead0927a75a3d8fb2fccc57f kernel-rt-debug-core-6.12.0-211.34.1.el10_2.x86_64.rpm 3c2b441bd0fd39855ad2c97a31291eba06083b33035da8e19b5fa899aaf15892 kernel-rt-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm 63eee0b227f975d390eee29bec9c877ee30a85dfef3556006e9455cc454d9864 kernel-rt-6.12.0-211.34.1.el10_2.x86_64.rpm 64e46c3f0d840c26064072d8bcd1d2f5f921630688bdba917038ccf5c28edd20 kernel-rt-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm 795fa0bb38935effb2cd7432330d3150746b34c068c5f28c4fed6e68d16e6324 kernel-rt-core-6.12.0-211.34.1.el10_2.x86_64.rpm c6fed3e081f26d4bdf8fb64886b47dfe0b8d87e0bc86fd265e85f1595eb9777e kernel-rt-debug-6.12.0-211.34.1.el10_2.x86_64.rpm c93418c59d45e49d0e6ab4a89ebafde2a23c91a2a3bfe1d21338c7c13b2babfe kernel-rt-devel-6.12.0-211.34.1.el10_2.x86_64.rpm d1faf24b4d6fedb81f30c6f945ba2ce14d58526551055c60e0ac401ce2d7c515 kernel-rt-debug-modules-6.12.0-211.34.1.el10_2.x86_64.rpm d3137a82224314de8d9ac8891efc78b1d27f1bae1c5965e1033c59a6f25f8206 kernel-rt-debug-devel-6.12.0-211.34.1.el10_2.x86_64.rpm daeeae64b562d50badbbb53318f545b55a9f981f5854612b9b05638d522432aa kernel-rt-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm e3ce9b9cf8ec5fa1154e6121b0d86bcff99a9932eca5ab8a29311a5efb671ce8 kernel-rt-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm ed466b571529f6241b63fe9531de0395de72308aa036f86f4afdfdb6df4a16d6 ALSA-2026:42919 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113) * kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147) * kernel: flex_proportions: make fprop_new_period() hardirq safe (CVE-2026-23168) * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530) * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) * kernel: fanotify: fix false positive on permission events (CVE-2026-46150) * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215) * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976) * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950) * kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009) * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) * kernel: can: bcm: thrtimer use-after-free during RX operation teardown () Bug Fix(es) and Enhancement(s): * nfsd_file slab cache objects remaining on kmem_cache_shutdown during nfsd teardown while running bz1477872 testcase (JIRA:AlmaLinux-173103) * tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-10.2.z] (JIRA:AlmaLinux-183975) * [AlmaLinux10-debug]: BUG: KASAN: slab-use-after-free in __pv_queued_spin_lock_slowpath [almalinux-10.2.z] (JIRA:AlmaLinux-186311) * ice: driver update 2026-06, part 1 [almalinux-10.2.z] (JIRA:AlmaLinux-191324) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-modules-core-6.12.0-211.37.1.el10_2.x86_64.rpm 022ea7a952d78039394bcaa6200c6b0a4215d5c6f161ec8023fa48d05600036e kernel-rt-6.12.0-211.37.1.el10_2.x86_64.rpm 2343de2fdc1bfdd57e5ef191824d134b1e7c821e875f4f176682453c1d1665a9 kernel-rt-debug-devel-6.12.0-211.37.1.el10_2.x86_64.rpm 820d18d9fb5e081835dc034a29aea9a080544eae655d3f8bde7fdbce2e163c47 kernel-rt-modules-6.12.0-211.37.1.el10_2.x86_64.rpm 84b191f2af6617628e0d27769a84b27e023ff2e6de636a1c8e74a3e5e59cdbf3 kernel-rt-debug-modules-core-6.12.0-211.37.1.el10_2.x86_64.rpm 8ff6b7b9192785b5e309ed4774dfca89a74b1bef6d6b9538883802d454e09ced kernel-rt-debug-core-6.12.0-211.37.1.el10_2.x86_64.rpm 9935ef5eba08e5dca6d51521fa4985296ab65ad0f04d62f541fe039da47ada98 kernel-rt-devel-6.12.0-211.37.1.el10_2.x86_64.rpm a4f0d13680fe1caed17e6d1c79e8df577bd3eb69468999b8acf26df1d8ae08e2 kernel-rt-debug-modules-6.12.0-211.37.1.el10_2.x86_64.rpm cda86f3f0523f6767fcf33820eed5e3d08a925ea2306ee75ffdae70d86f6d247 kernel-rt-core-6.12.0-211.37.1.el10_2.x86_64.rpm cfdf8c10431f1f493c8d2ee171962791beab6a3fcca0c143de42e22c73bea8f3 kernel-rt-modules-extra-6.12.0-211.37.1.el10_2.x86_64.rpm deb6a5a6adc5deff265ac697e44bc6360b4d9a9a028144298af1c61db551b7d4 kernel-rt-debug-6.12.0-211.37.1.el10_2.x86_64.rpm f65eb4a3e4cabf84a126f58933ff07351f9b1488975252b83fcd6d1157c6b059 kernel-rt-debug-modules-extra-6.12.0-211.37.1.el10_2.x86_64.rpm fc9abe3726fb46959bf517e939fb2a694f65246877b73e0ee016b093a52fd437 ALSA-2026:44270 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.38.1.el10_2.x86_64.rpm 04bece38e06b4d151e07a125f3eab57c1f2f3bf5e791c5ee863fccd606a96376 kernel-rt-debug-6.12.0-211.38.1.el10_2.x86_64.rpm 07b1b47100057739258c90afb3ab5dc5f178d04daf4e640310cd9782d0a1e879 kernel-rt-debug-core-6.12.0-211.38.1.el10_2.x86_64.rpm 100e4618c6d3b5bd8c6a651a73f65295c32f28b040786a8787be393f93313af0 kernel-rt-modules-extra-6.12.0-211.38.1.el10_2.x86_64.rpm 2c314d410fac0b260385fd0f9d16bcd47abb4bc8727bf326bb8663b80c7d5c31 kernel-rt-devel-6.12.0-211.38.1.el10_2.x86_64.rpm 2e459ab8e5e102b3a51aeac19e56ab768eabc701305ec1bdadccb563187e9624 kernel-rt-debug-modules-6.12.0-211.38.1.el10_2.x86_64.rpm 7c4e1e64e06ecce793808feeee36b5246d2fcb6dedc70feaa569cadcca38abf0 kernel-rt-debug-modules-extra-6.12.0-211.38.1.el10_2.x86_64.rpm a64522c53d149a3323c63fc482b5983b802f42267f085c037f59313594c6cb1e kernel-rt-modules-6.12.0-211.38.1.el10_2.x86_64.rpm b1039418439f688a2c8cba6b72b019b6e272d657130d91f670f7b563c0437a94 kernel-rt-6.12.0-211.38.1.el10_2.x86_64.rpm be0b10c2efb3d82203331a083a622aca4ab9721cbd739f57f81faeadcfff680e kernel-rt-modules-core-6.12.0-211.38.1.el10_2.x86_64.rpm d6c7fc85979f6110cbfc190f4d5df426416f2fffe608619e69e016302e72dbc7 kernel-rt-core-6.12.0-211.38.1.el10_2.x86_64.rpm da6e348892176ff768da43a3f2af5b553c8d400ff222f8d81201223383425e93 kernel-rt-debug-devel-6.12.0-211.38.1.el10_2.x86_64.rpm f0b98ecc4ce0463548d2ada72e84589d694f30dc511e7627870f2824f4484c20 ALSA-2026:45114 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.39.1.el10_2.x86_64.rpm 091bc0c13bb760a4a2c62f3d798e5c7f6d35e8e725a085bde73355c672a95553 kernel-rt-debug-modules-6.12.0-211.39.1.el10_2.x86_64.rpm 1d107297c30a0a558e2f74d14e7abe1bf0fadb6cfc678304386dac836d9e015d kernel-rt-debug-devel-6.12.0-211.39.1.el10_2.x86_64.rpm 1f5b608f7f0299cae5ed6aa5febf6479a091d28cce69b654bc3f48a174324d92 kernel-rt-core-6.12.0-211.39.1.el10_2.x86_64.rpm 25f8a8c23392aa90478eb61eab564975f5fe908b44c8058f1d47cfdfd425446b kernel-rt-modules-core-6.12.0-211.39.1.el10_2.x86_64.rpm 2c729137d340c9000cd4795594788954e7246043fe055671ff2a11225216077c kernel-rt-debug-6.12.0-211.39.1.el10_2.x86_64.rpm 2dc688f1c20ef220a3ced7b926d00d6839d365bac615c17cb79b59f5c5c3b1b0 kernel-rt-debug-modules-extra-6.12.0-211.39.1.el10_2.x86_64.rpm 4c18520a458cc2609a329b4540fcbd5690c0d9543e1b789aaf38b084b3a9068c kernel-rt-debug-core-6.12.0-211.39.1.el10_2.x86_64.rpm 5c4092e4b0ba0f508fedd0db2593719abf140bf413be5948f6cbf11fe0ad7977 kernel-rt-modules-6.12.0-211.39.1.el10_2.x86_64.rpm b71a38e857e7c59b55d870f5ab0634f3fe693f04cf60b0e2baabc82c756381a4 kernel-rt-debug-modules-core-6.12.0-211.39.1.el10_2.x86_64.rpm c9dac0fe0c780004becb04f83c1bf71943adb121316be07c196af957c5757021 kernel-rt-modules-extra-6.12.0-211.39.1.el10_2.x86_64.rpm da5588118b3e17c08e2645dda623e285298d7a6efe58d8cf71d688f93f12455b kernel-rt-6.12.0-211.39.1.el10_2.x86_64.rpm f4679f659bf9e6f6b99bd821a26680c7164d97e0f9c736f65ab954967c4f35da ALSA-2026:47017 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281) Bug Fix(es) and Enhancement(s): * rxrpc: Address CVE-2026-43500 [almalinux-10.2.z] (JIRA:AlmaLinux-178254) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.40.1.el10_2.x86_64.rpm 05bebf4041e16b43ec0ff18deb4f2ce1bdec06de475f0bcf1b968cc7df351aa4 kernel-rt-debug-modules-extra-6.12.0-211.40.1.el10_2.x86_64.rpm 35b679fca06a8febe9b6a67e517f52e79769109c52855c9a813bfbd6d040f63b kernel-rt-debug-devel-6.12.0-211.40.1.el10_2.x86_64.rpm 3d3a09e3640b21b5f1a02c1d4fc9031a07cf01e9e8f8fb3c559941f9c3a48e0b kernel-rt-debug-modules-core-6.12.0-211.40.1.el10_2.x86_64.rpm 47870a8ac27809116db8d153555901ee1f8008cc337e274fad53a584c05104c6 kernel-rt-core-6.12.0-211.40.1.el10_2.x86_64.rpm 57d5ec0e9b0a4ff497661124b895db16db9acae5167dc11c0f73c37041a6fa6c kernel-rt-modules-extra-6.12.0-211.40.1.el10_2.x86_64.rpm 591a13ff43b3a079d1cee005743e893bcc01d4743adac3d8293f7c0e7dfa7c9e kernel-rt-debug-6.12.0-211.40.1.el10_2.x86_64.rpm 5f1eec4144c25c423fee8dc08dcc028ef0bc1952f10e0846ddddff1758da9f46 kernel-rt-debug-modules-6.12.0-211.40.1.el10_2.x86_64.rpm 660ce4fffbbfae1b00421ba66146604d87e99fafc3593c2305ac2e8251f1945d kernel-rt-6.12.0-211.40.1.el10_2.x86_64.rpm 6859d33560f847d1eb724be062f5c7d37187856e3daa5c7b22750cc068c02e87 kernel-rt-modules-6.12.0-211.40.1.el10_2.x86_64.rpm 773d6957d9a590ee6be55f3a2e109dedc8bee2111ebff5f34c9ecaa15024d10f kernel-rt-debug-core-6.12.0-211.40.1.el10_2.x86_64.rpm 8c91b59b61455048439896a54ba717c87e9e8c7c0633043ecc007598fc28e439 kernel-rt-modules-core-6.12.0-211.40.1.el10_2.x86_64.rpm cd8c5fd98e9a184a97b73b7b9e67b6115d9b5b16d30f8948485d2c9c843c82b9 ALSA-2026:49211 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211) * kernel: isofs: validate Rock Ridge CE continuation extent against volume size (CVE-2026-46303) * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () Bug Fix(es) and Enhancement(s): * [DELL 10.2 FEAT] [LATE-ADD] - Include support for Ghostrider PTL mini config SKU with Realtek IC Solution [almalinux-10.2.z] (JIRA:AlmaLinux-185669) * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-10.2.z] (JIRA:AlmaLinux-212063) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.42.1.el10_2.x86_64.rpm 04b4e1a45efd368781462bdec9e6ce871ec235c8584575c456b8eb7c1ed156e3 kernel-rt-core-6.12.0-211.42.1.el10_2.x86_64.rpm 1332274b14c7d2771b587bb2930244e33d45ee667935fe7433f1d8ca232b6a8c kernel-rt-modules-core-6.12.0-211.42.1.el10_2.x86_64.rpm 1866b0e7350a12547508ed0b94d84597b4846ac8530e61a77134f36d6469b380 kernel-rt-modules-extra-6.12.0-211.42.1.el10_2.x86_64.rpm 2c77ee2a900d23bd3f9218c25919e477f1bcb564acc492597c11f7c24d4c9dd3 kernel-rt-debug-6.12.0-211.42.1.el10_2.x86_64.rpm 2dec6fdb5ea7831351c51c694b1c93c3228c47987ab84a1a54f54d3120a0607b kernel-rt-debug-devel-6.12.0-211.42.1.el10_2.x86_64.rpm 4f338d0f0478417ff644fbfeaf19cc037d78b34b50394dba360eb8d86de55ef1 kernel-rt-debug-core-6.12.0-211.42.1.el10_2.x86_64.rpm 5d16fc35d96314740a0e16cfb766e35e7e048bd19c880edaa8fcd0a275b1b6eb kernel-rt-debug-modules-6.12.0-211.42.1.el10_2.x86_64.rpm 68a84c94fe3ddd6fb07190368aaad83d5cd08fec7949a222735a19e8b08d1744 kernel-rt-devel-6.12.0-211.42.1.el10_2.x86_64.rpm 8e3e0b351960b484cd80889401c65203924211dc88314087cc49c6b90cdccb9c kernel-rt-debug-modules-extra-6.12.0-211.42.1.el10_2.x86_64.rpm b4cf86a66263731005599606fb16d0ed524d8ad71174e5526a212ea8a145a0d8 kernel-rt-modules-6.12.0-211.42.1.el10_2.x86_64.rpm c0b694bcf8a9b3214184dc4cc0160c8716a26d63620c9a1a06fada9b1ee7ae5b kernel-rt-6.12.0-211.42.1.el10_2.x86_64.rpm d047de896b8af152e672ba721764b0732320ea249314d112269aa9016c11946c ALSA-2026:49871 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214) * kernel: procfs: avoid fetching build ID while holding VMA lock (CVE-2026-23199) Bug Fix(es) and Enhancement(s): * [Lenovo] Graphics not working on T14 G7 Intel (Pantherlake) (JIRA:AlmaLinux-172832) * Possible regression with FM350GL [almalinux-10.2.z] (JIRA:AlmaLinux-184266) * [10.2 FEAT] CNB102: dpll: sync with upstream (JIRA:AlmaLinux-211011) * backport make module and modules-core provides use variant [almalinux-10.2.z] (JIRA:AlmaLinux-213965) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-extra-6.12.0-211.43.1.el10_2.x86_64.rpm 0019f2615318a9bcc5ea2c25c19c372e3a3d5f9929136186dbce956730a444ad kernel-rt-debug-modules-core-6.12.0-211.43.1.el10_2.x86_64.rpm 2696bb93d046cdd8e7e5225f9aec681b5302aeffe820ad0f5bfe0ee7f0bc8750 kernel-rt-debug-modules-6.12.0-211.43.1.el10_2.x86_64.rpm 2e6a8c0a7684b59aa0776a4e70ae6aac9e8f4080a1ea7309884b5c4d4d0d3769 kernel-rt-modules-extra-6.12.0-211.43.1.el10_2.x86_64.rpm 611512e8066b39f2690d5e7f675d808adfdd1e5c28ef851c0a742ad1e53f0ca7 kernel-rt-debug-devel-6.12.0-211.43.1.el10_2.x86_64.rpm 7fa49b25f3675d8873db2e0cc8df5b571a0f3a8b850bea346dd72c1907538447 kernel-rt-modules-6.12.0-211.43.1.el10_2.x86_64.rpm 921fb50742e196281f9982161046c914a3013bdc408dcb92de3565c7cd3201c8 kernel-rt-6.12.0-211.43.1.el10_2.x86_64.rpm a823d172454106a80c84e45caaefdaed27f8168df230d4fe5482456a487508fb kernel-rt-debug-6.12.0-211.43.1.el10_2.x86_64.rpm aea0d81aa3ffbd5c5e96fb5c0b93026c56802553804d845b558b13b7964dd720 kernel-rt-modules-core-6.12.0-211.43.1.el10_2.x86_64.rpm c269f7802c0b55d21dd7a221fd8e54b93cfad52c76c20f4f8262c0d8a65c866c kernel-rt-debug-core-6.12.0-211.43.1.el10_2.x86_64.rpm c4ba08bcc9f9a92f977e6738aea74c176430e9bd133ef26940f49bf05fbd18a5 kernel-rt-devel-6.12.0-211.43.1.el10_2.x86_64.rpm c6e0a28e9e380f2d0b4f30c8b3a54ca92c2e2d621e3609da2f444315fc63e380 kernel-rt-core-6.12.0-211.43.1.el10_2.x86_64.rpm e2aa058b903088897bf1ae9701fba300058740cb458023fee3cc5527836b1fe0 ALSA-2026:51295 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CVE-2026-43186) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-10.2.z] (JIRA:AlmaLinux-186345) * ice: driver update 2026-06, part 2 [almalinux-10.2.z] (JIRA:AlmaLinux-193134) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-core-6.12.0-211.44.1.el10_2.x86_64.rpm 0873da9eb8edd45b39bc4af8ebb5df430bd16719cf814dccf161f4bba6d2aae7 kernel-rt-devel-6.12.0-211.44.1.el10_2.x86_64.rpm 20a78f9338c82ac7af7cae20f64d54ff626ee446058065e9a6f253f7234c36f1 kernel-rt-modules-extra-6.12.0-211.44.1.el10_2.x86_64.rpm 2f1425832923a3bc7a3b144e64ef98ac556d2eabf42d244a850c331f2fe6d342 kernel-rt-debug-modules-core-6.12.0-211.44.1.el10_2.x86_64.rpm 34a0da5dc4fa96876a52eb7db3ae8e061a6d7c7d008b5a597a89e482beb8637a kernel-rt-debug-core-6.12.0-211.44.1.el10_2.x86_64.rpm 35ea8439eb172f8ab9328d46a3e926b2f09163c55fdce30bb5f65ad59b033007 kernel-rt-6.12.0-211.44.1.el10_2.x86_64.rpm 4a4c024a1ef6f1f9282455518ca66cf58d06ff4b0dd05e25cdb2458fc7f0dd7a kernel-rt-debug-modules-extra-6.12.0-211.44.1.el10_2.x86_64.rpm 51463159b5a1ff00efd7c69b8051f9a1a106da14e7d720c33963071a6b1a5d4c kernel-rt-debug-modules-6.12.0-211.44.1.el10_2.x86_64.rpm 5bc74581577f9473638d6951b12928c99ad9111e7c62e15288d7dcebb34e8b54 kernel-rt-modules-6.12.0-211.44.1.el10_2.x86_64.rpm 749d2db6c672f6e3da1b3d677619d4c38a350384facad634927e36a3ddd73642 kernel-rt-debug-devel-6.12.0-211.44.1.el10_2.x86_64.rpm aa462a9d48c63613104a534573175ebe84bc575ba0635c5d0017f38e281ff25a kernel-rt-debug-6.12.0-211.44.1.el10_2.x86_64.rpm bce5ef50ac092a4e610947e0c3da4ed1ca7abac297763bb187e2b4afc49acb2e kernel-rt-modules-core-6.12.0-211.44.1.el10_2.x86_64.rpm ff41df0f381b5c506b4c75a32f516ba9ae336a8f363ae39495f7a990c587ca39 ALSA-2026:53330 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fsnotify: Fix ordering of iput() and watched_objects decrement (CVE-2024-53143) * kernel: shmem: fix recovery on rename failures (CVE-2025-71072) * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415) * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368) * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) Bug Fix(es) and Enhancement(s): * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-10.2.z] (JIRA:AlmaLinux-213035) * AlmaLinux10.0 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-10.2.z] (JIRA:AlmaLinux-222503) * AlmaLinux10.0 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-10.2.z] (JIRA:AlmaLinux-222505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-6.12.0-211.46.1.el10_2.x86_64.rpm 05457c8b55d35037ba203f82fb5dfafac13e76659674aa6dc76e01a19ec95915 kernel-rt-core-6.12.0-211.46.1.el10_2.x86_64.rpm 066283a18cbd48a28ac98cdfc08de5a473a317ff1b84208c42f63deb96c18a4f kernel-rt-debug-core-6.12.0-211.46.1.el10_2.x86_64.rpm 20adca8177e937bbd0d85bde108d35f54be88de0993e3fde93751d07b95abd77 kernel-rt-debug-modules-6.12.0-211.46.1.el10_2.x86_64.rpm 2dfe9097d1e9be862526afd3f88ac107baeb8b91e7cd4672a4b3d5b24f03b9c8 kernel-rt-debug-devel-6.12.0-211.46.1.el10_2.x86_64.rpm 48e72f804a190545998622a0ec2f9ef796e6c86df1f822663006dbda1e101250 kernel-rt-modules-extra-6.12.0-211.46.1.el10_2.x86_64.rpm 4c588a7b986e70068f13a191468e6d68738b0859d87893875c611687dcfc6274 kernel-rt-modules-core-6.12.0-211.46.1.el10_2.x86_64.rpm 626ca20e3521b7fef43fc9a98d2d3b04bd176bf14180d522a2d3027cab487513 kernel-rt-devel-6.12.0-211.46.1.el10_2.x86_64.rpm 684e08fea0ecbadb537856040b1038a5763f1c4faae26b18152d8e05790e4059 kernel-rt-debug-6.12.0-211.46.1.el10_2.x86_64.rpm b6b16342afadb64cf93ee47294f06183c4312bd295c8039b4f745c05f610351b kernel-rt-debug-modules-core-6.12.0-211.46.1.el10_2.x86_64.rpm bf9d626aa1dd9aea0d3ca4a3f9c859a7377facca986fd29b5c25de2e3acb2fe2 kernel-rt-modules-6.12.0-211.46.1.el10_2.x86_64.rpm c613ec52fc552438c41a5042276760a93099c65aa19197eafa8b5fa5489018d6 kernel-rt-debug-modules-extra-6.12.0-211.46.1.el10_2.x86_64.rpm c659cf7797e4891153d00e422855a7208ffaa9f45fb09cd31fa51fa86bb89485 ALSA-2026:54343 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202) * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264) * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) * kernel: perf/aux: Fix page UAF in map_range() (CVE-2026-64300) * kernel: af_unix: set gc_in_progress to true in unix_gc() (CVE-2026-53361) Bug Fix(es) and Enhancement(s): * netfilter: CVE backports for AlmaLinux 10.2.z (JIRA:AlmaLinux-185311) * tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-10.2.z] (JIRA:AlmaLinux-214436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-6.12.0-211.47.1.el10_2.x86_64.rpm 444084ff127e1782ead7880570de415e27c6e829cf70a2876d1fd08d67fc6898 kernel-rt-debug-core-6.12.0-211.47.1.el10_2.x86_64.rpm 4bb967daad17fc0847284fe8bb02b5b2081c6bf2ad4ca0deac5e58df41d25d52 kernel-rt-debug-modules-extra-6.12.0-211.47.1.el10_2.x86_64.rpm 61954a90dc9794ad7ff7b0683853fa8b60a987b3c1c00a87506bf4e53452d2a3 kernel-rt-modules-core-6.12.0-211.47.1.el10_2.x86_64.rpm 64895223982e608719f58fc6930904811eb7bccebe2d15cde34dd4c2788e7097 kernel-rt-debug-modules-6.12.0-211.47.1.el10_2.x86_64.rpm 650319cf08c569239d6afd34e1a920c93152d827bbb804dc73f1d1e8b49062d4 kernel-rt-debug-modules-core-6.12.0-211.47.1.el10_2.x86_64.rpm 661929a6ad20d2c5332ed3fdb24c1e165677f16b208d7f1c28e6d5a88aa783c5 kernel-rt-6.12.0-211.47.1.el10_2.x86_64.rpm 79529ac5032343aada0ab85c10b8ee25374c5687766e956c106d7de2fea9450a kernel-rt-core-6.12.0-211.47.1.el10_2.x86_64.rpm 972d51f8cd21bbc23d4f1ab71f970b6be6c8d6a49b0bcb985471cad031248c5c kernel-rt-modules-6.12.0-211.47.1.el10_2.x86_64.rpm b19cdc58cbbc314fe84dca3c1b6928add9b62230903d0267042e4011f5e472c2 kernel-rt-modules-extra-6.12.0-211.47.1.el10_2.x86_64.rpm dbc856c06c382c42104c530e866ee41a1394c940aacec4919a73c24f6a7535ba kernel-rt-debug-devel-6.12.0-211.47.1.el10_2.x86_64.rpm dc2a555d57378f5a5c10cb90d5f3da23ceb6a07bb393b02f2a5c24ec07b9ab3d kernel-rt-devel-6.12.0-211.47.1.el10_2.x86_64.rpm efb797b6c52cabfc9c96e66a94a67218acc32bf3dfcb27f74a8519760dac6295 ALSA-2026:57251 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206) * kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237) * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991) * kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878) * kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185) * kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991) * kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143) * kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136) * kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329) * kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356) * kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374) * kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884) * kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886) * kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952) * kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888) * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017) * kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879) * kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219) * kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382) * kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379) * kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386) * kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560) * kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388) Bug Fix(es) and Enhancement(s): * CLONE - AlmaLinux 10.2.z xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (JIRA:AlmaLinux-223954) * vhost: reset the vring metadata cache on vring reconfiguration [almalinux-10.2.z] (JIRA:AlmaLinux-224545) * cifs: periodic IO errors when rename races with lease break [almalinux-10.2.z] (JIRA:AlmaLinux-235459) * cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-10.2.z] (JIRA:AlmaLinux-235812) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-modules-6.12.0-211.49.1.el10_2.x86_64.rpm 05d3579bd586625ef2377620d2f7932635237a8d351dcab878fe04024fc61dc8 kernel-rt-devel-6.12.0-211.49.1.el10_2.x86_64.rpm 08c7101f19d9f48e0b84012af38febb255aa1d81eaf771d560f542f61b46bf3a kernel-rt-debug-modules-6.12.0-211.49.1.el10_2.x86_64.rpm 157edf4b821472b69884f0ee09ca2bb06adb5a816026c159b646a9c0c42bc354 kernel-rt-debug-devel-6.12.0-211.49.1.el10_2.x86_64.rpm 2e6caa6f578d43e0cf75648e4d1e475e92c8fef0e1494dbea354f0d355b36e1d kernel-rt-modules-core-6.12.0-211.49.1.el10_2.x86_64.rpm 5bbd2c67eed7d532678ee01662297073d928a8840d1fc306af705fd4d36066da kernel-rt-modules-extra-6.12.0-211.49.1.el10_2.x86_64.rpm 7d3f9488ebc4b6ca3fa5f6f4b48f79996d08453de4a45b3d6f3536b67a23c4ee kernel-rt-debug-modules-extra-6.12.0-211.49.1.el10_2.x86_64.rpm 88a17a1d3fe5836851e857c39a8be44837434d0c2bf5ac51b4c895319090a8dc kernel-rt-debug-core-6.12.0-211.49.1.el10_2.x86_64.rpm a5a4cb57241d6d1c1fed66ff1f3f78b69f9469cef2a1ae09ba9d2e2fd3a5eace kernel-rt-core-6.12.0-211.49.1.el10_2.x86_64.rpm c8de0a5778d47d0d8712306a70fc06db618e1774ef0d71f8c79260890a03b95d kernel-rt-6.12.0-211.49.1.el10_2.x86_64.rpm e6885c179ff6043544904e9572a989077521177af0bcf11a817303025c6ad6a8 kernel-rt-debug-6.12.0-211.49.1.el10_2.x86_64.rpm eddeded9e2b539ff6c5b2b6f2492c1f984a1e1c824ba6f460d2cd231cc1923d1 kernel-rt-debug-modules-core-6.12.0-211.49.1.el10_2.x86_64.rpm f0a04e401f7081506bca68be0cb532c873c689cff60731ea199639dcd83778e1 ALSA-2026:61887 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: seccomp: passthrough uretprobe systemcall without filtering (CVE-2025-21834) * kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003) * kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks (CVE-2026-43454) * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450) * kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970) * kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120) * kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053) * kernel: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CVE-2026-53026) * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185) * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189) * kernel: mm/list_lru: drain before clearing xarray entry on reparent (CVE-2026-53153) * kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800) * kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397) * kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399) * kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392) * kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391) * kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018) * kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136) * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189) * kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320) * kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438) * kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304) * kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298) * kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490) * kernel: mm: shrinker: fix shrinker_info teardown race with expansion (CVE-2026-64418) * kernel: smb: client: fix change notify replay double-free (CVE-2026-64384) * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277) * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276) * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480) * kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086) * kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166) * kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069) * kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130) * kernel: ceph: give up on paths longer than PATH_MAX (CVE-2024-53685) * kernel: ceph: fix memory leaks in ceph_mdsc_build_path() (CVE-2026-43419) * kernel: ceph: add a bunch of missing ceph_path_info initializers (CVE-2026-43408) Bug Fix(es) and Enhancement(s): * AlmaLinux 10: s390: Revert support for DCACHE_WORD_ACCESS [almalinux-10.2.z] (JIRA:AlmaLinux-188180) * qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-10.2.z] (JIRA:AlmaLinux-193043) * ss core dumped when there is an SCTP session [almalinux-10.2.z] (JIRA:AlmaLinux-212393) * [AlmaLinux-10.2.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-218627) * AlmaLinux10.0 - s390/pfault: Fix virtual vs physical address confusion [almalinux-10.2.z] (JIRA:AlmaLinux-222507) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.50.1.el10_2.x86_64.rpm 1ad5230b849165142e7ba2f70f592251c3a2b6b2121f8dced5771cc323508912 kernel-rt-debug-modules-extra-6.12.0-211.50.1.el10_2.x86_64.rpm 1f7ed7784063cf835d16cd879b756406bab40ed11daffebb677c215165aa8820 kernel-rt-debug-6.12.0-211.50.1.el10_2.x86_64.rpm 3b990c7fba777e26e4cc991f24e1ce477431f8f52b27aa2cffe609115786a44d kernel-rt-modules-extra-6.12.0-211.50.1.el10_2.x86_64.rpm 6debf21763444a9a5e64577b25086d55c15e8489d24f101e1c4696da8ddfebac kernel-rt-modules-6.12.0-211.50.1.el10_2.x86_64.rpm 71a4a37c1ab3bdfceb731c09b15990b43a3a827df8773c9ff3fd5a5406e8295e kernel-rt-modules-core-6.12.0-211.50.1.el10_2.x86_64.rpm 887018f8da8cc6a4711151362f9aef110d795ed1406c9609e4d4aa8dbbe7893d kernel-rt-debug-modules-core-6.12.0-211.50.1.el10_2.x86_64.rpm 934c81ed6cae66953a01fd00ed3abc7a57fbb8b2a21dca248847846dacd5d850 kernel-rt-devel-6.12.0-211.50.1.el10_2.x86_64.rpm a1457033171fd8c645c83b9b10a23358bf729c9f5b8e5326e7570855ecefa0f0 kernel-rt-6.12.0-211.50.1.el10_2.x86_64.rpm a7450fbc8f7ac81eaa188342d9ecaa1d0beb7e167d8a42a82770e5e0be052102 kernel-rt-debug-devel-6.12.0-211.50.1.el10_2.x86_64.rpm ac158ccb52b876ea68e9f73eb9c7b3093b35ca611075a7b7e023a582cc90004f kernel-rt-debug-core-6.12.0-211.50.1.el10_2.x86_64.rpm e021f054afc251548e272d07037226b8a014f8b4e611c80ec63205e34028984d kernel-rt-core-6.12.0-211.50.1.el10_2.x86_64.rpm e2b451a2a6a42fc997df2aea5c1cb36ba7127e1ba6b7da0fbfdd1f49c8342282 ALSA-2026:63128 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073) * kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808) * kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824) * kernel: smb: client: fix query directory replay double-free (CVE-2026-64387) * kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145) * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.51.1.el10_2.x86_64.rpm 431e3a9f1b4886ef280c26d86a725872df1b0347be2ccaf630da062fa05037c6 kernel-rt-debug-core-6.12.0-211.51.1.el10_2.x86_64.rpm 4bf7a84486c434e1f4f0b5a80fdd4d297135e170b9c5f0132f0fdfe6e4c64528 kernel-rt-core-6.12.0-211.51.1.el10_2.x86_64.rpm 5695baa3d7a3d7a6d9c1b1e4cbef8016e17ffcc4b3b029613952d2663febc01f kernel-rt-modules-6.12.0-211.51.1.el10_2.x86_64.rpm 77f99bfaca676ade761e3e17c3118aa646faf7bdfebaed7cd3bf53a0e0a74c40 kernel-rt-modules-extra-6.12.0-211.51.1.el10_2.x86_64.rpm 867dbd6d6aa848df1981b591de1ef49b08917e22ddcf37dc86083a9833051343 kernel-rt-6.12.0-211.51.1.el10_2.x86_64.rpm 89bb4bbada2256dee0ac4ccaf6ac102b1db87642498d62809d51028243f4e60d kernel-rt-debug-6.12.0-211.51.1.el10_2.x86_64.rpm 9b5b0dfcfdb3102482eaf2be51c2d3ec44335b1c40d9cc8efaeb0bd3f998cea7 kernel-rt-debug-devel-6.12.0-211.51.1.el10_2.x86_64.rpm 9c1485ba6b0240d36f7bcacc332c9d394e7482392762dbc091e343f3a72bc82b kernel-rt-modules-core-6.12.0-211.51.1.el10_2.x86_64.rpm 9f90d54c2046253c5b760f931b9c00effcfc8e3dfbdccb9a0c32b25d046d5882 kernel-rt-debug-modules-extra-6.12.0-211.51.1.el10_2.x86_64.rpm ad80c5ec1bf3c8537f9cdce77cc20b05cbae464204b5045116f75ce5f51065a6 kernel-rt-devel-6.12.0-211.51.1.el10_2.x86_64.rpm cf2ad42b1fbb6721193d1acc36154c1115b6b028fda7a27a2a46b3da55ffcf70 kernel-rt-debug-modules-core-6.12.0-211.51.1.el10_2.x86_64.rpm f88c3a9e8d84a9a2988c590363e23276614a919bab2ff52cd738131a97240899 ALSA-2026:65334 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334) * kernel: Bluetooth: virtio_bt: clamp rx length before skb_put (CVE-2026-46123) * kernel: Bluetooth: serialize accept_q access (CVE-2026-52918) * kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091) * kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CVE-2026-53072) * kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (CVE-2026-52947) * kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256) * kernel: wifi: nl80211: reject oversized EMA RNR lists (CVE-2026-53182) * kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CVE-2026-53209) * kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254) * kernel: vfio/pci: Clean up DMABUFs before disabling function (CVE-2026-53322) * kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975) * kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015) * kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947) * kernel: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CVE-2026-63944) * kernel: Bluetooth: ISO: fix UAF in iso_recv_frame (CVE-2026-63946) * kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (CVE-2026-64117) * kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (CVE-2026-64037) * kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113) * kernel: vfio/pci: Check BAR resources before exporting a DMABUF (CVE-2026-64042) * kernel: accel/qaic: Add overflow check to remap_pfn_range during mmap (CVE-2026-64051) * kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (CVE-2026-64255) * kernel: wifi: mac80211: fix MLE defragmentation (CVE-2026-64515) * kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409) * kernel: wifi: mt76: mt7925: fix crash in reset link replay (CVE-2026-68307) * kernel: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (CVE-2026-68193) * kernel: dm-verity: fix buffer overflow in FEC calculation (CVE-2026-72098) * kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129) Bug Fix(es) and Enhancement(s): * rtla-timerlat-top doesn't stop properly when threshold is reached on multiple CPUs at once [almalinux-10.2.z] (JIRA:AlmaLinux-193027) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.53.1.el10_2.x86_64.rpm 0a3971f778be64d0e98c71d9dce544b1ee3bb3a0f3fb67a9dd9541324a2ecaf0 kernel-rt-modules-6.12.0-211.53.1.el10_2.x86_64.rpm 705a333439a60f119b15a76184af0f978d9778400b98505e2030778166aeecaf kernel-rt-devel-6.12.0-211.53.1.el10_2.x86_64.rpm 73a0f49ca0774b31231d723cfba7fa28dcb4a57a5bf8be9ae3ddcd340a59d865 kernel-rt-debug-modules-extra-6.12.0-211.53.1.el10_2.x86_64.rpm 7b09076a82c1e761f489be9539958dec89c0369fff52e4b39b95c56fdeced3bd kernel-rt-modules-core-6.12.0-211.53.1.el10_2.x86_64.rpm 7b6d96671c35df117f91200adc6c8a4ccfe48b60b71d56e26d5ca2a460bdc074 kernel-rt-debug-modules-core-6.12.0-211.53.1.el10_2.x86_64.rpm 7ccb4a05dcf6946bb70d449bfb8b5602c6400d04a410d0883551624cde6e559f kernel-rt-debug-devel-6.12.0-211.53.1.el10_2.x86_64.rpm 9b1543d245541fdbd23a11715e6531e169c44df6edbe329c960443acb47820e0 kernel-rt-core-6.12.0-211.53.1.el10_2.x86_64.rpm aa7c100ddae1949f0f21ce6480838101e5bb220f7b79d8d709dfb00fa5cd9a70 kernel-rt-modules-extra-6.12.0-211.53.1.el10_2.x86_64.rpm d064a7e1ee598a9787045766b81c4e101bf259821c0a7d69afd1d67fc6976ef2 kernel-rt-debug-core-6.12.0-211.53.1.el10_2.x86_64.rpm d37fefea3081d7a3387c1096c3d9a7fa5865b4bc7bfbc0ff3fedd3f922d32d09 kernel-rt-6.12.0-211.53.1.el10_2.x86_64.rpm d690bd15ef1da4ccdd3a3a4257a812550db95a740a636337abbc042554eda8dd kernel-rt-debug-6.12.0-211.53.1.el10_2.x86_64.rpm e81138ef29eddea71a11080c635dc32c7d571669e8af79a5acc15481635c0682 ALSA-2026:66355 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-core-6.12.0-211.54.1.el10_2.x86_64.rpm 10af2aa8593558127eba36826b2b638aa0e293b2e77994f58a28b498ce4c91bd kernel-rt-6.12.0-211.54.1.el10_2.x86_64.rpm 1b56b5b4a1a6e77d15ac9a54bc657fe47227b976b5824bdb96ed7cf9d192b9ac kernel-rt-debug-6.12.0-211.54.1.el10_2.x86_64.rpm 251d4fcd4542d3633aa46153c4867cc0716e768db8985b48d8685409d6cce12f kernel-rt-modules-extra-6.12.0-211.54.1.el10_2.x86_64.rpm 28821c70c7e1dc9a495da03630a0e45770743d67be89ce3587f315904eceeccf kernel-rt-debug-modules-extra-6.12.0-211.54.1.el10_2.x86_64.rpm 2ae3fe0d8a526738eecdf7ec98a30a41ae0d01fcd618e762643257ea68396b38 kernel-rt-debug-modules-core-6.12.0-211.54.1.el10_2.x86_64.rpm 2b4a58eb1337ef1e01fa7b6cc2650cc54a7f3c5d06eb6ca53e5c929536073189 kernel-rt-devel-6.12.0-211.54.1.el10_2.x86_64.rpm 8aa74ffd86a63ce11b925deae44c8ccdb200dafddbb1e638a9da33b118c441dd kernel-rt-core-6.12.0-211.54.1.el10_2.x86_64.rpm 98fd48ddfe3a1e5e308c7ca48e0e8da18df825343c48883d9a3243ca88fcd9cf kernel-rt-modules-6.12.0-211.54.1.el10_2.x86_64.rpm dfd10f92e7d442524f2016de6b44f37551699271b8397e9ed07ca60e163507b7 kernel-rt-debug-devel-6.12.0-211.54.1.el10_2.x86_64.rpm dff66461b53459cd9c401a902c1c3c313ede514a0db9c7b418bca951bd7773e0 kernel-rt-modules-core-6.12.0-211.54.1.el10_2.x86_64.rpm e11e3bd36cfe583149039cf6c4103418373b2a2457e6e77fc25ad2bf9f2a4205 kernel-rt-debug-modules-6.12.0-211.54.1.el10_2.x86_64.rpm e2aac3be95616099237a6a4cd0f14c5bb06244ce64fb1119d3124b24ba6d3837 ALSA-2026:67471 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (CVE-2025-40149) * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745) * kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466) * kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479) * kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566) * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663) * kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656) * kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539) * kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248) * kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368) * kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370) * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149) * kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924) * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131) * kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246) * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239) * kernel: af_unix: Set gc_in_progress to true in unix_gc() (CVE-2026-53361) * kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889) * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921) * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919) * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917) * kernel: lsm: hold cred_guard_mutex for lsm_set_self_attr() (CVE-2026-64111) * kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264) * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426) * kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556) Bug Fix(es) and Enhancement(s): * [almalinux-10.2.z]- Backport MSHV patches for hypervisor OOM handling (JIRA:AlmaLinux-245035) * RHIVOS - [backport] S32G Driver Enablement - ADC (JIRA:AlmaLinux-255233) * [AlmaLinux10.2z] watchdog: System can panic during reboot when pretimeout is disabled (0) (JIRA:AlmaLinux-255348) * [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [AlmaLinux-10.2.z] (JIRA:AlmaLinux-256731) * RHIVOS - [backport] S32G Driver Update - ADC, I2C, and eDMA (JIRA:AlmaLinux-256890) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.55.1.el10_2.x86_64.rpm 0efdc39505dbb69e1d1819082bc3af4121f2137aa8780430fe25c685eb01f350 kernel-rt-debug-devel-6.12.0-211.55.1.el10_2.x86_64.rpm 300b31d4f7d60ba41210b17ab5b4ddaf2bfe8b08e0460f8ada3a7167dda458ae kernel-rt-debug-core-6.12.0-211.55.1.el10_2.x86_64.rpm 43403c7fd32f134122d342ae5a8c543620d416e4b5c611975b51497efdbea58b kernel-rt-devel-6.12.0-211.55.1.el10_2.x86_64.rpm 4ce8f4f9662b5671e2028da4c3095e67ad0ace22129b039302962425e89951a0 kernel-rt-debug-modules-core-6.12.0-211.55.1.el10_2.x86_64.rpm 642d43ce0f2fdc770649b87397c110303a926e6b15ecfcb2787203bf7f0be968 kernel-rt-core-6.12.0-211.55.1.el10_2.x86_64.rpm 847e4f825f777d84d851ca2f3d2ae642dd466e1be68bea11fc10c4c2b1e1701b kernel-rt-modules-extra-6.12.0-211.55.1.el10_2.x86_64.rpm 892699674d07bad2da8a176d097072a59467fb1ed091e5e940ad3266aaf25452 kernel-rt-6.12.0-211.55.1.el10_2.x86_64.rpm acded1f8d9174225897ec908a8856321c2c0bd8de354604cb3655d958f09d652 kernel-rt-debug-6.12.0-211.55.1.el10_2.x86_64.rpm bdc2ae7e66ec6edd64819cc3b353ec056f9c563ebe33affe7f55a2a3b017973b kernel-rt-modules-6.12.0-211.55.1.el10_2.x86_64.rpm ce46f960f378363bda0c712bee865d377a30a3b37fcae6d6fc474e2e01ce2ea0 kernel-rt-debug-modules-extra-6.12.0-211.55.1.el10_2.x86_64.rpm e0212aa80383b1d0c7d6b676ee5b7bb2c83472299dc8a199606a927ce3fb8a06 kernel-rt-modules-core-6.12.0-211.55.1.el10_2.x86_64.rpm e163c162a26788484c9c08894fe61dac0bbe0e853560d5360f2cb40ce250e1ac ALSA-2026:68507 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007) * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172) * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971) * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176) * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193) * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192) * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869) * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029) * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923) * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176) * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175) * kernel: netfilter: handle unreadable frags (CVE-2026-64414) * kernel: hwrng: virtio: clamp device-reported used.len at copy_data() (CVE-2026-64456) * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation (CVE-2026-68200) * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143) * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128) * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363) * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294) * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102) Bug Fix(es) and Enhancement(s): * nouveau vga_switcheroo binding holds Realtek ALC245 converter stream open ? analog output (device 0) returns EBUSY [almalinux-10.2.z] (JIRA:AlmaLinux-239776) * AlmaLinux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [almalinux-10.2.z] (JIRA:AlmaLinux-254105) * RHIVOS - [backport] S32G Fix STM driver linking failing modpost (JIRA:AlmaLinux-255225) * RHIVOS - [backport] S32G Driver Enablement - OCOTP (JIRA:AlmaLinux-255516) * RHIVOS - [backport] S32G Driver Enablement - INA231 (JIRA:AlmaLinux-255518) * RHIVOS - [backport] S32G Driver Enablement - PIT (JIRA:AlmaLinux-255519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-core-6.12.0-211.56.1.el10_2.x86_64.rpm 2b7fa19819d23d17edd50a09c9a9d935887ac2a23e95fe400ac8ccc6ca7b4cfe kernel-rt-modules-6.12.0-211.56.1.el10_2.x86_64.rpm 2f91482a42fc441b2947381edd81e69ac6b4f03de609067e774d70a76f56ef73 kernel-rt-debug-modules-core-6.12.0-211.56.1.el10_2.x86_64.rpm 33a73770700db40603665af4e5502471007c0cc9793fa1b14b7032d09674b74e kernel-rt-debug-devel-6.12.0-211.56.1.el10_2.x86_64.rpm 415378af6a05e6134fff2fa742d932fc3d50ce2fb518140c40931954e30d64b3 kernel-rt-debug-modules-extra-6.12.0-211.56.1.el10_2.x86_64.rpm 5abde61b1ce72b75d981ef42d7672d291f9d64ef37c09111e39c08309ce36492 kernel-rt-debug-6.12.0-211.56.1.el10_2.x86_64.rpm 6be408927566b3dc6e8d24f084a5b39d9c168997a3fc94f8e6d1e6bc88eea896 kernel-rt-core-6.12.0-211.56.1.el10_2.x86_64.rpm 75de77aba8e2f99cbc26a80cdb379fa59d6c1eb4aa02ec1c277bd83303e42318 kernel-rt-debug-modules-6.12.0-211.56.1.el10_2.x86_64.rpm 809af826e1836736e8457bb561120ad37f2a4df1347f9271b3282970318c749e kernel-rt-devel-6.12.0-211.56.1.el10_2.x86_64.rpm 845260a8cdf3896b167f5a2f6d819d61060cf8686ac3d357d5c5ef32645ad86d kernel-rt-modules-core-6.12.0-211.56.1.el10_2.x86_64.rpm a7b1b4df6f7cb2798cf2d12a7a9914bc56c55c1b8210d015524c2a8374ce5ecb kernel-rt-modules-extra-6.12.0-211.56.1.el10_2.x86_64.rpm caa5ac94c3eba7b655dd3439b9da4458f316d3f4532e0e1cb28ef95002d0e142 kernel-rt-6.12.0-211.56.1.el10_2.x86_64.rpm e2b9bb458038f4e9a4ede19c71f44b8d451f840828f3d410071e3ea560ea52c2 ALSA-2026:70498 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964) * kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894) * kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959) * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062) * kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823) * kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534) * kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293) * kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159) * kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188) * kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155) * kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391) * kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518) Bug Fix(es) and Enhancement(s): * Update kernel to use new certificate paths [almalinux-10.2.z] (JIRA:AlmaLinux-169478) * RHIVOS - [backport] S32G Driver Enablement - PWM (JIRA:AlmaLinux-255517) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-modules-6.12.0-211.58.1.el10_2.x86_64.rpm 0d3bb5b9b088469f2034d84e6a466c44e91401ed401b7a106c539820ee5b8a13 kernel-rt-modules-extra-6.12.0-211.58.1.el10_2.x86_64.rpm 14781a756eb9c13ca2001971f666e3f7c6bd5cd2b7233127a9db50bacacb12bd kernel-rt-debug-devel-6.12.0-211.58.1.el10_2.x86_64.rpm 1e5262920f7b6e16c99af85bc03aa167ad249aff264a30c9153ab24dfa4afe37 kernel-rt-6.12.0-211.58.1.el10_2.x86_64.rpm 5a62a12c16c815c23aaaa3d55563f10492eb583573ddfc1259e56e88f8cb1034 kernel-rt-modules-core-6.12.0-211.58.1.el10_2.x86_64.rpm 8c64101a7274eeb5aefcb56d70f369eb710c32fe25c9f37e4c970a78c842fb60 kernel-rt-core-6.12.0-211.58.1.el10_2.x86_64.rpm 901d2626b4b835af3c48e97cc67467f1bf9a6e3d011b85b492f4d97894818a97 kernel-rt-debug-modules-extra-6.12.0-211.58.1.el10_2.x86_64.rpm 96accc7655e13d7c8ffa442d77bcd1fcd6f94ac0dfdd345aa0e91cfcad9c8c79 kernel-rt-debug-modules-6.12.0-211.58.1.el10_2.x86_64.rpm 97128e17e7d81cd7c198183abde332e364e01dc90a8bf8504c69ea0b1ce42985 kernel-rt-debug-modules-core-6.12.0-211.58.1.el10_2.x86_64.rpm d67ac998e2ea7ca02303fbc4c72fa2ee220f33eaf391c336f74cdb027b4967aa kernel-rt-devel-6.12.0-211.58.1.el10_2.x86_64.rpm db3aeafa3ad343ca5dd1c529f98bc864781ec43555e5c07eecb3e3e89c276716 kernel-rt-debug-6.12.0-211.58.1.el10_2.x86_64.rpm df52d140b3d6ddfd0729a09463d6869b3a32622b02b63ec4b3dfaf7adeb26917 kernel-rt-debug-core-6.12.0-211.58.1.el10_2.x86_64.rpm f6e8d98954b3bba44211fde66d24a68aa57d74602ee6a19147db8a636fea071a ALSA-2026:71602 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199) * kernel: drm/amdgpu/userq: fix access to stale wptr mapping (CVE-2026-46311) * kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005) * kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CVE-2026-53203) * kernel: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CVE-2026-53290) * kernel: drm/virtio: use uninterruptible resv lock for plane updates (CVE-2026-64098) * kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121) * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108) * kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CVE-2026-68257) * kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CVE-2026-68267) * kernel: drm/xe: Hold a dma-buf reference for imported BOs (CVE-2026-68266) * kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273) * kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714) * kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481) Bug Fix(es) and Enhancement(s): * Bypass DMA APIs for coherent allocations for pre-mapped memory [almalinux-10.2.z] (JIRA:AlmaLinux-252331) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-core-6.12.0-211.60.1.el10_2.x86_64.rpm 00cb57df571bacda0b7edb3ee5b139f1c067248cb5ff038c4863b94b874b03d9 kernel-rt-modules-extra-6.12.0-211.60.1.el10_2.x86_64.rpm 1947e353ed7d997b8cb33c8a69984aa022ab854f2ee812e642497516794598ed kernel-rt-modules-6.12.0-211.60.1.el10_2.x86_64.rpm 1e5ea60bfe0982473cee959e845fa7a94e5c6f9a69a6e166b73216800e061406 kernel-rt-modules-core-6.12.0-211.60.1.el10_2.x86_64.rpm 6a83b93ba1e7119a5b638ab61a20ec9c78556c199e718790d073e1a8a56e5416 kernel-rt-debug-6.12.0-211.60.1.el10_2.x86_64.rpm 717493e26f6c19090e4a3aebc9e9f2e9f87dcf35cb3502e65088121a119d7b93 kernel-rt-core-6.12.0-211.60.1.el10_2.x86_64.rpm 8c60f068c3cb4746fa4bc2681a13690dc115e03c39a1de8a87f30d61488e4afd kernel-rt-debug-modules-extra-6.12.0-211.60.1.el10_2.x86_64.rpm 9702ff59b250a1fc35883a0a03454aabb24491bf682def2734e94892cf28d93c kernel-rt-debug-modules-core-6.12.0-211.60.1.el10_2.x86_64.rpm 998d3ffce041ae782199af076c3e52a2b3b97d712ff3c07f62ebe584cea9c86b kernel-rt-debug-modules-6.12.0-211.60.1.el10_2.x86_64.rpm 9c2fa5c096c913f66b1d0e6ecbcad8be435880db57bdbdcd51bc1408f54f67f6 kernel-rt-6.12.0-211.60.1.el10_2.x86_64.rpm b296c6b326957fd5ee6778284c3627ab79ff0d4e774b7e47866727bbb1ebecb5 kernel-rt-debug-devel-6.12.0-211.60.1.el10_2.x86_64.rpm bce3ba313123e9e342b77875a4d1bae9426d0ff2cee4f014a3f49a78a496b83f kernel-rt-devel-6.12.0-211.60.1.el10_2.x86_64.rpm f6e8a5bac6853ad420f5340569fc2172f7cce0802f1ca3e81ed1a6181b8c324b ALSA-2026:72624 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CVE-2026-46076) * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942) * kernel: KVM: arm64: Reassign nested_mmus array behind mmu_lock (CVE-2026-46317) * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341) * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299) * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522) * kernel: perf: Reject exited events as group leaders (CVE-2026-74753) * kernel: nvme-tcp: reject a read that transferred too few bytes (CVE-2026-89480) * kernel: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (CVE-2026-89775) Bug Fix(es) and Enhancement(s): * KVM: s390: Limit adapter indicator access to mapped page [almalinux-10.2.z] (JIRA:AlmaLinux-188661) * crypto: xxhash64 should not be fips approved [almalinux-10.2.z] (JIRA:AlmaLinux-254943) * kata-tdx TD vCPU stuck at reset vector (EIP=0xFFF0) on Intel Xeon 6 (Granite Rapids / Sierra Forest) ? guest never executes. (10.2.z) (JIRA:AlmaLinux-260402) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.61.1.el10_2.x86_64.rpm 145f1223c8ef65e251d665dcea8d2e3dd5115f74753c653be8465ae35cf9be02 kernel-rt-modules-6.12.0-211.61.1.el10_2.x86_64.rpm 196ed0767fa71f6372d027545c5d2516db029c04980dbf479f7f36ec937ea0db kernel-rt-debug-core-6.12.0-211.61.1.el10_2.x86_64.rpm 25160b434e447ec8dbe238bfe01648448f424554d53d91e6cb82fd8f92801610 kernel-rt-6.12.0-211.61.1.el10_2.x86_64.rpm 4f104f76b61d3a484a8f0346ffd1f38b5efc6e91e69a94346626101c1e27f36d kernel-rt-modules-extra-6.12.0-211.61.1.el10_2.x86_64.rpm 529f36716068c4a3642c9890a472e1780f876e424dfa7a7e9b94e01378e9742c kernel-rt-core-6.12.0-211.61.1.el10_2.x86_64.rpm 53975248a4ac2b2c7a1a169ba649db3f15f76f46b9d0a0d66bac74c4b774428a kernel-rt-debug-modules-extra-6.12.0-211.61.1.el10_2.x86_64.rpm 64a8b8acffe8271bf03971cbc4e173fdb6dba7003ce9387b634af00a6b84c5a4 kernel-rt-debug-modules-6.12.0-211.61.1.el10_2.x86_64.rpm 76ecd05606b0b1d5e6840422477b1e141c5b71355034fcf3ba96e48768e1ccbb kernel-rt-debug-devel-6.12.0-211.61.1.el10_2.x86_64.rpm b118a8d6a7e61b98a4b5d431d17cbffc7a335493f9d324d11751e616d10cc8a9 kernel-rt-debug-6.12.0-211.61.1.el10_2.x86_64.rpm c021f18ca0b41ac9b4db90c5adba97beb983f818ec53296001c3e4d62f8065d0 kernel-rt-modules-core-6.12.0-211.61.1.el10_2.x86_64.rpm defcb1fe3933788edb8cf1023a2c11e3ae8418c023c575f974a64560f75a1111 kernel-rt-debug-modules-core-6.12.0-211.61.1.el10_2.x86_64.rpm e9226c3cf750d393d59daab98870aa53c21a21c552b14f016730084248fb3dd5 ALSA-2026:75576 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034) * kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099) Bug Fix(es) and Enhancement(s): * gve: backport large queue depth patches [almalinux-10.2.z] (JIRA:AlmaLinux-219261) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.62.1.el10_2.x86_64.rpm 0ee28cb4b5611d900832f6a35929ab01f1a4b14b56b70e7347cd7357efe616c2 kernel-rt-debug-devel-6.12.0-211.62.1.el10_2.x86_64.rpm 1acf9bd6899a066a737e2e4bf20ccd743049533a6d67b81f056a13dec27bc30e kernel-rt-debug-6.12.0-211.62.1.el10_2.x86_64.rpm 1b5d06b3f9a6f9b5bae2a238566d8cca98b087e5870c0a8f433229000dca9ef1 kernel-rt-core-6.12.0-211.62.1.el10_2.x86_64.rpm 1eca53c9e424a443eace04de44f8013ecf9c119ac9309a4cb80abbc7184205dc kernel-rt-debug-core-6.12.0-211.62.1.el10_2.x86_64.rpm 2951029c7b2ac355b14469b073dae704763a4772fc2d1f1b2f0782d1843e845e kernel-rt-modules-extra-6.12.0-211.62.1.el10_2.x86_64.rpm 351d765456a8b4b1a9fc37cbe67d7999d88e001d5f17871012dbceba3091dd55 kernel-rt-modules-core-6.12.0-211.62.1.el10_2.x86_64.rpm 35ef5e1ddbb204c0427e59fa3e75a8d4a0170d04d158da6e1558c979129cccaa kernel-rt-debug-modules-core-6.12.0-211.62.1.el10_2.x86_64.rpm 42f45a42a6644f842b823f6a4fbc257c4c4f3f0e6f4b6c4de76d617df4c982e4 kernel-rt-modules-6.12.0-211.62.1.el10_2.x86_64.rpm 96b6f4d589078a69e5996da5c0360df696b938b96963c17ca40779f6bb42f6ef kernel-rt-debug-modules-extra-6.12.0-211.62.1.el10_2.x86_64.rpm a6816d5ee54e335ed7263852bf707c5984da78c8227e56b27699e23b6ec293e4 kernel-rt-debug-modules-6.12.0-211.62.1.el10_2.x86_64.rpm c99ab265d10261c8d8578915df48803e0a2a6035435a8d8844e9be490d0a8601 kernel-rt-6.12.0-211.62.1.el10_2.x86_64.rpm f2d103241a65a08b5499ba5d36107e9fb79b36ed2f8f0f3711fb760dc709edae ALSA-2026:76738 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conncount: increase the connection clean up limit to 64 (CVE-2026-45860) * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856) * kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CVE-2026-46275) * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972) * kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270) * kernel: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CVE-2026-53357) * kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829) * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794) * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924) * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922) * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920) * kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024) * kernel: l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (CVE-2026-63918) * kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984) * kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992) * kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (CVE-2026-63994) * kernel: netfilter: x_tables: add and use xtables_unregister_table_exit (CVE-2026-64078) * kernel: ipv6: ioam: refresh hdr pointer before ioam6_event() (CVE-2026-64132) * kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CVE-2026-64557) * kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432) * kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476) * kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052) * kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320) * kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255) * kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516) * kernel: packet: use consistent hard_header_len in non-ring send paths () * kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582) * kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669) * kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746) * kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792) * kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775) * kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921) * kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972) * kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227) * kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417) * kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CVE-2026-93288) Bug Fix(es) and Enhancement(s): * wifi card breaks using FIPS (JIRA:AlmaLinux-257457) * AlmaLinux10.0 - kernel: CPU hotplug unsupported by CPUMF [almalinux-10.2.z] (JIRA:AlmaLinux-270888) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-6.12.0-211.63.1.el10_2.x86_64.rpm 12c62f1ca077efc6e239f96f893cd8c8c0f9e7d26a1b7e9d60bc7321fef1b4bb kernel-rt-core-6.12.0-211.63.1.el10_2.x86_64.rpm 279d1fb5f483a4327c3dfa5b589957faaafacef2e1669bcc3b26ac6f2e851557 kernel-rt-debug-6.12.0-211.63.1.el10_2.x86_64.rpm 618006281456de390900c73303676c057590b99cc43b3f79f34ea2804caaf88a kernel-rt-debug-modules-extra-6.12.0-211.63.1.el10_2.x86_64.rpm 690c32868cb679180b1dc263422d9ccbd1ba155598fed55cfbf126b690ed0c28 kernel-rt-debug-modules-6.12.0-211.63.1.el10_2.x86_64.rpm 91494ba89c128b302cfe6d0cb352293fb110a9bd3ab83c3f84c81a110f1a6a9c kernel-rt-modules-extra-6.12.0-211.63.1.el10_2.x86_64.rpm a8577ba9d250f302da3bc71dfb9b04ac2da3dd888edb5493398bb93f4f889fd4 kernel-rt-debug-modules-core-6.12.0-211.63.1.el10_2.x86_64.rpm aa2d7fdfbef451220be4fb63f0667221c74d204f5da8eba35077616e3d49ca9a kernel-rt-devel-6.12.0-211.63.1.el10_2.x86_64.rpm b9f195e0f7e7440dcdcccbcd79d543efef77f4ac27addcd24bf59601eb1bb78b kernel-rt-debug-core-6.12.0-211.63.1.el10_2.x86_64.rpm c81c31294bb11c30f7a6d3345ad451d4fd5eb23c2b999a3e887e6e20996be084 kernel-rt-debug-devel-6.12.0-211.63.1.el10_2.x86_64.rpm d1f4549a52f173838f6a4572f5e573015badf0216e25b661d648833a41021507 kernel-rt-modules-6.12.0-211.63.1.el10_2.x86_64.rpm de9097329a7d9ce9529de1040678fd1bcef68c3da67eed0bf556b6dac43eebd4 kernel-rt-modules-core-6.12.0-211.63.1.el10_2.x86_64.rpm ee5c17b7fbca6f1b2a125792449f540fbf4e29b48a5cb976ad1db0f558e9749f ALSA-2026:77690 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) * kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365) * kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398) * kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970) * kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035) * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317) * kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705) * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744) * kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690) * kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669) * kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530) * kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (CVE-2026-89676) * kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663) * kernel: nfsd: fix UAF in async copy cancel and shutdown (CVE-2026-89675) Bug Fix(es) and Enhancement(s): * mlxbf_bootctl: driver update to Linux v6.16 [Nvidia 10.2.z FEAT] (JIRA:AlmaLinux-212709) * [GNR-D] missing interfaces tspll_cfg [almalinux-10.2] (JIRA:AlmaLinux-273805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-modules-extra-6.12.0-211.64.1.el10_2.x86_64.rpm 1c8dba81bb7b23d76db81fff9c8860f89c624cec3f5ce6a22b7639e1f1b4ac70 kernel-rt-debug-modules-extra-6.12.0-211.64.1.el10_2.x86_64.rpm 1e54f3ec998804ec600a05558eeb124c3ebfa2aa1e845ffc9ced608ef79b7511 kernel-rt-debug-modules-6.12.0-211.64.1.el10_2.x86_64.rpm 218a588637fe48798ce7346df1cf98c98add4b85f8eb092b377218857ea1fab2 kernel-rt-debug-devel-6.12.0-211.64.1.el10_2.x86_64.rpm 3bb910b8905ce4d8dd65b03f7448e718c3ec77ceb2f67371bc507a0c13cbb746 kernel-rt-modules-6.12.0-211.64.1.el10_2.x86_64.rpm 503380fa3b8ad1c30a72a70d7f98c210b1a7e1090350b7b34ed901507488947a kernel-rt-core-6.12.0-211.64.1.el10_2.x86_64.rpm 560177d461dc813803ae9b6a42c7b0b19688b13491943ccc5aacd8c7b1b1025a kernel-rt-debug-modules-core-6.12.0-211.64.1.el10_2.x86_64.rpm 8a732d6aad40bec73ce76e6659c428f9d5a35859bd77f061fc85d831b57e8a50 kernel-rt-6.12.0-211.64.1.el10_2.x86_64.rpm abad3cabe617d54f66b5e68789c3066bd870dfe4f4e2201463231cba1af4472f kernel-rt-debug-core-6.12.0-211.64.1.el10_2.x86_64.rpm b0a2e636ce284cf80ad793e5824503514bebaa7966aae75a3a3de06d3fc1dc87 kernel-rt-debug-6.12.0-211.64.1.el10_2.x86_64.rpm bbe46aa080649d81360231805bfe6fc12dd0e59532d0a262099b1752ff74444d kernel-rt-devel-6.12.0-211.64.1.el10_2.x86_64.rpm fa7675d23e04f35d0e239625a2b0d1d8fe2fa24edcc24dad937b5854dedae026 kernel-rt-modules-core-6.12.0-211.64.1.el10_2.x86_64.rpm fefe1546974fe55cb6d66d663038993c785d307c49c634437e0508cb25660adb ALSA-2026:81406 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: thermal: core: Fix thermal zone device registration error path (CVE-2026-43332) * kernel: macsec: fix replay protection at XPN lower-PN wrap (CVE-2026-63925) * kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191) * kernel: Kernel SMB client: Double-free vulnerability allows remote denial of service or privilege escalation (CVE-2026-64385) * kernel: bpf: Support for hardening against JIT spraying (CVE-2026-64508) * kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation (CVE-2026-64507) * kernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123) * kernel: cifs: validate DFS referral string offsets (CVE-2026-72318) * kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289) * kernel: af_unix: Unlink scc_entry in unix_del_edge() (CVE-2026-80521) * kernel: nvmet-auth: Synchronize timeout work during SQ teardown (CVE-2026-89970) Bug Fix(es) and Enhancement(s): * net/tls backports for 10.2 (JIRA:AlmaLinux-275027) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.65.1.el10_2.x86_64.rpm 00a34f9c0eb57e6fbc7d09e61e0013e400910f188fff5820b58f5ba4bbb90323 kernel-rt-modules-extra-6.12.0-211.65.1.el10_2.x86_64.rpm 09c97777c7295f609cd0a204b7562e256dc8504d93f51a56029341b8cb23e1e4 kernel-rt-debug-devel-6.12.0-211.65.1.el10_2.x86_64.rpm 36273ffc9d9ee40bf640dd6c93a63f378d2e8299f94c6ca646d7f989333d45be kernel-rt-debug-6.12.0-211.65.1.el10_2.x86_64.rpm 466691563d64df6a6e06fcf9dcd6e428be95f46a18dc64e84a748bc9aed6978c kernel-rt-debug-modules-core-6.12.0-211.65.1.el10_2.x86_64.rpm 4c962d0882b75174de14879b78aaec2322a16423411f318f57b5480c0ce6c57e kernel-rt-6.12.0-211.65.1.el10_2.x86_64.rpm 4d6028cbac0e9c3479716daab1a524a0ec63a251cfee7f7f800548300e913478 kernel-rt-core-6.12.0-211.65.1.el10_2.x86_64.rpm 4e5c593bdbba1960386f1acc3178b551a3650672c4803148f0e867c02f34cb18 kernel-rt-devel-6.12.0-211.65.1.el10_2.x86_64.rpm b9938a45217c81a96ff8fd529c46f421bd051e7c4fe94263ce103762051c569b kernel-rt-debug-core-6.12.0-211.65.1.el10_2.x86_64.rpm c7154c8969a96cadeb17bbdd34b91ec5ee1375871d4682944bf7694fb20de577 kernel-rt-debug-modules-extra-6.12.0-211.65.1.el10_2.x86_64.rpm de63c8cacd7b7a90092bd08cf47974aa4effa2fb912f83e363a0aff9d04830d5 kernel-rt-modules-6.12.0-211.65.1.el10_2.x86_64.rpm e565ef79ce692792164d91f28db3b2c4d6a7fc9be6ea78e4d74639ee3b03395f kernel-rt-modules-core-6.12.0-211.65.1.el10_2.x86_64.rpm f3419532132c0ec0664eca8fc144bad8f9609ece4474d97981adc30efe58b416 ALSA-2026:83207 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (CVE-2026-45859) * kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319) * kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011) * kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899) * kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032) * kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030) * kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974) * kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162) * kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377) * kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140) * kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262) * kernel: dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CVE-2026-74574) * kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641) * kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985) * kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526) * kernel: nfsd: don't free session slots that are still in use (CVE-2026-89689) * kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036) * kernel: media: cx231xx: reject geometry changes while the VBI queue is busy (CVE-2026-89894) * kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207) * kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228) Bug Fix(es) and Enhancement(s): * cannot use VFs of i40e/ice NIC in bond device (JIRA:AlmaLinux-143410) * ionic: commit backported to 9.8 missing in 10.2 (JIRA:AlmaLinux-165657) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-6.12.0-211.66.1.el10_2.x86_64.rpm 01e51f50d7a1715212857c373d52db10cc22f7aad9f9ce2c6303eb2f8b42560f kernel-rt-debug-6.12.0-211.66.1.el10_2.x86_64.rpm 08354743602550c5f7155f673af2f507d14a05d4bd451b3e2edf6b20673f069f kernel-rt-devel-6.12.0-211.66.1.el10_2.x86_64.rpm 31a858758a849e24d06648374a2e6e33d8b6f2e9341669bcaf046768b4ac61f4 kernel-rt-modules-extra-6.12.0-211.66.1.el10_2.x86_64.rpm 36d2d4eeb0e8bee8a55fdb42addb5aab5d5c3120ccf732097a7c403da6fc11ac kernel-rt-modules-core-6.12.0-211.66.1.el10_2.x86_64.rpm 43d7fb0eb8a28f2fd9058eda87b41ca5cf5526b0e828e1242736366b01838410 kernel-rt-debug-modules-extra-6.12.0-211.66.1.el10_2.x86_64.rpm 482576ae424a99b87bcc603088e3aff23aac1032965c9fc3e1117258d73734bd kernel-rt-debug-modules-6.12.0-211.66.1.el10_2.x86_64.rpm 794def47fe4cbab3f4ef549c1fe2da38c49ed3696e94a9b77eb46f06f1f28864 kernel-rt-debug-devel-6.12.0-211.66.1.el10_2.x86_64.rpm 9c483155936b93e76dae9428a90ff39e0b49b1e7ffd1310f07ff248968e0cd3e kernel-rt-debug-modules-core-6.12.0-211.66.1.el10_2.x86_64.rpm b62943e2eb020bd7f066dfb77a26fdb4693638b54a3fa77f11518fd8f6492d36 kernel-rt-debug-core-6.12.0-211.66.1.el10_2.x86_64.rpm d0671d42ef1ace356bd959f43b02c2d65cbec113799100a9e200bdac15741917 kernel-rt-core-6.12.0-211.66.1.el10_2.x86_64.rpm d8523cf8adbfdd9f6ffe16bb138ce9a28ebccbe304712ba2a1e4260fc5911dd1 kernel-rt-modules-6.12.0-211.66.1.el10_2.x86_64.rpm e8cf70f7dcb4eb51c7f04483b9540cb9cb176c998c0948567e5c186396a4428e ALSA-2026:85321 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935) * kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917) * kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801) * kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971) * kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962) * kernel: sctp: avoid auth_enable sysctl UAF during netns teardown (CVE-2026-68162) * kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117) * kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300) * kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315) * kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509) * kernel: sctp: keep chunk->transport in step with the list it is queued on (CVE-2026-74588) * kernel: sctp: validate cookie AUTH state before use (CVE-2026-74752) * kernel: smb: client: reject a tree connect response whose byte count is too small (CVE-2026-89631) * kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633) * kernel: signal: Prevent exec() race (CVE-2026-98256) * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260) Bug Fix(es) and Enhancement(s): * [10.2.z] kselftests: mm: hugepage-mremap: Bail out! mremap: Expected failure, but call succeeded (JIRA:AlmaLinux-181987) * [IBM 10.3 FEAT] zcrypt driver overwrite function - kernel part [almalinux-10.2.z] (JIRA:AlmaLinux-245336) * Batch: z-stream xfrm - rhel-10.2.z (NST-Core-26W38) (JIRA:AlmaLinux-256678) * RHIVOS - [backport] S32G Driver Enablement - USB (JIRA:AlmaLinux-257228) * Fix pending kernel issues for L1VH GA - Kernel (JIRA:AlmaLinux-267038) * Backport 6785011f8b16 ("ipv4: validate checksum_start before completing checksum") [almalinux-10.2.z] (JIRA:AlmaLinux-280590) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64-rt-rpms__10_0_default kernel-rt-debug-modules-extra-6.12.0-211.67.1.el10_2.x86_64.rpm 0672c99240baa503b27d08abd45b041693682205f9e23b35a24956ad6b6935df kernel-rt-modules-6.12.0-211.67.1.el10_2.x86_64.rpm 193e2f361856c14601efba8a793525c707b3a46012cc730707c0d0298977d9fa kernel-rt-debug-6.12.0-211.67.1.el10_2.x86_64.rpm 1b99412b2deeb0ac42c54c0c38c26e3eaf08780cff5663d5121d56b270a33f9c kernel-rt-modules-extra-6.12.0-211.67.1.el10_2.x86_64.rpm 5381a6c81d6114e6906e3d61849f0ee8a1bf916ebbcc4a06c3e94e92fe11b5fe kernel-rt-debug-core-6.12.0-211.67.1.el10_2.x86_64.rpm 5b632df101059473f957da19e0ac789a972ed27c8670d929fbe8938e445b5252 kernel-rt-devel-6.12.0-211.67.1.el10_2.x86_64.rpm 6d716aebaee84fc2816afa6c32d86a2a1da686a83eec905e7b16816769b4b4f8 kernel-rt-debug-modules-6.12.0-211.67.1.el10_2.x86_64.rpm 926c9391dd17f25c9d378819de4b165556588f7efc6513c1a7eefd593c88d558 kernel-rt-debug-modules-core-6.12.0-211.67.1.el10_2.x86_64.rpm ad505eac4042658baf1bac1513925b2f43740a65375a9e1ecbe536f6ec66183f kernel-rt-debug-devel-6.12.0-211.67.1.el10_2.x86_64.rpm b5959fd349d4e74359f3068a23e03d21a2518d914a0f6af39c68f68c4ef968f0 kernel-rt-6.12.0-211.67.1.el10_2.x86_64.rpm ba159ea02c1132462d1f00bc781119a0bc81653bd6b10363b58e490b29be02da kernel-rt-modules-core-6.12.0-211.67.1.el10_2.x86_64.rpm e41f382529f6ede4d8f013fe26cd90aaa58eeef63c0a847bc4a696b00a0abde4 kernel-rt-core-6.12.0-211.67.1.el10_2.x86_64.rpm f7c9800b755fb70d395cad713f36529f9458dd8eae417f75f6851a289202ef07