ALSA-2026:18134 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (CVE-2024-56633) * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839) * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980) * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015) * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097) * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166) * kernel: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (CVE-2025-38202) * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279) * kernel: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (CVE-2025-38267) * kernel: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (CVE-2025-38275) * kernel: ftrace: Fix UAF when lookup kallsym after ftrace disabled (CVE-2025-38346) * kernel: ACPICA: fix acpi operand cache leak in dswstate.c (CVE-2025-38345) * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405) * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441) * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470) * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866) * kernel: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (CVE-2025-40034) * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134) * kernel: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" (CVE-2025-40210) * kernel: Linux kernel MPTCP: Privilege escalation or denial of service via use-after-free in timer handling (CVE-2025-40257) * kernel: smb: client: fix potential cfid UAF in smb2_query_info_compound (CVE-2025-40320) * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040) * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111) * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-core-6.12.0-211.7.1.el10_2.x86_64_v2.rpm 0527a03df11da6811594ce96480e0bc2505c8726d6651be43cf9f8293f8fa929 kernel-rt-modules-extra-6.12.0-211.7.1.el10_2.x86_64_v2.rpm 097eaca487d10d311861609a7f334115813ebf0be52e3538e103a49bc012cfe2 kernel-rt-debug-6.12.0-211.7.1.el10_2.x86_64_v2.rpm 1ac6b6692a167d8049b87a2a0f0ebe03d309f990c1638c2ea44d5bd46019e53e kernel-rt-debug-modules-core-6.12.0-211.7.1.el10_2.x86_64_v2.rpm 60be4e1fcd34633b7bbfcadbdd09069ef31ed7b62095824c88a627afa250522c kernel-rt-core-6.12.0-211.7.1.el10_2.x86_64_v2.rpm 62431a3f1ba73ac897542d0bbf0e281c651e41f1c008bd769fa3773d9c1f643c kernel-rt-modules-core-6.12.0-211.7.1.el10_2.x86_64_v2.rpm bbb1a5ae456b72fcf1115dca49b8c4d5fb53e58be0298fb0aae10c64b28d2666 kernel-rt-devel-6.12.0-211.7.1.el10_2.x86_64_v2.rpm bd5bf90c8a788954f93c1e099a9e7a96901b89f92b635a51aafc59b762ee3ecd kernel-rt-debug-modules-extra-6.12.0-211.7.1.el10_2.x86_64_v2.rpm c4740e1cbc503072dd91c4da9c8e868aa3a2632d57fd7253ca67a4ed625a2fbf kernel-rt-modules-6.12.0-211.7.1.el10_2.x86_64_v2.rpm c8b690817b6836ac7cbe3c86a70bd8e02dca62ae0989c059808b7914b50cb808 kernel-rt-debug-devel-6.12.0-211.7.1.el10_2.x86_64_v2.rpm e604d435293b8a55fa6f7c654061849003c23b32aff14630bae90d34eea298e3 kernel-rt-6.12.0-211.7.1.el10_2.x86_64_v2.rpm eba305a14382a6287dd937883da836ace8a7b598e74133cbce5947a0abea6854 kernel-rt-debug-modules-6.12.0-211.7.1.el10_2.x86_64_v2.rpm ee8999fb86a65eef16b6aaa066ee6612347a1dcdff975e18c1dd1f5f8c006fb9 ALSA-2026:19074 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677) * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-modules-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 1dbd1a27e7c2d04537289bbf1440fb5997a2c9692e9694b190227df76de490b0 kernel-rt-debug-devel-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 50f69cd20b0f825089c1e58660d94e96f56ad8aa4cf61e4cfe0a538c40200aaf kernel-rt-debug-modules-extra-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 528af32bccf740248255655d3651c2be3c49863db8f5227e8110368096e3a9cc kernel-rt-debug-core-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 5d05531b3d077e86150e05b28a5ac7bf69f83911f7445e7aa2d6f480748820fe kernel-rt-core-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 5f1217f686df168a66d19484989b903aa625f71cca7ae500d1f2006505cff71e kernel-rt-modules-extra-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 6b108d38a5743698eb855ae62519fd445cb6412162beafabb81a0d4bd155ec75 kernel-rt-debug-modules-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 77962f0b4b531aa4878db3b4b1df0cdb75fbc3f22fea25590111830eefa9759b kernel-rt-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 7ae7b5c3eb7569e23dda2628fd1b4fe52f93bb2e9a2cec9893976386bea4510a kernel-rt-debug-modules-core-6.12.0-211.7.3.el10_2.x86_64_v2.rpm ada044f0e20182509ffb72d70f004f34eb557ab2a4e1d4574e25bcc08dbad8f6 kernel-rt-modules-core-6.12.0-211.7.3.el10_2.x86_64_v2.rpm af57209c431f6ac0ed10918950f5bbb046c3bc36dba3546d12304840997b48fb kernel-rt-devel-6.12.0-211.7.3.el10_2.x86_64_v2.rpm e12b4bd3ee6cf0593cb403265127e6d23daf828b6c05691b956d12e35a1dbae7 kernel-rt-debug-6.12.0-211.7.3.el10_2.x86_64_v2.rpm f991268d888112982c96e4abaa1edf37bb1c5148f2a114bf1f19e4624409078d ALSA-2026:19569 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 01179955ee3e802b71eacac880fcdecbd0c58c23cedfb497a9eb83614c08b33d kernel-rt-modules-core-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 268207eb37ec6019a647d0bce858bc7fe3a1c75ab3339a9c6e769b19a3f272f2 kernel-rt-modules-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 2e980aa8bddce9ebbc28da5ebd39042b6671f20600ff67de79fa030d7335b888 kernel-rt-devel-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 5324ac6be534b6dd30c700a57a039321ed702147afc9e1439eb2a7419078d15d kernel-rt-core-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 56df9dd3eb2d35aee46b176c8fa086a1d35258170d05de1c535a3e12f4cadfac kernel-rt-debug-devel-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 5837fde8f0e51c89fc68b2178ed21a54bab787c9be8001b15086f4c49e4b4e76 kernel-rt-debug-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 5a63e6748da4bfded58995229a195f7609bfb9c355710316f976feb631de5737 kernel-rt-modules-extra-6.12.0-211.16.1.el10_2.x86_64_v2.rpm ab6ee39b4275f282b8b976ff78c70497a99d8429ccdfbc513217df96c00323d1 kernel-rt-debug-modules-6.12.0-211.16.1.el10_2.x86_64_v2.rpm d210bfbbd6ea7097ff5497588c05c61997dd2f9db43b4a3e68c89fb04ed6c7e7 kernel-rt-debug-core-6.12.0-211.16.1.el10_2.x86_64_v2.rpm e5e9dd9242c01c707e7d46d35a1d51d39bc2961357b37b2258f2786d9c8a7949 kernel-rt-debug-modules-core-6.12.0-211.16.1.el10_2.x86_64_v2.rpm ed0993006923ae906c258df792328486f3e43252b970efdbc9af049cecc56fad kernel-rt-debug-modules-extra-6.12.0-211.16.1.el10_2.x86_64_v2.rpm fdd1587b10b45b657fdc2a37876e95021b2c0ee15235c722306b9a2ec706b45c ALSA-2026:21557 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645) * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) * kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375) * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) * kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006) * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020) * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051) * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023) * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) * kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205) * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) * kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.18.1.el10_2.x86_64_v2.rpm 3044c17c1b2ccfda2b2ca6f8a8c4a192eaa14e1c3a48fe28522c5a494652601b kernel-rt-core-6.12.0-211.18.1.el10_2.x86_64_v2.rpm 306909bcfa2491505f630b7486833e0413b284355be94e9b4960d2657ef12ea5 kernel-rt-debug-6.12.0-211.18.1.el10_2.x86_64_v2.rpm 5258d9200ec6207b902c45f18d89d3ec213cd5026b611ec9b23c5ca55060bb37 kernel-rt-debug-modules-6.12.0-211.18.1.el10_2.x86_64_v2.rpm 63ebf7a9008f99cc3d3238759e3fe01ef27a1bd935af2d0770847215faf40a66 kernel-rt-debug-devel-6.12.0-211.18.1.el10_2.x86_64_v2.rpm 96b1ddccf21d38313113d52b586ec30e4e897094a823a996c260dffc2265bae2 kernel-rt-6.12.0-211.18.1.el10_2.x86_64_v2.rpm a461ddaffa6a423cb88c8a249512b65fe3d1a59e8ae560c7b0927c888aed92aa kernel-rt-modules-6.12.0-211.18.1.el10_2.x86_64_v2.rpm ad9ba090e323323f596bbef3f2c804b0bada5d94ae9ec2642301e4f5e73f3bde kernel-rt-modules-extra-6.12.0-211.18.1.el10_2.x86_64_v2.rpm b3f0ed8c55f642ad704cd52038c636a27e8bb8682917466ff2424d704dbecee1 kernel-rt-modules-core-6.12.0-211.18.1.el10_2.x86_64_v2.rpm b5556250c268c419d32137d97e00f12f7cd6ed73e3ed89f9fe29d972f9c5928d kernel-rt-debug-modules-core-6.12.0-211.18.1.el10_2.x86_64_v2.rpm cf99f0992e55ed24447cf917c6a0bb2203693d5c4dc7335344339647fd47ba75 kernel-rt-debug-modules-extra-6.12.0-211.18.1.el10_2.x86_64_v2.rpm e549904a422ecf95e272270000f06e4eb5a68498908795bf65c1a2a5d6c025b5 kernel-rt-debug-core-6.12.0-211.18.1.el10_2.x86_64_v2.rpm f059abe2fbf9e67aa6adf8c8ec9fb8353e75c5265f6d2aad6146e4891ee1dec3 ALSA-2026:23329 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653) * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) * kernel: Bluetooth: hci_sync: Fix UAF in le_read_features_complete (CVE-2026-43322) * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-extra-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 0490c8f315a757e0caf1796e98b3b7d0d5765983e05bc160f00dd371012e7dd2 kernel-rt-debug-modules-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 18066c7ad033c506600db83d5d2b40b4bc66480a70d0817b34eb168828f16927 kernel-rt-debug-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 2111923030121334fd94e59bc69e175b105561230d1015cf468552be0bb13f19 kernel-rt-modules-core-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 3dfff2c78c2e4cc70c07d942657dfbe53f9d5387fc783b7134a31967cb0d7edf kernel-rt-debug-modules-core-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 84577a60ae6ae2ba599143a937a90ee650f148025815f7c1baf7e53750794dea kernel-rt-modules-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 8bb833709da10b88e85db309eb86ce9a3ff2827cf48973a8ac922ddfaa0126c9 kernel-rt-devel-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 9a24554a7d0a77a7bf9194a36617705ee2b536471680baaef80ae350de5a8676 kernel-rt-debug-devel-6.12.0-211.20.1.el10_2.x86_64_v2.rpm a8583dc102ed0aff01eb6ee7bae8e6e47d1343a887fa03b07e9810786bd66a34 kernel-rt-debug-core-6.12.0-211.20.1.el10_2.x86_64_v2.rpm c7132284b0d40ab87e2131632ab624d7c1d4f4f5a42cd1831713f600baa1799d kernel-rt-modules-extra-6.12.0-211.20.1.el10_2.x86_64_v2.rpm fc2eb57361b2668d429c984b1aa07243db3cb92aba05eab0cb772650012fb2de kernel-rt-6.12.0-211.20.1.el10_2.x86_64_v2.rpm fca53e219e6fa2d589ebf0fcb1852363862f793e28fc46666f195bc44258f877 kernel-rt-core-6.12.0-211.20.1.el10_2.x86_64_v2.rpm fdd32f4d0e5f25ce872b2059f151b3a3d63dc1b4fce27ea1687c99a0f5ed7a8a ALSA-2026:25191 Copyright 2026 AlmaLinux OS 0 1 Critical

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: Linux kernel: Denial of Service in erofs filesystem (CVE-2026-31467) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 1fc9146f1457c57d41572b0ce64098108a7b80d1eb646a5a922ffd31aae0092f kernel-rt-core-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 21f2d77ff0df5a7008d8197eef0cb37d5cf8439bb1d20298172d53f89b9dd58a kernel-rt-debug-devel-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 4c1c6f57ce7b49492000c9976a7b328691fec4d1e09cec9889c4731eccc586b1 kernel-rt-debug-core-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 51c95bafaa38191bab60c91d5ad508ec1686dc785c5e0a7f31db1b901055f907 kernel-rt-modules-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 51e430a46683c61c5d0bac49a3b419119c9694f7582d6947175442d187b0c39a kernel-rt-debug-modules-core-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 5a3ea95cc2b799ed5fd4c5b9508801d0380e6f87a54492f4563b59df7f295194 kernel-rt-debug-modules-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 8c86f2e72001638f4975672affa0b4a4f71b74308fa120942cbad9cb47c2a5fb kernel-rt-modules-extra-6.12.0-211.22.1.el10_2.x86_64_v2.rpm a17f93fd4238862e41739b5d3599ee264e420fb3a4207d0743b4e9697e45c90c kernel-rt-devel-6.12.0-211.22.1.el10_2.x86_64_v2.rpm eaa0002318f053e97f1fd9c562e343401b1d371a14865a18665e784284a8f168 kernel-rt-6.12.0-211.22.1.el10_2.x86_64_v2.rpm ef196545c91bad04efd9edddf42e3d6f1c160accf111139edb72da8a7da4ae2c kernel-rt-modules-core-6.12.0-211.22.1.el10_2.x86_64_v2.rpm f81d3f59e426a39400a4db18904fc7519ca488e5f41dd2e6869fde726c11b141 kernel-rt-debug-modules-extra-6.12.0-211.22.1.el10_2.x86_64_v2.rpm f91e2fceec2dc940fd532bc7953ca2ed831378cc95dcbe8c714c3ae7e2e4e90c ALSA-2026:27288 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474) * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) * kernel: rxrpc: Fix RxGK token loading to check bounds (CVE-2026-31641) * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772) * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260) * kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330) * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166) Bug Fix(es) and Enhancement(s): * AlmaLinux10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-10.2.z] (JIRA:AlmaLinux-166047) * AlmaLinux9.5 crash due to lpfc NULL ndlp->vport [almalinux-10.2.z] (JIRA:AlmaLinux-171774) * objtool static_call check blocks build of out-of-tree livepatch modules on AlmaLinux 10.2 GA kernels ? missing upstream revert f495054bd12e (JIRA:AlmaLinux-178495) * ibmveth Adapter Freeze with Small MSS [almalinux-10.2.z] (JIRA:AlmaLinux-179723) * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-10.2.z] (JIRA:AlmaLinux-183127) * AlmaLinux10.0 - s390/mm: Add missing secure storage access fixups [almalinux-10.2.z] (JIRA:AlmaLinux-183319) * [AlmaLinux10.2.z] Enable Pretimeout Watchdog Panic Functionality on x86 (JIRA:AlmaLinux-182299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-modules-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 10b8621a8c91358e7a770a501c3468dac0588aae5d3f1a2fca1b57d6aa295339 kernel-rt-debug-core-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 1d30f4867078e3a118fd8067017e3b62316d28fad974827daa0e9a7aa0417fc1 kernel-rt-debug-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 1f7eba098a2fd7012afab672de9975c32151d733851d56e65319321e5c1c3710 kernel-rt-debug-modules-core-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 23cb9de6a6d47775d7b6c8ca2180404292caa1aa49bfd51b46bcb6b35dcf5c5c kernel-rt-modules-core-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 5c1e70382ea4727335dfe8b667ff10deeac340f6f4d9a292075a0e6beac1388d kernel-rt-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 819fed521b5c987ee3873d88429f79f4228364df8e2974ff888c605bcf4538de kernel-rt-debug-devel-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 998482ed92ad82061850ea694cbefe646fd80636ef203cb3bc3636c1e71793d9 kernel-rt-debug-modules-extra-6.12.0-211.26.1.el10_2.x86_64_v2.rpm b2255f583a1eed341c1c1e72ebdec89b426fc5d2d3c4eee9883c7df11a34d2e2 kernel-rt-debug-modules-6.12.0-211.26.1.el10_2.x86_64_v2.rpm b262946d9e45dc0664e62fa64199a4f3f245c48dd24c6b9d82eee8cb5b8b5369 kernel-rt-devel-6.12.0-211.26.1.el10_2.x86_64_v2.rpm bba3211f14f2673e572462b43db0e70bcc24d5f4dd75a81098a683e25d7ecf93 kernel-rt-core-6.12.0-211.26.1.el10_2.x86_64_v2.rpm f4824d207c8dcef0b1f081f3ddf99c6f96eaa6e9383764ff6d3107340420c377 kernel-rt-modules-extra-6.12.0-211.26.1.el10_2.x86_64_v2.rpm f8943f2a8908c98eaaaf27161972e362d962961edcc83993f1d94d6e6370fa25 ALSA-2026:30129 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: rxrpc: fix RESPONSE authenticator parser OOB read (CVE-2026-31636) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414) * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898) * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * Unexpected execmem SELinux denials after CVE-2026-46054 fix [rhel-10.2.z] (JIRA:RHEL-185117) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 0806aef9365aac209efd1ac925d28199476c58af45cccb09cb9b15415f01bcf5 kernel-rt-devel-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 0f968a8934b504eda181224799c294faf06fbc057fca814ca14395d9564d5ff9 kernel-rt-debug-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 11dbb5b46a75906f1c446414c4c24e6924f68288695af47206d39988c26d49b6 kernel-rt-modules-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 27db8ccf78f846fba6904d0da06c12b012d096bd3f5efda2b2f84e90f596160a kernel-rt-modules-core-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 30973eee2a0b9d9aa0497e08ea4cf04f53e99128af28ce803649a3192318a6cc kernel-rt-debug-devel-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 39cbdb234602cd5e6abe37c301e07f5413e64be5a00df73f04e71d71f6bf5e0c kernel-rt-debug-core-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 498b1e16ee58de0dd4045fabb6b699e0c2d918ffdfff790612f8eef1f634578d kernel-rt-debug-modules-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 4b5580efca8496b5db1e0de4128a75273ead7a19f6022cfb161417db57997916 kernel-rt-debug-modules-core-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 52176ef22a014c0f683dcebc2b4cb64123de8e09b7bfd8904611ebe4457243ae kernel-rt-modules-extra-6.12.0-211.28.1.el10_2.x86_64_v2.rpm cece21d6dccd05a612890360436fa372b5fadc66702d0c690780661cef65c70a kernel-rt-core-6.12.0-211.28.1.el10_2.x86_64_v2.rpm e67e3e27d940786783e84a14ecd3592dfa9aa7b2981851e4aa322c61905f9aad kernel-rt-debug-modules-extra-6.12.0-211.28.1.el10_2.x86_64_v2.rpm f63023bb82df9d1143dd812d8060e6dad2a5b58c46cbf075d850a84f956ee074 ALSA-2026:33685 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176) Bug Fix(es) and Enhancement(s): * CLONE - [AlmaLinux 10.2 Bug] qla2xxx flash image validation failure [almalinux-10.2.z] (JIRA:AlmaLinux-181887) * tegra-se fixes and updates [almalinux-10.2.z] (JIRA:AlmaLinux-182759) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 2204a2b49e78375b3472e1b10008b3762702f998673e08139a8f9c7813c4f332 kernel-rt-devel-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 31ba37c10bf737cf43fc20e4915177125c8b3f1e696c0cca943b5c1a669f9638 kernel-rt-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 3cb020555d1e4ac3762e51367f237c57c83431c5d45fa382effa14a7b6d2fd69 kernel-rt-debug-modules-core-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 3fd14ad123ec37ba14444a897877bf193b97875c6d50db9c2d5febec269433ca kernel-rt-debug-core-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 57d57add145e6303ace90a2ada51a8667957d70e23694a7848956733f299607b kernel-rt-core-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 8556485a4b352b31ada34d8c6136bd610f35165610e4da4875cd0f0fdb35e810 kernel-rt-debug-devel-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 89b1422b8aff964445a76751f4f5f0c2f8fd0c7c8b35b53210b3a0ebbb7d8709 kernel-rt-modules-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 9cf525df2940d88add3f90aa70bc465c9577dbd630ff2589211bb4a79374bbd4 kernel-rt-modules-core-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 9f2d1ac8183583da8d1659a551eb342d607c3fdaa7660baca85f136411a1ecdd kernel-rt-modules-extra-6.12.0-211.29.1.el10_2.x86_64_v2.rpm c9439cc43431dd9164a8abd9fec5b0990fc96c271c963469fd5b9a37a38b5fa6 kernel-rt-debug-modules-extra-6.12.0-211.29.1.el10_2.x86_64_v2.rpm ddcaf6971b6750e4fb947e7df1891ddbe5509a0584f76475b9fd625af1683db7 kernel-rt-debug-6.12.0-211.29.1.el10_2.x86_64_v2.rpm f0b09c89d5380dd3eeee9ca2c291fc82a726e7cb222db0821eef97acc9a3d1f1 ALSA-2026:34911 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) * kernel: rxrpc: Fix potential UAF after skb_unshare() failure (CVE-2026-45998) * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244) * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) * kernel: kernel: ipv6 frag escape () Bug Fix(es) and Enhancement(s): * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-10.2.z] (JIRA:AlmaLinux-182537) * [ThinkPad Avon/Mario +AlmaLinux 10.2]The OS hang up with CapsLock fliker (JIRA:AlmaLinux-185110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 00750a4af23ebbf9951f92a5809900ee361da28b3fa3689684bf341f4934b41d kernel-rt-debug-modules-extra-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 220b87da12cfb3fc29d0ad82e02d84dc80565258d7473bf763ec930b52783c4f kernel-rt-debug-modules-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 2d5b9b5c690e2b16d897e10a977bddd1757832353549297fdd9b7922d94b8f05 kernel-rt-debug-core-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 52c8abf065c51c13188feb529d6b296d69d1c75fd5df9083ba83228fbc24751a kernel-rt-modules-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 5b5fce45f995d6b4c9c8940d28e80f7b3e314b6447354c6a64b191909374f24b kernel-rt-core-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 5fbe19246ce1c285e5b33c6dcbf4dc8c092b1b90c6ae6a7ce91054bf0fed2b67 kernel-rt-debug-devel-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 7399092c339570db1e491adea3d9c6d0eb907039e8a240fb68dc5db776fd8844 kernel-rt-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 7a535000106891e825d3d3d166e7f7a58665bd87a22c1d5f204cb7f5f4a2c7af kernel-rt-debug-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 8521bd77aa36b4d4d6cc6b1a03c226c99cf6ba4b3f06da87e004a5d8f4a88023 kernel-rt-modules-extra-6.12.0-211.30.1.el10_2.x86_64_v2.rpm ab1e4436d91421759fa2e9100d5307f8697840865190b1e106aa966c7162f573 kernel-rt-devel-6.12.0-211.30.1.el10_2.x86_64_v2.rpm b9a8ca1368aed374d61188df4fdc3553f7da5467590565efd70d3388f0254e86 kernel-rt-modules-core-6.12.0-211.30.1.el10_2.x86_64_v2.rpm d54791e8b97476895f85a13ea6f280440fb30618c11a2f3e9892d2d636fd98f2 ALSA-2026:36541 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276) * kernel: net/ipv6: ioam6: prevent schema length wraparound in trace fill (CVE-2026-43341) * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259) Bug Fix(es) and Enhancement(s): * CNB103: net: page_pool: avoid false positive warning if NAPI was never added [almalinux-10.2.z] (JIRA:AlmaLinux-162140) * [AlmaLinux 10] Bonding reports unknown speed/duplex for tg3 interface [almalinux-10.2.z] (JIRA:AlmaLinux-182770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-core-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 0ea2a925a7e11b1a6fba44f5fd46a02570b3f26410ae9d3b1513e02a3e31ebbf kernel-rt-debug-modules-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 197bcefc5ff26ee96680ae6849702a1a4e7e5f44b4cb789cd64d8d08e0887bbd kernel-rt-devel-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 1a5519f2e164bfbc2c0668cce639b158f402632b336744932024adbd1a30d9b9 kernel-rt-modules-core-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 2298365c9c3bae352728e7e59381017dca3b4325a3f0e5c9ecc4816cb7cedd7e kernel-rt-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 413ba95b568a668c878c9d3a94c968d675d55f9f2a7ae49e8be1f1bf0af68ff9 kernel-rt-debug-devel-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 5400fb5973b1cf44bc4716768ea0c02a560e9a587944c6a7bbfe8c35d90e7f6a kernel-rt-debug-modules-extra-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 8ad8fef1803d4214725ef44e3964f00594ee0651281eababb835874a3220d74e kernel-rt-debug-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 92198d4b692435bbe129e072eedbdd7cba78f773bf728742858657732890a395 kernel-rt-modules-extra-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 95bb0ea42d05257d43d8cb4d5ab18ac30ac7d64a49ddbfa2aff477723fa689ac kernel-rt-modules-6.12.0-211.31.1.el10_2.x86_64_v2.rpm d312b0453d20127e76ca6eaba26fc6aefd7d60e0fbd3ccec38da7473099afc8e kernel-rt-core-6.12.0-211.31.1.el10_2.x86_64_v2.rpm d37afa4ac990d5b1c673497302f6c779c363c8368b7ce2f5d790fe01cb3e369d kernel-rt-debug-modules-core-6.12.0-211.31.1.el10_2.x86_64_v2.rpm fcc3fadba212b6ad7d8ad5aba3c2972d1bcfd52323f161f0e8fd4d8b01b6599c ALSA-2026:36956 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 11075322aa057ae3a0474683255c2e39821bd070f3108f6b8a1bf280bce03911 kernel-rt-modules-extra-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 1ee6f7fe9cc86b34dafd2c0032ae264028f4f4b5a1fab59ccc38a0553ee9963e kernel-rt-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 2fdecc0ec91d46b2d1435b713501e60cd6dbe8bef07404a4b83b9ddeee67e677 kernel-rt-debug-modules-core-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 30028c3c894210dabb0b89e13ff7c6b93671fe5cc1673f8053b0ea3b2b62e325 kernel-rt-core-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 45d680ed67d62b428a654105d52ed14fd2e5258c7c1bacdfabb193eae0848fff kernel-rt-modules-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 6846f2981e423bc3ed0a10ef3d043eb1b30a7752d5731ecf9f76027be1dee345 kernel-rt-debug-modules-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 81d8e0a905544158139c2616f7ce370c05d80b8c5f06d875738a475f83b405c8 kernel-rt-modules-core-6.12.0-211.32.1.el10_2.x86_64_v2.rpm a9776c8698c1ede5d4bae522fc4efbdc9a25963587ea4b830d744ece061847a9 kernel-rt-debug-6.12.0-211.32.1.el10_2.x86_64_v2.rpm ab4b6ee0e7ea26d3900f3ba6936f6e140283ed2f467c5fb23b67936d154a4af8 kernel-rt-debug-devel-6.12.0-211.32.1.el10_2.x86_64_v2.rpm dd41cec92a5ae44908435a03fe93614b68211214d6195e659e7a8978e5c259c1 kernel-rt-debug-core-6.12.0-211.32.1.el10_2.x86_64_v2.rpm f7ab9e4475c8417cf0fd2bc18401f6aa512780b03c4162be819040011cfbc523 kernel-rt-debug-modules-extra-6.12.0-211.32.1.el10_2.x86_64_v2.rpm f83a2489f084c4cf0c4991351929134fa0c9b25aa9631e07c64bb9ee4aa89ad5 ALSA-2026:38492 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.33.1.el10_2.x86_64_v2.rpm 0c533d9d39fc27a4a32aeebe9a41f366cd3bf05768abd658239b1de9394b5864 kernel-rt-debug-modules-extra-6.12.0-211.33.1.el10_2.x86_64_v2.rpm 2d9c841b4c58848ac397e96a99146f8ac9b7680a24cd5926b194d7bb269dbc0d kernel-rt-debug-modules-6.12.0-211.33.1.el10_2.x86_64_v2.rpm 41e314ddabbb940d0aeb6bb368bc858033cb4711cd1e9d7ea8f9fb97c9744ada kernel-rt-debug-6.12.0-211.33.1.el10_2.x86_64_v2.rpm 9957d394580de055433a1f36be8e747dbe16ce18b12f9165f7b087e5acb28668 kernel-rt-core-6.12.0-211.33.1.el10_2.x86_64_v2.rpm c2dbfbebaf2e0643cc7328bd41b1649a5a3615101a333073ad463bc39c239c19 kernel-rt-modules-extra-6.12.0-211.33.1.el10_2.x86_64_v2.rpm c405b3030d880f419579375f48204da9a44ac3a4f7594649e0ddf325ff605d6c kernel-rt-debug-core-6.12.0-211.33.1.el10_2.x86_64_v2.rpm c4b87a05e99c309d4bd903cb130cf76a092e16e215cfb2fb928c8cab207b9da5 kernel-rt-6.12.0-211.33.1.el10_2.x86_64_v2.rpm d29fdfaebbf0bc8935e2c3a670c714e1495352dac66ab03d07e03c89138a0552 kernel-rt-debug-devel-6.12.0-211.33.1.el10_2.x86_64_v2.rpm e08440281ef03f8fb3ebebe4f1d1d8983be96f9097bf30d958e9c201a3baf867 kernel-rt-modules-6.12.0-211.33.1.el10_2.x86_64_v2.rpm e60f98f1f2de567920071dabe1d67eb7c1ce91b50dcebf0be50a6f034d6e6c20 kernel-rt-modules-core-6.12.0-211.33.1.el10_2.x86_64_v2.rpm ed4ffbd2dc975665462e202998ce4580fa6cdccc934169a9513e472e43e7a5e1 kernel-rt-debug-modules-core-6.12.0-211.33.1.el10_2.x86_64_v2.rpm f96be8c3772333fc400838d5870241c241dec70f79a49bc2ef91ef878c99061c ALSA-2026:39494 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) * kernel: XFS data corruption using reflink () Bug Fix(es) and Enhancement(s): * [Exploits (KEV)] kernel: XFS data corruption using reflink [almalinux-10.2.z] (JIRA:AlmaLinux-193945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 5a77e5fd2dc587ce9368374d1b5eef3fa82b25d4283715f371500183c4f06a89 kernel-rt-debug-core-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 5fa8bb096d2fc6f16b8c7ec944962dc79df37e252be91428bdbdeef13261f925 kernel-rt-debug-modules-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 7257705284b5bd27d98ad190d65d4018b039d03668a6175aa7776ac932d581e3 kernel-rt-debug-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 7454675387a039a109e6f6b5080da2abf6c5564f23f0696a2263a29099016b46 kernel-rt-debug-devel-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 823d34cd2c5a1c80969e2d3bb1e637bf0ac7d1e1fa6c5e52e401c60d67e46312 kernel-rt-modules-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 83d4114cf0ce3d9f52f76add1f0c02a13afe6cbd8c8b73de34244812daef3194 kernel-rt-devel-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 8792d025c765b18414c39a22a389c7d6e878c53f2f46f57e7335338ce774c4d3 kernel-rt-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 8e7820d1e8ab5572ffab1b5fe130736f063ca322311eb6d2a7f5522b3eaa32cf kernel-rt-modules-extra-6.12.0-211.34.1.el10_2.x86_64_v2.rpm aef0dd13696069ab3e387bb6a400cacb0323164054b1f355de24c2264bf2971e kernel-rt-core-6.12.0-211.34.1.el10_2.x86_64_v2.rpm d1bb56b2612b7f8056b5ef93f8d3c5502fe75fbb6f31fa2306560ef308f4d2e5 kernel-rt-modules-core-6.12.0-211.34.1.el10_2.x86_64_v2.rpm d80c97e02509724af2cb315f43cdbe1c621b36c56fc4d9ca005d56883a40163c kernel-rt-6.12.0-211.34.1.el10_2.x86_64_v2.rpm e3a3fd751b9799dd6bcc10f19b7bf3592b8b8f87bc45dd03bbae1d8905872578 ALSA-2026:42919 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113) * kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147) * kernel: flex_proportions: make fprop_new_period() hardirq safe (CVE-2026-23168) * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530) * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) * kernel: fanotify: fix false positive on permission events (CVE-2026-46150) * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215) * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976) * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950) * kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009) * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) * kernel: can: bcm: thrtimer use-after-free during RX operation teardown () Bug Fix(es) and Enhancement(s): * nfsd_file slab cache objects remaining on kmem_cache_shutdown during nfsd teardown while running bz1477872 testcase (JIRA:AlmaLinux-173103) * tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-10.2.z] (JIRA:AlmaLinux-183975) * [AlmaLinux10-debug]: BUG: KASAN: slab-use-after-free in __pv_queued_spin_lock_slowpath [almalinux-10.2.z] (JIRA:AlmaLinux-186311) * ice: driver update 2026-06, part 1 [almalinux-10.2.z] (JIRA:AlmaLinux-191324) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-devel-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 1d6657ed218f7bdd6d19f68311cbeeccc2feb95070d2644a0875ca416b1c0403 kernel-rt-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 37d1b6a18d3fef334c3af8063243d748c2d7860c204b51a1eb78eac400ba72a5 kernel-rt-debug-modules-extra-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 47fe6581590d12dbb846e3623b3a99619b04804bc33317ac21739c96fd809e81 kernel-rt-debug-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 6144c4126579181e2898cbfe2a73a6555dc40b7aafbdf565e3ac47b5118110b5 kernel-rt-devel-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 6466e49b3240f80c8f6be01ed8db21cefa30a27fbbf6c1af4eb0ae1696d52eb2 kernel-rt-debug-modules-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 7c9cbece4266cd9a789f8076dc5ecfe0cb0e98ab4f5276183bff6263643a1554 kernel-rt-debug-modules-core-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 96069051c9b1658531c2ae78bc337cfcadb063b1f6dd0997d2ea3f7a72ed01ec kernel-rt-core-6.12.0-211.37.1.el10_2.x86_64_v2.rpm a36e2dba6c9f931d0e3c8e358e76cef0bc069ce9b532e811fc0a3a084efee199 kernel-rt-debug-core-6.12.0-211.37.1.el10_2.x86_64_v2.rpm ad0a85bbce9858f1a33b07d3877c1a1e2abb6b89f5dacec34927e5a4327fdc50 kernel-rt-modules-extra-6.12.0-211.37.1.el10_2.x86_64_v2.rpm d51f8a83becb90ad8a06a643a40948b4759da355d4ebc5c9ac549b92dfc700f2 kernel-rt-modules-6.12.0-211.37.1.el10_2.x86_64_v2.rpm d9b00d0cff28cd435cca3fbee54ab47e27b08b7ac7c19c8303a18798e925f0d7 kernel-rt-modules-core-6.12.0-211.37.1.el10_2.x86_64_v2.rpm f6ac9ebd581ff191349cebeb094e2b9626f3d159b4f4620531b3627a9e44e780 ALSA-2026:44270 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 1821b60159959451f214700d277ec90081406ed78ccf93019334bc7ff3c938bc kernel-rt-modules-core-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 2cbe5880d8de05d50870f71f0ee405b7215a5bc01b36c65fc036edaf67c2a602 kernel-rt-modules-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 550dfa331467cffa9328f06f8f411acc02124cd1075fb86548557c9162497454 kernel-rt-debug-core-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 5659b42e2ee218f6d7608496f2425dc081dbdaa8b79829c2ffc1b71cdd01819c kernel-rt-debug-modules-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 7414ee9da264faf58bf3150d7d3591ae0fb48fc5cde6fcc856205b8ffaa7f66f kernel-rt-modules-extra-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 992df5c1447c931243332e61f27ece4f608b17a5906f639809c0753214963638 kernel-rt-devel-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 9d65e44b354596355538375bd6f7434a4c04224ac6b1f8d68a38a514b61fdee9 kernel-rt-debug-modules-extra-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 9db65b96882e276859bf9808223cf14bfd9c4f362d0cb9d9fa6854203309588d kernel-rt-6.12.0-211.38.1.el10_2.x86_64_v2.rpm b9045d9e398cac6431c29fee0e9465a842207017779879587b7fcbd2391900fc kernel-rt-core-6.12.0-211.38.1.el10_2.x86_64_v2.rpm bc731943319df7fea45e99e1e8dad2f5b5270b8af9360cf9d8aeb50a92c11956 kernel-rt-debug-6.12.0-211.38.1.el10_2.x86_64_v2.rpm bfc1354386b5bfdabfd48c0b3b8727533b656b11ef71c42dec31f108d3632f21 kernel-rt-debug-devel-6.12.0-211.38.1.el10_2.x86_64_v2.rpm fc17df7ccba66107c7210a3856446158d317e57926c97065c58b916840fd5f0c ALSA-2026:45114 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 025f935728dd3b85362226c6c2858a96c5b343241c0ee6e827cc2cf799f8bcf7 kernel-rt-debug-modules-core-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 0d20f235583b08db201b3fdd25ae9852c66097a291813925eeb79f463faed880 kernel-rt-core-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 2166e32f5027d87f0d9271ebb4c7c5141db3db711bfe8383cf53171e3a50bc4b kernel-rt-debug-core-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 395786246f9c9d1fa24f351147584e3c21158edc18f5ea8b81457ba72b93f060 kernel-rt-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 3a55d5c8df07c0e6cdf9d27c181250037f72bb3f5c9ad9f71d196cd20ca2e197 kernel-rt-devel-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 6b557380ea947c919999c780df67c6b173dbc42c3672aa08f417428384c7d748 kernel-rt-debug-modules-extra-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 92e823fa46b29d74c8f42218ac0bcdf8eb3b7f37119ccc813226d9895b2a1489 kernel-rt-modules-6.12.0-211.39.1.el10_2.x86_64_v2.rpm a3319ff2363d000b58178dd53741ad9bd47a2b3125bea29148b20379022013e7 kernel-rt-modules-extra-6.12.0-211.39.1.el10_2.x86_64_v2.rpm a332aa43e77faec36cd0f8a32aa3602afbe4e4e9c5be3b36b1756986b026c0ec kernel-rt-modules-core-6.12.0-211.39.1.el10_2.x86_64_v2.rpm b3f8af88a06a0bbf1bc09528ebee848f921ef1c6dae0339e506d85486149f10a kernel-rt-debug-devel-6.12.0-211.39.1.el10_2.x86_64_v2.rpm d2d77dd2e83a6240e3e31099d289db365f4a6ec171d9a9e2fcd69b8aa05fc4ea kernel-rt-debug-modules-6.12.0-211.39.1.el10_2.x86_64_v2.rpm f72616166749513459f8b687a0df8793a7b097e6e4e3b45c18fc05c236b84c0d ALSA-2026:47017 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281) Bug Fix(es) and Enhancement(s): * rxrpc: Address CVE-2026-43500 [almalinux-10.2.z] (JIRA:AlmaLinux-178254) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-devel-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 07cf0b4b9138cee1feded361b347c2a1d29724d893921c6a1ea443c44b9e545c kernel-rt-debug-core-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 1c61b52b13baef35c94727dd0c3da836ee451cb193bc2818248291296cbcd2a8 kernel-rt-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 605427472afbfa5823be54483cc7ff53028b97e37c8218b185475399f5efeabc kernel-rt-debug-modules-core-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 67e4a922c8bc72960254205e77a3128a3feef7da35bd4365e6368f6d8deaf31f kernel-rt-modules-extra-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 793a121fe06ff5533f3570d979418dbe5c325710dc65b4524d009e61b32b4543 kernel-rt-debug-modules-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 7a1f90faf42fd0ed3efbf3edcce30f8e872f4146d224a138c9f94c0e000f1f90 kernel-rt-modules-core-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 8cd0a725dba2bb846642fbca946b8075aee038fa7adf54ec361a755cc3a241e9 kernel-rt-modules-6.12.0-211.40.1.el10_2.x86_64_v2.rpm a804c03efd43b93248119d2db96e4ca8f9b27c36839f2c74f56ff8afbabc42be kernel-rt-devel-6.12.0-211.40.1.el10_2.x86_64_v2.rpm be67f80a5ce754de22e9d3e7d1384f577b72f8cd115179ad08d3652ca9c6803d kernel-rt-core-6.12.0-211.40.1.el10_2.x86_64_v2.rpm bed3a7d5e285752b1d594108d32fd477c743cd83f7a1cabc5774e97f3b3045bc kernel-rt-debug-6.12.0-211.40.1.el10_2.x86_64_v2.rpm c1bf8e68290145fc784281cfefb93ba068fa4db4986495ab713eafd61e083df8 kernel-rt-debug-modules-extra-6.12.0-211.40.1.el10_2.x86_64_v2.rpm c657aec69df75841d9e2357bc0f57182b2ac22f42a83b9a8a3f048cf68d57bcf ALSA-2026:49211 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211) * kernel: isofs: validate Rock Ridge CE continuation extent against volume size (CVE-2026-46303) * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () Bug Fix(es) and Enhancement(s): * [DELL 10.2 FEAT] [LATE-ADD] - Include support for Ghostrider PTL mini config SKU with Realtek IC Solution [almalinux-10.2.z] (JIRA:AlmaLinux-185669) * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-10.2.z] (JIRA:AlmaLinux-212063) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-modules-extra-6.12.0-211.42.1.el10_2.x86_64_v2.rpm 196d866022beb7266919b3b22f1737fdf5aae8e6a0e7aa805449850d7c083920 kernel-rt-debug-core-6.12.0-211.42.1.el10_2.x86_64_v2.rpm 1e4c65cd6abdb62d2e6aa0ba927667a47547158e27b301fcc48d57ff27eec8a9 kernel-rt-debug-6.12.0-211.42.1.el10_2.x86_64_v2.rpm 27561b0625db8a602a3540350c25f2b3516e3f885e5661e1eb2d303968009443 kernel-rt-debug-modules-core-6.12.0-211.42.1.el10_2.x86_64_v2.rpm 32fe0201a84d0adc53cf4a852b26ac77dcc2d517fe66b7471c3e9fe638e069cd kernel-rt-debug-modules-extra-6.12.0-211.42.1.el10_2.x86_64_v2.rpm 4933bafd9bd857103187f25134a1f580371a6f23cf583846929a7f1b7bf2836e kernel-rt-devel-6.12.0-211.42.1.el10_2.x86_64_v2.rpm 5cedfe9498e652eafad09efae10d0e6e56d7f5cb024e34cb43c361c65683a7e9 kernel-rt-6.12.0-211.42.1.el10_2.x86_64_v2.rpm a0f7a59e25f2ca2bd5e8d81dd88d518ba01fc2aec2db6c105aee4b5492857c94 kernel-rt-debug-modules-6.12.0-211.42.1.el10_2.x86_64_v2.rpm b608c809d342aae712932d6a3f8c93d8740d3dbdb4f77971ba82ff0d5cbcb533 kernel-rt-modules-6.12.0-211.42.1.el10_2.x86_64_v2.rpm c79dac874975c36f5e60dcefd03c7e96710f4e9244e50f50ea3995c36f1e2a39 kernel-rt-debug-devel-6.12.0-211.42.1.el10_2.x86_64_v2.rpm ca854420f25fb3225bdd93742f51d90c8b5dc3992835335409b71b97be00ca41 kernel-rt-core-6.12.0-211.42.1.el10_2.x86_64_v2.rpm eb9f875241b711291bb1d41d183e2de4ef54b875d89f076667f2600f6ffcc749 kernel-rt-modules-core-6.12.0-211.42.1.el10_2.x86_64_v2.rpm fee3c081a40d838910173c3e13141d1e0d33264e36f0cdf3728abfdf98e34b8f ALSA-2026:49871 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214) * kernel: procfs: avoid fetching build ID while holding VMA lock (CVE-2026-23199) Bug Fix(es) and Enhancement(s): * [Lenovo] Graphics not working on T14 G7 Intel (Pantherlake) (JIRA:AlmaLinux-172832) * Possible regression with FM350GL [almalinux-10.2.z] (JIRA:AlmaLinux-184266) * [10.2 FEAT] CNB102: dpll: sync with upstream (JIRA:AlmaLinux-211011) * backport make module and modules-core provides use variant [almalinux-10.2.z] (JIRA:AlmaLinux-213965) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 0d7a7522d7f39f32423798dc7cedb1e1773919a817963ebd9f9f2cbe6c966b20 kernel-rt-modules-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 1273b8a49868731335f0625cd024e8779342742eb3c556576af87f1b5f7fd1fe kernel-rt-devel-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 2bdec2c99b582b7c6f9d425a21b5e55a0a495657824fa8e045a75caffcc50570 kernel-rt-debug-devel-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 2ff806c0fb44225528ebaf9d123e576ffc196a4cc406b41bce67678458a879dd kernel-rt-core-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 30df1f69cba208f1de1da2814f44d2103a84e065d8510896bc630b5039a16e2f kernel-rt-modules-extra-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 3cfef6f5729e2494acb36340098293d29004244e574deb37ff77f82c1d27b75a kernel-rt-modules-core-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 5c8db17a13ccbd6b79e4c0ee7dce752f88696b6a69d31feaf92565d1e0186344 kernel-rt-debug-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 6516eb990d26e36986fc07c5c89fa0dd26d1c26f052dbfcebe99b7a42eb4e982 kernel-rt-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 757fbbfeaa6dde7d83b404876f38b49e94d8f522afc17a6c564f49d5064df1a9 kernel-rt-debug-modules-core-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 8216587581c34070181fae67eb0d032cae830d40ad8ed648e4e3c154559e11ab kernel-rt-debug-modules-extra-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 9852c53e76e2d1a44a6a57580f19aa803429632afdb9d04bb872305891d9965a kernel-rt-debug-core-6.12.0-211.43.1.el10_2.x86_64_v2.rpm f1974f055625d41f0faaaac2bbfceccf8fd590bd09b46514b463e4d9cb54fb65 ALSA-2026:51295 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CVE-2026-43186) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-10.2.z] (JIRA:AlmaLinux-186345) * ice: driver update 2026-06, part 2 [almalinux-10.2.z] (JIRA:AlmaLinux-193134) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 0c2a3a36004ddce5c7f2d1d4bae13184f2581b0329638d7aa2f787671c27d8db kernel-rt-modules-core-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 15d0ef810bbd567135f795f04f426a9afe356aac75e3b9a7282691e3e1f5acff kernel-rt-debug-core-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 2679fb7d5608ec4514f1cb7bc195763259b6fb8a49b7ecc8e6f155387e93cfdf kernel-rt-debug-modules-core-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 44033077cd35e69205b766cf3d1a714db5be845bc44434ba6daecdbe35f5e7ee kernel-rt-modules-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 5a3a4113eca81211f25041dc26935848174c0dd61e5273839ddc5fa5039dec58 kernel-rt-debug-devel-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 6458caf88a3ccced792a1f801e0d33f1579d8ca9d5e9ba40490aaf0ec1172902 kernel-rt-modules-extra-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 90c7a9ceb4fa151b7c1da0f8c4ebe23b3754494427a7cc476b0df191f6a50d8e kernel-rt-6.12.0-211.44.1.el10_2.x86_64_v2.rpm a34eb78bc6634fca3e45113201e8ffa48f46c963d6a446f635c2c16bd592a502 kernel-rt-core-6.12.0-211.44.1.el10_2.x86_64_v2.rpm a91df8a44f7c36c9c0b28f06cc2b16c905449180640a652b0ad7a47df40ffe45 kernel-rt-debug-modules-extra-6.12.0-211.44.1.el10_2.x86_64_v2.rpm d28118326ba89ecaf5d6f5bb5d218480aba38ba78dcb1a33c83b3a8cf922f332 kernel-rt-debug-6.12.0-211.44.1.el10_2.x86_64_v2.rpm d47218c273eb84f248d740c2a34c1d778014079242899fce8e70caca98db1d17 kernel-rt-debug-modules-6.12.0-211.44.1.el10_2.x86_64_v2.rpm e31a2b95f57617c2279eeac3b8a0c75d8eb619e49a6d2b4a4c181852328b523c ALSA-2026:53330 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fsnotify: Fix ordering of iput() and watched_objects decrement (CVE-2024-53143) * kernel: shmem: fix recovery on rename failures (CVE-2025-71072) * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415) * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368) * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) Bug Fix(es) and Enhancement(s): * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-10.2.z] (JIRA:AlmaLinux-213035) * AlmaLinux10.0 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-10.2.z] (JIRA:AlmaLinux-222503) * AlmaLinux10.0 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-10.2.z] (JIRA:AlmaLinux-222505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-modules-core-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 20ad4418a64bd6d95e9b077e885fab1d20a716ca18b6ee356a4295e244c12990 kernel-rt-debug-core-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 48a1f5e14a0ac24b5706725a26058470359961000cc815b9daa0fe3237445ea4 kernel-rt-debug-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 626c01f82a0e594b7ccb5e1fa10f033b1c30b6b1ee1ac2c52f9218aa7865abdf kernel-rt-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 65822e15b81a7e1bacc2b7a6e79fa51509fbacc4c4b014e2d60075477bb1db43 kernel-rt-modules-extra-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 68c30c1367cd01f0c3c98e0b7d0d054ac33e879500ac8b51ccb5a18f10c77488 kernel-rt-devel-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 75d983782d21fc708c424211a17583dcaf3fe41c93683f66f774cc42ac390e0b kernel-rt-core-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 79e780d53be5fab249866caeaea0f14bd04c068410a7a01f3a879288239f8c60 kernel-rt-debug-modules-extra-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 81753438e567336add0976788bfff9e00637d9ea4d75380e1b99cd165e45986a kernel-rt-debug-devel-6.12.0-211.46.1.el10_2.x86_64_v2.rpm a17554b7815bd6914d211c6bc325de956e053f9f4ba00a2938cfdab87316cbbf kernel-rt-modules-6.12.0-211.46.1.el10_2.x86_64_v2.rpm d3c048268ff0001088a2ba1a73ffae5fe09038a9edaea06fc618f5ebdb5f6177 kernel-rt-debug-modules-core-6.12.0-211.46.1.el10_2.x86_64_v2.rpm e84460d68a42774a3afa42469350838dea858cd965c66b65c722423a0f6071d5 kernel-rt-debug-modules-6.12.0-211.46.1.el10_2.x86_64_v2.rpm f6d4a1b9cc7139f6289685fda59f30b3b1cdb854805bb19b122d4974f8a9a893 ALSA-2026:54343 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202) * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264) * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) * kernel: perf/aux: Fix page UAF in map_range() (CVE-2026-64300) * kernel: af_unix: set gc_in_progress to true in unix_gc() (CVE-2026-53361) Bug Fix(es) and Enhancement(s): * netfilter: CVE backports for AlmaLinux 10.2.z (JIRA:AlmaLinux-185311) * tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-10.2.z] (JIRA:AlmaLinux-214436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.47.1.el10_2.x86_64_v2.rpm 0d076569374b55d440195003819ef2e6b7de5625fe2f34ab7faa3891b4173be1 kernel-rt-debug-devel-6.12.0-211.47.1.el10_2.x86_64_v2.rpm 0e779a037f565dfae2c6e8ea15eddfb34908eff8a2f6de0e7809a863eb9eb6bf kernel-rt-debug-core-6.12.0-211.47.1.el10_2.x86_64_v2.rpm 37b5817ea8ffa86561d97008e93df5415af1af4bf80af548acd4dd6cbd4654b6 kernel-rt-devel-6.12.0-211.47.1.el10_2.x86_64_v2.rpm 3978dab00ff2f18f9c3504e5bc7a446ec14f26e0af07998f3cce3a7cc75cfb9e kernel-rt-debug-modules-extra-6.12.0-211.47.1.el10_2.x86_64_v2.rpm 4299386a4a9ec32140081de159746dfc6e8cb4a8622003d4e3be995f4e0dda4b kernel-rt-modules-6.12.0-211.47.1.el10_2.x86_64_v2.rpm a4c43ca3101dbbb0ef3db2df7b434ed808133fb00b2518402405f3e4cf2d2faa kernel-rt-6.12.0-211.47.1.el10_2.x86_64_v2.rpm a7de12a66ded9476b89762e57098e9510ab956e95d7360296d87471c0f64cb83 kernel-rt-modules-core-6.12.0-211.47.1.el10_2.x86_64_v2.rpm b1273aec04a94c891961a95e0038cf33dbab8f02719f056d56aee2b533831ddb kernel-rt-modules-extra-6.12.0-211.47.1.el10_2.x86_64_v2.rpm c280e942e0cc103d36ec0865bcd942efda94f897128ad949a502d7c5c6fb439e kernel-rt-debug-6.12.0-211.47.1.el10_2.x86_64_v2.rpm c7a06c56d5c8041465912e4c39f9b16d85b94e8a7b09db5dc174bb517f23f343 kernel-rt-core-6.12.0-211.47.1.el10_2.x86_64_v2.rpm ca6440a5885f90d78a6400d06ad9c9ffed6c2cb953491cf3c538c4a2d55aa679 kernel-rt-debug-modules-6.12.0-211.47.1.el10_2.x86_64_v2.rpm dc0af495a76d003c193b0f4c90d61e16ec433c1d403f5caa314814ddf5725090 ALSA-2026:57251 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206) * kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237) * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991) * kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878) * kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185) * kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991) * kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143) * kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136) * kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329) * kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356) * kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374) * kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884) * kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886) * kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952) * kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888) * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017) * kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879) * kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219) * kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382) * kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379) * kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386) * kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560) * kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388) Bug Fix(es) and Enhancement(s): * CLONE - AlmaLinux 10.2.z xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (JIRA:AlmaLinux-223954) * vhost: reset the vring metadata cache on vring reconfiguration [almalinux-10.2.z] (JIRA:AlmaLinux-224545) * cifs: periodic IO errors when rename races with lease break [almalinux-10.2.z] (JIRA:AlmaLinux-235459) * cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-10.2.z] (JIRA:AlmaLinux-235812) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-6.12.0-211.49.1.el10_2.x86_64_v2.rpm 004061222b7d851594f3f36d107d63e2a425b95834014114bd73466b7d52e9b6 kernel-rt-debug-modules-extra-6.12.0-211.49.1.el10_2.x86_64_v2.rpm 00a2e84928ce96428ae89dd5ceeebaf6577ee07fa3500bc7b6da776d9fdab5cc kernel-rt-debug-modules-core-6.12.0-211.49.1.el10_2.x86_64_v2.rpm 00ef07aaa7a6d94db55398cd144f9ec0096d273b5d81c8a7633000f74c9a94dd kernel-rt-devel-6.12.0-211.49.1.el10_2.x86_64_v2.rpm 0548de1eb86e1e805d6faedeac97e17b3c5936004d17c56236186da17a0655d2 kernel-rt-modules-core-6.12.0-211.49.1.el10_2.x86_64_v2.rpm 13f22a3119f55afca5e6128342819133704cdf673c6c5ad018a6c3612cdc7715 kernel-rt-debug-6.12.0-211.49.1.el10_2.x86_64_v2.rpm 2295c82bd85bc340ffae3af23634f18dfc58654ecc3be5cad0619aa1c0031c47 kernel-rt-debug-core-6.12.0-211.49.1.el10_2.x86_64_v2.rpm 6407bd991b4bcd1d232d375bd9439b99ad69863f5e2199bcb8cd07687f6391ce kernel-rt-core-6.12.0-211.49.1.el10_2.x86_64_v2.rpm 7d7e93d2185a73e2f0effc1bba0f868a20c8b745b44463819a5f83d678f4ff55 kernel-rt-debug-modules-6.12.0-211.49.1.el10_2.x86_64_v2.rpm 9644120ea0624bc8aaec800f2ef88372e0ebf66337673b204c9bde159086ef2c kernel-rt-debug-devel-6.12.0-211.49.1.el10_2.x86_64_v2.rpm abddac66c269095756fa84f85c04acc119455aaf665059572e468a04c68b0855 kernel-rt-modules-extra-6.12.0-211.49.1.el10_2.x86_64_v2.rpm b1b746c9f03061407f33305d00084ba7d5c5a66ff8d3f86c90a2fe5902128c2e kernel-rt-modules-6.12.0-211.49.1.el10_2.x86_64_v2.rpm f5fa6e4edb781991efa1dbf562c03840777dc7e82332cbffdd80fb6fdb8f9a51 ALSA-2026:61887 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: seccomp: passthrough uretprobe systemcall without filtering (CVE-2025-21834) * kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003) * kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks (CVE-2026-43454) * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450) * kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970) * kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120) * kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053) * kernel: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CVE-2026-53026) * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185) * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189) * kernel: mm/list_lru: drain before clearing xarray entry on reparent (CVE-2026-53153) * kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800) * kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397) * kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399) * kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392) * kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391) * kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018) * kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136) * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189) * kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320) * kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438) * kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304) * kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298) * kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490) * kernel: mm: shrinker: fix shrinker_info teardown race with expansion (CVE-2026-64418) * kernel: smb: client: fix change notify replay double-free (CVE-2026-64384) * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277) * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276) * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480) * kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086) * kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166) * kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069) * kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130) * kernel: ceph: give up on paths longer than PATH_MAX (CVE-2024-53685) * kernel: ceph: fix memory leaks in ceph_mdsc_build_path() (CVE-2026-43419) * kernel: ceph: add a bunch of missing ceph_path_info initializers (CVE-2026-43408) Bug Fix(es) and Enhancement(s): * AlmaLinux 10: s390: Revert support for DCACHE_WORD_ACCESS [almalinux-10.2.z] (JIRA:AlmaLinux-188180) * qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-10.2.z] (JIRA:AlmaLinux-193043) * ss core dumped when there is an SCTP session [almalinux-10.2.z] (JIRA:AlmaLinux-212393) * [AlmaLinux-10.2.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-218627) * AlmaLinux10.0 - s390/pfault: Fix virtual vs physical address confusion [almalinux-10.2.z] (JIRA:AlmaLinux-222507) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.50.1.el10_2.x86_64_v2.rpm 4bc402dbb3889f64affe3832b9a474b445f989e32836c691d638c0b708c9254e kernel-rt-6.12.0-211.50.1.el10_2.x86_64_v2.rpm 7e493b79e6e6869d936a10a4bced44207f44add901456716470e740e2184a90a kernel-rt-debug-modules-core-6.12.0-211.50.1.el10_2.x86_64_v2.rpm 80e2e61fe4581155d27fcb911ee8285e09d0001c689597910c94449e662baa44 kernel-rt-debug-modules-extra-6.12.0-211.50.1.el10_2.x86_64_v2.rpm b843e40c80e5afb6711ad53bb82a9c02bd978221b22550e800344c95137bca26 kernel-rt-debug-6.12.0-211.50.1.el10_2.x86_64_v2.rpm cb75a91a9dde84952e50f27962881d2ef3b84cab5a6e9635b8f69b46c0d9ffe2 kernel-rt-modules-6.12.0-211.50.1.el10_2.x86_64_v2.rpm d9250bfe1588f654672f7fd884b058063381dc5c99176a5360805094a2358c58 kernel-rt-debug-modules-6.12.0-211.50.1.el10_2.x86_64_v2.rpm e025585025dad36ab624dd56396ab865767d61cb8e64e180e78b81b5f130b22f kernel-rt-core-6.12.0-211.50.1.el10_2.x86_64_v2.rpm e82d37ad0db59952af3a473f91b9f53f00fbf48a7b9b9fc88da39a310124a94e kernel-rt-modules-extra-6.12.0-211.50.1.el10_2.x86_64_v2.rpm ed941fa1e4da2edba2861f938496bf4bcf7b0303284890ca6f8964cfd7490503 kernel-rt-debug-core-6.12.0-211.50.1.el10_2.x86_64_v2.rpm ef2ec17e9d4cf38bde7aba595223940625de925b617a13f25c370d085f2c7263 kernel-rt-debug-devel-6.12.0-211.50.1.el10_2.x86_64_v2.rpm f23ff8145d9ac8801651e010f4610917aed40b856219990b3451854ce81af500 kernel-rt-modules-core-6.12.0-211.50.1.el10_2.x86_64_v2.rpm f8f5f9d78df260429812c789ceac97d25e3b6bb5c29504850c2804452d57d7d1 ALSA-2026:63128 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073) * kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808) * kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824) * kernel: smb: client: fix query directory replay double-free (CVE-2026-64387) * kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145) * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-core-6.12.0-211.51.1.el10_2.x86_64_v2.rpm 060a708f650e16cd101ca20af22a40f131f7409dd6bb9619b4697ad6db61824e kernel-rt-debug-modules-core-6.12.0-211.51.1.el10_2.x86_64_v2.rpm 1b993d7d2c620ab7532c2f9bbdaaf2930c6489ad0f2cbf716c0b97b3b4ff95cf kernel-rt-devel-6.12.0-211.51.1.el10_2.x86_64_v2.rpm 1ffee915b2b405cfde03f2b7e7b15270e615d0f62077921ef0b497511d6e34c4 kernel-rt-debug-devel-6.12.0-211.51.1.el10_2.x86_64_v2.rpm 32f0b3ea6c202e46aa82f9b203ef87c01c8230311116e3084d2c1643bff7ed03 kernel-rt-debug-core-6.12.0-211.51.1.el10_2.x86_64_v2.rpm 42a009a32fce937636e0b5a0fa027db29cd9c08305f9b31499ae50d95938b88b kernel-rt-modules-core-6.12.0-211.51.1.el10_2.x86_64_v2.rpm 5daf898ed3b284ece01e9940d2b703c0b0c83ab53b5d1a478b553e898fbdef19 kernel-rt-6.12.0-211.51.1.el10_2.x86_64_v2.rpm 72a92e05ef9eb57cbcf332111478d4d66ac82420f1d90cf2a91b555e626fd5e8 kernel-rt-debug-6.12.0-211.51.1.el10_2.x86_64_v2.rpm 83137176a22c80c0724af49f27664c1d9f4469c8b6c9d7864b55c770d97e3e6d kernel-rt-debug-modules-6.12.0-211.51.1.el10_2.x86_64_v2.rpm 8d8028120aeed5bf36f3c7e0ef642369431ba4d72a71a59a90c3bb445d6cf159 kernel-rt-debug-modules-extra-6.12.0-211.51.1.el10_2.x86_64_v2.rpm df3ad0736d5c89010aed73bf849d1210f015421ace678f59714d1f9f5af71d67 kernel-rt-modules-extra-6.12.0-211.51.1.el10_2.x86_64_v2.rpm f4bf570e28089f9d490f469f7da2fa51f182dc67ca0f78f9ebbffe6bec351d9c kernel-rt-modules-6.12.0-211.51.1.el10_2.x86_64_v2.rpm f7c003a03dbead28c6aef31a4ec747741f0c6b2036fddfa4fd8460dcaca13ca2 ALSA-2026:65334 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334) * kernel: Bluetooth: virtio_bt: clamp rx length before skb_put (CVE-2026-46123) * kernel: Bluetooth: serialize accept_q access (CVE-2026-52918) * kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091) * kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CVE-2026-53072) * kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (CVE-2026-52947) * kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256) * kernel: wifi: nl80211: reject oversized EMA RNR lists (CVE-2026-53182) * kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CVE-2026-53209) * kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254) * kernel: vfio/pci: Clean up DMABUFs before disabling function (CVE-2026-53322) * kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975) * kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015) * kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947) * kernel: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CVE-2026-63944) * kernel: Bluetooth: ISO: fix UAF in iso_recv_frame (CVE-2026-63946) * kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (CVE-2026-64117) * kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (CVE-2026-64037) * kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113) * kernel: vfio/pci: Check BAR resources before exporting a DMABUF (CVE-2026-64042) * kernel: accel/qaic: Add overflow check to remap_pfn_range during mmap (CVE-2026-64051) * kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (CVE-2026-64255) * kernel: wifi: mac80211: fix MLE defragmentation (CVE-2026-64515) * kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409) * kernel: wifi: mt76: mt7925: fix crash in reset link replay (CVE-2026-68307) * kernel: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (CVE-2026-68193) * kernel: dm-verity: fix buffer overflow in FEC calculation (CVE-2026-72098) * kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129) Bug Fix(es) and Enhancement(s): * rtla-timerlat-top doesn't stop properly when threshold is reached on multiple CPUs at once [almalinux-10.2.z] (JIRA:AlmaLinux-193027) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-6.12.0-211.53.1.el10_2.x86_64_v2.rpm 0dd8df1f8c4dac845e0e433ca39d1c598f7c352f4b54f07be7f14db7e065b9cc kernel-rt-debug-modules-core-6.12.0-211.53.1.el10_2.x86_64_v2.rpm 1769d56bd79f5da6c33cb526e388170df6c5d8656b2a8f865d4828f8359e57f4 kernel-rt-debug-modules-6.12.0-211.53.1.el10_2.x86_64_v2.rpm 202599c11b9388173bc93cd60c28072d492911a9b551a62f083b1ccfa237bce7 kernel-rt-debug-modules-extra-6.12.0-211.53.1.el10_2.x86_64_v2.rpm 455779a2b32897d6e75924e6d7640f952145a07d221067fd97cf5d8b2cbd31d4 kernel-rt-debug-6.12.0-211.53.1.el10_2.x86_64_v2.rpm 64870440e02823a9571dc57f2b59ca07efece252f369d4d9c1fe1a20a5207e01 kernel-rt-modules-core-6.12.0-211.53.1.el10_2.x86_64_v2.rpm 66c8a393f4c0d1d33f516a2b272f2c3acd78d55735b954d6d611b1059f19445d kernel-rt-modules-extra-6.12.0-211.53.1.el10_2.x86_64_v2.rpm 6fa38643536008076e7da61408318955ecc015abe984d29e79b6c287235cb68b kernel-rt-devel-6.12.0-211.53.1.el10_2.x86_64_v2.rpm 74cfdb95cb5c1b559106ad3a97ad25281d2fc1d7ee87e2fa3cf979660ae06ad7 kernel-rt-modules-6.12.0-211.53.1.el10_2.x86_64_v2.rpm 921479091c55c1a39e89bd00fca41fa82b89abe61cdefb0fedac9189cd3fe772 kernel-rt-debug-devel-6.12.0-211.53.1.el10_2.x86_64_v2.rpm beb75c38d0a4fa17994e81cc689f097e7b0343213b1293929ad5062670bc03b7 kernel-rt-core-6.12.0-211.53.1.el10_2.x86_64_v2.rpm bec259433df1547a3a67b618f31f1c3d95a4af0c4fdc70783da013794f5e6ed9 kernel-rt-debug-core-6.12.0-211.53.1.el10_2.x86_64_v2.rpm e5b8f8dc822211f155615ae21993405b02dffc53f104839f9abd9c836676bd2f ALSA-2026:66355 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.54.1.el10_2.x86_64_v2.rpm 0b76fa27767b349d4decf3822f293331f4f32a8520c25c95f7cec9f61bd27008 kernel-rt-6.12.0-211.54.1.el10_2.x86_64_v2.rpm 1ec2346e3aeb0fc14b35ca0e7cd74f8fdcb0e94f04854e84c1e5a35a40ace9f0 kernel-rt-core-6.12.0-211.54.1.el10_2.x86_64_v2.rpm 264012a840a29b3ea9ff86c438d602939daf6e1314ddc0e685a0f3f06f8cd7ec kernel-rt-modules-core-6.12.0-211.54.1.el10_2.x86_64_v2.rpm 363a8746d4f4ddd1f6b90aa215a05f576d1af0683e6d39728e67aa62f886f3af kernel-rt-devel-6.12.0-211.54.1.el10_2.x86_64_v2.rpm 37d5962b4336dfc75a2f9f202d7ddbcde8b26aaf27525ec496ca550c072a9c74 kernel-rt-modules-6.12.0-211.54.1.el10_2.x86_64_v2.rpm 7d754e56ae823892872c30fa05e6488abb6e8f13b738135aeff557120093ebb3 kernel-rt-debug-6.12.0-211.54.1.el10_2.x86_64_v2.rpm 8c0ddf0f692eb084dc88021e4992394033b29e00c57a14da37483a676a0f769d kernel-rt-debug-core-6.12.0-211.54.1.el10_2.x86_64_v2.rpm a5464fe9c89c94bc56bd4f3aa6a7ceee325521107c27c4c4f0688951d9c687d7 kernel-rt-debug-modules-core-6.12.0-211.54.1.el10_2.x86_64_v2.rpm a6785bc1f0d29390b20796a2abbc3cb7f21dd988c3ee357f14ad5633429d2c11 kernel-rt-debug-devel-6.12.0-211.54.1.el10_2.x86_64_v2.rpm ab99572c0c1fa90bcbc57ff00b697744a6e392a867d05dc751b7aead8502a2fd kernel-rt-modules-extra-6.12.0-211.54.1.el10_2.x86_64_v2.rpm e05ceef512c7fa427fde08db357033f76d5d3710030c86a80ecdcf6695ae62b5 kernel-rt-debug-modules-extra-6.12.0-211.54.1.el10_2.x86_64_v2.rpm e0e14ba51b8a4a3d219f216d465d93200e5f2a48697291e5bd3f509ac8120f91 ALSA-2026:67471 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (CVE-2025-40149) * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745) * kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466) * kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479) * kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566) * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663) * kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656) * kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539) * kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248) * kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368) * kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370) * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149) * kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924) * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131) * kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246) * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239) * kernel: af_unix: Set gc_in_progress to true in unix_gc() (CVE-2026-53361) * kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889) * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921) * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919) * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917) * kernel: lsm: hold cred_guard_mutex for lsm_set_self_attr() (CVE-2026-64111) * kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264) * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426) * kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556) Bug Fix(es) and Enhancement(s): * [almalinux-10.2.z]- Backport MSHV patches for hypervisor OOM handling (JIRA:AlmaLinux-245035) * RHIVOS - [backport] S32G Driver Enablement - ADC (JIRA:AlmaLinux-255233) * [AlmaLinux10.2z] watchdog: System can panic during reboot when pretimeout is disabled (0) (JIRA:AlmaLinux-255348) * [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [AlmaLinux-10.2.z] (JIRA:AlmaLinux-256731) * RHIVOS - [backport] S32G Driver Update - ADC, I2C, and eDMA (JIRA:AlmaLinux-256890) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-6.12.0-211.55.1.el10_2.x86_64_v2.rpm 0666a24f8545b71d374ceaedf08d7e199dda71bde705a1b08df7dd1343876e15 kernel-rt-debug-6.12.0-211.55.1.el10_2.x86_64_v2.rpm 1303b37e80f804b0e84cc62825b7558f87813b183928924b0a9cdb4989dc9cee kernel-rt-debug-core-6.12.0-211.55.1.el10_2.x86_64_v2.rpm 18899d246b1b05e3d50cce5a6f4b193203f4159098753c5b4bc011e974fe1ad7 kernel-rt-core-6.12.0-211.55.1.el10_2.x86_64_v2.rpm 3d5058eb894a37a287ba6f2f2121958bde05e96a6b90e2507a63ef0bc2b7787e kernel-rt-debug-modules-core-6.12.0-211.55.1.el10_2.x86_64_v2.rpm 61c8b5239cf59cd8a22a5ed84087807a94140185604c217311a4c58c0fedb770 kernel-rt-devel-6.12.0-211.55.1.el10_2.x86_64_v2.rpm 9b47f52e32acfbe0e264aacc0c3d69e2468cccb69514909eb6206d54640dbec2 kernel-rt-debug-devel-6.12.0-211.55.1.el10_2.x86_64_v2.rpm 9c0f2d7402a23d93da8338d602bd376c70a4c72a2a39dd8765efb328c1130e16 kernel-rt-modules-6.12.0-211.55.1.el10_2.x86_64_v2.rpm a1b9ab858e7d922b6c1b97534cc3287f51f2a5af181ae51b7aff1d73eaf5f451 kernel-rt-debug-modules-6.12.0-211.55.1.el10_2.x86_64_v2.rpm c48118803ee6cb63c68abce776a9929bfd3643fb0f6a8f1b44b92b8d3cf3a3a0 kernel-rt-debug-modules-extra-6.12.0-211.55.1.el10_2.x86_64_v2.rpm e1e21d4dbc4718630a79847dc2cec306687b5d6618d6b9a5d52c428f052816ab kernel-rt-modules-core-6.12.0-211.55.1.el10_2.x86_64_v2.rpm e53af27786f6a391d1f9a73914838720df1e2b83b10e871c8a1ad060974000ca kernel-rt-modules-extra-6.12.0-211.55.1.el10_2.x86_64_v2.rpm f3b3d7894f3346ddcb615b4d71483b8582e1c06b39d0ebe2b69dba3e9f8c447a ALSA-2026:68507 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007) * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172) * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971) * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176) * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193) * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192) * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869) * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029) * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923) * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176) * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175) * kernel: netfilter: handle unreadable frags (CVE-2026-64414) * kernel: hwrng: virtio: clamp device-reported used.len at copy_data() (CVE-2026-64456) * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation (CVE-2026-68200) * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143) * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128) * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363) * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294) * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102) Bug Fix(es) and Enhancement(s): * nouveau vga_switcheroo binding holds Realtek ALC245 converter stream open ? analog output (device 0) returns EBUSY [almalinux-10.2.z] (JIRA:AlmaLinux-239776) * AlmaLinux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [almalinux-10.2.z] (JIRA:AlmaLinux-254105) * RHIVOS - [backport] S32G Fix STM driver linking failing modpost (JIRA:AlmaLinux-255225) * RHIVOS - [backport] S32G Driver Enablement - OCOTP (JIRA:AlmaLinux-255516) * RHIVOS - [backport] S32G Driver Enablement - INA231 (JIRA:AlmaLinux-255518) * RHIVOS - [backport] S32G Driver Enablement - PIT (JIRA:AlmaLinux-255519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.56.1.el10_2.x86_64_v2.rpm 2a640d8a9e595d37e816f3740ee19bd7f01002489b85bd8ef301b0a768c31429 kernel-rt-core-6.12.0-211.56.1.el10_2.x86_64_v2.rpm 368e76d0f0be335290b690c0369b88c046d21aa3eebb926dafa31f7a9772b8f0 kernel-rt-debug-modules-extra-6.12.0-211.56.1.el10_2.x86_64_v2.rpm 3e2a958d9c42038404bda5f8488f2ce12f062ea67788897fbff1a29bfa26cf86 kernel-rt-debug-modules-6.12.0-211.56.1.el10_2.x86_64_v2.rpm 51d57e6c45c94c025c806821c93be956bc7bdc08053e6a6314ef39fd219dea00 kernel-rt-debug-6.12.0-211.56.1.el10_2.x86_64_v2.rpm 84b6d9a5470bca31de67c367e5221c623c0fd5cf715372fd46a2e9e94ece4727 kernel-rt-modules-core-6.12.0-211.56.1.el10_2.x86_64_v2.rpm c063bf09ad5691753613f80200059c0e90ab0b0e72fb05aa1c556afd2d54ff64 kernel-rt-modules-extra-6.12.0-211.56.1.el10_2.x86_64_v2.rpm c083fe50dcdcde5729d4463626a788656b45df1a5e0ae85171e9d5d95d7b8b1f kernel-rt-6.12.0-211.56.1.el10_2.x86_64_v2.rpm d538b5a495e723692d32e20f3ac4cdac05b02563dd0710c4eb20ec49808c0086 kernel-rt-debug-core-6.12.0-211.56.1.el10_2.x86_64_v2.rpm d79b8066c7f6b97e083861d3f18e28916f218e37b1fb46cd1849402d71a19a19 kernel-rt-devel-6.12.0-211.56.1.el10_2.x86_64_v2.rpm d9cb139c4786b35029516160d4ab62fd0f505a6cfa4f7e8eac880ab0a693845b kernel-rt-debug-devel-6.12.0-211.56.1.el10_2.x86_64_v2.rpm eeb78ec38c88be1f18ba306f2c725f51ea3592b00a63c5031210b45483f282af kernel-rt-modules-6.12.0-211.56.1.el10_2.x86_64_v2.rpm ef3a0e8c45049bbdf918b01f9c252a4b2d0924a83745223d1ef4abfe577ecb03 ALSA-2026:70498 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964) * kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894) * kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959) * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062) * kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823) * kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534) * kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293) * kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159) * kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188) * kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155) * kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391) * kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518) Bug Fix(es) and Enhancement(s): * Update kernel to use new certificate paths [almalinux-10.2.z] (JIRA:AlmaLinux-169478) * RHIVOS - [backport] S32G Driver Enablement - PWM (JIRA:AlmaLinux-255517) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-extra-6.12.0-211.58.1.el10_2.x86_64_v2.rpm 2ca688ccb4fa6afdf5f6766cf45cc8816d7f56bc4cc5886f2ae4c64795c2bf2b kernel-rt-devel-6.12.0-211.58.1.el10_2.x86_64_v2.rpm 3a0416192d43ce9480a1fe2df8b994c843c2c0c2a8457161a403ca70363e4308 kernel-rt-6.12.0-211.58.1.el10_2.x86_64_v2.rpm 41d98383ea91a59d8219f91aac3c9990a6ee9099ec0d7262d086ac26d4890bb9 kernel-rt-debug-modules-core-6.12.0-211.58.1.el10_2.x86_64_v2.rpm 96e7550701fd3b7bfc21a449885061ce54b3c060e7a68e843814ec76a3895e72 kernel-rt-debug-modules-6.12.0-211.58.1.el10_2.x86_64_v2.rpm a298ac0992c5c73265047a1c82803ca8d2eb8dde33531ccaa284518923bc9df2 kernel-rt-modules-6.12.0-211.58.1.el10_2.x86_64_v2.rpm b01071d309caca676510830a67925f2f910d0b2f9bf3d4a431809f78defff99f kernel-rt-modules-core-6.12.0-211.58.1.el10_2.x86_64_v2.rpm bdf035c7936b4ac97f61eb20678726aabf60d187d6f51f36759f841d2b9fa3e2 kernel-rt-debug-core-6.12.0-211.58.1.el10_2.x86_64_v2.rpm c165cfb42acf43620c272cb826926322ec72e9230d636a872fa06cf21c6fe3ab kernel-rt-modules-extra-6.12.0-211.58.1.el10_2.x86_64_v2.rpm d3e7e46a32dbd40887d3ab97870c88770a6f43f2565607ba7ccdca041024bf26 kernel-rt-debug-6.12.0-211.58.1.el10_2.x86_64_v2.rpm df2e3f2df90818bf865b20efbf01945b81772f8d752cfcb7e60e9841946aa767 kernel-rt-core-6.12.0-211.58.1.el10_2.x86_64_v2.rpm e9ce6c7b5e7b4045c102d7a595a079f4d2517b7c61cd90a6cc4de35e51343447 kernel-rt-debug-devel-6.12.0-211.58.1.el10_2.x86_64_v2.rpm e9f31fad51a9dc640f23bbd8179fb644bf4797dc9d6d3ee333b5fd0a1bb86276 ALSA-2026:71602 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199) * kernel: drm/amdgpu/userq: fix access to stale wptr mapping (CVE-2026-46311) * kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005) * kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CVE-2026-53203) * kernel: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CVE-2026-53290) * kernel: drm/virtio: use uninterruptible resv lock for plane updates (CVE-2026-64098) * kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121) * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108) * kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CVE-2026-68257) * kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CVE-2026-68267) * kernel: drm/xe: Hold a dma-buf reference for imported BOs (CVE-2026-68266) * kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273) * kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714) * kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481) Bug Fix(es) and Enhancement(s): * Bypass DMA APIs for coherent allocations for pre-mapped memory [almalinux-10.2.z] (JIRA:AlmaLinux-252331) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-modules-core-6.12.0-211.60.1.el10_2.x86_64_v2.rpm 0206231704acc5a75cf39a654799e48bbc99d1056c99abc28f489f58ef96e508 kernel-rt-debug-modules-extra-6.12.0-211.60.1.el10_2.x86_64_v2.rpm 0ab62a0c7d0e3d41d2a4e3c6133057e414c944e37584027013a551fd195ada09 kernel-rt-devel-6.12.0-211.60.1.el10_2.x86_64_v2.rpm 0b512301d097093085cc7d6cf7347f07af5660a45a7b36f598d4884d993fe98b kernel-rt-debug-modules-6.12.0-211.60.1.el10_2.x86_64_v2.rpm 10e9534a78591bcb60c12f1846ec93eb3bf36dc733996cb97897fa5d6c1efbae kernel-rt-debug-devel-6.12.0-211.60.1.el10_2.x86_64_v2.rpm 4f887615b1d23933e50a9db28e42f38a61ed58ef52864b95f93354dd254ae13a kernel-rt-6.12.0-211.60.1.el10_2.x86_64_v2.rpm 79af7cf71951c0b487d365e2c5ab176062ec37332c2b96678765aec50e10737e kernel-rt-debug-modules-core-6.12.0-211.60.1.el10_2.x86_64_v2.rpm 938828773f38986f38016c408646932adb192056a2c808a298dd6f764a02a2bc kernel-rt-debug-6.12.0-211.60.1.el10_2.x86_64_v2.rpm bc706c55b2e4ff3f603ec88ce36c9bc2ec042a931fee91e60780307aa352a1ff kernel-rt-core-6.12.0-211.60.1.el10_2.x86_64_v2.rpm d036e3c7e0a35dabcd8dbb07f3f146ba813d1c58adb083d85dafbe401a797c20 kernel-rt-modules-extra-6.12.0-211.60.1.el10_2.x86_64_v2.rpm e02fe1b7453fca71c32dc085025dc903982931313254a92e3c99a6973471ad9a kernel-rt-debug-core-6.12.0-211.60.1.el10_2.x86_64_v2.rpm f374144ae75a77475dd6a9f1d75eda3834d59df9cdf8bd23fd4e8d6243ff4069 kernel-rt-modules-6.12.0-211.60.1.el10_2.x86_64_v2.rpm f8ecf7fbbdb7e06790ab1f3b6bd8b6065dc15f60b67f22c2dafc80cca45dbed9 ALSA-2026:72624 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CVE-2026-46076) * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942) * kernel: KVM: arm64: Reassign nested_mmus array behind mmu_lock (CVE-2026-46317) * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341) * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299) * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522) * kernel: perf: Reject exited events as group leaders (CVE-2026-74753) * kernel: nvme-tcp: reject a read that transferred too few bytes (CVE-2026-89480) * kernel: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (CVE-2026-89775) Bug Fix(es) and Enhancement(s): * KVM: s390: Limit adapter indicator access to mapped page [almalinux-10.2.z] (JIRA:AlmaLinux-188661) * crypto: xxhash64 should not be fips approved [almalinux-10.2.z] (JIRA:AlmaLinux-254943) * kata-tdx TD vCPU stuck at reset vector (EIP=0xFFF0) on Intel Xeon 6 (Granite Rapids / Sierra Forest) ? guest never executes. (10.2.z) (JIRA:AlmaLinux-260402) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.61.1.el10_2.x86_64_v2.rpm 06b232d7ec837088cd01e04d83b8ff44c6fe906b6b886973a75532a1ea0ff612 kernel-rt-debug-devel-6.12.0-211.61.1.el10_2.x86_64_v2.rpm 4f4c4878622aed9c393b03375936fc11acbe997886f563684ff5d04007215a83 kernel-rt-debug-6.12.0-211.61.1.el10_2.x86_64_v2.rpm 581fdb10d53d047fe631dd2aa296aea982378f68b55de99859d654c047a94f2d kernel-rt-debug-core-6.12.0-211.61.1.el10_2.x86_64_v2.rpm 655e83f0f871ceab720f51c2d4956b73c87d240eb8a5c270038b2d3880a7e090 kernel-rt-debug-modules-extra-6.12.0-211.61.1.el10_2.x86_64_v2.rpm 86af5ada645a6072f41cc6dacec55a3e093c5d0efe4b4023cc27cd1f9e04609d kernel-rt-core-6.12.0-211.61.1.el10_2.x86_64_v2.rpm 95da3d485fa8d024499fb2022d88db24e13d4cb0e3ad6454a925190eaf44cea8 kernel-rt-modules-6.12.0-211.61.1.el10_2.x86_64_v2.rpm a0edfa8516f0473270c3dd886a5e561d58c37591aa0927e3ea631f0bb9a6fbcb kernel-rt-modules-extra-6.12.0-211.61.1.el10_2.x86_64_v2.rpm ab91ce4f88bced0d237de620459ae2975c1bcebfdb53478ed25be2e8d48dc5f9 kernel-rt-debug-modules-6.12.0-211.61.1.el10_2.x86_64_v2.rpm c4dabb2dfc29fc0835246835e08fb05b5b5c862149d5515de068967006fdb686 kernel-rt-6.12.0-211.61.1.el10_2.x86_64_v2.rpm cd170ed3892d2f1bdc9e6955b25e5aa6b7199fec286ca7378859e3dd2bdb431c kernel-rt-debug-modules-core-6.12.0-211.61.1.el10_2.x86_64_v2.rpm d31797639ae50e593467afae42a77f43df890b9352f5dfb68207cfb902cf5d5d kernel-rt-modules-core-6.12.0-211.61.1.el10_2.x86_64_v2.rpm f934e5297f705391b51529ec4159f720d36e973a3cfd0af3a32645f25a5f959b ALSA-2026:75576 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034) * kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099) Bug Fix(es) and Enhancement(s): * gve: backport large queue depth patches [almalinux-10.2.z] (JIRA:AlmaLinux-219261) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-modules-6.12.0-211.62.1.el10_2.x86_64_v2.rpm 156cdd737b424b41ad89c18b35e3ff98a9d21337e6c0933d7490db8dbb095568 kernel-rt-debug-6.12.0-211.62.1.el10_2.x86_64_v2.rpm 22c0efe12beb54710e33e7c472c48a2ed14cc5282444e8f808ae63d2e0ac08c4 kernel-rt-6.12.0-211.62.1.el10_2.x86_64_v2.rpm 2aa033741b000cb02109f654dd2bd9c9a5e328fb53110ad342e172a8cda60c8c kernel-rt-debug-devel-6.12.0-211.62.1.el10_2.x86_64_v2.rpm 3230d29a19d7b643b72f314749d436cf525c67830ccedecab8dcf558c16194f6 kernel-rt-debug-modules-extra-6.12.0-211.62.1.el10_2.x86_64_v2.rpm 39d652039cc11459d576adfbb8a328d88f557dfa3f3c94769dca987e70154437 kernel-rt-core-6.12.0-211.62.1.el10_2.x86_64_v2.rpm 574a605779dd55dc381fb81f77c2f7ee7f3be6434ce5b3c3499efeef3305c751 kernel-rt-modules-core-6.12.0-211.62.1.el10_2.x86_64_v2.rpm 6bc0eded87c3b8b66eaab50197d54fe306663d536b3a40d7d479bf4976add9d0 kernel-rt-debug-core-6.12.0-211.62.1.el10_2.x86_64_v2.rpm 83dcb10a19c1fd5c14a6cb8eb2eca4526b0ff838afe7e6ac4dd8fcd9bc719aed kernel-rt-debug-modules-6.12.0-211.62.1.el10_2.x86_64_v2.rpm 881aad8ef6729575e75abcbc61884db3fe176d1210efd2d1ac8011a32f8abae8 kernel-rt-modules-extra-6.12.0-211.62.1.el10_2.x86_64_v2.rpm 8a9b90c605e6e2a0034427e38b20d47dfa74c9e27804b5d6cdad7fbb4dc0c450 kernel-rt-devel-6.12.0-211.62.1.el10_2.x86_64_v2.rpm d5c0cabee993cf2917ab11218fbdaec6f3228d1bd36936c61cb999a3ed359ea1 kernel-rt-debug-modules-core-6.12.0-211.62.1.el10_2.x86_64_v2.rpm f53ad5169e176965808621f7569f14573790d6f9ba48faa535e0ccd03c046395 ALSA-2026:76738 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conncount: increase the connection clean up limit to 64 (CVE-2026-45860) * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856) * kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CVE-2026-46275) * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972) * kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270) * kernel: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CVE-2026-53357) * kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829) * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794) * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924) * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922) * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920) * kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024) * kernel: l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (CVE-2026-63918) * kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984) * kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992) * kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (CVE-2026-63994) * kernel: netfilter: x_tables: add and use xtables_unregister_table_exit (CVE-2026-64078) * kernel: ipv6: ioam: refresh hdr pointer before ioam6_event() (CVE-2026-64132) * kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CVE-2026-64557) * kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432) * kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476) * kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052) * kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320) * kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255) * kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516) * kernel: packet: use consistent hard_header_len in non-ring send paths () * kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582) * kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669) * kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746) * kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792) * kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775) * kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921) * kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972) * kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227) * kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417) * kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CVE-2026-93288) Bug Fix(es) and Enhancement(s): * wifi card breaks using FIPS (JIRA:AlmaLinux-257457) * AlmaLinux10.0 - kernel: CPU hotplug unsupported by CPUMF [almalinux-10.2.z] (JIRA:AlmaLinux-270888) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.63.1.el10_2.x86_64_v2.rpm 1538c7a66f755b373518311ade86e074166d8dfaf8b2a5d69728a97730359f26 kernel-rt-modules-6.12.0-211.63.1.el10_2.x86_64_v2.rpm 3565b3804747b52867929f883de2e9eec3d50140c31715596277ced2714a6390 kernel-rt-modules-extra-6.12.0-211.63.1.el10_2.x86_64_v2.rpm 45fd57963deda162e6921d23764350bdd3ca46c9e07bf6982d676ea218a5bf75 kernel-rt-debug-modules-core-6.12.0-211.63.1.el10_2.x86_64_v2.rpm 4c34ad4908a3461ffd1c36486c53d72bae1c8198b76dc5af0a7f5555b1373a98 kernel-rt-modules-core-6.12.0-211.63.1.el10_2.x86_64_v2.rpm 529f4a378f6ac86242c0302d57c05188a88e90f34d35cac5a56573ace9640fd4 kernel-rt-debug-6.12.0-211.63.1.el10_2.x86_64_v2.rpm 8ef0a1138245e6c409f063ea42c293430d7e67437b3028c17ce0d7fd509c52d8 kernel-rt-core-6.12.0-211.63.1.el10_2.x86_64_v2.rpm 96292eb88980fb4daf9e1dfac27ecd9051f4f382b137e95ac8da09b50b9fb2b4 kernel-rt-6.12.0-211.63.1.el10_2.x86_64_v2.rpm 9d9e3d2959048689dcbb2133edd84a6e0ac3c4398ebc71ea89d9a3cb50d2dd93 kernel-rt-debug-modules-extra-6.12.0-211.63.1.el10_2.x86_64_v2.rpm a107c30e9d914bf54b9c4e34faeebdd7bd20dd36b0f633026084652753dd3b9c kernel-rt-devel-6.12.0-211.63.1.el10_2.x86_64_v2.rpm ac82eebbf31ff678e7ef01d6e489573b710c86293d8ae2a0747ca4ef0fd04149 kernel-rt-debug-core-6.12.0-211.63.1.el10_2.x86_64_v2.rpm b009e9ebd7febc9c40ae39d2a8bac1c2410aa02dc16c03332f7e1725895e50ea kernel-rt-debug-devel-6.12.0-211.63.1.el10_2.x86_64_v2.rpm b334ad8f09a33c3ae01a027b162fe81ce0fa68ae177cf0ef60791443f054bda3 ALSA-2026:77690 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) * kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365) * kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398) * kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970) * kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035) * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317) * kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705) * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744) * kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690) * kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669) * kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530) * kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (CVE-2026-89676) * kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663) * kernel: nfsd: fix UAF in async copy cancel and shutdown (CVE-2026-89675) Bug Fix(es) and Enhancement(s): * mlxbf_bootctl: driver update to Linux v6.16 [Nvidia 10.2.z FEAT] (JIRA:AlmaLinux-212709) * [GNR-D] missing interfaces tspll_cfg [almalinux-10.2] (JIRA:AlmaLinux-273805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-6.12.0-211.64.1.el10_2.x86_64_v2.rpm 0a97850e4581d73f0bd2341b6de2665b2c93bf18e5488a164af362f2eb089797 kernel-rt-modules-core-6.12.0-211.64.1.el10_2.x86_64_v2.rpm 0d2d1b3fd34280109612ede51990b7ea6a257ce235812bc16d8c1e3296559e0f kernel-rt-debug-6.12.0-211.64.1.el10_2.x86_64_v2.rpm 1aac7909ce8373a1e35b7b09a08750babcd2e60a11b2db45055eab62b057439d kernel-rt-debug-modules-core-6.12.0-211.64.1.el10_2.x86_64_v2.rpm 1ea898f4023873b6a2df6cc589352f84f3535bc065e582be705a07bc2613f017 kernel-rt-debug-devel-6.12.0-211.64.1.el10_2.x86_64_v2.rpm 426254f7bc31a499d4808ba3ba5d5f8abf6ffe192ac67b6b1b7ecf20b1617ab0 kernel-rt-modules-extra-6.12.0-211.64.1.el10_2.x86_64_v2.rpm 76806a255f0e09cd1217b1381480d8c827d6ccb8644ceb5a276c1194cfd5cff7 kernel-rt-modules-6.12.0-211.64.1.el10_2.x86_64_v2.rpm 7fcddd869020a74f0da932d44420bda0d5255ee43d454c49b55aa161b530dc1b kernel-rt-devel-6.12.0-211.64.1.el10_2.x86_64_v2.rpm af8bffb78c348e406a98f34383155d6973a9948ab14ec148dff76082320f4c3f kernel-rt-debug-modules-extra-6.12.0-211.64.1.el10_2.x86_64_v2.rpm b8d5de240b46d2b8dc29b07a35b3e8330de4775a469be9ade93e82001e54fd2b kernel-rt-debug-core-6.12.0-211.64.1.el10_2.x86_64_v2.rpm c9d762ef49405dc01db66abc1b84374414c90cf21c6f8a519697806f45199e2b kernel-rt-core-6.12.0-211.64.1.el10_2.x86_64_v2.rpm e1b5da36ee1011dca63b7c4635bd8aa48ab5b8bc4fd5133df2ca512942df70f9 kernel-rt-debug-modules-6.12.0-211.64.1.el10_2.x86_64_v2.rpm f7dfb3232e97f9ad60d518ebd14644e22bfd75515bdf51904dcb82b996022206 ALSA-2026:81406 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: thermal: core: Fix thermal zone device registration error path (CVE-2026-43332) * kernel: macsec: fix replay protection at XPN lower-PN wrap (CVE-2026-63925) * kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191) * kernel: Kernel SMB client: Double-free vulnerability allows remote denial of service or privilege escalation (CVE-2026-64385) * kernel: bpf: Support for hardening against JIT spraying (CVE-2026-64508) * kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation (CVE-2026-64507) * kernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123) * kernel: cifs: validate DFS referral string offsets (CVE-2026-72318) * kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289) * kernel: af_unix: Unlink scc_entry in unix_del_edge() (CVE-2026-80521) * kernel: nvmet-auth: Synchronize timeout work during SQ teardown (CVE-2026-89970) Bug Fix(es) and Enhancement(s): * net/tls backports for 10.2 (JIRA:AlmaLinux-275027) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-modules-extra-6.12.0-211.65.1.el10_2.x86_64_v2.rpm 0842ac1697dc6d1df1031238cfe4a241d63b0832fda2460f7f7676715e6f2e0e kernel-rt-debug-modules-6.12.0-211.65.1.el10_2.x86_64_v2.rpm 3cdbb27b9d31abf45697031094a46612be38842562d432088348e1c86f981931 kernel-rt-debug-devel-6.12.0-211.65.1.el10_2.x86_64_v2.rpm 4218340afd71654b6327e640aeabc53d5c15f72677563c7cb17752149de01d7a kernel-rt-debug-modules-core-6.12.0-211.65.1.el10_2.x86_64_v2.rpm a56d86c7ad02ada1bbbcb275fda55bb7c9f7fa40280a100bfff737f79871b75c kernel-rt-6.12.0-211.65.1.el10_2.x86_64_v2.rpm b5008502d2b6d7a9488116ca12c0e3434f008f7f361551d248d671d350858748 kernel-rt-core-6.12.0-211.65.1.el10_2.x86_64_v2.rpm b533ee46f839745f9b34c083057861308d5a3de69ccf1533be3a2bbe5aedb86a kernel-rt-debug-core-6.12.0-211.65.1.el10_2.x86_64_v2.rpm bc86516200c5ee4da1995c8ab7269dac9175820705276e97536ec77f2cc536f4 kernel-rt-devel-6.12.0-211.65.1.el10_2.x86_64_v2.rpm bd3704d37690679ec6d8175c8e7cd77a04f6bb5b06b8e71bd1e46327ded8c5c5 kernel-rt-debug-6.12.0-211.65.1.el10_2.x86_64_v2.rpm c288d31e2b5a388d16683bc4382ceea9d34a3d5ad314d9edf74f36130065f77e kernel-rt-modules-core-6.12.0-211.65.1.el10_2.x86_64_v2.rpm d41ac434d392d59c526d828093a3952d506966118c8601a70d7c0306aa59277c kernel-rt-modules-6.12.0-211.65.1.el10_2.x86_64_v2.rpm dc75cb7c3e6455ce29775587f471ad9d81da7fc48bc2d440a71eb99f5e0912f6 kernel-rt-debug-modules-extra-6.12.0-211.65.1.el10_2.x86_64_v2.rpm eb87a7031716b0cf411f4f9ee7399308dbec84fd0427467d3c281a115b1287d4 ALSA-2026:83207 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (CVE-2026-45859) * kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319) * kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011) * kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899) * kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032) * kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030) * kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974) * kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162) * kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377) * kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140) * kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262) * kernel: dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CVE-2026-74574) * kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641) * kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985) * kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526) * kernel: nfsd: don't free session slots that are still in use (CVE-2026-89689) * kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036) * kernel: media: cx231xx: reject geometry changes while the VBI queue is busy (CVE-2026-89894) * kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207) * kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228) Bug Fix(es) and Enhancement(s): * cannot use VFs of i40e/ice NIC in bond device (JIRA:AlmaLinux-143410) * ionic: commit backported to 9.8 missing in 10.2 (JIRA:AlmaLinux-165657) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-modules-6.12.0-211.66.1.el10_2.x86_64_v2.rpm 274880a89af58fa0a556a84d432ebc5ab7482e80576b60c2ca969008af209c8a kernel-rt-core-6.12.0-211.66.1.el10_2.x86_64_v2.rpm 2dc3ed92fdd99035063cbbce6c88bf9709874fd0adf3ef198523fdf1ef644598 kernel-rt-debug-modules-extra-6.12.0-211.66.1.el10_2.x86_64_v2.rpm 4304097085623730b7b1b031703ec6249f906862e3009b4388cd95c13ae49873 kernel-rt-6.12.0-211.66.1.el10_2.x86_64_v2.rpm 60cb8ead5cc1d880cd226a168e62e7450ad43c7a165b9c42ef08aa6a7b162746 kernel-rt-debug-6.12.0-211.66.1.el10_2.x86_64_v2.rpm 6d23419061187d09891e0a1cea3cb8f2e2637acf605dd515478ba9f6cf87ce81 kernel-rt-debug-modules-core-6.12.0-211.66.1.el10_2.x86_64_v2.rpm 9264dadde529f811143322abdfc0060ee1b1eb974ade6cf2d96f438c9a8def70 kernel-rt-debug-modules-6.12.0-211.66.1.el10_2.x86_64_v2.rpm 99873b9b92528953c342426d531438b220ace87ec0387fc8ce7d8728b66587f6 kernel-rt-debug-devel-6.12.0-211.66.1.el10_2.x86_64_v2.rpm a7a3a381f3e50ef838c2921813e7ff7783c0e98dd571793ee233322fffb9a0e1 kernel-rt-devel-6.12.0-211.66.1.el10_2.x86_64_v2.rpm ad033c10f9f7fd4f7c9f25cc4cf8d7dfaeae77f82a910a5d79cfc1d887ef5371 kernel-rt-debug-core-6.12.0-211.66.1.el10_2.x86_64_v2.rpm dbe813c42774015eb8714fa257d22d011f3f633a038a3c0701cf5e8b15e551fa kernel-rt-modules-extra-6.12.0-211.66.1.el10_2.x86_64_v2.rpm e125239dedf64172ea97246ae097e9ad19a61cb5b999216e80931b047bdd1df9 kernel-rt-modules-core-6.12.0-211.66.1.el10_2.x86_64_v2.rpm fe6ef8134b9fbd5367109b515f31813104591c24b22460741d4a396482379174 ALSA-2026:85321 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935) * kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917) * kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801) * kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971) * kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962) * kernel: sctp: avoid auth_enable sysctl UAF during netns teardown (CVE-2026-68162) * kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117) * kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300) * kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315) * kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509) * kernel: sctp: keep chunk->transport in step with the list it is queued on (CVE-2026-74588) * kernel: sctp: validate cookie AUTH state before use (CVE-2026-74752) * kernel: smb: client: reject a tree connect response whose byte count is too small (CVE-2026-89631) * kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633) * kernel: signal: Prevent exec() race (CVE-2026-98256) * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260) Bug Fix(es) and Enhancement(s): * [10.2.z] kselftests: mm: hugepage-mremap: Bail out! mremap: Expected failure, but call succeeded (JIRA:AlmaLinux-181987) * [IBM 10.3 FEAT] zcrypt driver overwrite function - kernel part [almalinux-10.2.z] (JIRA:AlmaLinux-245336) * Batch: z-stream xfrm - rhel-10.2.z (NST-Core-26W38) (JIRA:AlmaLinux-256678) * RHIVOS - [backport] S32G Driver Enablement - USB (JIRA:AlmaLinux-257228) * Fix pending kernel issues for L1VH GA - Kernel (JIRA:AlmaLinux-267038) * Backport 6785011f8b16 ("ipv4: validate checksum_start before completing checksum") [almalinux-10.2.z] (JIRA:AlmaLinux-280590) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.67.1.el10_2.x86_64_v2.rpm 0dc91a6d5ea514f6a4d9f96bb4b40c2356f46d158358f9e9a79bd9232cd69a47 kernel-rt-debug-modules-core-6.12.0-211.67.1.el10_2.x86_64_v2.rpm 193b1738d494c8dec077a5b09c7a68759dedd9b53bcf19dfe77c488ccc269e7e kernel-rt-modules-6.12.0-211.67.1.el10_2.x86_64_v2.rpm 247400fb747fd22f7829ee80a230880456b053ddea2cb716885d7beeca30b83f kernel-rt-core-6.12.0-211.67.1.el10_2.x86_64_v2.rpm 2cafe4a7db40514885d4c54e5fdb7934983df58c6b4e9b0c2392e6600227fcd3 kernel-rt-debug-modules-extra-6.12.0-211.67.1.el10_2.x86_64_v2.rpm 32916a7876cae736c2a544a2df6266c12eb74a4fb5c98410e8debd79c7b515b3 kernel-rt-debug-6.12.0-211.67.1.el10_2.x86_64_v2.rpm 33366354fe32a7ef7ea9d41d6dd62063788edc9a97967b94868f7093eb66f8aa kernel-rt-debug-core-6.12.0-211.67.1.el10_2.x86_64_v2.rpm 42df0d1db993f08f9294ab9f6272f33bff091d46203a2d6c2698af00a5b296c7 kernel-rt-6.12.0-211.67.1.el10_2.x86_64_v2.rpm 785480e0a4334d17e832945c1fc4d4ea6359cbcb5e613ea3e83231ebc8b0cd5b kernel-rt-modules-extra-6.12.0-211.67.1.el10_2.x86_64_v2.rpm 8949ff5dff435a289ec6f19ea61a0ee924240c33127f5452479bdffc678e39aa kernel-rt-debug-devel-6.12.0-211.67.1.el10_2.x86_64_v2.rpm e3abf8d1ecca462022170903cc73b4d0b708b83f33fd8edd4b82c670f61b8c17 kernel-rt-modules-core-6.12.0-211.67.1.el10_2.x86_64_v2.rpm ec334cde7fb6227e853e3c791d359fb26413e92f9970fa2679a8344edb5300a7 kernel-rt-devel-6.12.0-211.67.1.el10_2.x86_64_v2.rpm ed858228571b5903d38fe771fa84e9a3d8f4d3f90bfe46c5d3979523c6c671bf