ALSA-2026:18134 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (CVE-2024-56633) * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839) * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980) * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015) * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097) * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166) * kernel: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (CVE-2025-38202) * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279) * kernel: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (CVE-2025-38267) * kernel: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (CVE-2025-38275) * kernel: ftrace: Fix UAF when lookup kallsym after ftrace disabled (CVE-2025-38346) * kernel: ACPICA: fix acpi operand cache leak in dswstate.c (CVE-2025-38345) * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405) * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441) * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470) * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866) * kernel: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (CVE-2025-40034) * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134) * kernel: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" (CVE-2025-40210) * kernel: Linux kernel MPTCP: Privilege escalation or denial of service via use-after-free in timer handling (CVE-2025-40257) * kernel: smb: client: fix potential cfid UAF in smb2_query_info_compound (CVE-2025-40320) * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040) * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111) * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210) * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-6.12.0-211.7.1.el10_2.aarch64.rpm 0104b2b80a9309e695409de5d984d8955eca90ef17f097b00fa13b203a2b5b3f kernel-rt-64k-devel-6.12.0-211.7.1.el10_2.aarch64.rpm 02be19cc608596ee46ffd5f8267e04fd86ef13c85b81a55b8a5d360d629c7b78 kernel-rt-debug-modules-6.12.0-211.7.1.el10_2.aarch64.rpm 22f293a9c0aadd376c5f2cf656fe7d6d9fa88bd5fff9281f079bf7f46e037e0c kernel-rt-modules-core-6.12.0-211.7.1.el10_2.aarch64.rpm 29571cdbd4b4b0bd629728084f893a00e136ba83780a09c0059bb5aa48c9ec31 kernel-rt-64k-6.12.0-211.7.1.el10_2.aarch64.rpm 302221cde2f7936310273e7c263f3d4e3e3ee6329bcaeaf6e82755096a456069 kernel-rt-64k-debug-modules-extra-6.12.0-211.7.1.el10_2.aarch64.rpm 32cf922bd38b3ead15c0ebbac9b3b3c9b3cc56d362e84058ea69b707008570d6 kernel-rt-64k-modules-core-6.12.0-211.7.1.el10_2.aarch64.rpm 4541e4ead47de4b348e800dd08cdd2b1113a980029244f142bcea5d38e5c5500 kernel-rt-debug-devel-6.12.0-211.7.1.el10_2.aarch64.rpm 4abec7682a42e97af746a9395c45c8d4783cc6fad8e1aae643f94a716a4569aa kernel-rt-devel-6.12.0-211.7.1.el10_2.aarch64.rpm 4b4abe8fb8afcf713683973ae019a464db2384faebbeb0fcad1cde565fad0f4d kernel-rt-64k-modules-extra-6.12.0-211.7.1.el10_2.aarch64.rpm 5369be94d532f56a5f15c138d620ede25ba9c9485dc989b4426a1ff04057d4ea kernel-rt-64k-modules-6.12.0-211.7.1.el10_2.aarch64.rpm 6dce94ee53a712d2bb51738a6476ad7e5d9e9bcdf12117b43e074794bd6d0c17 kernel-rt-debug-modules-extra-6.12.0-211.7.1.el10_2.aarch64.rpm 7a3cfcac431929b3908e5b65f42a0955f8a17e81d7793627c6e009ece882dd90 kernel-rt-64k-debug-devel-6.12.0-211.7.1.el10_2.aarch64.rpm 7c380cf7ae2752db27c03eaba00b27bbfc9e2dda0f5b7ae07da17104d82ef792 kernel-rt-core-6.12.0-211.7.1.el10_2.aarch64.rpm 817640bc42ef84590fce0c67179b368990135d5b44eaafb21a5f5375ec8d2204 kernel-rt-modules-extra-6.12.0-211.7.1.el10_2.aarch64.rpm 88eb5ecaa863e8a2acc8a70f06ce52924a87786cec347ff6ae159cadaca9f907 kernel-rt-modules-6.12.0-211.7.1.el10_2.aarch64.rpm 9609abc0fa47b5d35a97c895b3058381e0d288621f527d909fc7ef122decc1ec kernel-rt-64k-debug-modules-6.12.0-211.7.1.el10_2.aarch64.rpm 9cf92fb26ee9a0f637aa7ebd36f87165651c37a1414a35bedf44e699d63eca05 kernel-rt-6.12.0-211.7.1.el10_2.aarch64.rpm b93ef10517d21d3c42cba67b8632a0719a9060982df3c3b0115f797a49444987 kernel-rt-debug-core-6.12.0-211.7.1.el10_2.aarch64.rpm d2985ee2b6c3bc20d2abf1a5993e24d3a30ae929e00a35e8759aba9208a725ad kernel-rt-64k-debug-core-6.12.0-211.7.1.el10_2.aarch64.rpm d58aa579a0196d4bef15ed3c1a532f3d075711d8890d7c11c5a97ab0100a0d3a kernel-rt-64k-debug-modules-core-6.12.0-211.7.1.el10_2.aarch64.rpm df9889b8cfef5e67a2323767e64681a2c654660b760a18c00b3162e1b23ed074 kernel-rt-64k-core-6.12.0-211.7.1.el10_2.aarch64.rpm e7f36893595735386dfad2393f417189b7e87b9ad9c81b4cecd6ddc34b50f611 kernel-rt-64k-debug-6.12.0-211.7.1.el10_2.aarch64.rpm e983ea0eae4b0ed27450633249bafbb29203e0cd119ce73b560b7e86995a7baa kernel-rt-debug-modules-core-6.12.0-211.7.1.el10_2.aarch64.rpm eaedb69780d813c2db1741ff477926184a91b3a7aff0a9e909c1d48ae0173ebe ALSA-2026:18344 Copyright 2026 AlmaLinux OS 0 1 Moderate

mingw-glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default mingw64-glib2-2.87.0-1.el10.noarch.rpm 42ed093bc3dc8f1fc68c689c21d0a4564f64be06967ea58288c572bee38fed74 mingw32-glib2-2.87.0-1.el10.noarch.rpm 71f0696f3c21329d4b6bd97eac360cc9494b2a9a6514c8284de7460c2aebba0c mingw32-glib2-static-2.87.0-1.el10.noarch.rpm bf1ab4eb25d4a23ceada04fabbab6ef9341eeea3e63c26dc72e5a48bf6396040 mingw64-glib2-static-2.87.0-1.el10.noarch.rpm f037d4e7d160fa4ad0236a023dfa1dcfa15df8271ab9d34b0ff381254eec7224 ALSA-2026:19074 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060) * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677) * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-devel-6.12.0-211.7.3.el10_2.aarch64.rpm 02730cab8904a3001663bd8a858f275b505477f2993b46f1662051f833fb180e kernel-rt-64k-modules-6.12.0-211.7.3.el10_2.aarch64.rpm 0b6c155eba9297bb2179a8802f2bb8d768ca98af24d262b178ca267c2ecb3d87 kernel-rt-debug-modules-6.12.0-211.7.3.el10_2.aarch64.rpm 1c3c91768b4ce9096a9ce99b100c111aac9c6879d2a6d8b0b34166a9fab8f509 kernel-rt-debug-core-6.12.0-211.7.3.el10_2.aarch64.rpm 2d094edb30422e5c26203d01641cdd9f7798413d4e3c6900a3a9e66fda96c061 kernel-rt-modules-core-6.12.0-211.7.3.el10_2.aarch64.rpm 365f4a0b1486e9bdc5426f7e5ec9b43a7b65ad90ac20a15684aaa0d90c9fc88d kernel-rt-64k-debug-modules-core-6.12.0-211.7.3.el10_2.aarch64.rpm 3bf37f054e5b57f6b42f754824b0ad162b83f22812c120b20ffc9db55162721e kernel-rt-core-6.12.0-211.7.3.el10_2.aarch64.rpm 55db1c1430b22145a16c152b76b4ce5087a9e28879b8ad99b0f57473d9ed306e kernel-rt-debug-6.12.0-211.7.3.el10_2.aarch64.rpm 5c7b07ddee30eeb5199667c7b601dde81f0999a2527af8c7bf9fbd64e4022172 kernel-rt-64k-debug-core-6.12.0-211.7.3.el10_2.aarch64.rpm 67a9ae0c2e5b918f79f28da63627d16dad2730a6028997045c408c340680077e kernel-rt-64k-debug-modules-6.12.0-211.7.3.el10_2.aarch64.rpm 7993ed178659cb57520a597de943609090a9eb3b3e549fc52abf08e24e6dde9a kernel-rt-64k-debug-6.12.0-211.7.3.el10_2.aarch64.rpm 7c6d1010aef87c81a5d8888c8284949c37ecc7ab52e10ab0a73de211e48e96fa kernel-rt-64k-modules-extra-6.12.0-211.7.3.el10_2.aarch64.rpm 7fec2adc0d0374d287e5f2e96ff4fbce74cdf6e4e5668618859e66ed7311d3d6 kernel-rt-64k-6.12.0-211.7.3.el10_2.aarch64.rpm 8f359a1146f229612b22f8f254d4efc8e87cc1598b2e27b71eefe7e79818cd5b kernel-rt-64k-debug-devel-6.12.0-211.7.3.el10_2.aarch64.rpm 903eaf2a3006bbfe549f1b17dbf37773fc2a52daae0c3f238123b481b014c555 kernel-rt-6.12.0-211.7.3.el10_2.aarch64.rpm 9a408b5889023735ae7cd00d98af5ac39f19e22aa3b62e5e46dc97c2f21a23a2 kernel-rt-devel-6.12.0-211.7.3.el10_2.aarch64.rpm 9db1f7289478ea3327ac2b991aa02b0673355c39df8c572f21310c0fe4a53db7 kernel-rt-64k-debug-modules-extra-6.12.0-211.7.3.el10_2.aarch64.rpm a970a7140df69214c0c0d0ece955b7c8e91d27fe5799a2266a9bd0c57f64573e kernel-rt-64k-core-6.12.0-211.7.3.el10_2.aarch64.rpm b3fe802dea505af4a7bff587a84aa01540bdea071be49c09eafded7e8da3473d kernel-rt-modules-6.12.0-211.7.3.el10_2.aarch64.rpm b7eaf482b4483211c16c73730e1553b83c8f913d6d88c0ee5e0c0665a563401b kernel-rt-modules-extra-6.12.0-211.7.3.el10_2.aarch64.rpm ba93244278ecf4210d45654a9267e90d9f314785b41de5026a96d99d49f03364 kernel-rt-64k-modules-core-6.12.0-211.7.3.el10_2.aarch64.rpm d2d2cba08e66b931ce7b0f24e6a6d97324fd2cda598adf7fe009aa374b5e5e63 kernel-rt-64k-devel-6.12.0-211.7.3.el10_2.aarch64.rpm dcf59d6815e23dcd9e592f36bdb189ad3f82d174eb9cdde72c1c62c4d8c64180 kernel-rt-debug-modules-extra-6.12.0-211.7.3.el10_2.aarch64.rpm df2b1fd5e30fa729b3dc28441bfc0e5e97bb1d2854ad13c3f8ac8940a97dd354 kernel-rt-debug-modules-core-6.12.0-211.7.3.el10_2.aarch64.rpm e825831444951b54f59c7095a34ccce2bc09e5b350f78a01e433eea02a72bc6a ALSA-2026:19569 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603) * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766) * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724) * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741) * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402) * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408) * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607) * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128) * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-6.12.0-211.16.1.el10_2.aarch64.rpm 0db3efee0f757726cafadae939b555c09fe4bf8aa07a0963d70606cbbcca0da7 kernel-rt-64k-debug-6.12.0-211.16.1.el10_2.aarch64.rpm 15ef05e65589f767373c805e855614cc347401dfa47255bc2a50874c05a1f03a kernel-rt-64k-6.12.0-211.16.1.el10_2.aarch64.rpm 17b2d6cd2418448283ce35802c3e377209c3073976ed7c62fd5601c630032743 kernel-rt-debug-devel-6.12.0-211.16.1.el10_2.aarch64.rpm 34ca2ee73b11915437bdb1823ca2ad90bd8f7db9666e77687d382b2ad52d1e55 kernel-rt-debug-core-6.12.0-211.16.1.el10_2.aarch64.rpm 369f7e57a502d2e1af33e2f4f6aae2ddbbd799e2e22ce6f7270c031b552cd727 kernel-rt-64k-debug-modules-core-6.12.0-211.16.1.el10_2.aarch64.rpm 3cc9bb4724706aa227c63ba28df0d413f8b329a0e9c6b4c47b4ba2718731604f kernel-rt-64k-debug-modules-6.12.0-211.16.1.el10_2.aarch64.rpm 4a5d97d704ea0c5b9d0a57c6a8f9798d81655e71ce7032b1cdf92ef0db06b481 kernel-rt-debug-modules-core-6.12.0-211.16.1.el10_2.aarch64.rpm 4cd6365b8f62758c8248ad13c3952633e7b5c8c11268203a54d1692a85b686dd kernel-rt-modules-core-6.12.0-211.16.1.el10_2.aarch64.rpm 54941d7d8705dc92d66762971c812c5941a8b04d49142b0b911167e941920bd0 kernel-rt-64k-debug-devel-6.12.0-211.16.1.el10_2.aarch64.rpm 5af5160b37a83e26b51b622c3ea27d205ca96d227fe865df3f351483d3bef22b kernel-rt-modules-extra-6.12.0-211.16.1.el10_2.aarch64.rpm 6215232a7abcd9576818c5d7ce6f1c63e259a7e3f31a9dd029ee373605cd5455 kernel-rt-64k-debug-modules-extra-6.12.0-211.16.1.el10_2.aarch64.rpm 7f75dfe0467837e2a2c4a466e0d8d423ac55eb0b70b1bbc2c00feff2bb523df7 kernel-rt-64k-core-6.12.0-211.16.1.el10_2.aarch64.rpm 906e659e89bce6a87a1ffecad8a851e4aa91e0d1064e10ffba6edc9db32801c8 kernel-rt-debug-modules-6.12.0-211.16.1.el10_2.aarch64.rpm 918398f4663c002298a2eb0b22de600dc5ec74946cf2b706a5b6be492e516122 kernel-rt-core-6.12.0-211.16.1.el10_2.aarch64.rpm 9520f35e8eeaaa2be8913397fd34f40cf86c8d744f367a49dcd2cebdd15c9fe1 kernel-rt-64k-debug-core-6.12.0-211.16.1.el10_2.aarch64.rpm 9e7e1eada0a0c8cedbf365fbd01fe983de65e737e291a0efe7b6ba126ed88f7e kernel-rt-64k-modules-6.12.0-211.16.1.el10_2.aarch64.rpm b2b524e858bdf8d6af4daa9290f02319983d98086a1363c90ef11d58e4305dc6 kernel-rt-debug-modules-extra-6.12.0-211.16.1.el10_2.aarch64.rpm b613542134025c4ac61f8e2c5fc5c2fe3cc34d3791f145ff7f84346ccdb39531 kernel-rt-modules-6.12.0-211.16.1.el10_2.aarch64.rpm b777abeb20ae2082c853e4f80f0b69b5c8354a9071c31a6a06c803ce74b19cff kernel-rt-devel-6.12.0-211.16.1.el10_2.aarch64.rpm beef8e738c69c2b9d09f91da83e3690683bc7fd45d4d759a97ef42e3ea6eeb60 kernel-rt-6.12.0-211.16.1.el10_2.aarch64.rpm c15630f7e067ba6c0cad3d9e3c6633063cf0ff2d2bb12403ffcaaf6d074e219d kernel-rt-64k-modules-extra-6.12.0-211.16.1.el10_2.aarch64.rpm d1ec6adfc21c2fe1bf045349f2331b929e2fb584ed6e722e60fa179f554e473e kernel-rt-64k-modules-core-6.12.0-211.16.1.el10_2.aarch64.rpm d3948d15a0ab2b4c1feb00d395c9db869229038d2008d6a1c1ac3ff26bdd2586 kernel-rt-64k-devel-6.12.0-211.16.1.el10_2.aarch64.rpm f8e514aed10442e1091fef5ad76d50c976ff34cebbdad0fbb551daa52ed6e051 ALSA-2026:21557 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645) * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183) * kernel: mm: thp: deny THP for files on anonymous inodes (CVE-2026-23375) * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392) * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455) * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684) * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685) * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027) * kernel: io_uring/rsrc: reject zero-length fixed buffer import (CVE-2026-43006) * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020) * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051) * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023) * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116) * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110) * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190) * kernel: Linux kernel dpaa2-switch: Kernel memory corruption via out-of-bounds write (CVE-2026-43205) * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158) * kernel: mm/page_alloc: clear page->private in free_pages_prepare() (CVE-2026-43303) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-debug-core-6.12.0-211.18.1.el10_2.aarch64.rpm 2a9f06c3bf87392bbb830fcd30579945029ac64c61d3c1ce35e680b14d4b16ef kernel-rt-modules-core-6.12.0-211.18.1.el10_2.aarch64.rpm 371026b5b37f2429ae04deef9b1aced723b422fc5b8a6079e7958e810031babe kernel-rt-debug-modules-core-6.12.0-211.18.1.el10_2.aarch64.rpm 49d6a6e6bb47aa221c34958cd3338f327d988476d94667f23064aa30ad085d9c kernel-rt-debug-6.12.0-211.18.1.el10_2.aarch64.rpm 4ae3b1cce43f478937a0573a75807dffca8c2c0d825adb7aec6512f3e551204a kernel-rt-modules-6.12.0-211.18.1.el10_2.aarch64.rpm 584f1f9ee730dc52a1f87dd6ed7e3a46cdb4f2c4c7f0ef065d55939816cc6518 kernel-rt-64k-debug-6.12.0-211.18.1.el10_2.aarch64.rpm 5ca4bb67d380b466457282a3fb6ec26e03648728f2b4819f5451617a711880e6 kernel-rt-64k-debug-modules-extra-6.12.0-211.18.1.el10_2.aarch64.rpm 64aeec4ae43bfaed03bc0f1ad7d6613bc954c88fcd20310f37a1b9bbe0cc11b5 kernel-rt-modules-extra-6.12.0-211.18.1.el10_2.aarch64.rpm 663f178878a0a24432c81f4a1599af7d06bdb7e8cc50e3fbbb9e3f182a613db8 kernel-rt-debug-devel-6.12.0-211.18.1.el10_2.aarch64.rpm 771a000ccf239abe72063bcd59bff974f394eb4d2c731fc6901d56e3218f9acf kernel-rt-64k-devel-6.12.0-211.18.1.el10_2.aarch64.rpm 81733349c067db86bf896ae7f6f73371db1f4136806af9d1d4519a0b2d829178 kernel-rt-debug-modules-extra-6.12.0-211.18.1.el10_2.aarch64.rpm 84974449d4ac63fe3f4ede03ff1f967d7049532b0c93f608c05aa84f7dce91a4 kernel-rt-64k-debug-devel-6.12.0-211.18.1.el10_2.aarch64.rpm 84ed1cbccc70b1a39aa9a4dc45bb2b86f813afe11bebcfd3798c5034267c6dcc kernel-rt-64k-6.12.0-211.18.1.el10_2.aarch64.rpm 86219cb77bc95f71daf3b13e5c0b9d7885ead9c3fcaf92ef700be11132b50a50 kernel-rt-64k-modules-6.12.0-211.18.1.el10_2.aarch64.rpm 8668bdccfafb6ef302753e0ef6f5e758e8da80cdf354c785ef8351b62e79417e kernel-rt-devel-6.12.0-211.18.1.el10_2.aarch64.rpm a49b41f89db4e2fbc5cfe2773056bd21261ccc348b775a04583115222d11501a kernel-rt-6.12.0-211.18.1.el10_2.aarch64.rpm a4fbb5a1b1a825b2a65c92471f326cbfeec3c02a0eaebee11bf9dd326f0b4f80 kernel-rt-64k-debug-modules-6.12.0-211.18.1.el10_2.aarch64.rpm a797f46de3c17a490c1b803c23a6072e2efb217d1eb1626d06336bc6a1d9517a kernel-rt-64k-modules-core-6.12.0-211.18.1.el10_2.aarch64.rpm aee11bb0edbb479f5cb7bd44cf4bc7b5955de46af97e257bf0169c300860317e kernel-rt-debug-modules-6.12.0-211.18.1.el10_2.aarch64.rpm bd9f96683d63369738437c440e53c76f72c55fd490435fc7fab95d4e41b06ca6 kernel-rt-64k-debug-modules-core-6.12.0-211.18.1.el10_2.aarch64.rpm c53a85e78054752fc325e0ca927cee07ba2c1913f7b3da6aa747e6f2584f445f kernel-rt-core-6.12.0-211.18.1.el10_2.aarch64.rpm c9fea0c948cd7698bf1de3ac3799ffd74afd4dd899a8317bd5287eec2da7fe53 kernel-rt-64k-modules-extra-6.12.0-211.18.1.el10_2.aarch64.rpm d3bc7a44a4ebe7cd58e46cfb1d012229ca7b21fd24e71df7e6444f0bd3f36c46 kernel-rt-debug-core-6.12.0-211.18.1.el10_2.aarch64.rpm d76ed5b9fe749ec97f733fd9692d615383f3ae7dbe044f9d4e6f07c0fc466096 kernel-rt-64k-core-6.12.0-211.18.1.el10_2.aarch64.rpm d9cdf1535375665ba3b2280709bfdece7f5b329d0cbf4bd0b969124a2465ce6f ALSA-2026:22141 Copyright 2026 AlmaLinux OS 0 1 Moderate

go-fdo-client and go-fdo-server security update

This package provides a server-side implementation of the FIDO Device Onboard (FDO) specification, written in Go. FDO is an open standard for the late binding of device credentials, allowing for automated and secure on-boarding of devices when they are first powered on in their final location. Security Fix(es): * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default go-fdo-server-owner-1.0.1-2.el10_2.noarch.rpm 2f5a8bd1401f47c152f97edd4dcc2bcfe5b02e9edea564cd3f27e4152facb328 go-fdo-server-rendezvous-1.0.1-2.el10_2.noarch.rpm 843e6a44fb5ab7ca974b5dc823978d86e2f4d3d2a91a9aef3292f97beafc75f3 go-fdo-server-manufacturer-1.0.1-2.el10_2.noarch.rpm b1739b5cbc00a312407f39f5c8b72d26a9a88f099f93f00e1d68db826a024bb9 ALSA-2026:23329 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653) * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366) * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613) * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709) * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329) * kernel: Bluetooth: hci_sync: Fix UAF in le_read_features_complete (CVE-2026-43322) * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-core-6.12.0-211.20.1.el10_2.aarch64.rpm 0f75e3e7e28757f3d1383ab153c233de75f191e0a5aede4d0ddd24c18ec576cb kernel-rt-debug-modules-extra-6.12.0-211.20.1.el10_2.aarch64.rpm 1791d06729bd96e7dacb51bb4e402877c99d232fbf23911ba18d06418e3a2d89 kernel-rt-6.12.0-211.20.1.el10_2.aarch64.rpm 1af765b8e85c8a622bca6a980603e7390ef099eeb63d435844fee648b3a82cd0 kernel-rt-64k-debug-devel-6.12.0-211.20.1.el10_2.aarch64.rpm 28e901eab6ba544563c28fb4239179b14323d2e9f0a1e66f24672d8e397370f5 kernel-rt-64k-modules-extra-6.12.0-211.20.1.el10_2.aarch64.rpm 2b54abebf427fbb87d5e133ceec0deece0519b8e9638bd7761be983879ede62b kernel-rt-64k-debug-modules-core-6.12.0-211.20.1.el10_2.aarch64.rpm 4236b5456c3a302786e50e2afe1373dd28526f2a7c01cc5afe1d9d0f50ce8ec6 kernel-rt-64k-6.12.0-211.20.1.el10_2.aarch64.rpm 4312f2d9bcc919522f43560ade9f87d6c992c9739369852d9d5addbd2520db79 kernel-rt-devel-6.12.0-211.20.1.el10_2.aarch64.rpm 4431749dabf860c6c5ff93b10deceed0abd09ce9d988d2ee6704c3cbf11cc9f6 kernel-rt-debug-devel-6.12.0-211.20.1.el10_2.aarch64.rpm 580e3e1e23fe777b670cd1444e56c967de94e134a6b7e1ab86979c22606f3b02 kernel-rt-modules-6.12.0-211.20.1.el10_2.aarch64.rpm 59023dacc26dd4f7213162fef94ccc91b0a27dad958d26b4a05aceff6c81ecf8 kernel-rt-core-6.12.0-211.20.1.el10_2.aarch64.rpm 5b2e5425bb0b421e6588b80d947a505eb4cd4dca03a182bfcda48bc7f4132fd3 kernel-rt-modules-core-6.12.0-211.20.1.el10_2.aarch64.rpm 5daa9c09b154946034f39d22a0035f2aa9c361e8b9c5f0e5d448dd29ddf07efd kernel-rt-64k-devel-6.12.0-211.20.1.el10_2.aarch64.rpm 7043eb51438f0990918669dd03bcd4bf1b7d12585707d81f2d35c470713ae8eb kernel-rt-64k-debug-6.12.0-211.20.1.el10_2.aarch64.rpm 7de09b8b71222a506507e3ea2695d72e8f7ac3ebfd4060b6411fcaff903a96f0 kernel-rt-64k-modules-6.12.0-211.20.1.el10_2.aarch64.rpm 9171fa0558b0c7d725c6410b36fdc098c0dbeb56ecfa2b612a2b1cd8b7c2ace8 kernel-rt-debug-modules-6.12.0-211.20.1.el10_2.aarch64.rpm 9d13244a5f69b046bed8999c35fb0eca09d4a5469751a567ac4f6ab59c87baf1 kernel-rt-64k-core-6.12.0-211.20.1.el10_2.aarch64.rpm a9e1439971354c08f16c15a67c6f6170c6d85ed29eb0dfe0e0d11efdb3954b16 kernel-rt-debug-6.12.0-211.20.1.el10_2.aarch64.rpm b2f3f5871249dd3ad292826938e737bcbfb18f89f04b8e1b2cc6d5a499902907 kernel-rt-64k-debug-modules-6.12.0-211.20.1.el10_2.aarch64.rpm b3982d41e4f9b4273a68e560c79558100688b81c7d0e74d9b4e7d46b65646c48 kernel-rt-64k-modules-core-6.12.0-211.20.1.el10_2.aarch64.rpm b58aa851d585061f7422b5dea35ea462580ed16ce22de16010fba06834d85518 kernel-rt-64k-debug-core-6.12.0-211.20.1.el10_2.aarch64.rpm c0e0345ececfa247210f7e92e42f8e5fb38b356fc4aaa923e5ab704206848746 kernel-rt-debug-modules-core-6.12.0-211.20.1.el10_2.aarch64.rpm c8254d80085743e9f137c4858a0c9fc7ea481eeab8f7bae935c9246ac4f9202c kernel-rt-64k-debug-modules-extra-6.12.0-211.20.1.el10_2.aarch64.rpm d04fa51a9c27fbf36f5e10b7762e647ac492271d578469b688aa5828e7b3d960 kernel-rt-modules-extra-6.12.0-211.20.1.el10_2.aarch64.rpm ffe17ce82ba2942339dcda605c12823fb5c2f8e5d7b0951ae3339b8aaa1f2c02 ALSA-2026:25191 Copyright 2026 AlmaLinux OS 0 1 Critical

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419) * kernel: Linux kernel: Denial of Service in erofs filesystem (CVE-2026-31467) * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532) * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581) * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037) * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501) * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.22.1.el10_2.aarch64.rpm 01c72a2d17722342c3418fbc83e129f7a48bd1fbf3798e1e6af9fef503c1af55 kernel-rt-64k-debug-devel-6.12.0-211.22.1.el10_2.aarch64.rpm 030f8035c8d462314a0fb05687f52eb1abaccf086c84b6699d37f3b6da360e04 kernel-rt-64k-modules-core-6.12.0-211.22.1.el10_2.aarch64.rpm 0ff70505f5ba035da96dffcbd38d867388fe13329ac8a78a87d766edb5fc355c kernel-rt-debug-core-6.12.0-211.22.1.el10_2.aarch64.rpm 1331eaf7310654def071a406939c71cda9203a252cebae758e763a64c8a83a37 kernel-rt-64k-6.12.0-211.22.1.el10_2.aarch64.rpm 13a48b4998f6bd66ec681ffa62d543ac4ea2d14f0c73a47ce326fd7afa1a1ef1 kernel-rt-64k-modules-6.12.0-211.22.1.el10_2.aarch64.rpm 154db56caf40778bb3713bddeb08f497fa973750de7c8c2686febc80e53a2d70 kernel-rt-debug-modules-6.12.0-211.22.1.el10_2.aarch64.rpm 16f0abe0b66da8d353685255e12d9efb8260456743040c8a2e89f66a464f116d kernel-rt-64k-debug-modules-6.12.0-211.22.1.el10_2.aarch64.rpm 1c00217f0faaf6cfe4b4dce3814ed6f87613aa744fb925c3e63bd8d59dba6bce kernel-rt-core-6.12.0-211.22.1.el10_2.aarch64.rpm 2cdebbb040e65fb85154b4b9ac73490fafb96e84be61b29665dccbbf0ba64672 kernel-rt-64k-debug-modules-extra-6.12.0-211.22.1.el10_2.aarch64.rpm 389daea476bba403ffb0377b0baa2d4102058f92bdc78474d5381b383613c02b kernel-rt-modules-extra-6.12.0-211.22.1.el10_2.aarch64.rpm 44c0a2c39a944cc1fbd574ebba7614e63a92232224a8b957bed112a6f455ca35 kernel-rt-64k-devel-6.12.0-211.22.1.el10_2.aarch64.rpm 52d3c6f65070bd000f3a07ecdd8e7c3b12f52c114905dd0920201afa5423b0f5 kernel-rt-debug-modules-extra-6.12.0-211.22.1.el10_2.aarch64.rpm 5a284ee92350e8f83a7484f33aeb55b1766281a8b06e703dcca864ca17b6f9ec kernel-rt-6.12.0-211.22.1.el10_2.aarch64.rpm 5c961efd6931a005e17824eb286583c8a73ec4a653d1435ae2e4c65089e5f955 kernel-rt-64k-modules-extra-6.12.0-211.22.1.el10_2.aarch64.rpm 5ea2e0dcc0385b929f83dc0758c4f7e4973e06e758ecc5f86dc861b5cbcb2422 kernel-rt-64k-core-6.12.0-211.22.1.el10_2.aarch64.rpm 8364477c62628e7b7e9cffddaaeefdb55ea7c6193b62922971b504b88995041e kernel-rt-64k-debug-modules-core-6.12.0-211.22.1.el10_2.aarch64.rpm 86d2ff47f1b02c55e2b4377a6ab959dcf6f85c3b01b6e33ea25b0106411cd330 kernel-rt-devel-6.12.0-211.22.1.el10_2.aarch64.rpm 89a520e8aade0e94c6f7c1dd47d6075807419860b1d508699b4defcc2dc8456b kernel-rt-debug-devel-6.12.0-211.22.1.el10_2.aarch64.rpm 8cdde0520f7318e65aede2ef898ba395544d53117613db1e571140ef2e59df08 kernel-rt-modules-6.12.0-211.22.1.el10_2.aarch64.rpm bcf6cfcd0f063bc419f17eebee91c6f5beff33955c86de04829f7048a4c3a479 kernel-rt-64k-debug-6.12.0-211.22.1.el10_2.aarch64.rpm c2cc7c5dc1d75779b0abefc69ed29539392ade81b52788b02568f77aef5db778 kernel-rt-modules-core-6.12.0-211.22.1.el10_2.aarch64.rpm ec37be1f70afa868ffa3a3b9eecf063a4ebce90c3587d10ab053e1d85b6e8f9c kernel-rt-64k-debug-core-6.12.0-211.22.1.el10_2.aarch64.rpm f287b272625d99b9f100f228d8d1127b0c928400fcd10cbd99f7dfbc5bdc4b1a kernel-rt-debug-6.12.0-211.22.1.el10_2.aarch64.rpm f88f08d8ad533d11478607196705f56045b0446bfc5d8dac521c6f46a96564aa ALSA-2026:25902 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default fence-agents-lpar-4.16.0-21.el10_2.2.noarch.rpm 12c9076e50ad52eac0fa9c9653ce73fa79643aee1f969bc507af2d7ff138569a ALSA-2026:27288 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474) * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669) * kernel: rxrpc: Fix RxGK token loading to check bounds (CVE-2026-31641) * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787) * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786) * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056) * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772) * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260) * kernel: crypto: caam - fix overflow on long hmac keys (CVE-2026-43330) * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331) * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056) * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152) * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125) * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173) * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166) Bug Fix(es) and Enhancement(s): * AlmaLinux10.0 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-10.2.z] (JIRA:AlmaLinux-166047) * AlmaLinux9.5 crash due to lpfc NULL ndlp->vport [almalinux-10.2.z] (JIRA:AlmaLinux-171774) * objtool static_call check blocks build of out-of-tree livepatch modules on AlmaLinux 10.2 GA kernels ? missing upstream revert f495054bd12e (JIRA:AlmaLinux-178495) * ibmveth Adapter Freeze with Small MSS [almalinux-10.2.z] (JIRA:AlmaLinux-179723) * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-10.2.z] (JIRA:AlmaLinux-183127) * AlmaLinux10.0 - s390/mm: Add missing secure storage access fixups [almalinux-10.2.z] (JIRA:AlmaLinux-183319) * [AlmaLinux10.2.z] Enable Pretimeout Watchdog Panic Functionality on x86 (JIRA:AlmaLinux-182299) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-debug-core-6.12.0-211.26.1.el10_2.aarch64.rpm 04c0212e9183fbe135368e167e8ea1f5579f0b1eedb6c70673fc5f0380f4c8d9 kernel-rt-64k-devel-6.12.0-211.26.1.el10_2.aarch64.rpm 18e695f2f00977540d3f78560bb9e68aa49ebe748960b6ce3daacf9f387489fa kernel-rt-devel-6.12.0-211.26.1.el10_2.aarch64.rpm 1ea829009a51e0705396659d9c5d806f57cf55506aafd1bc1c43d79ab2eccdfe kernel-rt-debug-modules-6.12.0-211.26.1.el10_2.aarch64.rpm 3de1fc9ac9e9681949bd5d053d2a8537cbca94bd6a303c50bbfbf96dc4d84bd8 kernel-rt-6.12.0-211.26.1.el10_2.aarch64.rpm 4a68fbd390fb2a7ebd5398d9b277f0786011df23681f9906ed9c3b4c07e530ec kernel-rt-64k-modules-core-6.12.0-211.26.1.el10_2.aarch64.rpm 4bc2e5b3c7e43bdc05f97463333800d796741a60b478228feef9356dcd8849f1 kernel-rt-debug-modules-extra-6.12.0-211.26.1.el10_2.aarch64.rpm 523000072390172c62e898eff65c24c2362d293abfcacd20e45413b61714b925 kernel-rt-64k-debug-modules-core-6.12.0-211.26.1.el10_2.aarch64.rpm 654e746cd5aee4b3f3e4206267e19d875532e10ae1baad699f61c41539fc5c05 kernel-rt-64k-debug-modules-6.12.0-211.26.1.el10_2.aarch64.rpm 6895989b94ca734934d3bf0339ac4cca17838b921f38c13e7090ec368f928cd8 kernel-rt-debug-core-6.12.0-211.26.1.el10_2.aarch64.rpm 764a18e2f6f403c9fdf9f145fff6764a02a29e3d73c9cdbfa81aea9eacd3b7a7 kernel-rt-debug-devel-6.12.0-211.26.1.el10_2.aarch64.rpm 8bddf3532da1bceed98ec782f4cdc9feb2033720b951aaa5e0b7fa39e571819d kernel-rt-64k-debug-devel-6.12.0-211.26.1.el10_2.aarch64.rpm 917d9eb21b98d95e2a795f6fdbd0024795721d1632a70c4bef1fbe2e4c42affe kernel-rt-64k-core-6.12.0-211.26.1.el10_2.aarch64.rpm 94ed7817ae36a46fd2becc11381d45c286cec45cb7a5d99f5b763f4d5d68c74c kernel-rt-64k-debug-6.12.0-211.26.1.el10_2.aarch64.rpm 9795e292a1275d55058dda9c4631d0bff38c20a5bf4f4188d74a934eba8eb1f9 kernel-rt-64k-modules-extra-6.12.0-211.26.1.el10_2.aarch64.rpm ab1a9d77ba6eef31881b65832868fc7f30629fcd653f80bf570d21fff6f94a3a kernel-rt-modules-extra-6.12.0-211.26.1.el10_2.aarch64.rpm aebca141a455c223a3f0044d4cddd4f0b9b03e3b55d1459f7470548668985d33 kernel-rt-64k-debug-modules-extra-6.12.0-211.26.1.el10_2.aarch64.rpm b3c78e655ee79306e55a74c1022ab442ff862ceca9c9045ada1ec3fbc103d3e8 kernel-rt-64k-modules-6.12.0-211.26.1.el10_2.aarch64.rpm b9e9f51677bc7a22ee31c832601571ca31e0407f161d47768a3c851017edbc0f kernel-rt-debug-6.12.0-211.26.1.el10_2.aarch64.rpm c4f369e896c72fef6b11cafe726affa6d77dfeb00a79d88bb1b9b7962a8d449b kernel-rt-64k-6.12.0-211.26.1.el10_2.aarch64.rpm cab070aba91e85a6bf4b2ff5ff10897bc3a0d74f6e8a9b6805cb5cc818f56942 kernel-rt-modules-core-6.12.0-211.26.1.el10_2.aarch64.rpm d6c0582bba4ef3a879839d89511acf7559cc6f3c3f5eb60c10dcc917e4d0c668 kernel-rt-debug-modules-core-6.12.0-211.26.1.el10_2.aarch64.rpm e46b301324e8ec76a4aedfdd86c3661b5c9cea0fa092a90fe86f1895d4fd3515 kernel-rt-core-6.12.0-211.26.1.el10_2.aarch64.rpm e8a5cfe691bed153de786a0131ebd10af2057054c88a0699a122afab2b6209d3 kernel-rt-modules-6.12.0-211.26.1.el10_2.aarch64.rpm ed313f99795943f7d95840d786315711e945def55c16d21b721e3f04a784319e ALSA-2026:30129 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: rxrpc: fix RESPONSE authenticator parser OOB read (CVE-2026-31636) * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038) * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198) * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414) * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898) * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117) * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145) * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) Bug Fix(es) and Enhancement(s): * Unexpected execmem SELinux denials after CVE-2026-46054 fix [rhel-10.2.z] (JIRA:RHEL-185117) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-modules-6.12.0-211.28.1.el10_2.aarch64.rpm 0b36728513de75e3722d01cd2656e1958e0427eea8dda6b1df60e25ab02e2da4 kernel-rt-debug-modules-extra-6.12.0-211.28.1.el10_2.aarch64.rpm 0e790638fc37b7d6e27aa30ceaa2301dd83471c9cc549d22435decd606eb6107 kernel-rt-64k-debug-core-6.12.0-211.28.1.el10_2.aarch64.rpm 1623a2e07c162605a231c1d70e228789b19e0430b55a7343fbd4736334e834fa kernel-rt-64k-modules-extra-6.12.0-211.28.1.el10_2.aarch64.rpm 16c7a856fd3fdd9ad92c6d45a56b8c51f7ed3ce601b70aa9e562ed35b948790a kernel-rt-64k-6.12.0-211.28.1.el10_2.aarch64.rpm 28eaa09159171589ee27f5fe5771c3ca4da8b96d83893365d2f9e0b4eb48b8e7 kernel-rt-64k-debug-modules-core-6.12.0-211.28.1.el10_2.aarch64.rpm 47fbc1157d0ccd9c6bd3d2507c119e2b9d0454cf8b520bd7f0b9484d8b9ac8ff kernel-rt-modules-core-6.12.0-211.28.1.el10_2.aarch64.rpm 505d24636d90fd8f2ced2174d2dc9a55a0db34d5bf2d629f93cb28b025879e32 kernel-rt-debug-modules-6.12.0-211.28.1.el10_2.aarch64.rpm 535f8837b63f4076ce1a1a724d913e2ebd575c18347c70b47c8c66e0f310595d kernel-rt-64k-debug-6.12.0-211.28.1.el10_2.aarch64.rpm 59cf43347e4831703c5f267429cd9c1724e63d01c61cc72563f1aaefb4cb9c66 kernel-rt-debug-6.12.0-211.28.1.el10_2.aarch64.rpm 5a36f4927028d757ce6543d0be51ff3fae03b50a0737090fb939dcd0dd2c1530 kernel-rt-debug-modules-core-6.12.0-211.28.1.el10_2.aarch64.rpm 6bad2e7ef4c5f106c7dba76ba8bd5a506de19cebf33e67ef5b0c1dc46f54145a kernel-rt-64k-core-6.12.0-211.28.1.el10_2.aarch64.rpm 6bad755dcca3a80bd13aa78fd3a7e54484a0dbd06eef879e8c1f7700cf5153c5 kernel-rt-64k-devel-6.12.0-211.28.1.el10_2.aarch64.rpm 8ccd2acc8155c5a6be00e84f541592e5233c5532f2139f874dfb87ecd6cf5f06 kernel-rt-modules-extra-6.12.0-211.28.1.el10_2.aarch64.rpm ac9dfbeabedc94ca46b4643e643c1b697edcc7cc278b6030514adc8dd8e79a21 kernel-rt-core-6.12.0-211.28.1.el10_2.aarch64.rpm bf71315ef7cdd8523e461f0b65f4ade940eccf4451ebb157c2433f1d235b97a5 kernel-rt-64k-modules-core-6.12.0-211.28.1.el10_2.aarch64.rpm c0574831673a72ebac7b4e1d80590b8edf00de3dbfc179d204a77aa8cc038483 kernel-rt-64k-debug-modules-extra-6.12.0-211.28.1.el10_2.aarch64.rpm c70bde8ca3e16b954afce59005d51f9123da7e4259a89170166cd4f34ad5373e kernel-rt-devel-6.12.0-211.28.1.el10_2.aarch64.rpm c73d7c6588121c265bc0f0458417e1e82828107791bef247f4a7651300b937a3 kernel-rt-6.12.0-211.28.1.el10_2.aarch64.rpm c7f9b5004081d77df7c76db5119a4bcd1e6751de3c1e76af36bbeb28ba4dd32c kernel-rt-debug-devel-6.12.0-211.28.1.el10_2.aarch64.rpm d204f74a6adf3dc7c75ad2a1cc13fbaa3dfce0bcca693378556d5efa09baa9b9 kernel-rt-64k-modules-6.12.0-211.28.1.el10_2.aarch64.rpm dd94ec17117255a9146cc6a3d19f4a5fbadcbbde19431426bb08250184744e51 kernel-rt-debug-core-6.12.0-211.28.1.el10_2.aarch64.rpm ea5065839200d20dc661038ef99b4c66e223693b9d6ea520a0d1f1a1e3641bb7 kernel-rt-64k-debug-devel-6.12.0-211.28.1.el10_2.aarch64.rpm f8ff5367bb5b669ba1bfde69bb2d8293212db3e86478a4289c0ae8537a0dee85 kernel-rt-64k-debug-modules-6.12.0-211.28.1.el10_2.aarch64.rpm fb6617cfc96e8eadd6c8c9817865fc0f19cb8a5bf528aa7af4b091ebee2dda05 ALSA-2026:33685 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279) * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090) * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189) * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176) Bug Fix(es) and Enhancement(s): * CLONE - [AlmaLinux 10.2 Bug] qla2xxx flash image validation failure [almalinux-10.2.z] (JIRA:AlmaLinux-181887) * tegra-se fixes and updates [almalinux-10.2.z] (JIRA:AlmaLinux-182759) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-modules-6.12.0-211.29.1.el10_2.aarch64.rpm 093c3703d9fe4447945df37af4e1acad6854f4c46450ec95c2e4b169ada364d8 kernel-rt-debug-6.12.0-211.29.1.el10_2.aarch64.rpm 15b12be636c8190559b7f540a4ea3cdacf5cb44335cc9a0c0246f8c71d5f6c62 kernel-rt-modules-core-6.12.0-211.29.1.el10_2.aarch64.rpm 1f54260f9f78fbd589f2005aa908ddf071efb42b71519877ce5c934c0b6229c7 kernel-rt-debug-modules-6.12.0-211.29.1.el10_2.aarch64.rpm 1f82748371ba946f810e9267f81ffb39d8536df842fbf7f517182c5fb9230ad3 kernel-rt-core-6.12.0-211.29.1.el10_2.aarch64.rpm 2697863578f1977d5dddf230f0f443e4b701d258821cda88e0625a6f5d984bd1 kernel-rt-6.12.0-211.29.1.el10_2.aarch64.rpm 26d6a5b5224da824ac7d23543b5b7594d7154843a3fb0e0cb5d2a5dffb3db610 kernel-rt-64k-debug-modules-6.12.0-211.29.1.el10_2.aarch64.rpm 30a7b5cc72bb752ba458557b4b041970514e3fadc40a8f98ec077abb2d350825 kernel-rt-64k-devel-6.12.0-211.29.1.el10_2.aarch64.rpm 33558991ffa4afafdda9cda02e6ecf09350b611e325a81c4fa9ea99241821c94 kernel-rt-devel-6.12.0-211.29.1.el10_2.aarch64.rpm 3b433b2b5e5dc3208b62b1fa57323088b6f0401bc73b5edfc065a1609a0bec8b kernel-rt-64k-6.12.0-211.29.1.el10_2.aarch64.rpm 42abc6a5760941e5550cd05a59e841a6cbe16c0787ba01ed7d9a1e6d69cf213e kernel-rt-modules-6.12.0-211.29.1.el10_2.aarch64.rpm 4ca44762c8c01b75eebbacc19164db8e6196f922f4378ced302fe005ef715ab0 kernel-rt-64k-modules-extra-6.12.0-211.29.1.el10_2.aarch64.rpm 60d30f42df11483558bfef3cc2849a9ca6f9c28da87e76f4ccb3e1bd51d7a1a9 kernel-rt-debug-modules-extra-6.12.0-211.29.1.el10_2.aarch64.rpm 75b6269e362c20ce26d36adc629b58db9ae4a2c42fb8afc2a568dcd9b237a138 kernel-rt-64k-debug-6.12.0-211.29.1.el10_2.aarch64.rpm 927cc739a291048f17a0810803829a17824eb382546a38d8e9ab5e6cc1f82fc8 kernel-rt-64k-core-6.12.0-211.29.1.el10_2.aarch64.rpm abddbdf3311a602496d7673cdaf5de55d8ed792e31ef32c90f6bb4e5094503fb kernel-rt-64k-modules-core-6.12.0-211.29.1.el10_2.aarch64.rpm ce34fcf9f0f8bbf1e0f1d118fddf270ef8b5a30b290d636d57c2018a7a76ae00 kernel-rt-modules-extra-6.12.0-211.29.1.el10_2.aarch64.rpm d2520e07a6687a55ec2c62fd2fb0ee034adb618f8069b2239263f159ea9cb837 kernel-rt-debug-devel-6.12.0-211.29.1.el10_2.aarch64.rpm dbdb152107ba12bec77b5e6bc092aa4866694e48e39b0d7f1b35546f24edfcd2 kernel-rt-debug-core-6.12.0-211.29.1.el10_2.aarch64.rpm dde8d04a0c4bc15d1ccc488c00c2ed49f4e981a3a263effc8ae6581a44b9b57e kernel-rt-debug-modules-core-6.12.0-211.29.1.el10_2.aarch64.rpm eef403ad19fb74384cba6c59db13367729b2883e39b0a69a4988eff24403ff9f kernel-rt-64k-debug-modules-extra-6.12.0-211.29.1.el10_2.aarch64.rpm ef1a06782090c31a934c7235f85d30f78d669bd1f294dc45fd6f16aee77e860d kernel-rt-64k-debug-core-6.12.0-211.29.1.el10_2.aarch64.rpm f0c7d8c6dc247c7a6bfb3e9064dc2e6d1ba3d81e784682dc0b999775f889093c kernel-rt-64k-debug-devel-6.12.0-211.29.1.el10_2.aarch64.rpm f1ccfe5dffbf9f093045a071db9a5400ed7fcc5403e2e892d40a127f4f1bbe7f kernel-rt-64k-debug-modules-core-6.12.0-211.29.1.el10_2.aarch64.rpm fbe6d1b937b72e288fa35539c73c8684d1a6e7cc68f0fc28f1ec8ca3de42f001 ALSA-2026:34911 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112) * kernel: rxrpc: Fix potential UAF after skb_unshare() failure (CVE-2026-45998) * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209) * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244) * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263) * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316) * kernel: kernel: ipv6 frag escape () Bug Fix(es) and Enhancement(s): * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-10.2.z] (JIRA:AlmaLinux-182537) * [ThinkPad Avon/Mario +AlmaLinux 10.2]The OS hang up with CapsLock fliker (JIRA:AlmaLinux-185110) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-6.12.0-211.30.1.el10_2.aarch64.rpm 0a35980b4bca5654634ca83d5a46ec21b3b24740d6d017c4d6fc81fadfc7799a kernel-rt-64k-debug-core-6.12.0-211.30.1.el10_2.aarch64.rpm 23af3e2236428738777d4b1a7888772e9fac907e30c5006286e964d3223abb2e kernel-rt-debug-core-6.12.0-211.30.1.el10_2.aarch64.rpm 36da0092de053789bc399daa325499968f63040b02aa7d0054fa37dacdacae0a kernel-rt-debug-modules-core-6.12.0-211.30.1.el10_2.aarch64.rpm 4b0aec4a870dad81ac2bd51f13bf9354a343f7273c5fb432f28a80a9919aafa0 kernel-rt-64k-modules-core-6.12.0-211.30.1.el10_2.aarch64.rpm 4e22bef724ea88a31303632e463850b0e469f157be714d8317ecba13ffec32f3 kernel-rt-debug-modules-extra-6.12.0-211.30.1.el10_2.aarch64.rpm 5bb0f838b9de65591e924e88956c002ee7ed9a958bf41b198ecdf5e7516e9ff8 kernel-rt-64k-debug-modules-core-6.12.0-211.30.1.el10_2.aarch64.rpm 67903c4ee7c4cd7e9062e48eafe6104b9afc48ded26d8885285cf05ebf29eac2 kernel-rt-64k-6.12.0-211.30.1.el10_2.aarch64.rpm 7e79c8f059970d5371753b336320fa7745b2875a7374f09ab652315d66fd909a kernel-rt-64k-modules-6.12.0-211.30.1.el10_2.aarch64.rpm 8686018e0561e2724a928c298f3473900227964d1a7305b6fa581023e0543e98 kernel-rt-debug-modules-6.12.0-211.30.1.el10_2.aarch64.rpm 9035c5291466432756b7cdc4df6d6b88d4efa35c0880a3f549b71afb350cb2bf kernel-rt-devel-6.12.0-211.30.1.el10_2.aarch64.rpm 9202a9eb67150efbbab8e98e37789fcd88d45adad82ab7bf07cb7eec15265a6f kernel-rt-64k-modules-extra-6.12.0-211.30.1.el10_2.aarch64.rpm 94f22903c53aa7915f7b331831dc1a33ab6cea7c3bbf8ef69d069fc086ffafdc kernel-rt-modules-core-6.12.0-211.30.1.el10_2.aarch64.rpm a930902caee23af4844855c3a80a79482b0a5567709a3f1fdebd13ea82b5bb98 kernel-rt-64k-debug-devel-6.12.0-211.30.1.el10_2.aarch64.rpm ac70c841eaa746b66e6b3fc6271bec3e6b32724413dc7b79cd50c5ea72576684 kernel-rt-64k-debug-modules-6.12.0-211.30.1.el10_2.aarch64.rpm d1545cd776a7f22e99309780cbb6bd491656db2ee70009fb2aade7d17d91210a kernel-rt-64k-core-6.12.0-211.30.1.el10_2.aarch64.rpm d533b9ed8d893fa95d90bcc0add329ef23761396a79e709c052a0e2fc0fa6822 kernel-rt-modules-6.12.0-211.30.1.el10_2.aarch64.rpm d91d2f5e2d38c0d8fb6ea9dff016b814b408ca5578b60f873ec593033a2baf33 kernel-rt-core-6.12.0-211.30.1.el10_2.aarch64.rpm dcc154e04dc96b2dcffaac44f87e4d8cb7afba70827316a16c36fedd9a905c57 kernel-rt-modules-extra-6.12.0-211.30.1.el10_2.aarch64.rpm e0459b9769e3b7484c2cadf21e5cb0424485665f91c6b7689d253c0a2adc93b7 kernel-rt-debug-devel-6.12.0-211.30.1.el10_2.aarch64.rpm e5617d3a53e65d8e15f1c0bbc22f854796dc69bd004bc71a64dfa6555d3658b4 kernel-rt-64k-devel-6.12.0-211.30.1.el10_2.aarch64.rpm ebe8fa8072095bdb964896a50ec8adbb725fa2e63aa97126a1fe83979d5548e2 kernel-rt-64k-debug-6.12.0-211.30.1.el10_2.aarch64.rpm f074cab4d59c48b7a13239cf6012388af57b4d65256343b1edb138581dfca6b8 kernel-rt-6.12.0-211.30.1.el10_2.aarch64.rpm fac03761a40f9ba48356566082686867250060225e6dc14681553d68c45f650b kernel-rt-64k-debug-modules-extra-6.12.0-211.30.1.el10_2.aarch64.rpm fd808720d695f5e51bb5f2207b00ddf718471c822ce89d9a58672ec495611abb ALSA-2026:36541 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: eventpoll: defer struct eventpoll free to RCU grace period (CVE-2026-43074) * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276) * kernel: net/ipv6: ioam6: prevent schema length wraparound in trace fill (CVE-2026-43341) * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155) * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF (CVE-2026-46242) * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259) Bug Fix(es) and Enhancement(s): * CNB103: net: page_pool: avoid false positive warning if NAPI was never added [almalinux-10.2.z] (JIRA:AlmaLinux-162140) * [AlmaLinux 10] Bonding reports unknown speed/duplex for tg3 interface [almalinux-10.2.z] (JIRA:AlmaLinux-182770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-devel-6.12.0-211.31.1.el10_2.aarch64.rpm 0ba94d656f3ad99a77bc773694b7740ce68881fcd7ce6b95795beee31f1e4477 kernel-rt-64k-debug-devel-6.12.0-211.31.1.el10_2.aarch64.rpm 0ca4419200e804baa3639109b858509159bccc1be733ca0d8afece22d71f09b0 kernel-rt-64k-debug-modules-6.12.0-211.31.1.el10_2.aarch64.rpm 10afaca010e8376ce0814ef8e1e7a43ad718f94b699adf30e2aa68d0c8b9d20a kernel-rt-devel-6.12.0-211.31.1.el10_2.aarch64.rpm 1134e5d7e8140622d1bd7d30a53d49c6a71dda6a3ba9e56fdcbf18ee9aa80999 kernel-rt-debug-core-6.12.0-211.31.1.el10_2.aarch64.rpm 1254d3519da04ac7f43ab73bc92492b7186b45b4c61c1f2d02473039915f22bb kernel-rt-debug-modules-6.12.0-211.31.1.el10_2.aarch64.rpm 1970a6ca2e1d64f0d3ccafcfa1439776a7c64dabcec8fc2c16a88b98158b7bb5 kernel-rt-64k-modules-6.12.0-211.31.1.el10_2.aarch64.rpm 3d1ba543bf77ae4ee874aa30b8cbd81956c3b845609874e141ba206f1b2508f6 kernel-rt-debug-modules-extra-6.12.0-211.31.1.el10_2.aarch64.rpm 46462cc527f87382e452efff63265f2494ae00133c7e777f3dcaacf6e700c5fe kernel-rt-debug-6.12.0-211.31.1.el10_2.aarch64.rpm 4c9d8af02447b47b5bbdb1ae7b0f93fb7be4f444786d33647a9aff31b2cf83eb kernel-rt-64k-6.12.0-211.31.1.el10_2.aarch64.rpm 603de20ba4daf6a40ff424b1b65232052fe4893c93cc2e21a539f61a9c0fbae6 kernel-rt-64k-modules-extra-6.12.0-211.31.1.el10_2.aarch64.rpm 69a9c9d8d88b804965c4ab4c44747847bf60445ae9f3d70b48031ed29c5bab97 kernel-rt-64k-core-6.12.0-211.31.1.el10_2.aarch64.rpm 75046450a79970c038a778d539ffa4546aa72c0c0a2662deb6e1892f1af12412 kernel-rt-64k-debug-core-6.12.0-211.31.1.el10_2.aarch64.rpm 8f79ad8e5665dbf75de6f81d672632cf6e4b4ed07abda4e2a105a321684db2b3 kernel-rt-modules-core-6.12.0-211.31.1.el10_2.aarch64.rpm 996de545d9981d33bff68dabbc0f84957bcc233a379e1c3c9fb4949d59ffb55e kernel-rt-6.12.0-211.31.1.el10_2.aarch64.rpm afa72ef7859ebecf729f7c9e6a37dbcba3760fcb681afad16def6fc19402550d kernel-rt-debug-modules-core-6.12.0-211.31.1.el10_2.aarch64.rpm b703ea5b6d4d708594976bf76d0e71a70a12608231e7487f193ab91bf053c767 kernel-rt-modules-extra-6.12.0-211.31.1.el10_2.aarch64.rpm c5ce6e87e2edc9ff105deb72c897aa9016a5980edb51c813cc80b4b42cf7e738 kernel-rt-64k-debug-6.12.0-211.31.1.el10_2.aarch64.rpm da18aaa93afffd35771dbc574aff6f6bde5648a9b3394a1e73c6b2ab2da51181 kernel-rt-64k-debug-modules-core-6.12.0-211.31.1.el10_2.aarch64.rpm dafca1d30c3eed3d29197dfa451bf2d2d69c1a17201e3459f453e508e9a9ca0e kernel-rt-64k-modules-core-6.12.0-211.31.1.el10_2.aarch64.rpm df88b1c03326a7eaf65895726448c2cc5763fbd8f692587efd866a9b2a4c43b7 kernel-rt-64k-devel-6.12.0-211.31.1.el10_2.aarch64.rpm e145b6596d8916161136dbd4925bb0d961f04ce2b514df90386805421260fc5e kernel-rt-64k-debug-modules-extra-6.12.0-211.31.1.el10_2.aarch64.rpm e848d52b932b4c730562412d68f63e1243046964168145c6175e82bee9014474 kernel-rt-core-6.12.0-211.31.1.el10_2.aarch64.rpm e84f9fc0ddecd33485c9637b4be4ca3b69891ad0a94d4e150c77e30dbfc3b5a6 kernel-rt-modules-6.12.0-211.31.1.el10_2.aarch64.rpm f6d108ca283db7a09f93c3ffab93e13374576c2c5d6b25aafd6efc1303ce1d9d ALSA-2026:36956 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066) * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113) * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-modules-extra-6.12.0-211.32.1.el10_2.aarch64.rpm 078ad295a93de8d8079162ef5aaf2f73a4185711f1081d915625c3efc8c89c7e kernel-rt-64k-modules-6.12.0-211.32.1.el10_2.aarch64.rpm 102c7a3fa48f2c1025347ec94796fe9620bd94549c448085cc00f4098687b872 kernel-rt-modules-extra-6.12.0-211.32.1.el10_2.aarch64.rpm 12febeae1d8670fadcbeacb192b6d0febbf9ff6768f8138208393f1e47f52e3b kernel-rt-devel-6.12.0-211.32.1.el10_2.aarch64.rpm 2c02e69349025b52abafcd7d04e1be63b4610df81d8af8e92aaaf545696e5af5 kernel-rt-debug-devel-6.12.0-211.32.1.el10_2.aarch64.rpm 3fa9516f80e978f0d1e919b7d24b5be9516767a82334159cb001228241a75f15 kernel-rt-6.12.0-211.32.1.el10_2.aarch64.rpm 4da2ffd9c3a81a5f29a055c1a836a67df8095e27222e44c96f528ff677500acd kernel-rt-modules-6.12.0-211.32.1.el10_2.aarch64.rpm 4ee3137d984d300c820bd75691f350b7eddae7bd5d376516e2f6242bc0cfa15d kernel-rt-64k-debug-modules-extra-6.12.0-211.32.1.el10_2.aarch64.rpm 4f00c11d5a617e8e2dfcbc66c1cde3f2ee7058e53c9662aaf0f31a8e83fb71ba kernel-rt-64k-6.12.0-211.32.1.el10_2.aarch64.rpm 690e79dd79258e3a7db1a84cc83c0f37a9865d6f7fa4d463fd9fcbbbdc7839ee kernel-rt-64k-debug-devel-6.12.0-211.32.1.el10_2.aarch64.rpm 6d5c50a01d15f15a66c3ffaf3082f5031eeaea3969c906aef1d218681706fa46 kernel-rt-core-6.12.0-211.32.1.el10_2.aarch64.rpm 8c80ddc933dbc613b7cb108f8fb4124239f2e8b7997d04bfda78b724603fd544 kernel-rt-debug-core-6.12.0-211.32.1.el10_2.aarch64.rpm 9a7152cd4ee277b09f466090d5f8ea6c06d4a1b820102e656b9e59dd4b6a8751 kernel-rt-64k-devel-6.12.0-211.32.1.el10_2.aarch64.rpm 9fab833ce9e084acba5f2cc48c2c4b3d4ce034fb3ed435e529a720db2f8b7b8d kernel-rt-debug-modules-6.12.0-211.32.1.el10_2.aarch64.rpm a3262f27196300916803b328ebe57f7e0b01a0b4dd3f65354bac3b503d09a6c0 kernel-rt-64k-debug-core-6.12.0-211.32.1.el10_2.aarch64.rpm a3a5d1346aa0db74a96a55e745dd70b2efaea9fcc8c0c1fa245d5722f588f430 kernel-rt-64k-modules-extra-6.12.0-211.32.1.el10_2.aarch64.rpm b48034ec4d4f5b07823290c7161c56b927d7ec8798bb255685eb54222b0c0297 kernel-rt-64k-debug-modules-core-6.12.0-211.32.1.el10_2.aarch64.rpm b89386909509e7ad38a8d739ea03a84e767779e7506251c683bbcd620ec53745 kernel-rt-modules-core-6.12.0-211.32.1.el10_2.aarch64.rpm baea3516773409c6c6a2ed671bd3224f0b944468623c08bc47170eb7e71e38e4 kernel-rt-debug-6.12.0-211.32.1.el10_2.aarch64.rpm bb21b39adb9014b39c16e706866ff2a74554ac8da85349d5b9d880d0a44d3b8f kernel-rt-64k-debug-modules-6.12.0-211.32.1.el10_2.aarch64.rpm e60d6c7fffe65e88245a865b46fcb4650a4d69b1cf9c581f49575cad159dc3ca kernel-rt-64k-debug-6.12.0-211.32.1.el10_2.aarch64.rpm ea9fabeaccd06c0caf58a1a8cde1adc9a201689c516202d1df2279657932432b kernel-rt-debug-modules-core-6.12.0-211.32.1.el10_2.aarch64.rpm ead28d8e4af4c7bdc77acf4b9887f60532144f178290592aca58a62c595ed21c kernel-rt-64k-modules-core-6.12.0-211.32.1.el10_2.aarch64.rpm ee8666fe636633c6a20d71d0e59660e0347e1921c7029fecc4a81d5f374444a5 kernel-rt-64k-core-6.12.0-211.32.1.el10_2.aarch64.rpm eecc91803c315bc5b944046ed3d1fddb80926bd6a260fef267247fc85567a771 ALSA-2026:38492 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163) * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499) * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-devel-6.12.0-211.33.1.el10_2.aarch64.rpm 02b0765bd9dd472619534bb6a1bf90e70a43c0852b98db1a1da221e3d01a64ce kernel-rt-devel-6.12.0-211.33.1.el10_2.aarch64.rpm 18018c02a242b5d5277638c25ec54da40a0aeb9cc735df48427e9c9f72234b81 kernel-rt-64k-debug-modules-extra-6.12.0-211.33.1.el10_2.aarch64.rpm 261ff54bb620b2191b5ef9a2240ffc4ee8e4083c3b4597b325a38c88dae2baa1 kernel-rt-debug-devel-6.12.0-211.33.1.el10_2.aarch64.rpm 33a487f8720262fb0e090be8c7567b6ccf4795db27a63d95822970491414742b kernel-rt-64k-debug-core-6.12.0-211.33.1.el10_2.aarch64.rpm 35ec3363b092cdf29b0a363abe1fe5033d1ecf8df2af71094a6023e0ae56d820 kernel-rt-64k-debug-modules-core-6.12.0-211.33.1.el10_2.aarch64.rpm 4267f4135e5b02bfe27b377857c8f6455b996aec231fb8d95b81510d1d76847b kernel-rt-modules-core-6.12.0-211.33.1.el10_2.aarch64.rpm 493a208a547e927b6436928bcf99f46633542f887785d0d6033dbd8fce5b8d03 kernel-rt-debug-modules-core-6.12.0-211.33.1.el10_2.aarch64.rpm 4a60fe759f60e2d832b9877267301f8e14fafc7205e5e4200deac19631b6e1fb kernel-rt-debug-core-6.12.0-211.33.1.el10_2.aarch64.rpm 5b5800cd4f99ea09efb27d7f830ff0f2a0c4593e8306206916a5aad9ac996714 kernel-rt-modules-extra-6.12.0-211.33.1.el10_2.aarch64.rpm 5fdc7ad2f8fb54010a91e0de22337354f589ddede55d24fd2dde32247f2796ed kernel-rt-64k-debug-modules-6.12.0-211.33.1.el10_2.aarch64.rpm 63365e0812da472a918e69a22b73c773a85a9affa03da8280f5af1078e12b081 kernel-rt-6.12.0-211.33.1.el10_2.aarch64.rpm 8172f27f9d5fc19ec34b926233ec5e1300da76a00f7723bcbfe32a8c2ff7f5da kernel-rt-64k-modules-extra-6.12.0-211.33.1.el10_2.aarch64.rpm 81bc927385cc273bbf5ec91830f29655adce98c7dda90be886015d97ede54fb8 kernel-rt-debug-modules-6.12.0-211.33.1.el10_2.aarch64.rpm 84e2f2fd6b8c0ff1fdcce381be9bce8cb2c5cf070dd30bc30e5b2d95c657eb50 kernel-rt-64k-debug-6.12.0-211.33.1.el10_2.aarch64.rpm 9d95f3bc565f2b4f9b4791f3fbdf5c130c7f47a3b237d41f51b600dcbcc19506 kernel-rt-debug-modules-extra-6.12.0-211.33.1.el10_2.aarch64.rpm aea1f45903ae17d3f53841bdc8638867f6dc21ad3165bd6874dff2a6da9115ec kernel-rt-core-6.12.0-211.33.1.el10_2.aarch64.rpm bf8fc9ee2e5ae7e8a2122463185c99ef36a85a57230be94d79a278206ff01ef8 kernel-rt-64k-modules-6.12.0-211.33.1.el10_2.aarch64.rpm cb91abc8ed12300b0c02cc77bc3f6e692f0179a611bb50e12b156cb9aa330983 kernel-rt-modules-6.12.0-211.33.1.el10_2.aarch64.rpm d8ba829d20df8e97e60ee75608df19a48ba140d4b556926f3f36bee747eff3aa kernel-rt-64k-debug-devel-6.12.0-211.33.1.el10_2.aarch64.rpm dd6ba137986f69f68638cca825c8f01fa83b9ef67d5af9104a219787432b490b kernel-rt-64k-modules-core-6.12.0-211.33.1.el10_2.aarch64.rpm de7e8c8e58ee706525471a62a0e006e6ed2e854045daa8a35d27fc85311ee3b2 kernel-rt-64k-core-6.12.0-211.33.1.el10_2.aarch64.rpm e09ac7e30b63d9ee7b0efc89542dc8db38872d276628deba508732fd5b3fa469 kernel-rt-debug-6.12.0-211.33.1.el10_2.aarch64.rpm f4bc20c482e80f3ef6aa7a0950e58cfa75e5454f87974bcdcae1bb97231f3359 kernel-rt-64k-6.12.0-211.33.1.el10_2.aarch64.rpm fbc0d4585ba961c07416f72d348704f3eacb46970ec9e5a1af7c372460f11c25 ALSA-2026:39297 Copyright 2026 AlmaLinux OS 0 1 Moderate

edk2 security, bug fix, and enhancement update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key (CVE-2026-31790) * openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390) Bug Fix(es) and Enhancement(s): * edk2/x64: re-enable legacy kernel loader [almalinux-10.2.z] (JIRA:AlmaLinux-182421) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default edk2-tools-doc-20251114-5.el10_2.2.noarch.rpm 479f6e316a2a3e78e325be7c98c7571b7ca84ed1f03ce57d9fcd46506cb67901 ALSA-2026:39494 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016) * kernel: XFS data corruption using reflink () Bug Fix(es) and Enhancement(s): * [Exploits (KEV)] kernel: XFS data corruption using reflink [almalinux-10.2.z] (JIRA:AlmaLinux-193945) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-devel-6.12.0-211.34.1.el10_2.aarch64.rpm 007b0b64469b3c809fe5931c3b136bbd4b4badbe3be7775b72efa0b47fb9e04a kernel-rt-64k-debug-modules-6.12.0-211.34.1.el10_2.aarch64.rpm 15002ae7c598d1bc826d17dff295fb9c0e04b1a80f8a8805d5ebe9776b6c0a01 kernel-rt-modules-core-6.12.0-211.34.1.el10_2.aarch64.rpm 19bad988555f4a6fc171c6c93ca4d2c1f0c7d9a6c48c2f03230f34f8a19c683e kernel-rt-64k-6.12.0-211.34.1.el10_2.aarch64.rpm 283cddfc3fddf5b1dbf78dd2454f26bde21b646e32112921f178cdf7a5890e91 kernel-rt-debug-core-6.12.0-211.34.1.el10_2.aarch64.rpm 3350fe1415f290c41c312a123da4a9a581202739d9ffcab707a91bc7199fdf11 kernel-rt-debug-modules-6.12.0-211.34.1.el10_2.aarch64.rpm 45a298be13752f6cd23b5573c61a43b1bb329776ada3592a82e6208ec58c6b09 kernel-rt-64k-debug-modules-extra-6.12.0-211.34.1.el10_2.aarch64.rpm 4b2ebcca18490b10775a609aa25cbdcc7025251595f91b33e7e4681450ee6d1f kernel-rt-debug-modules-core-6.12.0-211.34.1.el10_2.aarch64.rpm 55bed4a9594e58c2c2b370082d80de381a8ad3d8d986e9140253ecc965ce862b kernel-rt-debug-modules-extra-6.12.0-211.34.1.el10_2.aarch64.rpm 59852722bc212e18153eba429cf875825a75ef650dd80399f7a373173785d3c4 kernel-rt-64k-debug-devel-6.12.0-211.34.1.el10_2.aarch64.rpm 61574f791f4bc986db23ebd9f83c98cd18bf6f2e53c04aa59d7d9487c4b6d13e kernel-rt-modules-6.12.0-211.34.1.el10_2.aarch64.rpm 64800cc2a98b87ffd9825e62c013d10bf6e0154b7e5850a0608f8a0ef97f1573 kernel-rt-64k-core-6.12.0-211.34.1.el10_2.aarch64.rpm 69be65084ee896e2ec571bc12ac94f1973cd4bdebc18b8aa54006104dd83ae4f kernel-rt-devel-6.12.0-211.34.1.el10_2.aarch64.rpm 7ed34b5a2513d87b4c1b42aede26ac51bab3ad70affda296de9f29d4b1f8214b kernel-rt-64k-debug-6.12.0-211.34.1.el10_2.aarch64.rpm 939dff2a9318c3502e49a571fc94990c755fcc497f6f5c576afce8f86d51b751 kernel-rt-debug-6.12.0-211.34.1.el10_2.aarch64.rpm a25aed4b6ea6b5ac2df577141dfbbd83e31119576565d9f2954fdacc982d0a6c kernel-rt-64k-debug-core-6.12.0-211.34.1.el10_2.aarch64.rpm aa033742e361c6bfd9695e8ae73e73a1bda017a4cdbaab352bccdeb03326b1dd kernel-rt-64k-modules-core-6.12.0-211.34.1.el10_2.aarch64.rpm ad6f0c3456b6f86914d9923b475a2b24b2d67c28cd1fcf77a3618c20c9167e21 kernel-rt-core-6.12.0-211.34.1.el10_2.aarch64.rpm b263350ac6fa88d3b090680b8c57f4abb4bb3933cb6eded205cd24ac5e79d4cd kernel-rt-modules-extra-6.12.0-211.34.1.el10_2.aarch64.rpm b9675df9543a5dd887e43ea81ec68f9d97e5300b35ed56c857c4b07edd43bd5c kernel-rt-64k-debug-modules-core-6.12.0-211.34.1.el10_2.aarch64.rpm ba7d614fbb0c245ab9f742015fcce82dca7d23158131369607168dc1d18fdb08 kernel-rt-6.12.0-211.34.1.el10_2.aarch64.rpm c4fec56f7cf89e6617e67cccf4280bfd9969c575a795a0327b9d3beb45c4b617 kernel-rt-64k-modules-6.12.0-211.34.1.el10_2.aarch64.rpm d7cea8b6eee30889dd37a611b7f1fa76d668b8e271fbc97354793fe433097777 kernel-rt-debug-devel-6.12.0-211.34.1.el10_2.aarch64.rpm dfe9b1e9432f8aa2b27e2bb2b202cdf2bda3ab2200c32b2cdbc0a888102fb2eb kernel-rt-64k-modules-extra-6.12.0-211.34.1.el10_2.aarch64.rpm fe48c5e67a0fac64c4d41402bda7685291b3fd946cdac33cadc6d279164242ed ALSA-2026:42919 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113) * kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd (CVE-2025-71147) * kernel: flex_proportions: make fprop_new_period() hardirq safe (CVE-2026-23168) * kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (CVE-2026-31530) * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116) * kernel: fanotify: fix false positive on permission events (CVE-2026-46150) * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215) * kernel: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CVE-2026-52976) * kernel: drm/xe/dma-buf: fix UAF with retry loop (CVE-2026-52950) * kernel: ice: fix double-free of tx_buf skb (CVE-2026-53009) * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071) * kernel: can: bcm: thrtimer use-after-free during RX operation teardown () Bug Fix(es) and Enhancement(s): * nfsd_file slab cache objects remaining on kmem_cache_shutdown during nfsd teardown while running bz1477872 testcase (JIRA:AlmaLinux-173103) * tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-10.2.z] (JIRA:AlmaLinux-183975) * [AlmaLinux10-debug]: BUG: KASAN: slab-use-after-free in __pv_queued_spin_lock_slowpath [almalinux-10.2.z] (JIRA:AlmaLinux-186311) * ice: driver update 2026-06, part 1 [almalinux-10.2.z] (JIRA:AlmaLinux-191324) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-modules-extra-6.12.0-211.37.1.el10_2.aarch64.rpm 1302a7a3c46f32ebabab58a02713e3f19538fffab620667915179432a10fe6b0 kernel-rt-64k-core-6.12.0-211.37.1.el10_2.aarch64.rpm 1a927817244464b097f2ae8072c8e27f1339c1ed5e987a2b7dc0290704444079 kernel-rt-debug-modules-core-6.12.0-211.37.1.el10_2.aarch64.rpm 26ad8426080a79771209666d33b7a206859adac7337f01ca1c396583b69bedf5 kernel-rt-64k-debug-modules-extra-6.12.0-211.37.1.el10_2.aarch64.rpm 4589d832b238ef1692bbd0d64d64ec6f57aa542f23bf1081cd67a2ebcec79047 kernel-rt-6.12.0-211.37.1.el10_2.aarch64.rpm 4d11aaeceac8f655d5700a79affed64c203ab623c13245f2513abef872c6d809 kernel-rt-debug-core-6.12.0-211.37.1.el10_2.aarch64.rpm 4f339eba92515602729f17605a3a72d5240826bc1162ddbbcb2f9ada5694b731 kernel-rt-64k-devel-6.12.0-211.37.1.el10_2.aarch64.rpm 694636b714bab507370914c4dfb411e823f8ee1c58e16de232212e5a9adb4cab kernel-rt-64k-debug-core-6.12.0-211.37.1.el10_2.aarch64.rpm 6d02b8761afbf80f4f6dec3a90958092935baa45597eb00f161efe6b8818c5c1 kernel-rt-debug-devel-6.12.0-211.37.1.el10_2.aarch64.rpm 75185e297f5a56d12d2ca6756cdd7601bc776edd4f47ccf607e0037f421bb52d kernel-rt-core-6.12.0-211.37.1.el10_2.aarch64.rpm 787b31ff05a6071ee6b5169e543028afb4aed4b2d9bfc933726e79fb57b1b4aa kernel-rt-64k-debug-devel-6.12.0-211.37.1.el10_2.aarch64.rpm 78a3164a5531c979bc6bfd336975f5aecfd070eb382f0629e7e9dfae87774606 kernel-rt-debug-modules-6.12.0-211.37.1.el10_2.aarch64.rpm 796ae1c4f4cb954d0f6270179c25b2c325f8014c203270ecbc59cbae8ef14373 kernel-rt-64k-debug-modules-core-6.12.0-211.37.1.el10_2.aarch64.rpm 7cda1387881c8cc2fa0a4183c04b702fd280a4d3cac1e07299c4b6649ab91289 kernel-rt-modules-6.12.0-211.37.1.el10_2.aarch64.rpm 8ef1af1c959bdcdc93835721782e54164d91c72d1943369f50048c8c6ea7a20a kernel-rt-devel-6.12.0-211.37.1.el10_2.aarch64.rpm 917677d9babccb1656cb315fb8f8ff9a3bba6281a5ccc9cdc88c635ed61b4e48 kernel-rt-64k-debug-modules-6.12.0-211.37.1.el10_2.aarch64.rpm 9726d61da9c8710745755ae0198823685f13193e29306d5f350c62a399ba74be kernel-rt-debug-6.12.0-211.37.1.el10_2.aarch64.rpm 994f0d5d4801d43a3437d385864705bb9b6ed3bd6a4546f350613c41c9e65f33 kernel-rt-modules-core-6.12.0-211.37.1.el10_2.aarch64.rpm ad0021b2d255a1d61b3a65d2f29de21c9d8bef626eb87ceaee63e36c936fc793 kernel-rt-64k-debug-6.12.0-211.37.1.el10_2.aarch64.rpm bbb7b9d824a9e1cda69b1f4a5b36f0b13c0825559cf22f2302c152f1add8fbac kernel-rt-64k-modules-extra-6.12.0-211.37.1.el10_2.aarch64.rpm cbeac703aa4aa2fa90e42c1cc84244ba4c4f5808585a3c3de8b988e24e9264d0 kernel-rt-64k-6.12.0-211.37.1.el10_2.aarch64.rpm d86bd871a6762e41a47f6b9d2a0c757ee7fd6cb3ef86010c1bc113bec11c8dca kernel-rt-modules-extra-6.12.0-211.37.1.el10_2.aarch64.rpm d9db52df210e2e12542a10c81b3b21c6ab88dc14346339360c7874edc0ba7890 kernel-rt-64k-modules-6.12.0-211.37.1.el10_2.aarch64.rpm e43a54f4a72b8a78b264b4903e6787035ae13f3276b76c6be0009c8ccfe5e9be kernel-rt-64k-modules-core-6.12.0-211.37.1.el10_2.aarch64.rpm ee32273714962f42a6a83e15b18c6ca90278657d95005390578268c14f5f1df9 ALSA-2026:44270 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-modules-6.12.0-211.38.1.el10_2.aarch64.rpm 1a8666223b1ff4a459febd73172511a4b020a72a1aa570dfb07fde69f97774a3 kernel-rt-debug-modules-6.12.0-211.38.1.el10_2.aarch64.rpm 1b324db729de5f84a198ad6d57607ccc252f35b2a9403010f4fc367c3148b85c kernel-rt-64k-debug-modules-core-6.12.0-211.38.1.el10_2.aarch64.rpm 1c5726fe4e1745b30ed755b90a05a790a79c7f361e73ca9ab63c5fb526cdbec6 kernel-rt-64k-devel-6.12.0-211.38.1.el10_2.aarch64.rpm 1e879690e77f58a2eb4d354e655443fe385fc79d89ae428995060a552f4f6e0e kernel-rt-64k-modules-extra-6.12.0-211.38.1.el10_2.aarch64.rpm 1f48ecce21f362c0cf7ba6c98995d605aab5b436eb6366993e711942328cf329 kernel-rt-64k-core-6.12.0-211.38.1.el10_2.aarch64.rpm 3388abf06d7bb9a7bfd16c24c42a9a5465b37ad50e1c4eaff0e72b2cbeec4d47 kernel-rt-debug-core-6.12.0-211.38.1.el10_2.aarch64.rpm 376dd7f2b7b189416dcf18f609cb37c07ae017b14880abb8a9b9d4cb76e574ea kernel-rt-modules-6.12.0-211.38.1.el10_2.aarch64.rpm 400ed078d117ec97e3a37f2765bf57c04e4466cee56a07f41dd8bf28d253c4f5 kernel-rt-6.12.0-211.38.1.el10_2.aarch64.rpm 4f0e4611fa0888faa728d1c2acb6ddee052f3f34cddeeb10dfc12ea9af8eb9c1 kernel-rt-debug-6.12.0-211.38.1.el10_2.aarch64.rpm 56853652376a915663e757e782c0acebb5908be725d4c5ba2051781ac5842a72 kernel-rt-64k-debug-modules-extra-6.12.0-211.38.1.el10_2.aarch64.rpm 5c075412a79287e5e1dc7b64321f03b8aa9d77f68a75c08c3798ea7fd736bd33 kernel-rt-debug-modules-extra-6.12.0-211.38.1.el10_2.aarch64.rpm 6886ccbb52ff49bd67da954d401ae76807b6d90847d0760b6433d950150574c5 kernel-rt-64k-debug-core-6.12.0-211.38.1.el10_2.aarch64.rpm 74f6fe2f92edd5a56a996d4a69a15d067556b3b519cc1983db60d6217ee7cd35 kernel-rt-modules-extra-6.12.0-211.38.1.el10_2.aarch64.rpm 771822d6e4403ef2817c6a3b7dcab76b59e8435dc927e117b9ea5517fb43dd19 kernel-rt-debug-modules-core-6.12.0-211.38.1.el10_2.aarch64.rpm 806818b7c47517b3b916a41c38c7ef6b8af58426280dc71a788f4acc445f8d11 kernel-rt-64k-debug-6.12.0-211.38.1.el10_2.aarch64.rpm 82d9d2cfde7c759e07c50ceba5f0faff2120526c38357fddb2c82bbf9935d141 kernel-rt-debug-devel-6.12.0-211.38.1.el10_2.aarch64.rpm a4cecbcbf9dbab71dccb01f71ef9c43a43d4e7862c5c35cf16bf07d53799765e kernel-rt-devel-6.12.0-211.38.1.el10_2.aarch64.rpm a9289f75ba5863755db5d641038bfb477c3d67a76e2d173a163a4984d9db11aa kernel-rt-core-6.12.0-211.38.1.el10_2.aarch64.rpm b89f3fcb4ebff5699a211357c7f95eb768b95dcd18a75e0078088b53ec5b0f3d kernel-rt-64k-6.12.0-211.38.1.el10_2.aarch64.rpm bb73247070acb78e43ee6ec0a2e69aab2b22f3c18e0cfff3b53e989c03c16820 kernel-rt-64k-debug-modules-6.12.0-211.38.1.el10_2.aarch64.rpm c735d90c358e9cdccf1c0edcc23ffa4edafcb42363d8fc26974c40efa3ad8017 kernel-rt-64k-debug-devel-6.12.0-211.38.1.el10_2.aarch64.rpm da6641f8950a0d1e933cef280a23102551186fa2c66138f0edfe06f25e4e5120 kernel-rt-modules-core-6.12.0-211.38.1.el10_2.aarch64.rpm e21a31ae1cb9d572c4fbbb1c873fb07a9694def768c9ceb3590306729c55c0d5 kernel-rt-64k-modules-core-6.12.0-211.38.1.el10_2.aarch64.rpm ed99c2ea41f8ef2f592f9063d0121b35b4341226f493a175493cf241bc6bd8a9 ALSA-2026:45114 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fs/notify: call exportfs_encode_fid with s_umount (CVE-2025-40237) * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110) * kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692) * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099) * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973) * kernel: dm log: fix out-of-bounds write due to region_count overflow (CVE-2026-53059) For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.39.1.el10_2.aarch64.rpm 096ca2e201195b7df4ecc724fd2cfed7212a7bf13558a3a0c965753b884b9320 kernel-rt-64k-core-6.12.0-211.39.1.el10_2.aarch64.rpm 0debec004ffc2088c4fb4e527cc5337fa86338b7d92b478c7c7e719abf68ff05 kernel-rt-modules-core-6.12.0-211.39.1.el10_2.aarch64.rpm 29b3095d082666fffa71077e56c23c0a60c442dcd8c1b8074ec6a3a0afd2f7cf kernel-rt-modules-6.12.0-211.39.1.el10_2.aarch64.rpm 2ee339118d8be56480a267f42c95d88d72b4925adb771a5894e46ddcc8235c36 kernel-rt-64k-debug-core-6.12.0-211.39.1.el10_2.aarch64.rpm 3a4ae45cd46475408c6b255b32716bd55180695a36f255551978170349dd9565 kernel-rt-6.12.0-211.39.1.el10_2.aarch64.rpm 41029539003f19b7a01a8461f1168e7e917dfbb065f28ccd222f5b378e5e8bb7 kernel-rt-devel-6.12.0-211.39.1.el10_2.aarch64.rpm 5ea3bf24805822d4582c16e6d05ed3f704d9a1bfbc728ce3a8547ddc315123e2 kernel-rt-64k-modules-6.12.0-211.39.1.el10_2.aarch64.rpm 6545d8b401dfd7cde8c85d344e4b5394a14299203e65288fe0fc10e6a8528abc kernel-rt-64k-6.12.0-211.39.1.el10_2.aarch64.rpm 6861a69181eb3914d9f613c1126df07216c6b98bba63eb9f70f14dd76c38d7a4 kernel-rt-debug-6.12.0-211.39.1.el10_2.aarch64.rpm 6bd00582207649a158e30b2b0e9232ea49f0f382254b138aa238644f97b961ab kernel-rt-debug-modules-extra-6.12.0-211.39.1.el10_2.aarch64.rpm 6e5a8bf2908031286a9462ed0acba1717647ad2487361634db815bcda9affc88 kernel-rt-debug-devel-6.12.0-211.39.1.el10_2.aarch64.rpm 8c5a769b024289b8da2703fe744f39ccdd717b4c3cffdd03f0a850a049d94d87 kernel-rt-64k-debug-modules-extra-6.12.0-211.39.1.el10_2.aarch64.rpm 9ac31d21b2a36b9b29d494981edbcecb203cc679ec2f851ec7081454e6f464b3 kernel-rt-debug-modules-core-6.12.0-211.39.1.el10_2.aarch64.rpm 9e10197340060dc0e02926e54f1e1dfaec04aabdb97c6866fd7510e2dc6b4aed kernel-rt-64k-modules-core-6.12.0-211.39.1.el10_2.aarch64.rpm 9f8896985f6235528d058adf200d6af7a7a76270c11d6a73015010f4c2366198 kernel-rt-64k-debug-6.12.0-211.39.1.el10_2.aarch64.rpm a68cf0e14fa2cc9757d260d8a853b5fe066fc7beb42f6d590ee714657caebccd kernel-rt-core-6.12.0-211.39.1.el10_2.aarch64.rpm a9fbf8670310ff40d9bbd4afd0eff9fa59d919fb253a0d47da87112334e3c885 kernel-rt-64k-debug-modules-core-6.12.0-211.39.1.el10_2.aarch64.rpm b098587cb407af6f75f60b9cc3a5a60e0de5e051f6aac20f7e561e3527ba1b1b kernel-rt-64k-debug-modules-6.12.0-211.39.1.el10_2.aarch64.rpm b65e1dd8121c7bb07a2237ea7d67758f465578ecaec1fc1d37adef84a2bcbdf1 kernel-rt-64k-modules-extra-6.12.0-211.39.1.el10_2.aarch64.rpm c3a20ae1ebb5451faccab78dcf92cd0e4e3ea27af267ec00ced30f60e0635dad kernel-rt-64k-debug-devel-6.12.0-211.39.1.el10_2.aarch64.rpm d3df9d01aa502e61129e927aba1df8e0f519d85273c9b75d0717851e47b1c687 kernel-rt-modules-extra-6.12.0-211.39.1.el10_2.aarch64.rpm dd36dc6858f3a3ef70af954b49650fbb92ee9cc00999e890c18427ed64df5a9f kernel-rt-64k-devel-6.12.0-211.39.1.el10_2.aarch64.rpm e09e2ef01ae8f7ed1db9d29840fc9faa01ba752c3432fbd661054149b256417c kernel-rt-debug-core-6.12.0-211.39.1.el10_2.aarch64.rpm e7cc677a5ade69b767c84d2c8c33b84b0caf32c6b2f2681bc65544766227559e ALSA-2026:46395 Copyright 2026 AlmaLinux OS 0 1 Important

go-fdo-server security update

This package provides a server-side implementation of the FIDO Device Onboard (FDO) specification, written in Go. FDO is an open standard for the late binding of device credentials, allowing for automated and secure on-boarding of devices when they are first powered on in their final location. Security Fix(es): * golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) * crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default go-fdo-server-owner-1.0.1-2.el10_2.3.noarch.rpm 8a1f12fb60dd6f709e8d044b6d020d14de7e6afbde8dda5848544a5e669cff85 go-fdo-server-rendezvous-1.0.1-2.el10_2.3.noarch.rpm caf1db0da6a4940dc368733c9e45509fe9a782dd4331421e6ca8bcf1a5779321 go-fdo-server-manufacturer-1.0.1-2.el10_2.3.noarch.rpm cb7c2a74215550a5f2ce3d4355be09b754b0e502285caecb7e0f536ef2a0011f ALSA-2026:47017 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086) * kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006) * kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993) * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281) Bug Fix(es) and Enhancement(s): * rxrpc: Address CVE-2026-43500 [almalinux-10.2.z] (JIRA:AlmaLinux-178254) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-modules-extra-6.12.0-211.40.1.el10_2.aarch64.rpm 0788c67fbf6b660aa196b6c3dd3c235a1067d0447af2ece33436c0158f6f1ddc kernel-rt-64k-core-6.12.0-211.40.1.el10_2.aarch64.rpm 0c34beac945736186bb5d89dbcc78c4004eb2781bd196e55d9cabe29a73b3d4e kernel-rt-debug-modules-extra-6.12.0-211.40.1.el10_2.aarch64.rpm 10fb11b18241fed8676be68174144dca0fb8a0aab1e8ddef423dad5d0556aca2 kernel-rt-modules-6.12.0-211.40.1.el10_2.aarch64.rpm 1aee4349d590249ac8dcb2bdcfb1394e11cfb85fa563ecf97de17b3925878712 kernel-rt-modules-extra-6.12.0-211.40.1.el10_2.aarch64.rpm 41cbece5d2b84807989975657a6f3ce97b372bc04f321bd96713f5a7a14b00f1 kernel-rt-64k-6.12.0-211.40.1.el10_2.aarch64.rpm 461e7f04e1e2a5bd30677598b94c9562ee2142ee8e050d5f494d6616dc7cef5e kernel-rt-debug-modules-core-6.12.0-211.40.1.el10_2.aarch64.rpm 54c1245f3945120e5205f93655acc5a221929794fbe89c4e7e86a041597179a8 kernel-rt-64k-debug-core-6.12.0-211.40.1.el10_2.aarch64.rpm 590962918cba9ed1ebe17f54d8a2a23625b33c6008312c98860656a6313824f2 kernel-rt-6.12.0-211.40.1.el10_2.aarch64.rpm 5e2ecc6cc98d1c046fc7dd68f186cc576f077d7f36535591bc04d84e21d233a5 kernel-rt-64k-debug-6.12.0-211.40.1.el10_2.aarch64.rpm 6c1409e966b757522e06b0dd61ebb55f2a951fc819452b81dccc80e960d456ba kernel-rt-64k-modules-core-6.12.0-211.40.1.el10_2.aarch64.rpm 71413945ab179c3f1dabd3c4541e5d0d8a4864ebd36c267b5a33156f364358ea kernel-rt-debug-devel-6.12.0-211.40.1.el10_2.aarch64.rpm 7773df6400e80336554e6788ea77674468e6c801546549b99ed9f2ec7f16895f kernel-rt-64k-debug-devel-6.12.0-211.40.1.el10_2.aarch64.rpm 8eeea5558b09f57f1269513cd8fa37195d95481e83eec9940fad94dde4fe2dcb kernel-rt-modules-core-6.12.0-211.40.1.el10_2.aarch64.rpm 901558c50443bb9868ee317b53b1f6c0d38d83fe25d489e3611a75c5fa9711b2 kernel-rt-devel-6.12.0-211.40.1.el10_2.aarch64.rpm 92852442a4f09723035a008b669a60e46b67246fbe4ebfb64f66926f776d2c13 kernel-rt-debug-6.12.0-211.40.1.el10_2.aarch64.rpm 9cb95d59a634438528c380d0f5c90c997003e5e0b9394a7c6e927885fca852b3 kernel-rt-64k-debug-modules-core-6.12.0-211.40.1.el10_2.aarch64.rpm a779a5f2540f3a5df1327cf79f0b15e51fad704bd1327a425d05b722ffe2093c kernel-rt-64k-devel-6.12.0-211.40.1.el10_2.aarch64.rpm b37160521046206f1d7d8fe1bc10f7b4427059e7862b738b5ab0d223dc7a5b9e kernel-rt-64k-debug-modules-extra-6.12.0-211.40.1.el10_2.aarch64.rpm bc6ed37d501b389f47c3152610938a36f40a31b65e9e03a31d3efb7f69e506c5 kernel-rt-64k-debug-modules-6.12.0-211.40.1.el10_2.aarch64.rpm be345521347d0360f88ef4b41f6810f6df1d8d34697c744b0ece16079fa110b3 kernel-rt-debug-core-6.12.0-211.40.1.el10_2.aarch64.rpm c40318353919451e1ae67c0354f5965f090b4e9b3ff3dbfeea40a4111c6e129d kernel-rt-core-6.12.0-211.40.1.el10_2.aarch64.rpm ed2ec152bae99f0f9e024a6fbb5f1ec687b4fbc095c8e676aa09cae1cfa907f1 kernel-rt-64k-modules-6.12.0-211.40.1.el10_2.aarch64.rpm fa12b13eb010935f1f6c3c0fd68660255a7a61964a890e5520b003a841408e35 kernel-rt-debug-modules-6.12.0-211.40.1.el10_2.aarch64.rpm fa161404a7f8e2c37c1324734ab4dc75ed1ebeb4856a3977e2739d0f1feb335c ALSA-2026:48585 Copyright 2026 AlmaLinux OS 0 1 Important

fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies (CVE-2026-59939) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default fence-agents-lpar-4.16.0-21.el10_2.5.noarch.rpm 91ae58cf021e245e1a1bf1024c70c1f559915400b560633a3068c117a652dbec ALSA-2026:49211 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CVE-2025-68211) * kernel: isofs: validate Rock Ridge CE continuation extent against volume size (CVE-2026-46303) * kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle () Bug Fix(es) and Enhancement(s): * [DELL 10.2 FEAT] [LATE-ADD] - Include support for Ghostrider PTL mini config SKU with Realtek IC Solution [almalinux-10.2.z] (JIRA:AlmaLinux-185669) * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-10.2.z] (JIRA:AlmaLinux-212063) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.42.1.el10_2.aarch64.rpm 0abac59a9fa3ee6c4b7101f8be0b5c22d9cfc47cbc92f56b08f42eac96fe8c3f kernel-rt-debug-modules-extra-6.12.0-211.42.1.el10_2.aarch64.rpm 4b2392d82a0ee99cd80aab865f2f16f5e1bb7f328e9327dceed3d635904bbe05 kernel-rt-64k-debug-modules-core-6.12.0-211.42.1.el10_2.aarch64.rpm 5a31194177f5f1151bcf0daa46428e08bfb35e83638811f731ab2fde55fbe4a1 kernel-rt-64k-debug-core-6.12.0-211.42.1.el10_2.aarch64.rpm 62f893073455ff0e89534c06ce43bab0bd589270f1d666d86a5bd8bcca6552c9 kernel-rt-64k-modules-extra-6.12.0-211.42.1.el10_2.aarch64.rpm 6f5591517d376ceb211405de22f0451320a0fe6791582c596fb04f6715a7ff62 kernel-rt-debug-modules-core-6.12.0-211.42.1.el10_2.aarch64.rpm 76639bd2429a7f2c4727ac2283d80842330b172a383679840954df545bdbe775 kernel-rt-64k-core-6.12.0-211.42.1.el10_2.aarch64.rpm 8163466740cd915ae5de8bda4893aa1360cb8ddb9c3536bc15ee58572994ad11 kernel-rt-modules-extra-6.12.0-211.42.1.el10_2.aarch64.rpm 855d7e5786f63eb058319f656d7677112bea28fa9bd1876672f129edf06eb38c kernel-rt-64k-debug-devel-6.12.0-211.42.1.el10_2.aarch64.rpm 9265b5db886825dad6d8c5de1faaece11835cad3365d4db2810a559931cca280 kernel-rt-64k-modules-core-6.12.0-211.42.1.el10_2.aarch64.rpm 94c59b0ce966a6a7652ec95a31d14ddc3b06c8a22ef02d9712628ee3b0f2cabe kernel-rt-64k-modules-6.12.0-211.42.1.el10_2.aarch64.rpm 9626a8ee8fb309ca334501e643f3c299648e704daa163cb0e3070d0a48f25a9f kernel-rt-debug-6.12.0-211.42.1.el10_2.aarch64.rpm 96f1a47028bbb861009b1f43149522b32dc3acd49b944809bb9b69115a8700c2 kernel-rt-core-6.12.0-211.42.1.el10_2.aarch64.rpm 9760f54d57faba51d7103ff26f7c74bb87966783519e6e404628bff9c0a4a503 kernel-rt-devel-6.12.0-211.42.1.el10_2.aarch64.rpm acd145079b48a2cc74d9c16e517277a0dc96de7a4b712726e9206092ae894a86 kernel-rt-64k-6.12.0-211.42.1.el10_2.aarch64.rpm b0e97868b7b9b44ed1853689ebc8469cc6a65e973d8d1d4ea1fccf78e635d587 kernel-rt-64k-debug-6.12.0-211.42.1.el10_2.aarch64.rpm b355322deb07f2f646d870217e84cd2e11b79b4d90a5a82bc9b075cfb966ce69 kernel-rt-debug-devel-6.12.0-211.42.1.el10_2.aarch64.rpm c0a12f0bff70c907a63ab5ec33fa7371d71e5159524e677873ccf929b715cff1 kernel-rt-modules-6.12.0-211.42.1.el10_2.aarch64.rpm c16c80c65a4bb1aa667a29568ed4197ec28121a57f3d963a7851235822385117 kernel-rt-64k-devel-6.12.0-211.42.1.el10_2.aarch64.rpm c38d4e9d5ed84c040d9318fe8840c38bc9b69f9b24a893343c83ba766fd19fdf kernel-rt-6.12.0-211.42.1.el10_2.aarch64.rpm d1d9008a86fe9136e7a476aa5f5c3bc9c57dce14b9db41f8dfada4399e1ea272 kernel-rt-64k-debug-modules-6.12.0-211.42.1.el10_2.aarch64.rpm e9e0714d0bc3b57d0dcfb53e6af6ff215b03dfb47adb53012dd170c9abcd21ff kernel-rt-64k-debug-modules-extra-6.12.0-211.42.1.el10_2.aarch64.rpm ee5b7f7145dbdb8075e93f7677e720a1b46a203f91404bf1922a820ebff06ace kernel-rt-modules-core-6.12.0-211.42.1.el10_2.aarch64.rpm f57e1ca9c7b21e2881d8f23c60a857b7f3480b575dee3963060094d8946fca69 kernel-rt-debug-core-6.12.0-211.42.1.el10_2.aarch64.rpm f9bbc5d85857be70c726e7dcb6dd4e94e2a37f72509e77f55662bcdf20acefa3 ALSA-2026:49871 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown (CVE-2025-68214) * kernel: procfs: avoid fetching build ID while holding VMA lock (CVE-2026-23199) Bug Fix(es) and Enhancement(s): * [Lenovo] Graphics not working on T14 G7 Intel (Pantherlake) (JIRA:AlmaLinux-172832) * Possible regression with FM350GL [almalinux-10.2.z] (JIRA:AlmaLinux-184266) * [10.2 FEAT] CNB102: dpll: sync with upstream (JIRA:AlmaLinux-211011) * backport make module and modules-core provides use variant [almalinux-10.2.z] (JIRA:AlmaLinux-213965) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-core-6.12.0-211.43.1.el10_2.aarch64.rpm 002f6f3e49e01cc78ff0d2d33592ab4fa483de5cc58869686b4a112226f21827 kernel-rt-64k-core-6.12.0-211.43.1.el10_2.aarch64.rpm 005c0e4afce8f78f7458c4271e2042fdd9bb7ad63d4fd2609c5f4fd7c903ae27 kernel-rt-64k-modules-extra-6.12.0-211.43.1.el10_2.aarch64.rpm 0ac1f8f6376d021ccb99eeae2057a638167a8c0eec715eb6c19c6ec5829fd964 kernel-rt-debug-modules-6.12.0-211.43.1.el10_2.aarch64.rpm 0d7c2cf0d311596b6c43bbb7b204f35dc67d61624c0cb62c785062ef4ff7913d kernel-rt-debug-6.12.0-211.43.1.el10_2.aarch64.rpm 2219e6be8e148edf565a3fa9889ef4b32f0d3b26626c07da8af107c2e4164d08 kernel-rt-64k-modules-core-6.12.0-211.43.1.el10_2.aarch64.rpm 27c42dbc8db0c0904ae2b5683d294da8b86b097df4ae014c002cbfa18c3b53ae kernel-rt-6.12.0-211.43.1.el10_2.aarch64.rpm 28fff50ec4005adc7e97bfd8a36d8d5962329d1e66d9ec02193f9d2b53c89d08 kernel-rt-64k-debug-core-6.12.0-211.43.1.el10_2.aarch64.rpm 2be3686c99e3b870bf12b8d8b78dc8981a1e6b77bbe2a9b7467ab3e2e1f7daf8 kernel-rt-64k-modules-6.12.0-211.43.1.el10_2.aarch64.rpm 330657fdce8ab0ee5b023a4df108263260a13bf7f2148132fc2f3a4948adc6b2 kernel-rt-64k-debug-modules-core-6.12.0-211.43.1.el10_2.aarch64.rpm 4b4b0d5623d19c2fbbe957157e1d48212155399e23edca3a7161fea68cef37ed kernel-rt-debug-modules-extra-6.12.0-211.43.1.el10_2.aarch64.rpm 678b8d72aca22876c771e727866b37d93c9c6c2116c27bb6799246dbc3a9eaba kernel-rt-modules-extra-6.12.0-211.43.1.el10_2.aarch64.rpm 67ad1acd16ef29f0a72ce1c3e513c03c3a5422d90cda6173ca427183c92ab97a kernel-rt-modules-6.12.0-211.43.1.el10_2.aarch64.rpm 68356072d02c0607f896e36ef20916f0f88011e8dc651a092f80e852bdf52e42 kernel-rt-64k-debug-modules-extra-6.12.0-211.43.1.el10_2.aarch64.rpm 6b2f3857ff6af8036cf41b0e8292794cc8fcaefdd96f26c5538b726cdb28fac3 kernel-rt-64k-devel-6.12.0-211.43.1.el10_2.aarch64.rpm 6d142ec781979d269aaaa8cbe5e5fc505f9886f466062b50cc81b5692edb0b55 kernel-rt-64k-debug-6.12.0-211.43.1.el10_2.aarch64.rpm 77a6f82d6d41894293b14468c51f657fa2816c94a40796fd42055145e98df5c2 kernel-rt-64k-debug-modules-6.12.0-211.43.1.el10_2.aarch64.rpm 79f0504632f07c1b7bb70d485e46930a0034b05a2c1e2564d6317251f4aa2767 kernel-rt-64k-debug-devel-6.12.0-211.43.1.el10_2.aarch64.rpm a85d47225703e8c9ba6977a520189a8a5166d5f17aadcf7ee129b5a3a4cb0731 kernel-rt-debug-devel-6.12.0-211.43.1.el10_2.aarch64.rpm cad20ff1f003e5abd7946edfa5d965bfa94448811d71ed1e515d5864c6277966 kernel-rt-core-6.12.0-211.43.1.el10_2.aarch64.rpm cd4abc3992e121147a12cda14eb3d6e27ea6cb6124b3009643855c81ef32ec64 kernel-rt-modules-core-6.12.0-211.43.1.el10_2.aarch64.rpm d18e2f0acd079b7fe62bbd6973fb07ed3f9b456da6ee89af1f0ca73a963b9c70 kernel-rt-64k-6.12.0-211.43.1.el10_2.aarch64.rpm e468e1c45a8108ffa6313865588489777736e529d3754809c81bce7e4ec77956 kernel-rt-debug-modules-core-6.12.0-211.43.1.el10_2.aarch64.rpm e4ff855e0ec6616e620c4503b52f316282b6ef15ee034f5fe9c3d021fc682c0e kernel-rt-devel-6.12.0-211.43.1.el10_2.aarch64.rpm f85a9e7ae440997a86f4d645133764065eb559327a070ea417fbf6b2467d633a ALSA-2026:51295 Copyright 2026 AlmaLinux OS 0 1 Moderate

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CVE-2026-43186) Bug Fix(es) and Enhancement(s): * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-10.2.z] (JIRA:AlmaLinux-186345) * ice: driver update 2026-06, part 2 [almalinux-10.2.z] (JIRA:AlmaLinux-193134) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-modules-6.12.0-211.44.1.el10_2.aarch64.rpm 0d54b2a8e7b56ba48c086157583b157deb87b7e654a62dd3ed3e581a1a02cea0 kernel-rt-modules-extra-6.12.0-211.44.1.el10_2.aarch64.rpm 19f03f9e6b7606404bbf57423c2728fa284f3d12049bca336ab41764ff2f2a8b kernel-rt-64k-debug-core-6.12.0-211.44.1.el10_2.aarch64.rpm 1b6eba31a679955d850351d1b2896b00fe06a90bd74f5b5f52b7460a1897a96f kernel-rt-debug-devel-6.12.0-211.44.1.el10_2.aarch64.rpm 1e7bf5e81545b78050ff74b9262d325b7ca1a1f8c920cfcea646f886c7ccd48c kernel-rt-debug-modules-core-6.12.0-211.44.1.el10_2.aarch64.rpm 25eb710ef5fff9535d2262ef40bc25a73a4f47df778397a64430f05f9ec62b1b kernel-rt-64k-debug-devel-6.12.0-211.44.1.el10_2.aarch64.rpm 2e45785b59d1438c484f16cd2690e1f86f475d05df0cb837fff1a220095cefd1 kernel-rt-64k-core-6.12.0-211.44.1.el10_2.aarch64.rpm 3c16571fc930f9df73adaf51698d3b1348f61864104e0c42217e555de702aaeb kernel-rt-core-6.12.0-211.44.1.el10_2.aarch64.rpm 3f038a079512c4d7df8be18f9d530645eb78a6108a367bb830b6009a7474821f kernel-rt-64k-debug-6.12.0-211.44.1.el10_2.aarch64.rpm 450bccb3d793e400486303b7109c356bc14f403daaf9ef23be82ae7ba28ca2a1 kernel-rt-64k-debug-modules-6.12.0-211.44.1.el10_2.aarch64.rpm 4fc9c57ca996828f0940589f487d7d1f1084dfd100bb4dce426e9927f6bab8c3 kernel-rt-64k-modules-6.12.0-211.44.1.el10_2.aarch64.rpm 50c5f7e9d002982d5c30d39fff15510dd44818af851eabcfc0046c5cbe32eb26 kernel-rt-devel-6.12.0-211.44.1.el10_2.aarch64.rpm 6063400f003f23b9d845a9f642d08e201227a023bc13d282aadc04eae62746c6 kernel-rt-64k-debug-modules-core-6.12.0-211.44.1.el10_2.aarch64.rpm 7f1be72ac8e12ea61266d2aa51946426d9ae4c26af94e5525dbca45a11f9948a kernel-rt-64k-6.12.0-211.44.1.el10_2.aarch64.rpm 84bf6177fe4fd190d1ea08b4eb426f7cef0903a31f363bcdd119a7fafc73a5ca kernel-rt-modules-6.12.0-211.44.1.el10_2.aarch64.rpm 8bd92bd2423839c3ebb67f072cf66e711d9f8d5c0f27889eadc2752bc22f7bf2 kernel-rt-modules-core-6.12.0-211.44.1.el10_2.aarch64.rpm 985ce76d72e7fbf3210f17c2d31d4ab6b0c47c9a80a5b768ca0eaafdb1aed59a kernel-rt-64k-modules-core-6.12.0-211.44.1.el10_2.aarch64.rpm 9d61013508598970b2615a91f52cf890e42bf462219ef0fa05761e90dbbc9fb2 kernel-rt-6.12.0-211.44.1.el10_2.aarch64.rpm a5c815798f6bd095a1a16e087855f659288e4fc02240c3a9c0ba7217675856a1 kernel-rt-64k-devel-6.12.0-211.44.1.el10_2.aarch64.rpm bb99caccbe4b55b90a34e81827e45ac8387e223ecb2d4d0a0ba05682182e7c1f kernel-rt-debug-core-6.12.0-211.44.1.el10_2.aarch64.rpm bc1c4101cea70a2ebca887c74fa1298c82a9dde04d79506deb3e145e32e371ff kernel-rt-64k-modules-extra-6.12.0-211.44.1.el10_2.aarch64.rpm c8b4e700f6b71ba95b92eb0193f984892c578153e353ec2ba76ce4699a0e8e89 kernel-rt-64k-debug-modules-extra-6.12.0-211.44.1.el10_2.aarch64.rpm e05de200adddc3629413da431f9296e95576c5f9db81867caae5dc02f8fe60ef kernel-rt-debug-6.12.0-211.44.1.el10_2.aarch64.rpm e9d1c72073b11638f078fe8f7dcab09f69cdd13e3b1168bba18f71039896971e kernel-rt-debug-modules-extra-6.12.0-211.44.1.el10_2.aarch64.rpm f1c80432d861d753261abc7825186dce2f618ee799d1565316f571ba747c2049 ALSA-2026:53330 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fsnotify: Fix ordering of iput() and watched_objects decrement (CVE-2024-53143) * kernel: shmem: fix recovery on rename failures (CVE-2025-71072) * kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415) * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488) * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923) * kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368) * kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531) Bug Fix(es) and Enhancement(s): * Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-10.2.z] (JIRA:AlmaLinux-213035) * AlmaLinux10.0 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-10.2.z] (JIRA:AlmaLinux-222503) * AlmaLinux10.0 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-10.2.z] (JIRA:AlmaLinux-222505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-modules-extra-6.12.0-211.46.1.el10_2.aarch64.rpm 002842f0935d607a588e06497b423f36473c3a34167f9f71259c2e4ecd99caf4 kernel-rt-devel-6.12.0-211.46.1.el10_2.aarch64.rpm 337fbf02d719f4c131e4640b0522c338fc08f000d7e744a673ee034dd1c3a082 kernel-rt-64k-modules-6.12.0-211.46.1.el10_2.aarch64.rpm 36e0febfa011f8ea17ef73478de2bcf71cd9f47d8336532ba7d38c43bf6d12b2 kernel-rt-debug-modules-core-6.12.0-211.46.1.el10_2.aarch64.rpm 37bca56c3d321bc35ee3fd50052c0700965b38cf135993280a2c0b8b9f306a14 kernel-rt-64k-debug-modules-6.12.0-211.46.1.el10_2.aarch64.rpm 43cbb17513b67eb797c13aacd011811abf4a106f6fd69ca7be4dcded4f81b946 kernel-rt-modules-core-6.12.0-211.46.1.el10_2.aarch64.rpm 5af4311d8139ef87f95483cb53993626a873e85d0fef060a8f9a7da82c0c5f8d kernel-rt-64k-debug-modules-extra-6.12.0-211.46.1.el10_2.aarch64.rpm 672e674959b77e59cfc6ad3a25c48477226e6b06c9df1467eccfece04c603837 kernel-rt-6.12.0-211.46.1.el10_2.aarch64.rpm 69b9103cca2f418e1d213c8813a308d793c879a137f3dc2b012c383b05d2844d kernel-rt-64k-devel-6.12.0-211.46.1.el10_2.aarch64.rpm 771da93f867def7d3f6167cb187c184daef0747e5314968728f7e020271981e4 kernel-rt-64k-6.12.0-211.46.1.el10_2.aarch64.rpm 8b392240108fee23c6fcc9428d8633a921d8b2784349045197ff625af9548cac kernel-rt-64k-modules-core-6.12.0-211.46.1.el10_2.aarch64.rpm 913c6dc703800edee3c7f1b5f27b3c6f18c9931b3571e10c6125f0615650c4d2 kernel-rt-modules-6.12.0-211.46.1.el10_2.aarch64.rpm 91574599153123190ca6b72229462e36ea3723a5084c6eb9c2b003c96e0d8d69 kernel-rt-core-6.12.0-211.46.1.el10_2.aarch64.rpm 9305d0780595fb8db8bb7d0a371090b2d082b8214c4f39576d4652fb20cef9dd kernel-rt-64k-debug-core-6.12.0-211.46.1.el10_2.aarch64.rpm 95c0f2103b90787281773f311a4cd44d6c3ffc71faeb5b3373cde1da503d2c7e kernel-rt-64k-debug-6.12.0-211.46.1.el10_2.aarch64.rpm ada823cf94ce94d0e16e33f82ef03e0d3ebd9717795915aaa6a51337c46895e7 kernel-rt-debug-modules-extra-6.12.0-211.46.1.el10_2.aarch64.rpm b36e9a1789f9153ad5186bc4a0daa813690ad9bb14f887242c4513aaadf52675 kernel-rt-debug-devel-6.12.0-211.46.1.el10_2.aarch64.rpm b5fd4aa23bfa3ef409cc0cf08429c59d477755bbd2be64c130f20a39f74b3f41 kernel-rt-64k-core-6.12.0-211.46.1.el10_2.aarch64.rpm bbcd888fc8a0bdbe00ca87e7ab744aa6f595c20ca2b102f0dd14adf1556da66b kernel-rt-64k-debug-devel-6.12.0-211.46.1.el10_2.aarch64.rpm be32041fa7bc124e5f97147641046bf0238c971ccd828791d9a949cb369dfe60 kernel-rt-debug-modules-6.12.0-211.46.1.el10_2.aarch64.rpm c48ae6f614b44c7122d39d332cc3641c733136e1b9e2ed9eab847e128ee38c39 kernel-rt-64k-modules-extra-6.12.0-211.46.1.el10_2.aarch64.rpm d3f9f490871ec31f0064c1ff0b88e8d70711cb215094ec28978ea3ce6a3b579c kernel-rt-64k-debug-modules-core-6.12.0-211.46.1.el10_2.aarch64.rpm eb10ad47da97d4964fb8bff269f6c51e7585969d144b88cc013d76c0061d34b8 kernel-rt-debug-6.12.0-211.46.1.el10_2.aarch64.rpm f1df1be3fb861403091d416da3a1ba306f7b802b8618194d08185d54bed75099 kernel-rt-debug-core-6.12.0-211.46.1.el10_2.aarch64.rpm f54e95d526637f40bf8590a249063ba848a33779deac1536e2936ac632f8728d ALSA-2026:54343 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202) * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264) * kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887) * kernel: perf/aux: Fix page UAF in map_range() (CVE-2026-64300) * kernel: af_unix: set gc_in_progress to true in unix_gc() (CVE-2026-53361) Bug Fix(es) and Enhancement(s): * netfilter: CVE backports for AlmaLinux 10.2.z (JIRA:AlmaLinux-185311) * tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-10.2.z] (JIRA:AlmaLinux-214436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-devel-6.12.0-211.47.1.el10_2.aarch64.rpm 0b8c7bd5d440844c14e7feaf62d835dcf0b14e4e37238521a70f950a24c7355e kernel-rt-core-6.12.0-211.47.1.el10_2.aarch64.rpm 199456f2360b86e8afcc3d87703ab5370000271bb88970ac50fc59e3a12b4293 kernel-rt-debug-devel-6.12.0-211.47.1.el10_2.aarch64.rpm 1dfb862dab3e99b7b980bb756ea759251aa98cb43b047fc796a217e9807b95d6 kernel-rt-debug-modules-6.12.0-211.47.1.el10_2.aarch64.rpm 24c47e41d3f0a2551e00b879da90eb7a4c3c9260633467f43d8f4b95275b33c2 kernel-rt-modules-6.12.0-211.47.1.el10_2.aarch64.rpm 34ef6bb2ca801ab72b7d1c149715b0fd731cafaf99cc8ebe8162b58dd4fd42bb kernel-rt-64k-core-6.12.0-211.47.1.el10_2.aarch64.rpm 38fd99f4005062af691fc9530bf1b032d44071794c2ae453267d989127eb9b0a kernel-rt-64k-debug-modules-6.12.0-211.47.1.el10_2.aarch64.rpm 3e6dd40f213f47d102e3d579ff751843f3ba7b4cce9c910bfdc3f2503e9cdc28 kernel-rt-64k-modules-extra-6.12.0-211.47.1.el10_2.aarch64.rpm 461de08e57b0cbf4afca88c6055656fb93e2c72998f179d9169fd59abaef8ec9 kernel-rt-64k-devel-6.12.0-211.47.1.el10_2.aarch64.rpm 6015dfe9e91d5f54d65bd8af8c8e58ab592e80a455ab192840e76e881ecdecd8 kernel-rt-debug-core-6.12.0-211.47.1.el10_2.aarch64.rpm 6637694f7fa2b73390346b0fffd6aca29107cb1129f6c21240e476d43683e6f7 kernel-rt-64k-modules-6.12.0-211.47.1.el10_2.aarch64.rpm 67cdf34a047166859babd59b8b006a42403b3aae373037143354dbe1d38cec21 kernel-rt-64k-6.12.0-211.47.1.el10_2.aarch64.rpm 6cc46106917f1cdffb82c654aa6842479e4494282b9e5438664d7290cc380d98 kernel-rt-modules-core-6.12.0-211.47.1.el10_2.aarch64.rpm 79c606dbfa41f0a0042243e5fdfa12bbba3c3d465e675a556e45eaceaa304c12 kernel-rt-64k-debug-modules-extra-6.12.0-211.47.1.el10_2.aarch64.rpm 7d2c00282447f27a087230e27821dadfda8ab01c7e9706114064e80cb9c2f312 kernel-rt-64k-debug-6.12.0-211.47.1.el10_2.aarch64.rpm 8eb6ea051ad463026432926c6380264d6b5b7ef2f7846deddea84f9fdda7b546 kernel-rt-64k-modules-core-6.12.0-211.47.1.el10_2.aarch64.rpm 8f6001b998eb424e55ab2b826f149c4ebfd554cbac5edd86d75ca2357764b647 kernel-rt-debug-modules-core-6.12.0-211.47.1.el10_2.aarch64.rpm 9ac5dd3e1c1bd8321edda136a8bede9cd65a6dacb5c89e4276c58c6b8033632f kernel-rt-64k-debug-modules-core-6.12.0-211.47.1.el10_2.aarch64.rpm 9bea9583a331080509d40a6bcc95fa21f3bfc464239b2c200fe4fd87139b2dd9 kernel-rt-64k-debug-core-6.12.0-211.47.1.el10_2.aarch64.rpm ba603507c79bbb12682fedd031fe369158434e790eee93e12eab1a672d7d7e5e kernel-rt-debug-modules-extra-6.12.0-211.47.1.el10_2.aarch64.rpm bc7299c0ca293e9f0ec04661f347b086e4bb64139c156e69127f33c73249f1eb kernel-rt-6.12.0-211.47.1.el10_2.aarch64.rpm c3e72de9c387a32a97018e6ef09f2f75908942ff817b0946d9c9da92fac8658a kernel-rt-debug-6.12.0-211.47.1.el10_2.aarch64.rpm c556667a1da90802e43a88a8416152533616082640decc81d621288a0fc14bfd kernel-rt-64k-debug-devel-6.12.0-211.47.1.el10_2.aarch64.rpm dcb04345145626caa6bc9b69492b6f0097e79deceedd5d71e9d50a36655be539 kernel-rt-modules-extra-6.12.0-211.47.1.el10_2.aarch64.rpm e83c708004423d74e45e4f8147d75ce9f748f398519858d0d94dad0782766296 ALSA-2026:57251 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206) * kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237) * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493) * kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991) * kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878) * kernel: smb/client: fix out-of-bounds read in symlink_data() (CVE-2026-46185) * kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991) * kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143) * kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136) * kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329) * kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356) * kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374) * kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884) * kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886) * kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952) * kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888) * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017) * kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879) * kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219) * kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382) * kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379) * kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386) * kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560) * kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388) Bug Fix(es) and Enhancement(s): * CLONE - AlmaLinux 10.2.z xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (JIRA:AlmaLinux-223954) * vhost: reset the vring metadata cache on vring reconfiguration [almalinux-10.2.z] (JIRA:AlmaLinux-224545) * cifs: periodic IO errors when rename races with lease break [almalinux-10.2.z] (JIRA:AlmaLinux-235459) * cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-10.2.z] (JIRA:AlmaLinux-235812) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-6.12.0-211.49.1.el10_2.aarch64.rpm 241e8487148dae481518a0d04d4cfe3676f8a607411fc9c666d85a70cacf9421 kernel-rt-64k-devel-6.12.0-211.49.1.el10_2.aarch64.rpm 2720cd422c1778487774803e938d052a2345a5d18a5adc67253f93b2fdbdb345 kernel-rt-core-6.12.0-211.49.1.el10_2.aarch64.rpm 294b0499836c5313d7287958ad628f4a18faef8227922ae0926477cc38cce780 kernel-rt-debug-modules-extra-6.12.0-211.49.1.el10_2.aarch64.rpm 30177d0a9a5fa245f14869e971c5e596f2b4758b46edeab0f5ca9dc6cd778ee4 kernel-rt-64k-modules-core-6.12.0-211.49.1.el10_2.aarch64.rpm 320711a6705b9343e6c26018bd88722b0cc2ce72b5b08f3083d335fa6d5ff3c8 kernel-rt-64k-modules-6.12.0-211.49.1.el10_2.aarch64.rpm 3a94fc88a487931156b2bca11c070cf2ce474ea3b6a61f6aee9cd092b31fefa0 kernel-rt-devel-6.12.0-211.49.1.el10_2.aarch64.rpm 46ce78763f2d2d3a53b3e0d31dc84cb06b77c1ca8c1d3e79246f8f7e71cf06bd kernel-rt-debug-core-6.12.0-211.49.1.el10_2.aarch64.rpm 48943955a54f091d52ffb4e99f9d5033896ca6e30bfbb398b80df77d60b7af66 kernel-rt-64k-debug-6.12.0-211.49.1.el10_2.aarch64.rpm 5b2abc803d006ead581506bae9b839768b79485ed714686b06ab002228e5056e kernel-rt-debug-modules-6.12.0-211.49.1.el10_2.aarch64.rpm 6957dc44cace395d3f91c1a17c0735cd0cdd7f93bc24d8e5e35325799702c66a kernel-rt-64k-debug-core-6.12.0-211.49.1.el10_2.aarch64.rpm 6ad0dc9005020522a4d8e9191b9c3a48777a584aad410fca532e75be56ba60c2 kernel-rt-modules-extra-6.12.0-211.49.1.el10_2.aarch64.rpm 7557cfb83f21b6fbe3fe59107612127f5794c757d20f5f8adb52071ad61b173b kernel-rt-64k-debug-modules-extra-6.12.0-211.49.1.el10_2.aarch64.rpm 8bbb720754698a3d087842f53071025b3ab5995eddc413a862003274cc90b048 kernel-rt-64k-6.12.0-211.49.1.el10_2.aarch64.rpm 8c3a3a9d4543c5e7788f111695110d2a8fd110c6bbc311a554841376d0a1162c kernel-rt-64k-debug-modules-6.12.0-211.49.1.el10_2.aarch64.rpm 915264c0805c59ec0de76d0f5bb67c4f28a12681b284488206cbb1dc2a7d98bf kernel-rt-64k-debug-modules-core-6.12.0-211.49.1.el10_2.aarch64.rpm a5fb90525d113d8650f53a2b21fbde03b07b5c95635c1db73ff8e7643ef2abbe kernel-rt-debug-devel-6.12.0-211.49.1.el10_2.aarch64.rpm ae1f41e542acae434fbcd6985afef57775c4f021bea688f8b1c9d5c12af5d670 kernel-rt-64k-modules-extra-6.12.0-211.49.1.el10_2.aarch64.rpm b7201dfc2a909ee0a8a74f80cd667069997ae4a722910dd1dedb6f0f35e89e01 kernel-rt-debug-modules-core-6.12.0-211.49.1.el10_2.aarch64.rpm c75d00b96a7dca734ff8293447f8fe2dcb1c83504cc4dcbae73c71212e48effd kernel-rt-modules-core-6.12.0-211.49.1.el10_2.aarch64.rpm d1e3d8baca64e304bad69efba4db15d2d62fc0818c18f58e96316c850e6c40df kernel-rt-modules-6.12.0-211.49.1.el10_2.aarch64.rpm e540930a26c88701140784b488502c9a4440cc9df39a93bd97ef54e527819484 kernel-rt-64k-core-6.12.0-211.49.1.el10_2.aarch64.rpm e7ea3e3aa2e37cd07fe17b0cfe15fac6b8754962940b1b138afe844370f6d988 kernel-rt-64k-debug-devel-6.12.0-211.49.1.el10_2.aarch64.rpm f28b3d1b50543515efc1d96f292d0a94c1044aa26a8a0fbc66c1e7155b123645 kernel-rt-debug-6.12.0-211.49.1.el10_2.aarch64.rpm fda6e3ecdaa321e37ab8be7fef346961709218d5879f0ad2833644a7c76d9c9b ALSA-2026:61887 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: seccomp: passthrough uretprobe systemcall without filtering (CVE-2025-21834) * kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003) * kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks (CVE-2026-43454) * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450) * kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970) * kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120) * kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053) * kernel: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CVE-2026-53026) * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185) * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189) * kernel: mm/list_lru: drain before clearing xarray entry on reparent (CVE-2026-53153) * kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800) * kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397) * kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399) * kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392) * kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391) * kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018) * kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136) * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189) * kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320) * kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438) * kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304) * kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298) * kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490) * kernel: mm: shrinker: fix shrinker_info teardown race with expansion (CVE-2026-64418) * kernel: smb: client: fix change notify replay double-free (CVE-2026-64384) * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277) * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276) * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480) * kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086) * kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166) * kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069) * kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130) * kernel: ceph: give up on paths longer than PATH_MAX (CVE-2024-53685) * kernel: ceph: fix memory leaks in ceph_mdsc_build_path() (CVE-2026-43419) * kernel: ceph: add a bunch of missing ceph_path_info initializers (CVE-2026-43408) Bug Fix(es) and Enhancement(s): * AlmaLinux 10: s390: Revert support for DCACHE_WORD_ACCESS [almalinux-10.2.z] (JIRA:AlmaLinux-188180) * qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-10.2.z] (JIRA:AlmaLinux-193043) * ss core dumped when there is an SCTP session [almalinux-10.2.z] (JIRA:AlmaLinux-212393) * [AlmaLinux-10.2.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-218627) * AlmaLinux10.0 - s390/pfault: Fix virtual vs physical address confusion [almalinux-10.2.z] (JIRA:AlmaLinux-222507) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-debug-6.12.0-211.50.1.el10_2.aarch64.rpm 035d31095ff1d86151852706abf70a8ceb9e64f1d35f078d884670d4c35972ee kernel-rt-modules-core-6.12.0-211.50.1.el10_2.aarch64.rpm 0d50b5b5f60a73d61bde55470357caa2b4249cd5df03379027d3da0c995a6f80 kernel-rt-devel-6.12.0-211.50.1.el10_2.aarch64.rpm 181da346c96ac70e8614ad91d5a34087b87e9716f08760dafc6c705b783c3ba4 kernel-rt-64k-modules-core-6.12.0-211.50.1.el10_2.aarch64.rpm 1c85831f96f2a9060ad4bbd335309f489d1921783a26c1f633727c2cb3b11349 kernel-rt-debug-modules-extra-6.12.0-211.50.1.el10_2.aarch64.rpm 1d2a4310cc78dc70388022a04d542daef6b0a6c796d2087456ba584b41baf208 kernel-rt-64k-devel-6.12.0-211.50.1.el10_2.aarch64.rpm 1f6a61eb1f6e0780a5bbd2486805ee58c1099165aad730b0c304c2f24abcda64 kernel-rt-64k-debug-modules-extra-6.12.0-211.50.1.el10_2.aarch64.rpm 254bc614ec93f68fca9158588816af0753a3ce6d9e870bcef3e54ada06642d09 kernel-rt-64k-debug-core-6.12.0-211.50.1.el10_2.aarch64.rpm 259a9b866e61c25992dc37b043eac1020b1f60fda70b64cad068ff1acf36d253 kernel-rt-modules-6.12.0-211.50.1.el10_2.aarch64.rpm 3aae042c672795087d1c31778d5bf8510e08dfeb9a86cff51a42f887b84272d4 kernel-rt-64k-core-6.12.0-211.50.1.el10_2.aarch64.rpm 4f1b70dbcf0d9abaf5335f42cc7c90d1ceb88976257f69656f52ae5f393bdac6 kernel-rt-debug-modules-6.12.0-211.50.1.el10_2.aarch64.rpm 6ea34beb9342b835872143dd6689a41bc1809e2c194cfa82a03944da598a8eec kernel-rt-6.12.0-211.50.1.el10_2.aarch64.rpm 752a522aaa7a5e64c529d17fbc28695543b1a73d646c8a93a0b13f48b3381ac3 kernel-rt-64k-modules-6.12.0-211.50.1.el10_2.aarch64.rpm 7b67efc1fc18fdf7d87083d39e5db6356f31072b232a225418bd18177dc27f78 kernel-rt-64k-debug-devel-6.12.0-211.50.1.el10_2.aarch64.rpm 7b9ec2e4e2c7a757b1fb768e20c0bd35f29e64263b2295cf48b2bad748823da5 kernel-rt-64k-debug-modules-core-6.12.0-211.50.1.el10_2.aarch64.rpm 95b80fccc602a7e0fef259c677e29a8e7820c722dd0824a7ba89343b9c85e2e7 kernel-rt-debug-devel-6.12.0-211.50.1.el10_2.aarch64.rpm 9c961cab3d7d5bd2e68d7fee15a664115671d7ec33a5c18ce0bf313fcbd4e136 kernel-rt-64k-6.12.0-211.50.1.el10_2.aarch64.rpm a3998e0807bc88e85621c0859620c4baf12a3c0486adfb4dbce4d6e9d761d6c0 kernel-rt-debug-core-6.12.0-211.50.1.el10_2.aarch64.rpm be5c02be66a6af66e7ccbdc49316329dcc0f8dcfb705147f50fd503ebe55c98b kernel-rt-modules-extra-6.12.0-211.50.1.el10_2.aarch64.rpm c5bb78a5292cdfd5190a7f5ccbc162751ac3b739867fd7343e402cd76d3b3f86 kernel-rt-core-6.12.0-211.50.1.el10_2.aarch64.rpm dac56d204f3eecc53ce2b076a76e531bccbab5401d33d201b38d8ffc5c42f3bb kernel-rt-debug-modules-core-6.12.0-211.50.1.el10_2.aarch64.rpm dec7683e74c8d9a2b81708184dc47df0fe2db21bb32ae2ecb30ed27b79eab9fb kernel-rt-debug-6.12.0-211.50.1.el10_2.aarch64.rpm f2f480ada38369dbc8e3832b5275e397bc8e4cbb6e9b12e858dbb07a1dc0a237 kernel-rt-64k-modules-extra-6.12.0-211.50.1.el10_2.aarch64.rpm f4fb0b6094f9f2b1f6a1e6826717bdeaf27a4c62362ea33815eecb3947677c76 kernel-rt-64k-debug-modules-6.12.0-211.50.1.el10_2.aarch64.rpm f55855cc1b1017bc7fee76b4f40d1fc213361911ad6b258310ea3699b1c00122 ALSA-2026:62578 Copyright 2026 AlmaLinux OS 0 1 Important

go-fdo-server security update

This package provides a server-side implementation of the FIDO Device Onboard (FDO) specification, written in Go. FDO is an open standard for the late binding of device credentials, allowing for automated and secure on-boarding of devices when they are first powered on in their final location. Security Fix(es): * crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810) * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * net/[http:](http:) golang: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default go-fdo-server-rendezvous-1.0.1-2.el10_2.4.noarch.rpm 0211aa299091abf4cfdbbe76f87520827c571e8db4a3770fdd0349a146e1d8c0 go-fdo-server-manufacturer-1.0.1-2.el10_2.4.noarch.rpm 84881985faeb5b98d8a5aa9bcdf5c151015a891734684a6dfae3071d412b6e96 go-fdo-server-owner-1.0.1-2.el10_2.4.noarch.rpm df71d99ab263c33a04002cecffd3691380cb99ec2d02cac000f9c35a6af35a83 ALSA-2026:63128 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073) * kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808) * kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824) * kernel: smb: client: fix query directory replay double-free (CVE-2026-64387) * kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145) * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-core-6.12.0-211.51.1.el10_2.aarch64.rpm 055e4dd62029cbaf1ad4d88a8bd092e19f31344f29612d3d5320249898a02db1 kernel-rt-modules-extra-6.12.0-211.51.1.el10_2.aarch64.rpm 257affbac653418e8c11b292f836bf396a21cd4a8e0bf7b5ebc31cfc1a6818ec kernel-rt-debug-core-6.12.0-211.51.1.el10_2.aarch64.rpm 26fa5820f8acdbcc9f213e1ba759346d22ca796f1ef08cddb14b0947ee089ffe kernel-rt-64k-core-6.12.0-211.51.1.el10_2.aarch64.rpm 2e95f9d0aea1b314eb10cbfe99fbb5c47de0a91edc16c8ddc2a4f9add1ebd8b7 kernel-rt-64k-6.12.0-211.51.1.el10_2.aarch64.rpm 43fad424a52103d2987326c532110bd949a871caac88ccd8f4d95b547c1ad06e kernel-rt-64k-debug-devel-6.12.0-211.51.1.el10_2.aarch64.rpm 53f5472d196a5b40bae92c6190a31604b0fa980ca3455230a2fd33bf8ff97dc2 kernel-rt-modules-core-6.12.0-211.51.1.el10_2.aarch64.rpm 58a6a8b6c9f297389ae957c7c0e752041182e55eb2019f85b32c4baa18abbbcd kernel-rt-6.12.0-211.51.1.el10_2.aarch64.rpm 59e82d232b7b9c474b62143637d6a8294c56d6cc1d0a453ed2b510e26fdbce60 kernel-rt-64k-debug-6.12.0-211.51.1.el10_2.aarch64.rpm 64096efa26b79dd55d38a6d22df22ee1ce1a9ec30704438983ad6b26016580ed kernel-rt-devel-6.12.0-211.51.1.el10_2.aarch64.rpm 6e913c2643a492483ee35815726033c5e74af7b751f282e6f4b86153de3547b6 kernel-rt-debug-modules-6.12.0-211.51.1.el10_2.aarch64.rpm 7aef51b86fe90965e35ffbff2c89c85dc8b92662975e6b955c5420c6c5fdee15 kernel-rt-debug-devel-6.12.0-211.51.1.el10_2.aarch64.rpm 8232915f0f581a6c24c4547703fc100137cbd94b7437899c9489f7385085e885 kernel-rt-debug-modules-core-6.12.0-211.51.1.el10_2.aarch64.rpm 8544ecc3c5d39a0b6068a5c12c3e7098e52b7910f507b510c37906e6b8217652 kernel-rt-modules-6.12.0-211.51.1.el10_2.aarch64.rpm 8a0b5e104d8b1c7e3ceb3ec3f1baf35cf6c3a8dd76ad0423aa1dfda29971e4e0 kernel-rt-64k-modules-extra-6.12.0-211.51.1.el10_2.aarch64.rpm 9d6c67cfa6dff5b37d9e7d126c03e8bc14805a81b855bdb808b5c15704c208b5 kernel-rt-64k-debug-core-6.12.0-211.51.1.el10_2.aarch64.rpm c3826b1ac9afe554064615f655244f8772c0a6edd923c037670acb7f95c9d6c5 kernel-rt-64k-debug-modules-6.12.0-211.51.1.el10_2.aarch64.rpm c3ce42e1daf07f21e7d954c870c08248052d2ed4699e47bd35df9c5950b855d8 kernel-rt-debug-6.12.0-211.51.1.el10_2.aarch64.rpm d29617d841337cae10d0b9d36df7a3877a7533bd244708309e290f0d8f241f1b kernel-rt-64k-devel-6.12.0-211.51.1.el10_2.aarch64.rpm d44e53ce93f38b1a08cbf02b253ed3a65b20e3fb8d37ea82dc9f5cefe65d6b6c kernel-rt-64k-debug-modules-core-6.12.0-211.51.1.el10_2.aarch64.rpm e5616e864e310f3ec11ced1f551edcb5503d8f21e7f07dc56f50089e1c629150 kernel-rt-64k-modules-core-6.12.0-211.51.1.el10_2.aarch64.rpm ea5e802217354982e90c55f62937b053a75b33d9cb6ffb933535901a5bfd4225 kernel-rt-debug-modules-extra-6.12.0-211.51.1.el10_2.aarch64.rpm f7ec9ff66b24e2d8b52520dcda5596c22599e09793bdc5cd26ddda3de5e05d43 kernel-rt-64k-debug-modules-extra-6.12.0-211.51.1.el10_2.aarch64.rpm ff353e420d4064c28211f25b7375bc577cc8daccc0b4971665dc2c8657408729 kernel-rt-64k-modules-6.12.0-211.51.1.el10_2.aarch64.rpm ff9147c0b37d4f82e937c597923669f04443182c14a17b5c6a1ab5aa83e540ff ALSA-2026:65334 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334) * kernel: Bluetooth: virtio_bt: clamp rx length before skb_put (CVE-2026-46123) * kernel: Bluetooth: serialize accept_q access (CVE-2026-52918) * kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091) * kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CVE-2026-53072) * kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (CVE-2026-52947) * kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CVE-2026-53256) * kernel: wifi: nl80211: reject oversized EMA RNR lists (CVE-2026-53182) * kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CVE-2026-53209) * kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers (CVE-2026-53254) * kernel: vfio/pci: Clean up DMABUFs before disabling function (CVE-2026-53322) * kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CVE-2026-63975) * kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015) * kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CVE-2026-63947) * kernel: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CVE-2026-63944) * kernel: Bluetooth: ISO: fix UAF in iso_recv_frame (CVE-2026-63946) * kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (CVE-2026-64117) * kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (CVE-2026-64037) * kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113) * kernel: vfio/pci: Check BAR resources before exporting a DMABUF (CVE-2026-64042) * kernel: accel/qaic: Add overflow check to remap_pfn_range during mmap (CVE-2026-64051) * kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (CVE-2026-64255) * kernel: wifi: mac80211: fix MLE defragmentation (CVE-2026-64515) * kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409) * kernel: wifi: mt76: mt7925: fix crash in reset link replay (CVE-2026-68307) * kernel: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (CVE-2026-68193) * kernel: dm-verity: fix buffer overflow in FEC calculation (CVE-2026-72098) * kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129) Bug Fix(es) and Enhancement(s): * rtla-timerlat-top doesn't stop properly when threshold is reached on multiple CPUs at once [almalinux-10.2.z] (JIRA:AlmaLinux-193027) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-devel-6.12.0-211.53.1.el10_2.aarch64.rpm 009bc42d7ce196bb3cb0a26db09bc271bba022f378379771eed6d54f1e44a760 kernel-rt-debug-modules-core-6.12.0-211.53.1.el10_2.aarch64.rpm 18c4a8873bfa860533a4ae77831ccd1f623aadeab542003208526db24b0b2949 kernel-rt-devel-6.12.0-211.53.1.el10_2.aarch64.rpm 2790cc1aa703ec67e110317f0d43ed2acc42090fb25764c321be081c0256e69e kernel-rt-debug-modules-extra-6.12.0-211.53.1.el10_2.aarch64.rpm 2a734d6a5e2aabe56f5bc525933757c7b28bd4768f0217478a9d31527eff57d8 kernel-rt-64k-debug-6.12.0-211.53.1.el10_2.aarch64.rpm 32e3b2dbe735333318afe988212ae4171652bbd67e8ae27ff624f6ea09626cba kernel-rt-64k-debug-modules-core-6.12.0-211.53.1.el10_2.aarch64.rpm 3b7f3890fca3e9ced91440d8bf01c0b278a8ac012bda13f0ae4cbeb4b3058ee0 kernel-rt-modules-extra-6.12.0-211.53.1.el10_2.aarch64.rpm 43b1378354e2273c8789e553a87812f46984c1e308bf8a0dc520b9930b7eec17 kernel-rt-debug-6.12.0-211.53.1.el10_2.aarch64.rpm 5d865220210a6d3abd1ef26922e7d57a8880bd31eacf7818f8a878399f9ff9e2 kernel-rt-64k-debug-core-6.12.0-211.53.1.el10_2.aarch64.rpm 663f9bdc0c07fcc06372641304293793250e1df1d00f8d80747dcd207323f9ac kernel-rt-6.12.0-211.53.1.el10_2.aarch64.rpm 6b02c796499e035d937223c70b43224ad72f1cb73b40e569734073a7789995b8 kernel-rt-64k-modules-6.12.0-211.53.1.el10_2.aarch64.rpm 6b7683794f1830b7b261d6c8034a52325efc67e7593b112768aaa7aca713b6a8 kernel-rt-64k-modules-extra-6.12.0-211.53.1.el10_2.aarch64.rpm 800a9e37f027ba2fdbcd65b1e2ce5b94f1eb2130a25ef41c5f6fc943cde602fd kernel-rt-debug-core-6.12.0-211.53.1.el10_2.aarch64.rpm 85fc18a361584945eba316b775778727f06ab304db2bde758aeb0dfd8993f4cf kernel-rt-64k-core-6.12.0-211.53.1.el10_2.aarch64.rpm 97bc9a89d6c33f7e3ea44eddd421ddcdeeaa171190ca073c13f826a51eb5e988 kernel-rt-modules-6.12.0-211.53.1.el10_2.aarch64.rpm 9876a5fca18c870f28813646b62c3a8c5bdcbf9fc4320c2ab1407b5e21313d46 kernel-rt-core-6.12.0-211.53.1.el10_2.aarch64.rpm a046fa4b403c48b14ded5e940e67dd6a41c17d01b2d614d62723764090daae9e kernel-rt-debug-modules-6.12.0-211.53.1.el10_2.aarch64.rpm b90562681491c2d89ff8a2102af50fd4ef766796f179453368b5225232c2bd04 kernel-rt-64k-modules-core-6.12.0-211.53.1.el10_2.aarch64.rpm b9c9fc0656224779957b1cc9e91c42e02b1ddeab13fa85a808507d5bc2374d84 kernel-rt-debug-devel-6.12.0-211.53.1.el10_2.aarch64.rpm cc37e43e93f5adbcb4860e2d990712e2d7a019ee822bdd4fef60eed904ab4289 kernel-rt-64k-6.12.0-211.53.1.el10_2.aarch64.rpm d3ed8a2ed6e5da4214c06e05f90e68975d92acdd450e79d3ddc2a2fbc3bf4734 kernel-rt-64k-debug-modules-extra-6.12.0-211.53.1.el10_2.aarch64.rpm dbbfda693aeece8e2c9c14f7cbc56c5b1602d3cb2a2df1df7a75da5ca3a663e5 kernel-rt-64k-debug-modules-6.12.0-211.53.1.el10_2.aarch64.rpm dff8712b4cf2b58ab5c3d00624f1c3abad88d05a8c012912204a654ecfd040dd kernel-rt-64k-debug-devel-6.12.0-211.53.1.el10_2.aarch64.rpm ec85ce689147015b21ec5d728475ef66f840eb820dfffd19a12040c57385433c kernel-rt-modules-core-6.12.0-211.53.1.el10_2.aarch64.rpm f64c03024bd221178702bec5a2f5fe609b0e1b567776abca7ad459de74598d35 ALSA-2026:66355 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-modules-6.12.0-211.54.1.el10_2.aarch64.rpm 03f4dc7b5417f8470c098afb4319b498842d2d5ad392553031ea06c737dba584 kernel-rt-devel-6.12.0-211.54.1.el10_2.aarch64.rpm 0b71f9244447b18d89c7881aaea8304965ec9acfb4cbfe9984f36348fd45700a kernel-rt-64k-6.12.0-211.54.1.el10_2.aarch64.rpm 1a670d590fdf7d2b4a6975ae480edf34c407d74bd513f3554e735f5dd5753cda kernel-rt-modules-extra-6.12.0-211.54.1.el10_2.aarch64.rpm 1c4547986475c573644faf2a0a41ea06b74efcecd4e36f5e3eb26cf45cabeb5c kernel-rt-64k-devel-6.12.0-211.54.1.el10_2.aarch64.rpm 2d8004a0d709c8a2dbd5d9cfde05354e200130c1c9522360dbab01e50cc95ca2 kernel-rt-debug-6.12.0-211.54.1.el10_2.aarch64.rpm 2d9e5c15c86f1daa1fb13a97e6649dbf6181ebf3e8afd32f83b24f7e3df3bae3 kernel-rt-debug-modules-extra-6.12.0-211.54.1.el10_2.aarch64.rpm 33ab5d4664c2f126094193a5c2d21f86ebc10ef93ef673eeec0e79fbbcb652ef kernel-rt-64k-debug-core-6.12.0-211.54.1.el10_2.aarch64.rpm 3641b9df73113221b990f19d18eddb17d583cd809a1c4028a00d5dee36a5aa19 kernel-rt-64k-debug-modules-extra-6.12.0-211.54.1.el10_2.aarch64.rpm 42d73efc29cb6663a4d501bed3f5231f8fa587dba6ecd33e179cf238ae7321be kernel-rt-64k-modules-core-6.12.0-211.54.1.el10_2.aarch64.rpm 684acc44a4e453a24751a4935e66885d14944507c49663c4f18d6863d3058390 kernel-rt-debug-modules-6.12.0-211.54.1.el10_2.aarch64.rpm 6ef2240e45c44d70ad672fef7aa4cab238649897c6986296f97198259a721ec2 kernel-rt-64k-modules-extra-6.12.0-211.54.1.el10_2.aarch64.rpm 783b427bc577fb1d58ab94027eee668ebfa108437514586f400ef780ee9cc2fe kernel-rt-64k-debug-modules-6.12.0-211.54.1.el10_2.aarch64.rpm 7a271e624c55ac64aac757c13fc9fa3c9d258ea0a8e16e550af297a315cfbe1f kernel-rt-debug-modules-core-6.12.0-211.54.1.el10_2.aarch64.rpm 7e45644bae7431e39ef6cf5787d2cb2144cf723f7fa0bded0853bfa6ab966822 kernel-rt-modules-6.12.0-211.54.1.el10_2.aarch64.rpm 845c110943b373dbc74f71402b37fe94f2cc1a3428d55449c5b4bece93b2289c kernel-rt-core-6.12.0-211.54.1.el10_2.aarch64.rpm 8de78417ce84bbd5c8e235fd1273bd8a97bb0604a6660040795e936f89ddc504 kernel-rt-64k-debug-devel-6.12.0-211.54.1.el10_2.aarch64.rpm a2bcce886c6ce5db8994552c5481078047ea40d21c02b129010e1c2dbb4bf663 kernel-rt-64k-debug-modules-core-6.12.0-211.54.1.el10_2.aarch64.rpm a87fbc5de13b808b4ee1f84002e82deaec382e382345c935e1f36e38f2f15dab kernel-rt-debug-core-6.12.0-211.54.1.el10_2.aarch64.rpm b779bd344263588a51623f4309b7136deb870a10ff708d0b38f556688a780119 kernel-rt-modules-core-6.12.0-211.54.1.el10_2.aarch64.rpm c4b33374939f3c499be0631adfedf5d92f72c8f54d827b5f34b268f61abc42fb kernel-rt-6.12.0-211.54.1.el10_2.aarch64.rpm dfb2446ea79e20a06646401bcc19a85c55a9890cd35b928ffee3d70cd6da9ef2 kernel-rt-debug-devel-6.12.0-211.54.1.el10_2.aarch64.rpm e2da2e26a9e628f1757798d7c54ac33ba30b18a3787cbf163763ad852357d393 kernel-rt-64k-debug-6.12.0-211.54.1.el10_2.aarch64.rpm f665fed3e57fa3a6b0e54a3c10361428b092c8c4611a2eaa5bf8a57383af4e05 kernel-rt-64k-core-6.12.0-211.54.1.el10_2.aarch64.rpm f8344abc527d42bae5404d46860627a47c92e3df14babdf095b39db11ccbe220 ALSA-2026:67471 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (CVE-2025-40149) * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745) * kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466) * kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479) * kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566) * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663) * kernel: drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CVE-2026-31656) * kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (CVE-2026-31539) * kernel: vhost: move vdpa group bound check to vhost_vdpa (CVE-2026-43248) * kernel: drm/i915: Fix potential overflow of shmem scatterlist length (CVE-2026-43368) * kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370) * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149) * kernel: sctp: purge outqueue on stale COOKIE-ECHO handling (CVE-2026-52924) * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131) * kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246) * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239) * kernel: af_unix: Set gc_in_progress to true in unix_gc() (CVE-2026-53361) * kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CVE-2026-63889) * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921) * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919) * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917) * kernel: lsm: hold cred_guard_mutex for lsm_set_self_attr() (CVE-2026-64111) * kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (CVE-2026-68264) * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426) * kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CVE-2026-74556) Bug Fix(es) and Enhancement(s): * [almalinux-10.2.z]- Backport MSHV patches for hypervisor OOM handling (JIRA:AlmaLinux-245035) * RHIVOS - [backport] S32G Driver Enablement - ADC (JIRA:AlmaLinux-255233) * [AlmaLinux10.2z] watchdog: System can panic during reboot when pretimeout is disabled (0) (JIRA:AlmaLinux-255348) * [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [AlmaLinux-10.2.z] (JIRA:AlmaLinux-256731) * RHIVOS - [backport] S32G Driver Update - ADC, I2C, and eDMA (JIRA:AlmaLinux-256890) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-core-6.12.0-211.55.1.el10_2.aarch64.rpm 0f1c5e3a3d419c993f5304dcb7b78c0fa170e0e46ab123595e332aaa419affd6 kernel-rt-64k-debug-modules-6.12.0-211.55.1.el10_2.aarch64.rpm 11cdd996959712c4effacd8b6391338fda9c6569d333804861809e4822d7b398 kernel-rt-64k-devel-6.12.0-211.55.1.el10_2.aarch64.rpm 17f9a3b0accdfa571a003e8aad228600ebcedf9861f9ae92baff3e3d1e901843 kernel-rt-64k-core-6.12.0-211.55.1.el10_2.aarch64.rpm 1db452d97b18e4740f33524ddf190c601477b0952bbb29082ab65ed892a21269 kernel-rt-64k-modules-6.12.0-211.55.1.el10_2.aarch64.rpm 1e7b993867a09d6b11b55e21cab1a715832305835924ed26e8ec59f478ce47c2 kernel-rt-64k-debug-6.12.0-211.55.1.el10_2.aarch64.rpm 2fe4864d3979f23c3bb0f0f94e42457ee1d4e69221e36a5050f4dc014dde6ce9 kernel-rt-64k-debug-modules-core-6.12.0-211.55.1.el10_2.aarch64.rpm 4178dcd38f7d280b82a803c046d3bff08e8b5db7bf54c9ecac90b3798dc0c414 kernel-rt-debug-modules-6.12.0-211.55.1.el10_2.aarch64.rpm 418fa4149ce8613447b9128407d36ac957a465a14f0d3c4c4d02494bd96666f5 kernel-rt-debug-6.12.0-211.55.1.el10_2.aarch64.rpm 58e53f617791cc90946faeb755b7f9c59ab5d702a668aadfdf690d3522acd5a4 kernel-rt-debug-core-6.12.0-211.55.1.el10_2.aarch64.rpm 739fd1ea3e300c4d8c401d2630ea9e86b977f9427a001fa60c7ab33843dd5225 kernel-rt-64k-6.12.0-211.55.1.el10_2.aarch64.rpm 7c0891741e2ed5acb9b6adc3a638a488c6fc3ef12c7f3c173435229daa116255 kernel-rt-debug-modules-extra-6.12.0-211.55.1.el10_2.aarch64.rpm 88827b3979b4b810e87dec7fdd933e0a715fd827a87bfc47b663e7298e53824c kernel-rt-64k-debug-devel-6.12.0-211.55.1.el10_2.aarch64.rpm 9032fd05a1b0bf1beba1ed74aec7a3b39979176d1fdacda19185e54d603d379a kernel-rt-64k-debug-modules-extra-6.12.0-211.55.1.el10_2.aarch64.rpm 91f65cd681b9ba7df5cc763f0f80945277b19ca65d9dd3061c96ff3f60bd81b1 kernel-rt-6.12.0-211.55.1.el10_2.aarch64.rpm a21d3cf60ffebe804b271922bc795570e2b7d22cae046b2808d5be8d181b894f kernel-rt-64k-debug-core-6.12.0-211.55.1.el10_2.aarch64.rpm a40fda2e41c23792942dbd7fceece9d3187d6f5685013f038571aa2576f92fbe kernel-rt-debug-devel-6.12.0-211.55.1.el10_2.aarch64.rpm b4466e1d88e29aa3a19638080a9b8b1fb44f27c01795dd720b45ffd4234c021e kernel-rt-modules-extra-6.12.0-211.55.1.el10_2.aarch64.rpm ba37f6c1f1b89afc87611e93f10680b90f15c76428ff4dc9859b52b8e467a767 kernel-rt-64k-modules-core-6.12.0-211.55.1.el10_2.aarch64.rpm ccd01ecff74bffcbbe34e39296ed6d0efe87b38a2b0a5f5f25367956fdefa777 kernel-rt-debug-modules-core-6.12.0-211.55.1.el10_2.aarch64.rpm cdcbf8f845fa38fa938db2438ca6caf3868f05c97e45d9a16975e1a76d7fadfd kernel-rt-devel-6.12.0-211.55.1.el10_2.aarch64.rpm d8e53e4496ce6a6dafd1e7912ef6366f38b41637a8d95a61ac0405289c2bea08 kernel-rt-modules-6.12.0-211.55.1.el10_2.aarch64.rpm e4ca8db0bf5d501865c4071c174a3a399eb07ecb85eef90d8f8bc5fa53423eaf kernel-rt-64k-modules-extra-6.12.0-211.55.1.el10_2.aarch64.rpm e6732a544d1ec82776d482109bfea4b5402dc8dcc525c3f91bdefb9832a58275 kernel-rt-modules-core-6.12.0-211.55.1.el10_2.aarch64.rpm f140aa6a013ec3088ec580a86e2c30dabd33997971f263928cfbef142c5c1647 ALSA-2026:68507 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007) * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172) * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971) * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176) * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193) * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192) * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869) * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029) * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923) * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176) * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175) * kernel: netfilter: handle unreadable frags (CVE-2026-64414) * kernel: hwrng: virtio: clamp device-reported used.len at copy_data() (CVE-2026-64456) * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation (CVE-2026-68200) * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143) * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128) * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363) * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294) * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102) Bug Fix(es) and Enhancement(s): * nouveau vga_switcheroo binding holds Realtek ALC245 converter stream open ? analog output (device 0) returns EBUSY [almalinux-10.2.z] (JIRA:AlmaLinux-239776) * AlmaLinux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [almalinux-10.2.z] (JIRA:AlmaLinux-254105) * RHIVOS - [backport] S32G Fix STM driver linking failing modpost (JIRA:AlmaLinux-255225) * RHIVOS - [backport] S32G Driver Enablement - OCOTP (JIRA:AlmaLinux-255516) * RHIVOS - [backport] S32G Driver Enablement - INA231 (JIRA:AlmaLinux-255518) * RHIVOS - [backport] S32G Driver Enablement - PIT (JIRA:AlmaLinux-255519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-devel-6.12.0-211.56.1.el10_2.aarch64.rpm 00f2fe02676de655c301a65ef633c356e477196612a06a6cf9aabcb2b880c22f kernel-rt-64k-core-6.12.0-211.56.1.el10_2.aarch64.rpm 09b32309d4d7cd060ec258daf24a9bdffc2bdda8541ae5a15926ec742f0f9fa1 kernel-rt-64k-devel-6.12.0-211.56.1.el10_2.aarch64.rpm 1bac3af3a1c37d24e5d908f2e5639cc2efb17833bfda04727dab5e1e91f39ce8 kernel-rt-64k-debug-6.12.0-211.56.1.el10_2.aarch64.rpm 215472046f7e6bfae1a8901e5c7e2c134a94c3f73ed68f083eee4c6d79fef353 kernel-rt-devel-6.12.0-211.56.1.el10_2.aarch64.rpm 2f65add66f353e9d1229e391b427c519c8185241e8d94ea7cffe04977eec2117 kernel-rt-debug-6.12.0-211.56.1.el10_2.aarch64.rpm 4576868418dbbea981e518165f8a71d3b598b024b6b5f4e1f28ed7c2b3e6a728 kernel-rt-64k-debug-devel-6.12.0-211.56.1.el10_2.aarch64.rpm 54922494dc061bc4082785fc74b7cf0308a66a4fb5385d2e1159469d4ee4d506 kernel-rt-core-6.12.0-211.56.1.el10_2.aarch64.rpm 54b354b59fa2a649121e26db68013ef88cb1974cf0261884c34fe6b581a50ab2 kernel-rt-modules-core-6.12.0-211.56.1.el10_2.aarch64.rpm 582b049ea397c199e822ccb182af29c7b9fb1677a9100c11a32bedf990daa9ba kernel-rt-64k-6.12.0-211.56.1.el10_2.aarch64.rpm 6342fdc29fc4043346c998d39961c365acb0f431cfbbe0a65bd065aaf68f745a kernel-rt-64k-modules-6.12.0-211.56.1.el10_2.aarch64.rpm 6c30dd915a953c05959eedf30965630fdaef82d334e26996e27273647637b070 kernel-rt-debug-modules-6.12.0-211.56.1.el10_2.aarch64.rpm 7285e061d861d82039860ccf977f27aaa6cea59f3e432fa33b41c2425e2a6a9d kernel-rt-64k-debug-modules-6.12.0-211.56.1.el10_2.aarch64.rpm 7bbd019330aaae6a44913cc970419243ccb9c0e02069b86df2be991494e4caa1 kernel-rt-debug-modules-core-6.12.0-211.56.1.el10_2.aarch64.rpm 7d053375c4a60d6496f48621cc7c9a0c5154bf561ddb191595766a348e59f35b kernel-rt-modules-6.12.0-211.56.1.el10_2.aarch64.rpm 8332efcf925383e89328e0142c4740f0e40d19fc6d3f7be3ad8e12747b38f879 kernel-rt-6.12.0-211.56.1.el10_2.aarch64.rpm 894b91cbe687998ceaaf941bd4fdbea93a6e913833e4136bd4a6c86775f1e18b kernel-rt-64k-modules-core-6.12.0-211.56.1.el10_2.aarch64.rpm 8a16b33875172965e4908e63e991b5021cce458f46fb957c098ffe60daccd2d9 kernel-rt-debug-modules-extra-6.12.0-211.56.1.el10_2.aarch64.rpm a5bffe69c0af26f72dae2674fa98109f865a5f4b9b94ceb10db7e6639f5d9af3 kernel-rt-64k-debug-modules-core-6.12.0-211.56.1.el10_2.aarch64.rpm c6631c442a2bfc1de3ced66de979d193011bd1cc063cd776d27f8b62dc39a494 kernel-rt-modules-extra-6.12.0-211.56.1.el10_2.aarch64.rpm c95f0dff9cfde0659dd3f2f399c31e1c776d7da3b39193d4e5fb4fa727047108 kernel-rt-64k-debug-modules-extra-6.12.0-211.56.1.el10_2.aarch64.rpm cd7f67596f77b0305c5f561734b84de22c41b1e76dca55abbd78cbeaee2865f4 kernel-rt-debug-core-6.12.0-211.56.1.el10_2.aarch64.rpm ece197e4d726f8ca931a1ef6fac50e714790e4f4853f1e1cccb309e1649b5fec kernel-rt-64k-debug-core-6.12.0-211.56.1.el10_2.aarch64.rpm f06c51da3820d3fa99dc4c42e00dbbea121c90a2617f526d8c6a5b6e8f1ef6c6 kernel-rt-64k-modules-extra-6.12.0-211.56.1.el10_2.aarch64.rpm f50e3fcf6aedb323598643757753710b9cdba2cfef70eea8942ecf5d3c19f5c3 ALSA-2026:70498 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964) * kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894) * kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959) * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062) * kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823) * kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534) * kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CVE-2026-68293) * kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159) * kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios (CVE-2026-68188) * kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155) * kernel: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CVE-2026-68391) * kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() (CVE-2026-74518) Bug Fix(es) and Enhancement(s): * Update kernel to use new certificate paths [almalinux-10.2.z] (JIRA:AlmaLinux-169478) * RHIVOS - [backport] S32G Driver Enablement - PWM (JIRA:AlmaLinux-255517) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-debug-6.12.0-211.58.1.el10_2.aarch64.rpm 02ec9f56fd2b0c504634def02fa201c25b2ba2b2b098921c26004ddbe4687e1a kernel-rt-64k-core-6.12.0-211.58.1.el10_2.aarch64.rpm 15618900f8296e1146fad0ab00edf7363098bd617e6692bdd069c5df6de3d2ad kernel-rt-64k-debug-core-6.12.0-211.58.1.el10_2.aarch64.rpm 2b5221156b56197cd39fcdc45e3afb7c659a72075e42cc64c4b42363bf424434 kernel-rt-modules-extra-6.12.0-211.58.1.el10_2.aarch64.rpm 332aeea11d5678653000e18e4387ede7b8701d5bfcf45d665c769bc67525d926 kernel-rt-debug-modules-6.12.0-211.58.1.el10_2.aarch64.rpm 38571c6015dd9536a56ffaaa68b675f21cd89a8c0e201fb64f653ed3d8abaf9d kernel-rt-64k-debug-modules-6.12.0-211.58.1.el10_2.aarch64.rpm 40ad7b01721ae151a561bcb24dd810d7b28d02b991b7c3a2acb1a93da8b2bcaf kernel-rt-64k-devel-6.12.0-211.58.1.el10_2.aarch64.rpm 4af82a7e28d85b5af6301e84f4ab740ad016af4fd051a37c47a83a250a2b7f74 kernel-rt-debug-6.12.0-211.58.1.el10_2.aarch64.rpm 57755974746d3886272a7a5a9ae1539d894273935fb9d2133459722fd42932f5 kernel-rt-64k-debug-modules-extra-6.12.0-211.58.1.el10_2.aarch64.rpm 5b121a8d77cf9c19fa08ea06791e34ce16f8b0dbcb51bd818a19db8c4c7edeb5 kernel-rt-debug-modules-core-6.12.0-211.58.1.el10_2.aarch64.rpm 5b4b2c4b1d78573bfac2911841180aa9219adf44b2053283a576242e0bf5de12 kernel-rt-modules-6.12.0-211.58.1.el10_2.aarch64.rpm 89e452178d084e14d730bd9b2fb2e8b701d1f7c504c3c170ec7ec9cbcc32458d kernel-rt-64k-6.12.0-211.58.1.el10_2.aarch64.rpm 9b041cdce9d537cb14c74550b00e811aa803bab178df3fc478511787774e0bc1 kernel-rt-debug-core-6.12.0-211.58.1.el10_2.aarch64.rpm 9d2661ae9637ed52244ab70e10ba392cd6be15cb6378c5a4579b97cb312e09be kernel-rt-debug-modules-extra-6.12.0-211.58.1.el10_2.aarch64.rpm a0f31383304b915c4bed5d8607a597e2290118996f7f7f97f4a6d6e71bc834de kernel-rt-64k-debug-modules-core-6.12.0-211.58.1.el10_2.aarch64.rpm abec2e65bae303651bd97ef8484d8331918935dfcb090933f925f3cbd214c3e1 kernel-rt-debug-devel-6.12.0-211.58.1.el10_2.aarch64.rpm b3e616ef0c6af34dbc2752185de97d6306611ea00bb691cf951fed2a686808c5 kernel-rt-64k-debug-devel-6.12.0-211.58.1.el10_2.aarch64.rpm b5bedb2d8173bf21a807829287a309b43efbcb0858f2f816e317c05bbcd41c51 kernel-rt-64k-modules-6.12.0-211.58.1.el10_2.aarch64.rpm bcfb0d174efe9142dd5f1e3f9b36756d071f586463444fc54ba7341d7acc2e5f kernel-rt-devel-6.12.0-211.58.1.el10_2.aarch64.rpm c6319b34d303b66171c93c0a905f74f6c8f04ccf4bb9ac009418dbb9c56db5a4 kernel-rt-64k-modules-extra-6.12.0-211.58.1.el10_2.aarch64.rpm db9abfc56332857d9692ce57e50e382f3c04936942a3a39297fbd846c94562eb kernel-rt-modules-core-6.12.0-211.58.1.el10_2.aarch64.rpm e1c141e1d83c026d39741bc57fceea73c43fd9bf57b13fb5c1f1f8acf5ff3ab9 kernel-rt-64k-modules-core-6.12.0-211.58.1.el10_2.aarch64.rpm e43cc37deb741c6c0194ca89d303b10f31445771d565b6d0fa32b66be9bfa155 kernel-rt-6.12.0-211.58.1.el10_2.aarch64.rpm ef6a9ecc0bc39201dd41b09c4f0e48b3ef0bab529f9fa64e13f15c71340bbcc6 kernel-rt-core-6.12.0-211.58.1.el10_2.aarch64.rpm f4a988591803d73da625a403417cca8f4f782aa56b2fe3a122135b14a779c476 ALSA-2026:71602 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323) * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285) * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116) * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984) * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990) * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136) * kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204) * kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199) * kernel: drm/amdgpu/userq: fix access to stale wptr mapping (CVE-2026-46311) * kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005) * kernel: accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CVE-2026-53203) * kernel: drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CVE-2026-53290) * kernel: drm/virtio: use uninterruptible resv lock for plane updates (CVE-2026-64098) * kernel: Linux kernel: PPPoE memory corruption via stale pointer (CVE-2026-68121) * kernel: drm/amdgpu/vce: fix integer overflow in image size (CVE-2026-68108) * kernel: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CVE-2026-68257) * kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CVE-2026-68267) * kernel: drm/xe: Hold a dma-buf reference for imported BOs (CVE-2026-68266) * kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273) * kernel: Linux kernel IPVS: Denial of Service due to stale memory references (CVE-2026-80714) * kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481) Bug Fix(es) and Enhancement(s): * Bypass DMA APIs for coherent allocations for pre-mapped memory [almalinux-10.2.z] (JIRA:AlmaLinux-252331) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-debug-modules-extra-6.12.0-211.60.1.el10_2.aarch64.rpm 049140043874bce1eeace4a1c9eac7429774b35758aa8dd1f10a6f81542f270e kernel-rt-64k-modules-6.12.0-211.60.1.el10_2.aarch64.rpm 1e8e219dc3a2cafeb0f757a0ef53d68186e22e2aaef6d1022502ef46e15559ed kernel-rt-64k-debug-core-6.12.0-211.60.1.el10_2.aarch64.rpm 3b1445f750d54d51c85e3eb4485c95cae16f0d6ab1a74c1b326c1ce09190ecaf kernel-rt-64k-devel-6.12.0-211.60.1.el10_2.aarch64.rpm 506198b33ac4c2c55c9a78e79358d35247ec5c29f7440b53ce30aad323251f6e kernel-rt-modules-extra-6.12.0-211.60.1.el10_2.aarch64.rpm 59a0ddc49b0da57685b3b1f72fa8eecdfc825e348601b251a622e54a8b6ff3a4 kernel-rt-64k-modules-core-6.12.0-211.60.1.el10_2.aarch64.rpm 59aa9a747d410e7f6c5dd88d8c7eac75d3c7ca6fca008f57e38de589f9611fae kernel-rt-modules-core-6.12.0-211.60.1.el10_2.aarch64.rpm 782c39c07081c150d5eae62bcc9a215163463391fe0c7677b15b73d97d1a22ef kernel-rt-64k-debug-6.12.0-211.60.1.el10_2.aarch64.rpm 7b1e70a98ba1e26618c28b9d91aaf3809b0e0158eca0b8de987643f89ba3f8c9 kernel-rt-debug-modules-core-6.12.0-211.60.1.el10_2.aarch64.rpm 8bbe3b0f564d047fda8897088ea9634acfda434387dd0472e249420f8843f4ba kernel-rt-devel-6.12.0-211.60.1.el10_2.aarch64.rpm a4ec362ade100d943e8fcdd32841fa6d08b7a9dbfd4f2bf1538975b2dcc3e923 kernel-rt-core-6.12.0-211.60.1.el10_2.aarch64.rpm a85e8ef20a5d28c2fd84aef15ebe6d29692c6349a69087bab9a0774e39ea6ef9 kernel-rt-64k-debug-modules-6.12.0-211.60.1.el10_2.aarch64.rpm b774c4c542998ea843fb811563eee7b2f665eb675c3381095c673375891f82b4 kernel-rt-debug-6.12.0-211.60.1.el10_2.aarch64.rpm bd23c3f28180a87f0b8ae6668ecfeead2cd493987bdf3c70e28ded0526ca0052 kernel-rt-debug-modules-6.12.0-211.60.1.el10_2.aarch64.rpm d2c6a74a193460763d26560bb9cc2a8c201cb2b739669f882611923a8cc9c2ed kernel-rt-debug-modules-extra-6.12.0-211.60.1.el10_2.aarch64.rpm d47b27a1b257ee2127096c7db48ba616ae56b5c7178f7d8cf5fe1872014782d1 kernel-rt-64k-modules-extra-6.12.0-211.60.1.el10_2.aarch64.rpm df723e56570a1af9db8fcb5c504362541ffe2cd86bdd3ad0bab64512885285c7 kernel-rt-debug-devel-6.12.0-211.60.1.el10_2.aarch64.rpm e599796fd6505c00fc36af6690d901cb2915ff27627988c37f75c8f1fca70077 kernel-rt-debug-core-6.12.0-211.60.1.el10_2.aarch64.rpm e9743f852c45360b523276f30399e7a06a6a99ee63a19c4ac06a77f0d3564c0f kernel-rt-64k-debug-modules-core-6.12.0-211.60.1.el10_2.aarch64.rpm ea88a6e032da08fdb3b01f773fe2ef29b56accda0e248bbe3afaaf753732f06a kernel-rt-64k-debug-devel-6.12.0-211.60.1.el10_2.aarch64.rpm ec831d5a212de728deaee4248f40b0461de4ed3d0665b820168edb88f71380c0 kernel-rt-64k-core-6.12.0-211.60.1.el10_2.aarch64.rpm edc1a8428afb16c55e7bfcb92d736aee6c53c47c9d6e7cf3548d47bbab61e7bd kernel-rt-modules-6.12.0-211.60.1.el10_2.aarch64.rpm f9a32e2261a84490e8252c31fd8db8c8076777e8322aead41ad3042b17d635c7 kernel-rt-6.12.0-211.60.1.el10_2.aarch64.rpm fa3c1476ed483f3401020e2327fc435573ae4c98d5e07e5ee33c81e542dfec78 kernel-rt-64k-6.12.0-211.60.1.el10_2.aarch64.rpm ff66001223b0b5be52ae68c26397d723cf1dbd4c463be4d4b8eae564e7c0bf48 ALSA-2026:72624 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CVE-2026-46076) * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942) * kernel: KVM: arm64: Reassign nested_mmus array behind mmu_lock (CVE-2026-46317) * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341) * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556) * kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299) * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522) * kernel: perf: Reject exited events as group leaders (CVE-2026-74753) * kernel: nvme-tcp: reject a read that transferred too few bytes (CVE-2026-89480) * kernel: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (CVE-2026-89775) Bug Fix(es) and Enhancement(s): * KVM: s390: Limit adapter indicator access to mapped page [almalinux-10.2.z] (JIRA:AlmaLinux-188661) * crypto: xxhash64 should not be fips approved [almalinux-10.2.z] (JIRA:AlmaLinux-254943) * kata-tdx TD vCPU stuck at reset vector (EIP=0xFFF0) on Intel Xeon 6 (Granite Rapids / Sierra Forest) ? guest never executes. (10.2.z) (JIRA:AlmaLinux-260402) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-modules-6.12.0-211.61.1.el10_2.aarch64.rpm 14d66a404a4d8481075d0cbe5c5fe9269769a53b6384fb7f447c94f1370dc141 kernel-rt-devel-6.12.0-211.61.1.el10_2.aarch64.rpm 1972d9be9065b8a5d773b8aa53f174f330c74a82d1aaad48cdd5ed73e2e27c66 kernel-rt-64k-debug-modules-core-6.12.0-211.61.1.el10_2.aarch64.rpm 19c11b75e20f03b0292dddbde034ec4606fb4ad93ab90f54d8be4a9a40fff2e7 kernel-rt-6.12.0-211.61.1.el10_2.aarch64.rpm 3a43ba17322623127fd3b5e4a5fd0777fbe278077a54029c1f6693b206b843fe kernel-rt-64k-debug-core-6.12.0-211.61.1.el10_2.aarch64.rpm 3d718b845031e6ad657464cf21662da17eaeb7a5d771b4bab948444987b0abd4 kernel-rt-64k-debug-modules-extra-6.12.0-211.61.1.el10_2.aarch64.rpm 493ffea61937e49591fcae339ebf301bbe8f94f923d17babea846ad1e242e43c kernel-rt-debug-modules-6.12.0-211.61.1.el10_2.aarch64.rpm 4ab559783add8ff8f6fb69fa7bc3d661a5a921ae5038d987c4dd658d1f8477e1 kernel-rt-debug-modules-extra-6.12.0-211.61.1.el10_2.aarch64.rpm 4bf9bbd6220f65e740287e98b9cd7807e7a3f0a5484c677a358ad33574a0a5f4 kernel-rt-64k-core-6.12.0-211.61.1.el10_2.aarch64.rpm 563933fc455955788b5e12da534d6174b7a97d8d059d035acc1c24b498228548 kernel-rt-debug-core-6.12.0-211.61.1.el10_2.aarch64.rpm 57d58406d5a3871c74145f6a760413d2faccd5ad870a915571d44513895c8d0c kernel-rt-debug-6.12.0-211.61.1.el10_2.aarch64.rpm 72ec79b66b9def6c954cb573577943e83d6fe0a125dbfc39c468f2962fe45e0f kernel-rt-64k-6.12.0-211.61.1.el10_2.aarch64.rpm 93e2413766e19df2058f2acf84d44c564736434a497c679173c0608c2652441e kernel-rt-modules-extra-6.12.0-211.61.1.el10_2.aarch64.rpm 9c5ef15b28db21c8f138c5db5e2d9188a9c58a5b71a14dd2075b5f7fc50d71e9 kernel-rt-64k-modules-core-6.12.0-211.61.1.el10_2.aarch64.rpm a106d49901b91df9ae746274a767754be0063575ae40cefe4f4bcf0762a9dfcd kernel-rt-64k-devel-6.12.0-211.61.1.el10_2.aarch64.rpm ae2c75dfbcaf1352594efba46de3d7301144b31e8c793b5e7766fb4eab4647fd kernel-rt-64k-debug-devel-6.12.0-211.61.1.el10_2.aarch64.rpm b8e237e34417fdadbc1b43703a64df6cf46483bda11e3dd4f1fe439ff3b5520b kernel-rt-debug-modules-core-6.12.0-211.61.1.el10_2.aarch64.rpm b98aaaaa4863b1f0c77af67d3f2828060e5847f825ece933cdffca6efb0fdd7b kernel-rt-64k-modules-extra-6.12.0-211.61.1.el10_2.aarch64.rpm d2ac6fecad8bd05018e0c5aa51f89c3fb98e363a3c61a069ccdd03373fe784fb kernel-rt-64k-debug-6.12.0-211.61.1.el10_2.aarch64.rpm d97771040592d8eb0d42df72eee0ba060f71eb6d22476f2f18adbe53a0f642c0 kernel-rt-modules-6.12.0-211.61.1.el10_2.aarch64.rpm e06bbb7e29fe211e001de6f86037d6b6e25399b07f83495fcbbeb4885b3fef5f kernel-rt-64k-debug-modules-6.12.0-211.61.1.el10_2.aarch64.rpm ed9c8df887dcbf4ad4502ed71140adf05bca03f7fd8039f82e6dde6a76d6c336 kernel-rt-modules-core-6.12.0-211.61.1.el10_2.aarch64.rpm f46055be35487fc5d8f2fe7b6ba285b5ca9157629c0860f7213f966064062b51 kernel-rt-core-6.12.0-211.61.1.el10_2.aarch64.rpm f67f68a94920aea6950372b51506bbb9236832e1403e45e0c1cfc0460e5ef4f6 kernel-rt-debug-devel-6.12.0-211.61.1.el10_2.aarch64.rpm fa1c87ee11a167f076c2c8c4d5790133b7d4ecd231370af3e2e65a7675f90908 ALSA-2026:75576 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034) * kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099) Bug Fix(es) and Enhancement(s): * gve: backport large queue depth patches [almalinux-10.2.z] (JIRA:AlmaLinux-219261) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-debug-modules-core-6.12.0-211.62.1.el10_2.aarch64.rpm 01c0ad74952e33c74f62a20fdaecd48890020ae6d87ea5456afa496ffb27ae1d kernel-rt-64k-6.12.0-211.62.1.el10_2.aarch64.rpm 08a247caed7432aefa3b9a6b053324aff21a25dee170c6302748057098c9f71c kernel-rt-debug-modules-extra-6.12.0-211.62.1.el10_2.aarch64.rpm 18f4ec0ffcc28cb9faaea2ecac6bd22cf5b39c185a3b3533a00faf39b35e01c8 kernel-rt-64k-core-6.12.0-211.62.1.el10_2.aarch64.rpm 1ada0b4d3621e858102043fd02abacb4a1168d4d15f59afe8cabf539544baf79 kernel-rt-debug-core-6.12.0-211.62.1.el10_2.aarch64.rpm 2e37ca2ca6a0ec508cfca146fef368bfa0973dc3513ba6a978373110af7c0c21 kernel-rt-64k-debug-modules-core-6.12.0-211.62.1.el10_2.aarch64.rpm 2eea33eb229a25fe7bdac2da6d55643803b0331c43c750c650638136ad815fea kernel-rt-debug-6.12.0-211.62.1.el10_2.aarch64.rpm 42467877c8e13c342fb951e2c000d2accb95c0aced9352b12c8270d927d7f120 kernel-rt-debug-modules-6.12.0-211.62.1.el10_2.aarch64.rpm 68ed2e11fa6df4fb84873188beb37703293432b06f697c04413012d17217bb7d kernel-rt-64k-modules-core-6.12.0-211.62.1.el10_2.aarch64.rpm 722d3366460432b120cd25fa34103c34f05264ba3e89c0e09b44c7205ff48679 kernel-rt-core-6.12.0-211.62.1.el10_2.aarch64.rpm 780c18f8b486f3c6f23123f7e792e8ef9642d0369118b775f5a830d7adddf5cc kernel-rt-modules-core-6.12.0-211.62.1.el10_2.aarch64.rpm 78c747409165b6958a8cc21a2322db9ed5e7057d013fe66eeb2f0ff37c69a9ee kernel-rt-64k-debug-6.12.0-211.62.1.el10_2.aarch64.rpm 7f7ec2995bd3fbe7e274fb251ca2da65d65fd377c1846cf465cc8d93fee68aac kernel-rt-64k-modules-extra-6.12.0-211.62.1.el10_2.aarch64.rpm 8725717facfeec0ba2c275e2fc3db4145ca78b83f17edf3a1176866a3aa9f892 kernel-rt-modules-extra-6.12.0-211.62.1.el10_2.aarch64.rpm 8eb715a239050a0dd311e6ff0bbe7c3546e29c98a693e5ee4932461acb8c0b1b kernel-rt-devel-6.12.0-211.62.1.el10_2.aarch64.rpm 8f5d867a4e83902649f44efe2222a860d4179a0f28bf48b1708c2c7da3c9ec9c kernel-rt-64k-debug-modules-extra-6.12.0-211.62.1.el10_2.aarch64.rpm af287b5f1858dc4fb4079888d650e32f753c1b806e38fd8d48803e3ae9a4339b kernel-rt-modules-6.12.0-211.62.1.el10_2.aarch64.rpm b1b204ea59362d24d70584d3373dc2e77a11ccf1ae99fdf3395ae0537b3ba8d0 kernel-rt-64k-debug-modules-6.12.0-211.62.1.el10_2.aarch64.rpm bf9e3239f260e7688b23ed5a635735ffb53805b1a3ba8fa9a381c50cc008eb79 kernel-rt-64k-devel-6.12.0-211.62.1.el10_2.aarch64.rpm ca6288215ac4baa7ff92c95a4aeb34f36018a29eef94f4870f1117b6b9ab5567 kernel-rt-64k-modules-6.12.0-211.62.1.el10_2.aarch64.rpm d44c2f3eca2f856463581c569ed56eeab61e32fff6094d1f42f3320e6029f820 kernel-rt-64k-debug-devel-6.12.0-211.62.1.el10_2.aarch64.rpm d90cd30c4fd024040b2d4ddc8e8c165850821b72c4921cc4e4a595598256fcdc kernel-rt-64k-debug-core-6.12.0-211.62.1.el10_2.aarch64.rpm e374918e1627c1eef3e401da0d562f90affa3ab2c44addd98544bde42027f21a kernel-rt-debug-devel-6.12.0-211.62.1.el10_2.aarch64.rpm ed41af5b61f44ec6f2da0f42808b51d5164a5c9e092b6d6595fb6e55c956d0ba kernel-rt-6.12.0-211.62.1.el10_2.aarch64.rpm f3fcb1049f80da30898accecde434af6ffc60a0ca2ce257f904a923db753c3e7 ALSA-2026:76738 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nf_conncount: increase the connection clean up limit to 64 (CVE-2026-45860) * kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856) * kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CVE-2026-46275) * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972) * kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270) * kernel: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CVE-2026-53357) * kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829) * kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794) * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924) * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922) * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920) * kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024) * kernel: l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (CVE-2026-63918) * kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984) * kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992) * kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (CVE-2026-63994) * kernel: netfilter: x_tables: add and use xtables_unregister_table_exit (CVE-2026-64078) * kernel: ipv6: ioam: refresh hdr pointer before ioam6_event() (CVE-2026-64132) * kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CVE-2026-64557) * kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432) * kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476) * kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052) * kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320) * kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255) * kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516) * kernel: packet: use consistent hard_header_len in non-ring send paths () * kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582) * kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669) * kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746) * kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792) * kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775) * kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921) * kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972) * kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227) * kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417) * kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CVE-2026-93288) Bug Fix(es) and Enhancement(s): * wifi card breaks using FIPS (JIRA:AlmaLinux-257457) * AlmaLinux10.0 - kernel: CPU hotplug unsupported by CPUMF [almalinux-10.2.z] (JIRA:AlmaLinux-270888) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-debug-6.12.0-211.63.1.el10_2.aarch64.rpm 17ec0c8007ffe02ba8ba481bceb16546e240820b14eb4b2e6d0bb685387002b8 kernel-rt-64k-debug-modules-extra-6.12.0-211.63.1.el10_2.aarch64.rpm 3280a4591637a58a1379ad4783f1fb9a4af42d89c0fa8a28e91780b547fbf1e1 kernel-rt-64k-modules-core-6.12.0-211.63.1.el10_2.aarch64.rpm 34e35b4f63a01e0accb3d2cac0eb8014a2e21e17276ee9c831f355809d61a6b3 kernel-rt-64k-6.12.0-211.63.1.el10_2.aarch64.rpm 3bcb2827734efcc72dbd1e3771eb823618c850d0f5e8e7476bfe0dd523d583cf kernel-rt-64k-core-6.12.0-211.63.1.el10_2.aarch64.rpm 4ded6effaca4463a2898a33d0064b5278e133e910c520db71ec88022cef4c485 kernel-rt-core-6.12.0-211.63.1.el10_2.aarch64.rpm 51aff3ddf6195bffdb1cd5cafd9fa0096c807c4495d05a558dc9a9c1486a9b74 kernel-rt-64k-debug-modules-core-6.12.0-211.63.1.el10_2.aarch64.rpm 678a15cf6e8ef5ba5cbd05488ca4d69c5f9a1cd001031108aae9273b89ee7617 kernel-rt-debug-6.12.0-211.63.1.el10_2.aarch64.rpm 6bf3ad43bc0b19e24c079564c6440ce967ba38286f0c8067486d265b858f8a32 kernel-rt-64k-devel-6.12.0-211.63.1.el10_2.aarch64.rpm 8ada3c75c072a9bccd2a790864eaba53e99956c5df371359730ad37d6c82cd29 kernel-rt-debug-core-6.12.0-211.63.1.el10_2.aarch64.rpm 927935df0c965affc119c1c88b8886c2912e1960a9abfb443212b7f4fe4b6245 kernel-rt-devel-6.12.0-211.63.1.el10_2.aarch64.rpm a161bddaff371008c469c1e6ff662ae25575ddb1c521e454f6da1e079f3294c0 kernel-rt-64k-debug-devel-6.12.0-211.63.1.el10_2.aarch64.rpm a2ee49f272b620cdab557dc0a3ee90b942a9b597e0a574c432c50f0b913dcb49 kernel-rt-modules-6.12.0-211.63.1.el10_2.aarch64.rpm a5f324e6be3a5d8f4b8be5c120b7bfa90f34d66c0728430601663c72367224d8 kernel-rt-modules-core-6.12.0-211.63.1.el10_2.aarch64.rpm a88fce2e476fbe13561390191c885bba7d368bbeb8e4b4c2bf1f98a86331f591 kernel-rt-debug-modules-6.12.0-211.63.1.el10_2.aarch64.rpm af93202844ca384e94830aacc304972664a5d792b115f4d6683e9971d271509f kernel-rt-debug-modules-extra-6.12.0-211.63.1.el10_2.aarch64.rpm b0c969fda8a906a42968cc0849e66891d4c92e9d47d5d62093a86951c8bddbee kernel-rt-modules-extra-6.12.0-211.63.1.el10_2.aarch64.rpm bdadb542c6a7f0d2695aa7e36b1ad6804482bba1cba7c35b3535a4debf271a65 kernel-rt-debug-devel-6.12.0-211.63.1.el10_2.aarch64.rpm be11df49de7cc188074cd86d5e8b027adfaaabaec2ea7e8a6e8cadb53a3ad1d2 kernel-rt-64k-debug-modules-6.12.0-211.63.1.el10_2.aarch64.rpm c5aa26905c26cd8ccad6de7e711f1267a2304583a1355615aa70c413dbd57a76 kernel-rt-6.12.0-211.63.1.el10_2.aarch64.rpm c9ef0fafd8b4cbbd292b92854dac8fff6df0f4ca7ef1e4824e839016acdb4df4 kernel-rt-debug-modules-core-6.12.0-211.63.1.el10_2.aarch64.rpm d0c008edfd14388dcdada7c3073d673a94c1bb4dad6643b3ed0a03a4a7b64ae5 kernel-rt-64k-modules-extra-6.12.0-211.63.1.el10_2.aarch64.rpm f471d832e247b9747b845a75c94c16473b5dbfee2ad115bd025eeb13b218c61d kernel-rt-64k-modules-6.12.0-211.63.1.el10_2.aarch64.rpm f4f5b9ab178cb9d53ca0e7e6cc173fc4db2bb97c78a3673f14441c7d74567655 kernel-rt-64k-debug-core-6.12.0-211.63.1.el10_2.aarch64.rpm fc8d913452f5ccc7ca16ffaec7b54bc04f87b13104b77662dbf81dfe579f4d19 ALSA-2026:77690 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) * kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365) * kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398) * kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970) * kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035) * kernel: vsock/vmci: fix UAF when peer resets connection during handshake (CVE-2026-64115) * kernel: SUNRPC: pin upper rpc_clnt across the TLS connect_worker (CVE-2026-72317) * kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705) * kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744) * kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF (CVE-2026-89690) * kernel: nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669) * kernel: svcrdma: Reject inline replies that overflow the pull-up buffer (CVE-2026-89530) * kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (CVE-2026-89676) * kernel: nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663) * kernel: nfsd: fix UAF in async copy cancel and shutdown (CVE-2026-89675) Bug Fix(es) and Enhancement(s): * mlxbf_bootctl: driver update to Linux v6.16 [Nvidia 10.2.z FEAT] (JIRA:AlmaLinux-212709) * [GNR-D] missing interfaces tspll_cfg [almalinux-10.2] (JIRA:AlmaLinux-273805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-modules-extra-6.12.0-211.64.1.el10_2.aarch64.rpm 054a7ec3401125d589d4b358a234cea7ed943edf3cfb390cee4ec08ba7ff4863 kernel-rt-core-6.12.0-211.64.1.el10_2.aarch64.rpm 077170a402625e157586cd57ca9b3de13ba93862506d10ae108acbd8fa61b868 kernel-rt-debug-modules-extra-6.12.0-211.64.1.el10_2.aarch64.rpm 0bcb01af65f84070249530fbc01f32f3de568e7e4525644614ec0f84817e4a41 kernel-rt-devel-6.12.0-211.64.1.el10_2.aarch64.rpm 1014b0e845bae5642cea00574a931f039a674a4ec17a7a06288f1263d470c157 kernel-rt-64k-debug-core-6.12.0-211.64.1.el10_2.aarch64.rpm 179ad3370383bbebf9679c1f1b4706cac75cb662b5dadb542f5d7f174f43866a kernel-rt-debug-core-6.12.0-211.64.1.el10_2.aarch64.rpm 18e9e5433bf4837f374d2a67ccbab88088eeda1e4df7368f6eadb48038032282 kernel-rt-64k-debug-modules-core-6.12.0-211.64.1.el10_2.aarch64.rpm 1cc555d60f4a1984ed538c32da8784f1367c2046f6c9942a4aef2a18e439c6c6 kernel-rt-64k-debug-modules-extra-6.12.0-211.64.1.el10_2.aarch64.rpm 1e2997cf25f82b005491c6032a9199c8800b7efd215028d0067c96a71cd18549 kernel-rt-64k-debug-modules-6.12.0-211.64.1.el10_2.aarch64.rpm 2f0f18ebaad64c44d73f6a05803a184f4301a0f119ae4711820593e5e6dca2c5 kernel-rt-64k-modules-core-6.12.0-211.64.1.el10_2.aarch64.rpm 37ab119f604d0feb265c3e7b2027b3813a93e26fc3faa8eb8e5b0363ac5c0f25 kernel-rt-64k-core-6.12.0-211.64.1.el10_2.aarch64.rpm 3ebe4e671d309af2c0f1ba1045403c0fd94850a5d87050dda7a40e65c280a226 kernel-rt-debug-6.12.0-211.64.1.el10_2.aarch64.rpm 58013fd7a39d0b3d65d2ced50f895e90e788a0b79fdd4b96ef5d438e0e5a3ab6 kernel-rt-modules-extra-6.12.0-211.64.1.el10_2.aarch64.rpm 6527937f72c62b42cc48fd582b91dacf5d82fcaecc2d02bce9cc898d5b349600 kernel-rt-64k-6.12.0-211.64.1.el10_2.aarch64.rpm 8b20ecc1604cc64b8e91ee228c333fef51493f4368524bb38ad0ed3a6829fd0e kernel-rt-64k-devel-6.12.0-211.64.1.el10_2.aarch64.rpm 97e258008522c5ec9a73639f08fd04154662455b7ac11d3bb5dcf60e783f1833 kernel-rt-64k-debug-6.12.0-211.64.1.el10_2.aarch64.rpm 9d9655fe2f69d81f27f9bfaab070ec75fd3b03f48efbc18a4b919b7c7b06aa2d kernel-rt-6.12.0-211.64.1.el10_2.aarch64.rpm a851bcfcbb3abfbabde2dacec5e3910cbe6efd76555eec020fdb4ed4c14d1714 kernel-rt-debug-devel-6.12.0-211.64.1.el10_2.aarch64.rpm b47700de623f2d25ac656b9e7a29433dc2733aacbe2a5bd8f72e1a4b4f0e5d01 kernel-rt-modules-core-6.12.0-211.64.1.el10_2.aarch64.rpm c3c0a1123d060dbbfd6c407ffb035addb76a69244359c6f9cad508da7e7ee1e9 kernel-rt-modules-6.12.0-211.64.1.el10_2.aarch64.rpm dabbaad5d5870655fca98af97586a511c11aaec59a8ab3c65af273f348c4f49d kernel-rt-debug-modules-6.12.0-211.64.1.el10_2.aarch64.rpm e93a4d7dbf30e7427124903f72fb061802dee8819959eb12ec062d2de0405a6f kernel-rt-debug-modules-core-6.12.0-211.64.1.el10_2.aarch64.rpm eab55dd90b45f93c82f5887fcb5279e40e1eacbe8e380ce462517792144613b2 kernel-rt-64k-debug-devel-6.12.0-211.64.1.el10_2.aarch64.rpm eb5cd6af4166f504d370006a456f09f0b1edf6e55efa7744ce8cc1ccf0d7c831 kernel-rt-64k-modules-6.12.0-211.64.1.el10_2.aarch64.rpm fc068613bd55686db0f4940af885b731b583090bd75dc7a9ba3de47b8b8b6823 ALSA-2026:81406 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: thermal: core: Fix thermal zone device registration error path (CVE-2026-43332) * kernel: macsec: fix replay protection at XPN lower-PN wrap (CVE-2026-63925) * kernel: i2c: stub: Reject I2C block transfers with invalid length (CVE-2026-64191) * kernel: Kernel SMB client: Double-free vulnerability allows remote denial of service or privilege escalation (CVE-2026-64385) * kernel: bpf: Support for hardening against JIT spraying (CVE-2026-64508) * kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation (CVE-2026-64507) * kernel: openvswitch: fix GSO userspace truncation underflow (CVE-2026-68123) * kernel: cifs: validate DFS referral string offsets (CVE-2026-72318) * kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289) * kernel: af_unix: Unlink scc_entry in unix_del_edge() (CVE-2026-80521) * kernel: nvmet-auth: Synchronize timeout work during SQ teardown (CVE-2026-89970) Bug Fix(es) and Enhancement(s): * net/tls backports for 10.2 (JIRA:AlmaLinux-275027) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-64k-core-6.12.0-211.65.1.el10_2.aarch64.rpm 094a6d5ecbf4de344ba6c4f78fad3078af01a1e56973129b8fd8ac8d34cd9470 kernel-rt-debug-modules-core-6.12.0-211.65.1.el10_2.aarch64.rpm 1696747c1dfc20487ce99865eee85060c2418eb667875532a31438b96b6d1f29 kernel-rt-64k-modules-6.12.0-211.65.1.el10_2.aarch64.rpm 23aed5852bc1e3cfb52d7a36cc1f83ee4b91bb886d83f547f6c3b392287f866b kernel-rt-64k-6.12.0-211.65.1.el10_2.aarch64.rpm 25fb6e8741807921d1276c12db7491746ef331cd424ec917752961f8762ae0f7 kernel-rt-debug-modules-6.12.0-211.65.1.el10_2.aarch64.rpm 6567531f4028a07865b5da4245b5ec2b33bedc48b32c7ace6e6a0e04d6898c27 kernel-rt-core-6.12.0-211.65.1.el10_2.aarch64.rpm 6f3974168aa2cf35917b3fd6b4059026f2c4ca22eec026c156384007dbb27887 kernel-rt-64k-modules-extra-6.12.0-211.65.1.el10_2.aarch64.rpm 70748a6a965f95aee7959af6922401afcdab5bda0962c573908b70ac3d26581b kernel-rt-64k-devel-6.12.0-211.65.1.el10_2.aarch64.rpm 757debc12d35c68073880d6fa171680d277a8c52c4f5c0a6e06cd470a79bf97f kernel-rt-debug-core-6.12.0-211.65.1.el10_2.aarch64.rpm 7789965b2cef2ca62c0225ca72346ce7aa6b9fc03a7a98a80569c670aad2f2d0 kernel-rt-modules-extra-6.12.0-211.65.1.el10_2.aarch64.rpm 7a65d394b382a8884ad6985ce75452f3545598f2e8ed2e16e202c3a178b441f0 kernel-rt-64k-debug-core-6.12.0-211.65.1.el10_2.aarch64.rpm 8f4f3f7750ec86aecf2fbb2567d064027242598978906681eda14f87838537b4 kernel-rt-modules-core-6.12.0-211.65.1.el10_2.aarch64.rpm 93a42e8f2b3f2a8ca636b951721658c89ce64d57226e42e4557d14d1c1bc2d27 kernel-rt-debug-6.12.0-211.65.1.el10_2.aarch64.rpm 989a7557ca2182cc27375f6f4588d211e41a5b04de395e0d74851599dde66771 kernel-rt-6.12.0-211.65.1.el10_2.aarch64.rpm 9dfb0fc8ef2fd9eb81cfc86988f23868bee42bc5f836955cca392a7d46b3239c kernel-rt-devel-6.12.0-211.65.1.el10_2.aarch64.rpm a030bf7af9401d610e8ce2bd41342aa16a2a7f0fd881c0123ce8931772debf20 kernel-rt-64k-debug-6.12.0-211.65.1.el10_2.aarch64.rpm b55bdc17efcb411291f23be53eab554dbce0f506c51ab658bc7a0f7108bac93b kernel-rt-modules-6.12.0-211.65.1.el10_2.aarch64.rpm b5b64840c8346f77662fd62e2a1cdaa29bba85ccc9f1b3601baa1ce2cee33301 kernel-rt-debug-modules-extra-6.12.0-211.65.1.el10_2.aarch64.rpm b950b91b7489de267067eae9d6d88cb747b739e9c742c75c62693d575c66c8c1 kernel-rt-64k-debug-modules-6.12.0-211.65.1.el10_2.aarch64.rpm bbf9b8f2d880fe8e611f1223ce1e746c5924168e74851547ea5a92ff08ea624c kernel-rt-64k-debug-modules-extra-6.12.0-211.65.1.el10_2.aarch64.rpm ca762daf31d96b2148e4087868c7e5ef7ecfb65ce509dced420a5f3051dcf9b0 kernel-rt-64k-modules-core-6.12.0-211.65.1.el10_2.aarch64.rpm cf20f83374f4b245117787db18c7eb95fa7b752e20e98ec09b61a1b4dc528253 kernel-rt-64k-debug-devel-6.12.0-211.65.1.el10_2.aarch64.rpm dd5db9089ed5f9d51eced7d13603deefd7936e8ecd7e3e95de13bd965e46ebc1 kernel-rt-debug-devel-6.12.0-211.65.1.el10_2.aarch64.rpm f99119154b862a1a7f12289e618a2ed2eb0d441422916fd88e34ab0d069dce17 kernel-rt-64k-debug-modules-core-6.12.0-211.65.1.el10_2.aarch64.rpm ff71c30985abb05eacf527dc340735b031703f8719820587c53322c5f5d9f85e ALSA-2026:83207 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (CVE-2026-45859) * kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319) * kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011) * kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899) * kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032) * kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030) * kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974) * kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162) * kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377) * kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140) * kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262) * kernel: dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CVE-2026-74574) * kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641) * kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985) * kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526) * kernel: nfsd: don't free session slots that are still in use (CVE-2026-89689) * kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036) * kernel: media: cx231xx: reject geometry changes while the VBI queue is busy (CVE-2026-89894) * kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207) * kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228) Bug Fix(es) and Enhancement(s): * cannot use VFs of i40e/ice NIC in bond device (JIRA:AlmaLinux-143410) * ionic: commit backported to 9.8 missing in 10.2 (JIRA:AlmaLinux-165657) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-modules-extra-6.12.0-211.66.1.el10_2.aarch64.rpm 027857f1f5d0b66883ed97e653bbd84cdb6c9c0f87cd02f83d91f21cd5fd7b72 kernel-rt-64k-devel-6.12.0-211.66.1.el10_2.aarch64.rpm 090c69f8dbdc3eee68887840726f1216ba3f413745d6b7d7b18287a3145353c6 kernel-rt-64k-6.12.0-211.66.1.el10_2.aarch64.rpm 0d74f4af5e5d4c78bcb514ee545eba07cc047284725dc03f318aff203a5f570d kernel-rt-64k-debug-modules-6.12.0-211.66.1.el10_2.aarch64.rpm 26c982f55e8e646cfd797aac476f2be35361864a0043ea67fb5dc3ba12c10c23 kernel-rt-debug-devel-6.12.0-211.66.1.el10_2.aarch64.rpm 272de47f6bd36a72f65603a982d7168f3b6d988e7d278d98ff41a04df815583c kernel-rt-debug-modules-core-6.12.0-211.66.1.el10_2.aarch64.rpm 2dfcb601533bfd9156ebbaa4f796eab2bd63bb8d889ef36c81199b99d662417b kernel-rt-64k-debug-devel-6.12.0-211.66.1.el10_2.aarch64.rpm 3279a50c52a550341d1b41f710124c05adc7bd965775fd5f47f6a0befc94f3e9 kernel-rt-64k-core-6.12.0-211.66.1.el10_2.aarch64.rpm 3b2bbdb7b1108709d35fe2fe903d95d73db2a52bd7d11e16e83971da901cf5b0 kernel-rt-core-6.12.0-211.66.1.el10_2.aarch64.rpm 489f3c977849d31e13733e7e9d115268090108c0b0b7ae97a72263216c413699 kernel-rt-debug-modules-6.12.0-211.66.1.el10_2.aarch64.rpm 5334b0a561791f0a277302dc8d7dd2bae81c5c2683d67f19cc1420baf04ae1f2 kernel-rt-64k-debug-6.12.0-211.66.1.el10_2.aarch64.rpm 556de4e1aa296d5f6f8f9468082168d5b541c397433a53cf25a013655b9d0a02 kernel-rt-modules-6.12.0-211.66.1.el10_2.aarch64.rpm 55e38c91d9d37abc8ef98cff4feef469b841440547f00e21fa6c2c2d06effc67 kernel-rt-64k-debug-modules-extra-6.12.0-211.66.1.el10_2.aarch64.rpm 63bd4f451ec3457fb4c62d3e8e2f9d0987345f7a9cdfbb6ba7f1586b02f80045 kernel-rt-64k-debug-core-6.12.0-211.66.1.el10_2.aarch64.rpm 744186d85a567df6bf8eadfe97b23cd0b2aa4791e19c58f6b2b7133b22139b6c kernel-rt-64k-modules-extra-6.12.0-211.66.1.el10_2.aarch64.rpm 7c6cc9ad99cdcfb467e4800dc8fd5370db60016c234042f368143ce7a60d5af7 kernel-rt-debug-core-6.12.0-211.66.1.el10_2.aarch64.rpm 7c74ccf249631c712f56cad19f182661394843e6aeddbcfa52d5e215cfcbdb8b kernel-rt-64k-debug-modules-core-6.12.0-211.66.1.el10_2.aarch64.rpm 818d60398536bf797f7ea17e632a2ca1e1baa77493b8dffe4c93f9f8ee81488d kernel-rt-debug-modules-extra-6.12.0-211.66.1.el10_2.aarch64.rpm a5dfaf6072add2289ac987c41f9b2cca0a4db9c84d81bd9132daf3a7a5cabdd2 kernel-rt-6.12.0-211.66.1.el10_2.aarch64.rpm a6e657fc0dcecf5cb70cc9fb8299c7db056b910bc161353bf16d35f0fe209ddd kernel-rt-devel-6.12.0-211.66.1.el10_2.aarch64.rpm e5d05f4c96d6a7c6ae4f6435ad5533a7ecbaf9a1c98134d8d46b886e1c1d7158 kernel-rt-64k-modules-6.12.0-211.66.1.el10_2.aarch64.rpm e7be2ce25ed236115b36be3dc2e383a914521d55faf7314ba730689070036eb3 kernel-rt-debug-6.12.0-211.66.1.el10_2.aarch64.rpm f131c2ccad81d1c909a89a96e15827b1ca2893a2ecea6e00fd6c720617f45437 kernel-rt-64k-modules-core-6.12.0-211.66.1.el10_2.aarch64.rpm fae349f140671c36ef0c231251a4f1162b67e51b84fead00460f34dcf9c7a2ac kernel-rt-modules-core-6.12.0-211.66.1.el10_2.aarch64.rpm ff93c8f3c570fb5cd956421249ece6dba6bc4a5f160e24017d6120d89de224d0 ALSA-2026:85321 Copyright 2026 AlmaLinux OS 0 1 Important

kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678) * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935) * kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917) * kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801) * kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971) * kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962) * kernel: sctp: avoid auth_enable sysctl UAF during netns teardown (CVE-2026-68162) * kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117) * kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300) * kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315) * kernel: Bluetooth: hci_sync: Fix advertising data UAFs (CVE-2026-74509) * kernel: sctp: keep chunk->transport in step with the list it is queued on (CVE-2026-74588) * kernel: sctp: validate cookie AUTH state before use (CVE-2026-74752) * kernel: smb: client: reject a tree connect response whose byte count is too small (CVE-2026-89631) * kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633) * kernel: signal: Prevent exec() race (CVE-2026-98256) * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260) Bug Fix(es) and Enhancement(s): * [10.2.z] kselftests: mm: hugepage-mremap: Bail out! mremap: Expected failure, but call succeeded (JIRA:AlmaLinux-181987) * [IBM 10.3 FEAT] zcrypt driver overwrite function - kernel part [almalinux-10.2.z] (JIRA:AlmaLinux-245336) * Batch: z-stream xfrm - rhel-10.2.z (NST-Core-26W38) (JIRA:AlmaLinux-256678) * RHIVOS - [backport] S32G Driver Enablement - USB (JIRA:AlmaLinux-257228) * Fix pending kernel issues for L1VH GA - Kernel (JIRA:AlmaLinux-267038) * Backport 6785011f8b16 ("ipv4: validate checksum_start before completing checksum") [almalinux-10.2.z] (JIRA:AlmaLinux-280590) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 almalinux-10-for-aarch64-devel-rpms__10_0_default kernel-rt-devel-6.12.0-211.67.1.el10_2.aarch64.rpm 038c35d5afb9e0a372f3ee174d13d8ae580292dc0225121dbbd31119cdbc0761 kernel-rt-64k-debug-modules-core-6.12.0-211.67.1.el10_2.aarch64.rpm 07991a04617c3b71b8fb305e6efa4acbcc1e2778e2651fd79b0d7351cc30f8e8 kernel-rt-debug-modules-6.12.0-211.67.1.el10_2.aarch64.rpm 0c8bb760edba72c37c3cfa024eea1a3baba10b2c4707ac62b92ce41ecb950be9 kernel-rt-6.12.0-211.67.1.el10_2.aarch64.rpm 0f8b68285a211945cde472dedb1525286ab2942f2e6f9f1fabb51b0062f4b77d kernel-rt-modules-core-6.12.0-211.67.1.el10_2.aarch64.rpm 1186c5aaf96f1396462ca51e0e1db6559b39fdffe894187105c3054ef841d8c7 kernel-rt-64k-debug-modules-extra-6.12.0-211.67.1.el10_2.aarch64.rpm 29655e39c8289cee1e66f0d8b6e703d201866202dc3d5472a204b3ea76df4a40 kernel-rt-64k-modules-extra-6.12.0-211.67.1.el10_2.aarch64.rpm 2b2826f603f0a4d2e5570593e7542321ec4c1537cad6dfec01465a0fcfd0e63b kernel-rt-core-6.12.0-211.67.1.el10_2.aarch64.rpm 2c28a0bada04ca72fae520a3e8c1c4a3beea5891463620b4013245b65375f105 kernel-rt-modules-extra-6.12.0-211.67.1.el10_2.aarch64.rpm 4c70e664df4ac27453aa5199d1c6b2c34a8d8d697054e6b2081001ca538742fe kernel-rt-64k-debug-core-6.12.0-211.67.1.el10_2.aarch64.rpm 4cb3e532e7b58dbda403eb18b410ce4c1b78a6b87ad734994b4a921ca018088c kernel-rt-debug-core-6.12.0-211.67.1.el10_2.aarch64.rpm 56477f144e03dc3922c40156c2879fd6f28153d9c993cac5dd7c534e5e5ee4ab kernel-rt-64k-debug-devel-6.12.0-211.67.1.el10_2.aarch64.rpm 5fef64475dedb2cc579497808d6fe89327e8992c7949e7c6c4b3f4b3f25e374f kernel-rt-debug-modules-core-6.12.0-211.67.1.el10_2.aarch64.rpm 71ac60e9b25aa73d5d819966639aeeac5136915ea58fe78ad5e23cbd5ff2fe95 kernel-rt-64k-6.12.0-211.67.1.el10_2.aarch64.rpm a3f5208b4c71e9a3093035b942f6c5b7cde882039117944ea4fd718ef0ddce95 kernel-rt-64k-debug-6.12.0-211.67.1.el10_2.aarch64.rpm a454922e7bdfe8537e24a82724f759a26d7ee85947520c7bbd91f0e7cd975126 kernel-rt-debug-6.12.0-211.67.1.el10_2.aarch64.rpm a9dea03f9b0e99e21359ae69e7dec43b166c3abba982d0a775d5cc97a8c7271f kernel-rt-64k-core-6.12.0-211.67.1.el10_2.aarch64.rpm ab05d726259d2c546712784ab10162471c5828dc7a74b03074535dc0412a40be kernel-rt-debug-devel-6.12.0-211.67.1.el10_2.aarch64.rpm bf7ece451fc9db13bcf039eeaec5eb84f562b66833df7a2cececcf945e0b179a kernel-rt-64k-modules-core-6.12.0-211.67.1.el10_2.aarch64.rpm c0bf0d637d688c6ee6d0204d8e10f11038c0bd568fc8bd3e4067e21ae262fd02 kernel-rt-modules-6.12.0-211.67.1.el10_2.aarch64.rpm c27b5754c13401ff1b4716e7d2015f84a118021eae330c616c0ff59333383834 kernel-rt-64k-debug-modules-6.12.0-211.67.1.el10_2.aarch64.rpm c3f945f78ea52e491da60a4a5adc3fe56cc5396dc288d4845ac6053cba358614 kernel-rt-debug-modules-extra-6.12.0-211.67.1.el10_2.aarch64.rpm c79e3e111e1399f050ec0f050537a6d8e7b41be20e81f28e9b2772d70248b6c2 kernel-rt-64k-modules-6.12.0-211.67.1.el10_2.aarch64.rpm d1b3374e302996e8e6561685eb8b0732ac474c021451f220a1147b3b519b3fa2 kernel-rt-64k-devel-6.12.0-211.67.1.el10_2.aarch64.rpm d6338c9a89c8430ead074d809df6a2a3a1b230a6358a07932edabe979d044e1b