ALSA-2026:18134 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (CVE-2024-56633) * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839) * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980) * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015) * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097) * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166) * kernel: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (CVE-2025-38202) * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279) * kernel: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (CVE-2025-38267) * kernel: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (CVE-2025-38275) * kernel: ftrace: Fix UAF when lookup kallsym after ftrace disabled (CVE-2025-38346) * kernel: ACPICA: fix acpi operand cache leak in dswstate.c (CVE-2025-38345) * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405) * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441) * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470) * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866) * kernel: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (CVE-2025-40034) * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134) * kernel: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" (CVE-2025-40210) * kernel: Linux kernel MPTCP: Privilege escalation or denial of service via use-after-free in timer handling (CVE-2025-40257) * kernel: smb: client: fix potential cfid UAF in smb2_query_info_compound (CVE-2025-40320) * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040) * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111) * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-core-6.12.0-211.7.1.el10_2.x86_64_v2.rpm 0527a03df11da6811594ce96480e0bc2505c8726d6651be43cf9f8293f8fa929 kernel-rt-modules-extra-6.12.0-211.7.1.el10_2.x86_64_v2.rpm 097eaca487d10d311861609a7f334115813ebf0be52e3538e103a49bc012cfe2 kernel-rt-debug-6.12.0-211.7.1.el10_2.x86_64_v2.rpm 1ac6b6692a167d8049b87a2a0f0ebe03d309f990c1638c2ea44d5bd46019e53e kernel-rt-debug-modules-core-6.12.0-211.7.1.el10_2.x86_64_v2.rpm 60be4e1fcd34633b7bbfcadbdd09069ef31ed7b62095824c88a627afa250522c kernel-rt-core-6.12.0-211.7.1.el10_2.x86_64_v2.rpm 62431a3f1ba73ac897542d0bbf0e281c651e41f1c008bd769fa3773d9c1f643c kernel-rt-modules-core-6.12.0-211.7.1.el10_2.x86_64_v2.rpm bbb1a5ae456b72fcf1115dca49b8c4d5fb53e58be0298fb0aae10c64b28d2666 kernel-rt-devel-6.12.0-211.7.1.el10_2.x86_64_v2.rpm bd5bf90c8a788954f93c1e099a9e7a96901b89f92b635a51aafc59b762ee3ecd kernel-rt-debug-modules-extra-6.12.0-211.7.1.el10_2.x86_64_v2.rpm c4740e1cbc503072dd91c4da9c8e868aa3a2632d57fd7253ca67a4ed625a2fbf kernel-rt-modules-6.12.0-211.7.1.el10_2.x86_64_v2.rpm c8b690817b6836ac7cbe3c86a70bd8e02dca62ae0989c059808b7914b50cb808 kernel-rt-debug-devel-6.12.0-211.7.1.el10_2.x86_64_v2.rpm e604d435293b8a55fa6f7c654061849003c23b32aff14630bae90d34eea298e3 kernel-rt-6.12.0-211.7.1.el10_2.x86_64_v2.rpm eba305a14382a6287dd937883da836ace8a7b598e74133cbce5947a0abea6854 kernel-rt-debug-modules-6.12.0-211.7.1.el10_2.x86_64_v2.rpm ee8999fb86a65eef16b6aaa066ee6612347a1dcdff975e18c1dd1f5f8c006fb9 ALSA-2026:19074 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677) * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-modules-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 1dbd1a27e7c2d04537289bbf1440fb5997a2c9692e9694b190227df76de490b0 kernel-rt-debug-devel-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 50f69cd20b0f825089c1e58660d94e96f56ad8aa4cf61e4cfe0a538c40200aaf kernel-rt-debug-modules-extra-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 528af32bccf740248255655d3651c2be3c49863db8f5227e8110368096e3a9cc kernel-rt-debug-core-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 5d05531b3d077e86150e05b28a5ac7bf69f83911f7445e7aa2d6f480748820fe kernel-rt-core-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 5f1217f686df168a66d19484989b903aa625f71cca7ae500d1f2006505cff71e kernel-rt-modules-extra-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 6b108d38a5743698eb855ae62519fd445cb6412162beafabb81a0d4bd155ec75 kernel-rt-debug-modules-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 77962f0b4b531aa4878db3b4b1df0cdb75fbc3f22fea25590111830eefa9759b kernel-rt-6.12.0-211.7.3.el10_2.x86_64_v2.rpm 7ae7b5c3eb7569e23dda2628fd1b4fe52f93bb2e9a2cec9893976386bea4510a kernel-rt-debug-modules-core-6.12.0-211.7.3.el10_2.x86_64_v2.rpm ada044f0e20182509ffb72d70f004f34eb557ab2a4e1d4574e25bcc08dbad8f6 kernel-rt-modules-core-6.12.0-211.7.3.el10_2.x86_64_v2.rpm af57209c431f6ac0ed10918950f5bbb046c3bc36dba3546d12304840997b48fb kernel-rt-devel-6.12.0-211.7.3.el10_2.x86_64_v2.rpm e12b4bd3ee6cf0593cb403265127e6d23daf828b6c05691b956d12e35a1dbae7 kernel-rt-debug-6.12.0-211.7.3.el10_2.x86_64_v2.rpm f991268d888112982c96e4abaa1edf37bb1c5148f2a114bf1f19e4624409078d ALSA-2026:19569 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 01179955ee3e802b71eacac880fcdecbd0c58c23cedfb497a9eb83614c08b33d kernel-rt-modules-core-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 268207eb37ec6019a647d0bce858bc7fe3a1c75ab3339a9c6e769b19a3f272f2 kernel-rt-modules-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 2e980aa8bddce9ebbc28da5ebd39042b6671f20600ff67de79fa030d7335b888 kernel-rt-devel-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 5324ac6be534b6dd30c700a57a039321ed702147afc9e1439eb2a7419078d15d kernel-rt-core-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 56df9dd3eb2d35aee46b176c8fa086a1d35258170d05de1c535a3e12f4cadfac kernel-rt-debug-devel-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 5837fde8f0e51c89fc68b2178ed21a54bab787c9be8001b15086f4c49e4b4e76 kernel-rt-debug-6.12.0-211.16.1.el10_2.x86_64_v2.rpm 5a63e6748da4bfded58995229a195f7609bfb9c355710316f976feb631de5737 kernel-rt-modules-extra-6.12.0-211.16.1.el10_2.x86_64_v2.rpm ab6ee39b4275f282b8b976ff78c70497a99d8429ccdfbc513217df96c00323d1 kernel-rt-debug-modules-6.12.0-211.16.1.el10_2.x86_64_v2.rpm d210bfbbd6ea7097ff5497588c05c61997dd2f9db43b4a3e68c89fb04ed6c7e7 kernel-rt-debug-core-6.12.0-211.16.1.el10_2.x86_64_v2.rpm e5e9dd9242c01c707e7d46d35a1d51d39bc2961357b37b2258f2786d9c8a7949 kernel-rt-debug-modules-core-6.12.0-211.16.1.el10_2.x86_64_v2.rpm ed0993006923ae906c258df792328486f3e43252b970efdbc9af049cecc56fad kernel-rt-debug-modules-extra-6.12.0-211.16.1.el10_2.x86_64_v2.rpm fdd1587b10b45b657fdc2a37876e95021b2c0ee15235c722306b9a2ec706b45c ALSA-2026:21557 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645) * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) * kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375) * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) * kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006) * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020) * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051) * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023) * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) * kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205) * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) * kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.18.1.el10_2.x86_64_v2.rpm 3044c17c1b2ccfda2b2ca6f8a8c4a192eaa14e1c3a48fe28522c5a494652601b kernel-rt-core-6.12.0-211.18.1.el10_2.x86_64_v2.rpm 306909bcfa2491505f630b7486833e0413b284355be94e9b4960d2657ef12ea5 kernel-rt-debug-6.12.0-211.18.1.el10_2.x86_64_v2.rpm 5258d9200ec6207b902c45f18d89d3ec213cd5026b611ec9b23c5ca55060bb37 kernel-rt-debug-modules-6.12.0-211.18.1.el10_2.x86_64_v2.rpm 63ebf7a9008f99cc3d3238759e3fe01ef27a1bd935af2d0770847215faf40a66 kernel-rt-debug-devel-6.12.0-211.18.1.el10_2.x86_64_v2.rpm 96b1ddccf21d38313113d52b586ec30e4e897094a823a996c260dffc2265bae2 kernel-rt-6.12.0-211.18.1.el10_2.x86_64_v2.rpm a461ddaffa6a423cb88c8a249512b65fe3d1a59e8ae560c7b0927c888aed92aa kernel-rt-modules-6.12.0-211.18.1.el10_2.x86_64_v2.rpm ad9ba090e323323f596bbef3f2c804b0bada5d94ae9ec2642301e4f5e73f3bde kernel-rt-modules-extra-6.12.0-211.18.1.el10_2.x86_64_v2.rpm b3f0ed8c55f642ad704cd52038c636a27e8bb8682917466ff2424d704dbecee1 kernel-rt-modules-core-6.12.0-211.18.1.el10_2.x86_64_v2.rpm b5556250c268c419d32137d97e00f12f7cd6ed73e3ed89f9fe29d972f9c5928d kernel-rt-debug-modules-core-6.12.0-211.18.1.el10_2.x86_64_v2.rpm cf99f0992e55ed24447cf917c6a0bb2203693d5c4dc7335344339647fd47ba75 kernel-rt-debug-modules-extra-6.12.0-211.18.1.el10_2.x86_64_v2.rpm e549904a422ecf95e272270000f06e4eb5a68498908795bf65c1a2a5d6c025b5 kernel-rt-debug-core-6.12.0-211.18.1.el10_2.x86_64_v2.rpm f059abe2fbf9e67aa6adf8c8ec9fb8353e75c5265f6d2aad6146e4891ee1dec3 ALSA-2026:23329 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653) * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) * kernel: Bluetooth: hci_sync: Fix UAF in le_read_features_complete (CVE-2026-43322) * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-extra-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 0490c8f315a757e0caf1796e98b3b7d0d5765983e05bc160f00dd371012e7dd2 kernel-rt-debug-modules-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 18066c7ad033c506600db83d5d2b40b4bc66480a70d0817b34eb168828f16927 kernel-rt-debug-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 2111923030121334fd94e59bc69e175b105561230d1015cf468552be0bb13f19 kernel-rt-modules-core-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 3dfff2c78c2e4cc70c07d942657dfbe53f9d5387fc783b7134a31967cb0d7edf kernel-rt-debug-modules-core-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 84577a60ae6ae2ba599143a937a90ee650f148025815f7c1baf7e53750794dea kernel-rt-modules-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 8bb833709da10b88e85db309eb86ce9a3ff2827cf48973a8ac922ddfaa0126c9 kernel-rt-devel-6.12.0-211.20.1.el10_2.x86_64_v2.rpm 9a24554a7d0a77a7bf9194a36617705ee2b536471680baaef80ae350de5a8676 kernel-rt-debug-devel-6.12.0-211.20.1.el10_2.x86_64_v2.rpm a8583dc102ed0aff01eb6ee7bae8e6e47d1343a887fa03b07e9810786bd66a34 kernel-rt-debug-core-6.12.0-211.20.1.el10_2.x86_64_v2.rpm c7132284b0d40ab87e2131632ab624d7c1d4f4f5a42cd1831713f600baa1799d kernel-rt-modules-extra-6.12.0-211.20.1.el10_2.x86_64_v2.rpm fc2eb57361b2668d429c984b1aa07243db3cb92aba05eab0cb772650012fb2de kernel-rt-6.12.0-211.20.1.el10_2.x86_64_v2.rpm fca53e219e6fa2d589ebf0fcb1852363862f793e28fc46666f195bc44258f877 kernel-rt-core-6.12.0-211.20.1.el10_2.x86_64_v2.rpm fdd32f4d0e5f25ce872b2059f151b3a3d63dc1b4fce27ea1687c99a0f5ed7a8a ALSA-2026:25191 Copyright 2026 AlmaLinux OS 0 1 Critical

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: Linux kernel: Denial of Service in erofs filesystem (CVE-2026-31467) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 1fc9146f1457c57d41572b0ce64098108a7b80d1eb646a5a922ffd31aae0092f kernel-rt-core-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 21f2d77ff0df5a7008d8197eef0cb37d5cf8439bb1d20298172d53f89b9dd58a kernel-rt-debug-devel-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 4c1c6f57ce7b49492000c9976a7b328691fec4d1e09cec9889c4731eccc586b1 kernel-rt-debug-core-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 51c95bafaa38191bab60c91d5ad508ec1686dc785c5e0a7f31db1b901055f907 kernel-rt-modules-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 51e430a46683c61c5d0bac49a3b419119c9694f7582d6947175442d187b0c39a kernel-rt-debug-modules-core-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 5a3ea95cc2b799ed5fd4c5b9508801d0380e6f87a54492f4563b59df7f295194 kernel-rt-debug-modules-6.12.0-211.22.1.el10_2.x86_64_v2.rpm 8c86f2e72001638f4975672affa0b4a4f71b74308fa120942cbad9cb47c2a5fb kernel-rt-modules-extra-6.12.0-211.22.1.el10_2.x86_64_v2.rpm a17f93fd4238862e41739b5d3599ee264e420fb3a4207d0743b4e9697e45c90c kernel-rt-devel-6.12.0-211.22.1.el10_2.x86_64_v2.rpm eaa0002318f053e97f1fd9c562e343401b1d371a14865a18665e784284a8f168 kernel-rt-6.12.0-211.22.1.el10_2.x86_64_v2.rpm ef196545c91bad04efd9edddf42e3d6f1c160accf111139edb72da8a7da4ae2c kernel-rt-modules-core-6.12.0-211.22.1.el10_2.x86_64_v2.rpm f81d3f59e426a39400a4db18904fc7519ca488e5f41dd2e6869fde726c11b141 kernel-rt-debug-modules-extra-6.12.0-211.22.1.el10_2.x86_64_v2.rpm f91e2fceec2dc940fd532bc7953ca2ed831378cc95dcbe8c714c3ae7e2e4e90c ALSA-2026:27288 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474) * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) * kernel: rxrpc: Fix RxGK token loading to check bounds (CVE-2026-31641) * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772) * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260) * kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330) * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166) Bug Fix(es) and Enhancement(s): * AlmaLinux10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-10.2.z] (JIRA:AlmaLinux-166047) * AlmaLinux9.5 crash due to lpfc NULL ndlp->vport [almalinux-10.2.z] (JIRA:AlmaLinux-171774) * objtool static_call check blocks build of out-of-tree livepatch modules on AlmaLinux 10.2 GA kernels ? missing upstream revert f495054bd12e (JIRA:AlmaLinux-178495) * ibmveth Adapter Freeze with Small MSS [almalinux-10.2.z] (JIRA:AlmaLinux-179723) * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-10.2.z] (JIRA:AlmaLinux-183127) * AlmaLinux10.0 - s390/mm: Add missing secure storage access fixups [almalinux-10.2.z] (JIRA:AlmaLinux-183319) * [AlmaLinux10.2.z] Enable Pretimeout Watchdog Panic Functionality on x86 (JIRA:AlmaLinux-182299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-modules-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 10b8621a8c91358e7a770a501c3468dac0588aae5d3f1a2fca1b57d6aa295339 kernel-rt-debug-core-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 1d30f4867078e3a118fd8067017e3b62316d28fad974827daa0e9a7aa0417fc1 kernel-rt-debug-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 1f7eba098a2fd7012afab672de9975c32151d733851d56e65319321e5c1c3710 kernel-rt-debug-modules-core-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 23cb9de6a6d47775d7b6c8ca2180404292caa1aa49bfd51b46bcb6b35dcf5c5c kernel-rt-modules-core-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 5c1e70382ea4727335dfe8b667ff10deeac340f6f4d9a292075a0e6beac1388d kernel-rt-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 819fed521b5c987ee3873d88429f79f4228364df8e2974ff888c605bcf4538de kernel-rt-debug-devel-6.12.0-211.26.1.el10_2.x86_64_v2.rpm 998482ed92ad82061850ea694cbefe646fd80636ef203cb3bc3636c1e71793d9 kernel-rt-debug-modules-extra-6.12.0-211.26.1.el10_2.x86_64_v2.rpm b2255f583a1eed341c1c1e72ebdec89b426fc5d2d3c4eee9883c7df11a34d2e2 kernel-rt-debug-modules-6.12.0-211.26.1.el10_2.x86_64_v2.rpm b262946d9e45dc0664e62fa64199a4f3f245c48dd24c6b9d82eee8cb5b8b5369 kernel-rt-devel-6.12.0-211.26.1.el10_2.x86_64_v2.rpm bba3211f14f2673e572462b43db0e70bcc24d5f4dd75a81098a683e25d7ecf93 kernel-rt-core-6.12.0-211.26.1.el10_2.x86_64_v2.rpm f4824d207c8dcef0b1f081f3ddf99c6f96eaa6e9383764ff6d3107340420c377 kernel-rt-modules-extra-6.12.0-211.26.1.el10_2.x86_64_v2.rpm f8943f2a8908c98eaaaf27161972e362d962961edcc83993f1d94d6e6370fa25 ALSA-2026:30129 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: rxrpc: fix RESPONSE authenticator parser OOB read (CVE-2026-31636) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414) * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898) * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * Unexpected execmem SELinux denials after CVE-2026-46054 fix [rhel-10.2.z] (JIRA:RHEL-185117) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 0806aef9365aac209efd1ac925d28199476c58af45cccb09cb9b15415f01bcf5 kernel-rt-devel-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 0f968a8934b504eda181224799c294faf06fbc057fca814ca14395d9564d5ff9 kernel-rt-debug-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 11dbb5b46a75906f1c446414c4c24e6924f68288695af47206d39988c26d49b6 kernel-rt-modules-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 27db8ccf78f846fba6904d0da06c12b012d096bd3f5efda2b2f84e90f596160a kernel-rt-modules-core-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 30973eee2a0b9d9aa0497e08ea4cf04f53e99128af28ce803649a3192318a6cc kernel-rt-debug-devel-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 39cbdb234602cd5e6abe37c301e07f5413e64be5a00df73f04e71d71f6bf5e0c kernel-rt-debug-core-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 498b1e16ee58de0dd4045fabb6b699e0c2d918ffdfff790612f8eef1f634578d kernel-rt-debug-modules-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 4b5580efca8496b5db1e0de4128a75273ead7a19f6022cfb161417db57997916 kernel-rt-debug-modules-core-6.12.0-211.28.1.el10_2.x86_64_v2.rpm 52176ef22a014c0f683dcebc2b4cb64123de8e09b7bfd8904611ebe4457243ae kernel-rt-modules-extra-6.12.0-211.28.1.el10_2.x86_64_v2.rpm cece21d6dccd05a612890360436fa372b5fadc66702d0c690780661cef65c70a kernel-rt-core-6.12.0-211.28.1.el10_2.x86_64_v2.rpm e67e3e27d940786783e84a14ecd3592dfa9aa7b2981851e4aa322c61905f9aad kernel-rt-debug-modules-extra-6.12.0-211.28.1.el10_2.x86_64_v2.rpm f63023bb82df9d1143dd812d8060e6dad2a5b58c46cbf075d850a84f956ee074 ALSA-2026:33685 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176) Bug Fix(es) and Enhancement(s): * CLONE - [AlmaLinux 10.2 Bug] qla2xxx flash image validation failure [almalinux-10.2.z] (JIRA:AlmaLinux-181887) * tegra-se fixes and updates [almalinux-10.2.z] (JIRA:AlmaLinux-182759) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 2204a2b49e78375b3472e1b10008b3762702f998673e08139a8f9c7813c4f332 kernel-rt-devel-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 31ba37c10bf737cf43fc20e4915177125c8b3f1e696c0cca943b5c1a669f9638 kernel-rt-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 3cb020555d1e4ac3762e51367f237c57c83431c5d45fa382effa14a7b6d2fd69 kernel-rt-debug-modules-core-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 3fd14ad123ec37ba14444a897877bf193b97875c6d50db9c2d5febec269433ca kernel-rt-debug-core-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 57d57add145e6303ace90a2ada51a8667957d70e23694a7848956733f299607b kernel-rt-core-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 8556485a4b352b31ada34d8c6136bd610f35165610e4da4875cd0f0fdb35e810 kernel-rt-debug-devel-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 89b1422b8aff964445a76751f4f5f0c2f8fd0c7c8b35b53210b3a0ebbb7d8709 kernel-rt-modules-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 9cf525df2940d88add3f90aa70bc465c9577dbd630ff2589211bb4a79374bbd4 kernel-rt-modules-core-6.12.0-211.29.1.el10_2.x86_64_v2.rpm 9f2d1ac8183583da8d1659a551eb342d607c3fdaa7660baca85f136411a1ecdd kernel-rt-modules-extra-6.12.0-211.29.1.el10_2.x86_64_v2.rpm c9439cc43431dd9164a8abd9fec5b0990fc96c271c963469fd5b9a37a38b5fa6 kernel-rt-debug-modules-extra-6.12.0-211.29.1.el10_2.x86_64_v2.rpm ddcaf6971b6750e4fb947e7df1891ddbe5509a0584f76475b9fd625af1683db7 kernel-rt-debug-6.12.0-211.29.1.el10_2.x86_64_v2.rpm f0b09c89d5380dd3eeee9ca2c291fc82a726e7cb222db0821eef97acc9a3d1f1 ALSA-2026:34911 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) * kernel: rxrpc: Fix potential UAF after skb_unshare() failure (CVE-2026-45998) * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244) * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) * kernel: kernel: ipv6 frag escape () Bug Fix(es) and Enhancement(s): * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-10.2.z] (JIRA:AlmaLinux-182537) * [ThinkPad Avon/Mario +AlmaLinux 10.2]The OS hang up with CapsLock fliker (JIRA:AlmaLinux-185110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 00750a4af23ebbf9951f92a5809900ee361da28b3fa3689684bf341f4934b41d kernel-rt-debug-modules-extra-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 220b87da12cfb3fc29d0ad82e02d84dc80565258d7473bf763ec930b52783c4f kernel-rt-debug-modules-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 2d5b9b5c690e2b16d897e10a977bddd1757832353549297fdd9b7922d94b8f05 kernel-rt-debug-core-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 52c8abf065c51c13188feb529d6b296d69d1c75fd5df9083ba83228fbc24751a kernel-rt-modules-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 5b5fce45f995d6b4c9c8940d28e80f7b3e314b6447354c6a64b191909374f24b kernel-rt-core-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 5fbe19246ce1c285e5b33c6dcbf4dc8c092b1b90c6ae6a7ce91054bf0fed2b67 kernel-rt-debug-devel-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 7399092c339570db1e491adea3d9c6d0eb907039e8a240fb68dc5db776fd8844 kernel-rt-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 7a535000106891e825d3d3d166e7f7a58665bd87a22c1d5f204cb7f5f4a2c7af kernel-rt-debug-6.12.0-211.30.1.el10_2.x86_64_v2.rpm 8521bd77aa36b4d4d6cc6b1a03c226c99cf6ba4b3f06da87e004a5d8f4a88023 kernel-rt-modules-extra-6.12.0-211.30.1.el10_2.x86_64_v2.rpm ab1e4436d91421759fa2e9100d5307f8697840865190b1e106aa966c7162f573 kernel-rt-devel-6.12.0-211.30.1.el10_2.x86_64_v2.rpm b9a8ca1368aed374d61188df4fdc3553f7da5467590565efd70d3388f0254e86 kernel-rt-modules-core-6.12.0-211.30.1.el10_2.x86_64_v2.rpm d54791e8b97476895f85a13ea6f280440fb30618c11a2f3e9892d2d636fd98f2 ALSA-2026:36541 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276) * kernel: net/ipv6: ioam6: prevent schema length wraparound in trace fill (CVE-2026-43341) * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259) Bug Fix(es) and Enhancement(s): * CNB103: net: page_pool: avoid false positive warning if NAPI was never added [almalinux-10.2.z] (JIRA:AlmaLinux-162140) * [AlmaLinux 10] Bonding reports unknown speed/duplex for tg3 interface [almalinux-10.2.z] (JIRA:AlmaLinux-182770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-core-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 0ea2a925a7e11b1a6fba44f5fd46a02570b3f26410ae9d3b1513e02a3e31ebbf kernel-rt-debug-modules-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 197bcefc5ff26ee96680ae6849702a1a4e7e5f44b4cb789cd64d8d08e0887bbd kernel-rt-devel-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 1a5519f2e164bfbc2c0668cce639b158f402632b336744932024adbd1a30d9b9 kernel-rt-modules-core-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 2298365c9c3bae352728e7e59381017dca3b4325a3f0e5c9ecc4816cb7cedd7e kernel-rt-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 413ba95b568a668c878c9d3a94c968d675d55f9f2a7ae49e8be1f1bf0af68ff9 kernel-rt-debug-devel-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 5400fb5973b1cf44bc4716768ea0c02a560e9a587944c6a7bbfe8c35d90e7f6a kernel-rt-debug-modules-extra-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 8ad8fef1803d4214725ef44e3964f00594ee0651281eababb835874a3220d74e kernel-rt-debug-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 92198d4b692435bbe129e072eedbdd7cba78f773bf728742858657732890a395 kernel-rt-modules-extra-6.12.0-211.31.1.el10_2.x86_64_v2.rpm 95bb0ea42d05257d43d8cb4d5ab18ac30ac7d64a49ddbfa2aff477723fa689ac kernel-rt-modules-6.12.0-211.31.1.el10_2.x86_64_v2.rpm d312b0453d20127e76ca6eaba26fc6aefd7d60e0fbd3ccec38da7473099afc8e kernel-rt-core-6.12.0-211.31.1.el10_2.x86_64_v2.rpm d37afa4ac990d5b1c673497302f6c779c363c8368b7ce2f5d790fe01cb3e369d kernel-rt-debug-modules-core-6.12.0-211.31.1.el10_2.x86_64_v2.rpm fcc3fadba212b6ad7d8ad5aba3c2972d1bcfd52323f161f0e8fd4d8b01b6599c ALSA-2026:36956 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 11075322aa057ae3a0474683255c2e39821bd070f3108f6b8a1bf280bce03911 kernel-rt-modules-extra-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 1ee6f7fe9cc86b34dafd2c0032ae264028f4f4b5a1fab59ccc38a0553ee9963e kernel-rt-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 2fdecc0ec91d46b2d1435b713501e60cd6dbe8bef07404a4b83b9ddeee67e677 kernel-rt-debug-modules-core-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 30028c3c894210dabb0b89e13ff7c6b93671fe5cc1673f8053b0ea3b2b62e325 kernel-rt-core-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 45d680ed67d62b428a654105d52ed14fd2e5258c7c1bacdfabb193eae0848fff kernel-rt-modules-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 6846f2981e423bc3ed0a10ef3d043eb1b30a7752d5731ecf9f76027be1dee345 kernel-rt-debug-modules-6.12.0-211.32.1.el10_2.x86_64_v2.rpm 81d8e0a905544158139c2616f7ce370c05d80b8c5f06d875738a475f83b405c8 kernel-rt-modules-core-6.12.0-211.32.1.el10_2.x86_64_v2.rpm a9776c8698c1ede5d4bae522fc4efbdc9a25963587ea4b830d744ece061847a9 kernel-rt-debug-6.12.0-211.32.1.el10_2.x86_64_v2.rpm ab4b6ee0e7ea26d3900f3ba6936f6e140283ed2f467c5fb23b67936d154a4af8 kernel-rt-debug-devel-6.12.0-211.32.1.el10_2.x86_64_v2.rpm dd41cec92a5ae44908435a03fe93614b68211214d6195e659e7a8978e5c259c1 kernel-rt-debug-core-6.12.0-211.32.1.el10_2.x86_64_v2.rpm f7ab9e4475c8417cf0fd2bc18401f6aa512780b03c4162be819040011cfbc523 kernel-rt-debug-modules-extra-6.12.0-211.32.1.el10_2.x86_64_v2.rpm f83a2489f084c4cf0c4991351929134fa0c9b25aa9631e07c64bb9ee4aa89ad5 ALSA-2026:38492 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.33.1.el10_2.x86_64_v2.rpm 0c533d9d39fc27a4a32aeebe9a41f366cd3bf05768abd658239b1de9394b5864 kernel-rt-debug-modules-extra-6.12.0-211.33.1.el10_2.x86_64_v2.rpm 2d9c841b4c58848ac397e96a99146f8ac9b7680a24cd5926b194d7bb269dbc0d kernel-rt-debug-modules-6.12.0-211.33.1.el10_2.x86_64_v2.rpm 41e314ddabbb940d0aeb6bb368bc858033cb4711cd1e9d7ea8f9fb97c9744ada kernel-rt-debug-6.12.0-211.33.1.el10_2.x86_64_v2.rpm 9957d394580de055433a1f36be8e747dbe16ce18b12f9165f7b087e5acb28668 kernel-rt-core-6.12.0-211.33.1.el10_2.x86_64_v2.rpm c2dbfbebaf2e0643cc7328bd41b1649a5a3615101a333073ad463bc39c239c19 kernel-rt-modules-extra-6.12.0-211.33.1.el10_2.x86_64_v2.rpm c405b3030d880f419579375f48204da9a44ac3a4f7594649e0ddf325ff605d6c kernel-rt-debug-core-6.12.0-211.33.1.el10_2.x86_64_v2.rpm c4b87a05e99c309d4bd903cb130cf76a092e16e215cfb2fb928c8cab207b9da5 kernel-rt-6.12.0-211.33.1.el10_2.x86_64_v2.rpm d29fdfaebbf0bc8935e2c3a670c714e1495352dac66ab03d07e03c89138a0552 kernel-rt-debug-devel-6.12.0-211.33.1.el10_2.x86_64_v2.rpm e08440281ef03f8fb3ebebe4f1d1d8983be96f9097bf30d958e9c201a3baf867 kernel-rt-modules-6.12.0-211.33.1.el10_2.x86_64_v2.rpm e60f98f1f2de567920071dabe1d67eb7c1ce91b50dcebf0be50a6f034d6e6c20 kernel-rt-modules-core-6.12.0-211.33.1.el10_2.x86_64_v2.rpm ed4ffbd2dc975665462e202998ce4580fa6cdccc934169a9513e472e43e7a5e1 kernel-rt-debug-modules-core-6.12.0-211.33.1.el10_2.x86_64_v2.rpm f96be8c3772333fc400838d5870241c241dec70f79a49bc2ef91ef878c99061c ALSA-2026:39494 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) * kernel: XFS data corruption using reflink () Bug Fix(es) and Enhancement(s): * [Exploits (KEV)] kernel: XFS data corruption using reflink [almalinux-10.2.z] (JIRA:AlmaLinux-193945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 5a77e5fd2dc587ce9368374d1b5eef3fa82b25d4283715f371500183c4f06a89 kernel-rt-debug-core-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 5fa8bb096d2fc6f16b8c7ec944962dc79df37e252be91428bdbdeef13261f925 kernel-rt-debug-modules-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 7257705284b5bd27d98ad190d65d4018b039d03668a6175aa7776ac932d581e3 kernel-rt-debug-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 7454675387a039a109e6f6b5080da2abf6c5564f23f0696a2263a29099016b46 kernel-rt-debug-devel-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 823d34cd2c5a1c80969e2d3bb1e637bf0ac7d1e1fa6c5e52e401c60d67e46312 kernel-rt-modules-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 83d4114cf0ce3d9f52f76add1f0c02a13afe6cbd8c8b73de34244812daef3194 kernel-rt-devel-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 8792d025c765b18414c39a22a389c7d6e878c53f2f46f57e7335338ce774c4d3 kernel-rt-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64_v2.rpm 8e7820d1e8ab5572ffab1b5fe130736f063ca322311eb6d2a7f5522b3eaa32cf kernel-rt-modules-extra-6.12.0-211.34.1.el10_2.x86_64_v2.rpm aef0dd13696069ab3e387bb6a400cacb0323164054b1f355de24c2264bf2971e kernel-rt-core-6.12.0-211.34.1.el10_2.x86_64_v2.rpm d1bb56b2612b7f8056b5ef93f8d3c5502fe75fbb6f31fa2306560ef308f4d2e5 kernel-rt-modules-core-6.12.0-211.34.1.el10_2.x86_64_v2.rpm d80c97e02509724af2cb315f43cdbe1c621b36c56fc4d9ca005d56883a40163c kernel-rt-6.12.0-211.34.1.el10_2.x86_64_v2.rpm e3a3fd751b9799dd6bcc10f19b7bf3592b8b8f87bc45dd03bbae1d8905872578 ALSA-2026:42919 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113) * kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147) * kernel: flex_proportions: make fprop_new_period() hardirq safe (CVE-2026-23168) * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530) * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) * kernel: fanotify: fix false positive on permission events (CVE-2026-46150) * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215) * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976) * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950) * kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009) * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) * kernel: can: bcm: thrtimer use-after-free during RX operation teardown () Bug Fix(es) and Enhancement(s): * nfsd_file slab cache objects remaining on kmem_cache_shutdown during nfsd teardown while running bz1477872 testcase (JIRA:AlmaLinux-173103) * tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-10.2.z] (JIRA:AlmaLinux-183975) * [AlmaLinux10-debug]: BUG: KASAN: slab-use-after-free in __pv_queued_spin_lock_slowpath [almalinux-10.2.z] (JIRA:AlmaLinux-186311) * ice: driver update 2026-06, part 1 [almalinux-10.2.z] (JIRA:AlmaLinux-191324) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-devel-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 1d6657ed218f7bdd6d19f68311cbeeccc2feb95070d2644a0875ca416b1c0403 kernel-rt-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 37d1b6a18d3fef334c3af8063243d748c2d7860c204b51a1eb78eac400ba72a5 kernel-rt-debug-modules-extra-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 47fe6581590d12dbb846e3623b3a99619b04804bc33317ac21739c96fd809e81 kernel-rt-debug-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 6144c4126579181e2898cbfe2a73a6555dc40b7aafbdf565e3ac47b5118110b5 kernel-rt-devel-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 6466e49b3240f80c8f6be01ed8db21cefa30a27fbbf6c1af4eb0ae1696d52eb2 kernel-rt-debug-modules-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 7c9cbece4266cd9a789f8076dc5ecfe0cb0e98ab4f5276183bff6263643a1554 kernel-rt-debug-modules-core-6.12.0-211.37.1.el10_2.x86_64_v2.rpm 96069051c9b1658531c2ae78bc337cfcadb063b1f6dd0997d2ea3f7a72ed01ec kernel-rt-core-6.12.0-211.37.1.el10_2.x86_64_v2.rpm a36e2dba6c9f931d0e3c8e358e76cef0bc069ce9b532e811fc0a3a084efee199 kernel-rt-debug-core-6.12.0-211.37.1.el10_2.x86_64_v2.rpm ad0a85bbce9858f1a33b07d3877c1a1e2abb6b89f5dacec34927e5a4327fdc50 kernel-rt-modules-extra-6.12.0-211.37.1.el10_2.x86_64_v2.rpm d51f8a83becb90ad8a06a643a40948b4759da355d4ebc5c9ac549b92dfc700f2 kernel-rt-modules-6.12.0-211.37.1.el10_2.x86_64_v2.rpm d9b00d0cff28cd435cca3fbee54ab47e27b08b7ac7c19c8303a18798e925f0d7 kernel-rt-modules-core-6.12.0-211.37.1.el10_2.x86_64_v2.rpm f6ac9ebd581ff191349cebeb094e2b9626f3d159b4f4620531b3627a9e44e780 ALSA-2026:44270 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 1821b60159959451f214700d277ec90081406ed78ccf93019334bc7ff3c938bc kernel-rt-modules-core-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 2cbe5880d8de05d50870f71f0ee405b7215a5bc01b36c65fc036edaf67c2a602 kernel-rt-modules-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 550dfa331467cffa9328f06f8f411acc02124cd1075fb86548557c9162497454 kernel-rt-debug-core-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 5659b42e2ee218f6d7608496f2425dc081dbdaa8b79829c2ffc1b71cdd01819c kernel-rt-debug-modules-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 7414ee9da264faf58bf3150d7d3591ae0fb48fc5cde6fcc856205b8ffaa7f66f kernel-rt-modules-extra-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 992df5c1447c931243332e61f27ece4f608b17a5906f639809c0753214963638 kernel-rt-devel-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 9d65e44b354596355538375bd6f7434a4c04224ac6b1f8d68a38a514b61fdee9 kernel-rt-debug-modules-extra-6.12.0-211.38.1.el10_2.x86_64_v2.rpm 9db65b96882e276859bf9808223cf14bfd9c4f362d0cb9d9fa6854203309588d kernel-rt-6.12.0-211.38.1.el10_2.x86_64_v2.rpm b9045d9e398cac6431c29fee0e9465a842207017779879587b7fcbd2391900fc kernel-rt-core-6.12.0-211.38.1.el10_2.x86_64_v2.rpm bc731943319df7fea45e99e1e8dad2f5b5270b8af9360cf9d8aeb50a92c11956 kernel-rt-debug-6.12.0-211.38.1.el10_2.x86_64_v2.rpm bfc1354386b5bfdabfd48c0b3b8727533b656b11ef71c42dec31f108d3632f21 kernel-rt-debug-devel-6.12.0-211.38.1.el10_2.x86_64_v2.rpm fc17df7ccba66107c7210a3856446158d317e57926c97065c58b916840fd5f0c ALSA-2026:45114 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 025f935728dd3b85362226c6c2858a96c5b343241c0ee6e827cc2cf799f8bcf7 kernel-rt-debug-modules-core-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 0d20f235583b08db201b3fdd25ae9852c66097a291813925eeb79f463faed880 kernel-rt-core-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 2166e32f5027d87f0d9271ebb4c7c5141db3db711bfe8383cf53171e3a50bc4b kernel-rt-debug-core-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 395786246f9c9d1fa24f351147584e3c21158edc18f5ea8b81457ba72b93f060 kernel-rt-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 3a55d5c8df07c0e6cdf9d27c181250037f72bb3f5c9ad9f71d196cd20ca2e197 kernel-rt-devel-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 6b557380ea947c919999c780df67c6b173dbc42c3672aa08f417428384c7d748 kernel-rt-debug-modules-extra-6.12.0-211.39.1.el10_2.x86_64_v2.rpm 92e823fa46b29d74c8f42218ac0bcdf8eb3b7f37119ccc813226d9895b2a1489 kernel-rt-modules-6.12.0-211.39.1.el10_2.x86_64_v2.rpm a3319ff2363d000b58178dd53741ad9bd47a2b3125bea29148b20379022013e7 kernel-rt-modules-extra-6.12.0-211.39.1.el10_2.x86_64_v2.rpm a332aa43e77faec36cd0f8a32aa3602afbe4e4e9c5be3b36b1756986b026c0ec kernel-rt-modules-core-6.12.0-211.39.1.el10_2.x86_64_v2.rpm b3f8af88a06a0bbf1bc09528ebee848f921ef1c6dae0339e506d85486149f10a kernel-rt-debug-devel-6.12.0-211.39.1.el10_2.x86_64_v2.rpm d2d77dd2e83a6240e3e31099d289db365f4a6ec171d9a9e2fcd69b8aa05fc4ea kernel-rt-debug-modules-6.12.0-211.39.1.el10_2.x86_64_v2.rpm f72616166749513459f8b687a0df8793a7b097e6e4e3b45c18fc05c236b84c0d ALSA-2026:47017 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281) Bug Fix(es) and Enhancement(s): * rxrpc: Address CVE-2026-43500 [almalinux-10.2.z] (JIRA:AlmaLinux-178254) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-devel-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 07cf0b4b9138cee1feded361b347c2a1d29724d893921c6a1ea443c44b9e545c kernel-rt-debug-core-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 1c61b52b13baef35c94727dd0c3da836ee451cb193bc2818248291296cbcd2a8 kernel-rt-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 605427472afbfa5823be54483cc7ff53028b97e37c8218b185475399f5efeabc kernel-rt-debug-modules-core-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 67e4a922c8bc72960254205e77a3128a3feef7da35bd4365e6368f6d8deaf31f kernel-rt-modules-extra-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 793a121fe06ff5533f3570d979418dbe5c325710dc65b4524d009e61b32b4543 kernel-rt-debug-modules-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 7a1f90faf42fd0ed3efbf3edcce30f8e872f4146d224a138c9f94c0e000f1f90 kernel-rt-modules-core-6.12.0-211.40.1.el10_2.x86_64_v2.rpm 8cd0a725dba2bb846642fbca946b8075aee038fa7adf54ec361a755cc3a241e9 kernel-rt-modules-6.12.0-211.40.1.el10_2.x86_64_v2.rpm a804c03efd43b93248119d2db96e4ca8f9b27c36839f2c74f56ff8afbabc42be kernel-rt-devel-6.12.0-211.40.1.el10_2.x86_64_v2.rpm be67f80a5ce754de22e9d3e7d1384f577b72f8cd115179ad08d3652ca9c6803d kernel-rt-core-6.12.0-211.40.1.el10_2.x86_64_v2.rpm bed3a7d5e285752b1d594108d32fd477c743cd83f7a1cabc5774e97f3b3045bc kernel-rt-debug-6.12.0-211.40.1.el10_2.x86_64_v2.rpm c1bf8e68290145fc784281cfefb93ba068fa4db4986495ab713eafd61e083df8 kernel-rt-debug-modules-extra-6.12.0-211.40.1.el10_2.x86_64_v2.rpm c657aec69df75841d9e2357bc0f57182b2ac22f42a83b9a8a3f048cf68d57bcf ALSA-2026:49211 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211) * kernel: isofs: validate Rock Ridge CE continuation extent against volume size (CVE-2026-46303) * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () Bug Fix(es) and Enhancement(s): * [DELL 10.2 FEAT] [LATE-ADD] - Include support for Ghostrider PTL mini config SKU with Realtek IC Solution [almalinux-10.2.z] (JIRA:AlmaLinux-185669) * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-10.2.z] (JIRA:AlmaLinux-212063) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-modules-extra-6.12.0-211.42.1.el10_2.x86_64_v2.rpm 196d866022beb7266919b3b22f1737fdf5aae8e6a0e7aa805449850d7c083920 kernel-rt-debug-core-6.12.0-211.42.1.el10_2.x86_64_v2.rpm 1e4c65cd6abdb62d2e6aa0ba927667a47547158e27b301fcc48d57ff27eec8a9 kernel-rt-debug-6.12.0-211.42.1.el10_2.x86_64_v2.rpm 27561b0625db8a602a3540350c25f2b3516e3f885e5661e1eb2d303968009443 kernel-rt-debug-modules-core-6.12.0-211.42.1.el10_2.x86_64_v2.rpm 32fe0201a84d0adc53cf4a852b26ac77dcc2d517fe66b7471c3e9fe638e069cd kernel-rt-debug-modules-extra-6.12.0-211.42.1.el10_2.x86_64_v2.rpm 4933bafd9bd857103187f25134a1f580371a6f23cf583846929a7f1b7bf2836e kernel-rt-devel-6.12.0-211.42.1.el10_2.x86_64_v2.rpm 5cedfe9498e652eafad09efae10d0e6e56d7f5cb024e34cb43c361c65683a7e9 kernel-rt-6.12.0-211.42.1.el10_2.x86_64_v2.rpm a0f7a59e25f2ca2bd5e8d81dd88d518ba01fc2aec2db6c105aee4b5492857c94 kernel-rt-debug-modules-6.12.0-211.42.1.el10_2.x86_64_v2.rpm b608c809d342aae712932d6a3f8c93d8740d3dbdb4f77971ba82ff0d5cbcb533 kernel-rt-modules-6.12.0-211.42.1.el10_2.x86_64_v2.rpm c79dac874975c36f5e60dcefd03c7e96710f4e9244e50f50ea3995c36f1e2a39 kernel-rt-debug-devel-6.12.0-211.42.1.el10_2.x86_64_v2.rpm ca854420f25fb3225bdd93742f51d90c8b5dc3992835335409b71b97be00ca41 kernel-rt-core-6.12.0-211.42.1.el10_2.x86_64_v2.rpm eb9f875241b711291bb1d41d183e2de4ef54b875d89f076667f2600f6ffcc749 kernel-rt-modules-core-6.12.0-211.42.1.el10_2.x86_64_v2.rpm fee3c081a40d838910173c3e13141d1e0d33264e36f0cdf3728abfdf98e34b8f ALSA-2026:49871 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214) * kernel: procfs: avoid fetching build ID while holding VMA lock (CVE-2026-23199) Bug Fix(es) and Enhancement(s): * [Lenovo] Graphics not working on T14 G7 Intel (Pantherlake) (JIRA:AlmaLinux-172832) * Possible regression with FM350GL [almalinux-10.2.z] (JIRA:AlmaLinux-184266) * [10.2 FEAT] CNB102: dpll: sync with upstream (JIRA:AlmaLinux-211011) * backport make module and modules-core provides use variant [almalinux-10.2.z] (JIRA:AlmaLinux-213965) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 0d7a7522d7f39f32423798dc7cedb1e1773919a817963ebd9f9f2cbe6c966b20 kernel-rt-modules-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 1273b8a49868731335f0625cd024e8779342742eb3c556576af87f1b5f7fd1fe kernel-rt-devel-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 2bdec2c99b582b7c6f9d425a21b5e55a0a495657824fa8e045a75caffcc50570 kernel-rt-debug-devel-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 2ff806c0fb44225528ebaf9d123e576ffc196a4cc406b41bce67678458a879dd kernel-rt-core-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 30df1f69cba208f1de1da2814f44d2103a84e065d8510896bc630b5039a16e2f kernel-rt-modules-extra-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 3cfef6f5729e2494acb36340098293d29004244e574deb37ff77f82c1d27b75a kernel-rt-modules-core-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 5c8db17a13ccbd6b79e4c0ee7dce752f88696b6a69d31feaf92565d1e0186344 kernel-rt-debug-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 6516eb990d26e36986fc07c5c89fa0dd26d1c26f052dbfcebe99b7a42eb4e982 kernel-rt-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 757fbbfeaa6dde7d83b404876f38b49e94d8f522afc17a6c564f49d5064df1a9 kernel-rt-debug-modules-core-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 8216587581c34070181fae67eb0d032cae830d40ad8ed648e4e3c154559e11ab kernel-rt-debug-modules-extra-6.12.0-211.43.1.el10_2.x86_64_v2.rpm 9852c53e76e2d1a44a6a57580f19aa803429632afdb9d04bb872305891d9965a kernel-rt-debug-core-6.12.0-211.43.1.el10_2.x86_64_v2.rpm f1974f055625d41f0faaaac2bbfceccf8fd590bd09b46514b463e4d9cb54fb65 ALSA-2026:51295 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CVE-2026-43186) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-10.2.z] (JIRA:AlmaLinux-186345) * ice: driver update 2026-06, part 2 [almalinux-10.2.z] (JIRA:AlmaLinux-193134) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-devel-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 0c2a3a36004ddce5c7f2d1d4bae13184f2581b0329638d7aa2f787671c27d8db kernel-rt-modules-core-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 15d0ef810bbd567135f795f04f426a9afe356aac75e3b9a7282691e3e1f5acff kernel-rt-debug-core-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 2679fb7d5608ec4514f1cb7bc195763259b6fb8a49b7ecc8e6f155387e93cfdf kernel-rt-debug-modules-core-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 44033077cd35e69205b766cf3d1a714db5be845bc44434ba6daecdbe35f5e7ee kernel-rt-modules-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 5a3a4113eca81211f25041dc26935848174c0dd61e5273839ddc5fa5039dec58 kernel-rt-debug-devel-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 6458caf88a3ccced792a1f801e0d33f1579d8ca9d5e9ba40490aaf0ec1172902 kernel-rt-modules-extra-6.12.0-211.44.1.el10_2.x86_64_v2.rpm 90c7a9ceb4fa151b7c1da0f8c4ebe23b3754494427a7cc476b0df191f6a50d8e kernel-rt-6.12.0-211.44.1.el10_2.x86_64_v2.rpm a34eb78bc6634fca3e45113201e8ffa48f46c963d6a446f635c2c16bd592a502 kernel-rt-core-6.12.0-211.44.1.el10_2.x86_64_v2.rpm a91df8a44f7c36c9c0b28f06cc2b16c905449180640a652b0ad7a47df40ffe45 kernel-rt-debug-modules-extra-6.12.0-211.44.1.el10_2.x86_64_v2.rpm d28118326ba89ecaf5d6f5bb5d218480aba38ba78dcb1a33c83b3a8cf922f332 kernel-rt-debug-6.12.0-211.44.1.el10_2.x86_64_v2.rpm d47218c273eb84f248d740c2a34c1d778014079242899fce8e70caca98db1d17 kernel-rt-debug-modules-6.12.0-211.44.1.el10_2.x86_64_v2.rpm e31a2b95f57617c2279eeac3b8a0c75d8eb619e49a6d2b4a4c181852328b523c ALSA-2026:53330 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fsnotify: Fix ordering of iput() and watched_objects decrement (CVE-2024-53143) * kernel: shmem: fix recovery on rename failures (CVE-2025-71072) * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415) * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368) * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) Bug Fix(es) and Enhancement(s): * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-10.2.z] (JIRA:AlmaLinux-213035) * AlmaLinux10.0 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-10.2.z] (JIRA:AlmaLinux-222503) * AlmaLinux10.0 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-10.2.z] (JIRA:AlmaLinux-222505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-modules-core-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 20ad4418a64bd6d95e9b077e885fab1d20a716ca18b6ee356a4295e244c12990 kernel-rt-debug-core-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 48a1f5e14a0ac24b5706725a26058470359961000cc815b9daa0fe3237445ea4 kernel-rt-debug-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 626c01f82a0e594b7ccb5e1fa10f033b1c30b6b1ee1ac2c52f9218aa7865abdf kernel-rt-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 65822e15b81a7e1bacc2b7a6e79fa51509fbacc4c4b014e2d60075477bb1db43 kernel-rt-modules-extra-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 68c30c1367cd01f0c3c98e0b7d0d054ac33e879500ac8b51ccb5a18f10c77488 kernel-rt-devel-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 75d983782d21fc708c424211a17583dcaf3fe41c93683f66f774cc42ac390e0b kernel-rt-core-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 79e780d53be5fab249866caeaea0f14bd04c068410a7a01f3a879288239f8c60 kernel-rt-debug-modules-extra-6.12.0-211.46.1.el10_2.x86_64_v2.rpm 81753438e567336add0976788bfff9e00637d9ea4d75380e1b99cd165e45986a kernel-rt-debug-devel-6.12.0-211.46.1.el10_2.x86_64_v2.rpm a17554b7815bd6914d211c6bc325de956e053f9f4ba00a2938cfdab87316cbbf kernel-rt-modules-6.12.0-211.46.1.el10_2.x86_64_v2.rpm d3c048268ff0001088a2ba1a73ffae5fe09038a9edaea06fc618f5ebdb5f6177 kernel-rt-debug-modules-core-6.12.0-211.46.1.el10_2.x86_64_v2.rpm e84460d68a42774a3afa42469350838dea858cd965c66b65c722423a0f6071d5 kernel-rt-debug-modules-6.12.0-211.46.1.el10_2.x86_64_v2.rpm f6d4a1b9cc7139f6289685fda59f30b3b1cdb854805bb19b122d4974f8a9a893 ALSA-2026:54343 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202) * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264) * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) * kernel: perf/aux: Fix page UAF in map_range() (CVE-2026-64300) * kernel: af_unix: set gc_in_progress to true in unix_gc() (CVE-2026-53361) Bug Fix(es) and Enhancement(s): * netfilter: CVE backports for AlmaLinux 10.2.z (JIRA:AlmaLinux-185311) * tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-10.2.z] (JIRA:AlmaLinux-214436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-x86_64_v2-rt-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.47.1.el10_2.x86_64_v2.rpm 0d076569374b55d440195003819ef2e6b7de5625fe2f34ab7faa3891b4173be1 kernel-rt-debug-devel-6.12.0-211.47.1.el10_2.x86_64_v2.rpm 0e779a037f565dfae2c6e8ea15eddfb34908eff8a2f6de0e7809a863eb9eb6bf kernel-rt-debug-core-6.12.0-211.47.1.el10_2.x86_64_v2.rpm 37b5817ea8ffa86561d97008e93df5415af1af4bf80af548acd4dd6cbd4654b6 kernel-rt-devel-6.12.0-211.47.1.el10_2.x86_64_v2.rpm 3978dab00ff2f18f9c3504e5bc7a446ec14f26e0af07998f3cce3a7cc75cfb9e kernel-rt-debug-modules-extra-6.12.0-211.47.1.el10_2.x86_64_v2.rpm 4299386a4a9ec32140081de159746dfc6e8cb4a8622003d4e3be995f4e0dda4b kernel-rt-modules-6.12.0-211.47.1.el10_2.x86_64_v2.rpm a4c43ca3101dbbb0ef3db2df7b434ed808133fb00b2518402405f3e4cf2d2faa kernel-rt-6.12.0-211.47.1.el10_2.x86_64_v2.rpm a7de12a66ded9476b89762e57098e9510ab956e95d7360296d87471c0f64cb83 kernel-rt-modules-core-6.12.0-211.47.1.el10_2.x86_64_v2.rpm b1273aec04a94c891961a95e0038cf33dbab8f02719f056d56aee2b533831ddb kernel-rt-modules-extra-6.12.0-211.47.1.el10_2.x86_64_v2.rpm c280e942e0cc103d36ec0865bcd942efda94f897128ad949a502d7c5c6fb439e kernel-rt-debug-6.12.0-211.47.1.el10_2.x86_64_v2.rpm c7a06c56d5c8041465912e4c39f9b16d85b94e8a7b09db5dc174bb517f23f343 kernel-rt-core-6.12.0-211.47.1.el10_2.x86_64_v2.rpm ca6440a5885f90d78a6400d06ad9c9ffed6c2cb953491cf3c538c4a2d55aa679 kernel-rt-debug-modules-6.12.0-211.47.1.el10_2.x86_64_v2.rpm dc0af495a76d003c193b0f4c90d61e16ec433c1d403f5caa314814ddf5725090