[ALSA-2026:71233] Important: kernel security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-10-05
Description:
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: block: zero non-PI portion of auto integrity buffer (CVE-2026-23007) * kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite (CVE-2026-53266) * kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831) * kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush() (CVE-2026-63802) * kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() (CVE-2026-64053) * kernel: smb: client: fix double-free in SMB2_flush() replay (CVE-2026-64383) * kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564) * kernel: ALSA: timer: drain a slave's callback before its master detaches it (CVE-2026-68201) * kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243) * kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569) * kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844) * kernel: net: tun: bound receive headroom (CVE-2026-81000) * kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846) Bug Fix(es) and Enhancement(s): * kernel module .ko ELF files with non-zero sh_addr section addresses [almalinux-10.2.z] (JIRA:AlmaLinux-159298) * sctp: prevent peer transport count overflow [almalinux-10.2.z] (JIRA:AlmaLinux-216247) * [AlmaLinux 10] bnxt_en: RX queue restart failed: err=-95 [almalinux-10.2.z] (JIRA:AlmaLinux-247283) * RHIVOS - S32G: backport missing fixes to 10.2 (JIRA:AlmaLinux-259788) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 kernel-devel-matched-6.12.0-211.59.1.el10_2.aarch64.rpm 25cb2bff3ed6bfbf5aa21d6d7558b22e955bd784f73c3a9fef816a305ea15663
aarch64 kernel-64k-devel-matched-6.12.0-211.59.1.el10_2.aarch64.rpm 29ba21ac4bdaac0064db8e6f8efb5094deda5747c52bfd59879fb942407a65f0
aarch64 perf-6.12.0-211.59.1.el10_2.aarch64.rpm 2b1fc26f845a0e59d1e94bac8b46cc942faebec42069325069857eba7432bca7
aarch64 kernel-debug-devel-6.12.0-211.59.1.el10_2.aarch64.rpm 4b25807bb692a1496f6784a1bb57ab3af2e1ba4cd7a60f35d66f0df5e019ff7f
aarch64 kernel-64k-debug-devel-matched-6.12.0-211.59.1.el10_2.aarch64.rpm 8c0e141179120db169794ce8e3ebe0663fd13757bfaf985ed0cc7d1541fb24d7
aarch64 kernel-64k-debug-devel-6.12.0-211.59.1.el10_2.aarch64.rpm 8d9afee71fb8f306a7066dfca68e8a4126c23942a0e0ace7f8e90622d679f205
aarch64 python3-perf-6.12.0-211.59.1.el10_2.aarch64.rpm 9206cc26de1562cc6e398962d629edbe48aa17cda03b7be6b8d13b31fbc6087e
aarch64 kernel-headers-6.12.0-211.59.1.el10_2.aarch64.rpm 937551f8c4e4dc070bf0ecacac1b57008c508e3d363a5421b71c437e6515c7d7
aarch64 kernel-devel-6.12.0-211.59.1.el10_2.aarch64.rpm bc6479e5b81d4fb8ef472b9d574888a76ca831c952c83933970ddeb750610da9
aarch64 kernel-64k-devel-6.12.0-211.59.1.el10_2.aarch64.rpm c826e79de3ea4d73893b7881aa1f0934d657703d944d32119830f6d8ac0aac62
aarch64 kernel-debug-devel-matched-6.12.0-211.59.1.el10_2.aarch64.rpm f4a89112cc948b70b129d1a85d29fb750e5dd39a7595705e0d30245697a92fec
noarch kernel-doc-6.12.0-211.59.1.el10_2.noarch.rpm 570136fba25a6b0e607b32762ab0b5f9a1bf9803cf7c18d367189ed301f9afbc
ppc64le kernel-headers-6.12.0-211.59.1.el10_2.ppc64le.rpm 3c2bd03b2d65ccf5859f473cd03fa4aef072f6ba4daca4a1b61d7bcd38131844
ppc64le kernel-devel-matched-6.12.0-211.59.1.el10_2.ppc64le.rpm 4f387ccabb652c45e6355d4c8e0f0a91def04981cba237f19b11e59967ae7322
ppc64le kernel-debug-devel-6.12.0-211.59.1.el10_2.ppc64le.rpm 7e6bda9bf1de614f11511a2cbdae56ba258e1b6ed08e82022cb9b11220299589
ppc64le python3-perf-6.12.0-211.59.1.el10_2.ppc64le.rpm 80f32c70b523e08e606844ea5c8d0a270efe6d5b167ac16bf0cfabc4ed3b8251
ppc64le perf-6.12.0-211.59.1.el10_2.ppc64le.rpm 8140180abfd8bf57f3499bda28058f08dcde89d1bf4285351add4870f67bb8c1
ppc64le kernel-devel-6.12.0-211.59.1.el10_2.ppc64le.rpm 82254bb7112ad4a20da8bb89a5a6a42cdb813400462544b0eed40b7f36ec5ad2
ppc64le kernel-debug-devel-matched-6.12.0-211.59.1.el10_2.ppc64le.rpm bdbc1a26d402fef0e5c4755a6471f5fb3163ac4b39195fadc218659a5b865711
s390x kernel-headers-6.12.0-211.59.1.el10_2.s390x.rpm 0860bbe4576b023174fa5faf59f3afc64e59dc0c9563819484e27b2f839f80d9
s390x python3-perf-6.12.0-211.59.1.el10_2.s390x.rpm 1800a0a1d1b6824ff4905301fbfe9a0d6d9c26b02df3400455988b0af4d73d16
s390x kernel-zfcpdump-devel-6.12.0-211.59.1.el10_2.s390x.rpm 4c4bea36f530c16dad43ac5b88fded505b77a293c8b84c48034c1eafaa5b0351
s390x kernel-devel-matched-6.12.0-211.59.1.el10_2.s390x.rpm 6a5064d8f364f936a9d305c28205283a2fc477b9af713c8976025791ac598c53
s390x kernel-debug-devel-matched-6.12.0-211.59.1.el10_2.s390x.rpm 75cdfee47a385c1ae956d0e3c5dce8329aa9e2361bbd80fd5866e38c391b6dfa
s390x kernel-zfcpdump-devel-matched-6.12.0-211.59.1.el10_2.s390x.rpm 83330cf6f6c7f158aed3ed1f540da2681b99aae4969b5b9d0d013523638fea69
s390x kernel-devel-6.12.0-211.59.1.el10_2.s390x.rpm 8b20796db075a16d4161621f85f1c086bfb40caffdaeb1dad362ec85292de07b
s390x perf-6.12.0-211.59.1.el10_2.s390x.rpm b37b8b583f2e805ed79fabc7b84a231e54798e36e7bf102cde60d5b2fdec312a
s390x kernel-debug-devel-6.12.0-211.59.1.el10_2.s390x.rpm c9868d01e36b7942124e57fdaf2005c94515d4659f924b0e27bef2d190ba2d7c
x86_64 kernel-devel-6.12.0-211.59.1.el10_2.x86_64.rpm 30dad25c4bb3ea06bd37ed52efb447357666ab0216c92e41d7d60dab7bf25c1e
x86_64 kernel-headers-6.12.0-211.59.1.el10_2.x86_64.rpm 3c83fd158fdf5ecbb69cff5ff4a7290bf8e4cfdb23538359388e765de3664457
x86_64 kernel-debug-devel-matched-6.12.0-211.59.1.el10_2.x86_64.rpm 965d7a6651b369889dbb536bae2565706d0f0822edc018bc997032c6ba1e9b60
x86_64 perf-6.12.0-211.59.1.el10_2.x86_64.rpm b2a5f2ef0948382eb78735976720c4b57d7dc27cf59b65448e5da8025e12f655
x86_64 kernel-debug-devel-6.12.0-211.59.1.el10_2.x86_64.rpm bdfbf7bc1811197f5dd70dfe8e90a4a5feb65d2928a54cd5aebc9c0e673a38fc
x86_64 python3-perf-6.12.0-211.59.1.el10_2.x86_64.rpm c602689889a5c6868ff1c654c81c0690ee520ecadb26d8ecf3c4182b81095a70
x86_64 kernel-devel-matched-6.12.0-211.59.1.el10_2.x86_64.rpm f2a6ed105f9ee33a546b759f1ad57a4baccc480aefa78dbec06b2d590a827286
x86_64_v2 kernel-debug-devel-matched-6.12.0-211.59.1.el10_2.x86_64_v2.rpm 394778bf5a2ff5f13eab4f5c927a9dbbb5f7623848bed25fd02cd078f563db6d
x86_64_v2 perf-6.12.0-211.59.1.el10_2.x86_64_v2.rpm 4dc19ebafab478c51c1c0cd2c50427a49f2b638f2cf65e0a983f117b4d47998c
x86_64_v2 kernel-headers-6.12.0-211.59.1.el10_2.x86_64_v2.rpm 80693b31fa781425818fa58925d45f895ddbfe8e1bdc0551eb9363991bad361c
x86_64_v2 python3-perf-6.12.0-211.59.1.el10_2.x86_64_v2.rpm 96d93db8c60f6e8479a58a66e17235e0681efa36d215b758ac42e6a01a489f05
x86_64_v2 kernel-debug-devel-6.12.0-211.59.1.el10_2.x86_64_v2.rpm 9c6d44e539597a035ac698f1e8dba688c6ce902735a5c55c08253dc2d8828b4a
x86_64_v2 kernel-devel-6.12.0-211.59.1.el10_2.x86_64_v2.rpm ddd0e772f1f1091f2f6644d0a9b852866f992f4040ec8c2575315ee6a2a55261
x86_64_v2 kernel-devel-matched-6.12.0-211.59.1.el10_2.x86_64_v2.rpm eafa6a23f2bacca7c01f36fc79fc083e02e3a698481ca6c9324b52cd10918ff3
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.