[ALSA-2026:68531] Important: kernel security update
Type:
security
Severity:
important
Release date:
2026-09-18
Description:
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663) * kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233) * kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339) * kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266) * kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306) * kernel: netfilter: xt_policy: fix strict mode inbound policy matching (CVE-2026-52920) * kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075) * kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228) * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176) * kernel: netfilter: require Ethernet MAC header before using eth_hdr() (CVE-2026-53131) * kernel: netfilter: conntrack_irc: fix possible out-of-bounds read (CVE-2026-53268) * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239) * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192) * kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223) * kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275) * kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002) * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921) * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919) * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917) * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143) * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 kernel-tools-libs-devel-4.18.0-553.164.1.el8_10.aarch64.rpm 0135c3ada07bfe91ab46a1eb666131fea0d3d7f9612105b64b98d45c2c9032cb
aarch64 kernel-debug-devel-4.18.0-553.164.1.el8_10.aarch64.rpm 0bcd00d366648d08a280e92e4a2b8a0c82e3cd870963faf8c3c082a1978f66c4
aarch64 kernel-core-4.18.0-553.164.1.el8_10.aarch64.rpm 0c8079e4ef8566143a6acf3e8226211e6bcf67fe24649d5d1d9277e1f027e208
aarch64 kernel-modules-extra-4.18.0-553.164.1.el8_10.aarch64.rpm 126ac4a0e13b63000d2c05f50e3e03914583be70b84b3c807ae5521c7ddb660d
aarch64 kernel-debug-modules-extra-4.18.0-553.164.1.el8_10.aarch64.rpm 1d42dad4ac07f5e2cd87a7865b1bf3d44277ef07cdbf16ea5bb6bd5799ba4cb9
aarch64 kernel-debug-modules-4.18.0-553.164.1.el8_10.aarch64.rpm 3072819db3e31d213a68b606e246b38a65434c36fffcaf48167051db5fe44957
aarch64 bpftool-4.18.0-553.164.1.el8_10.aarch64.rpm 48491ee41902720335b89ef9a5ad727bb1b1150badeead0591fbdfdc198b80d2
aarch64 kernel-debug-4.18.0-553.164.1.el8_10.aarch64.rpm 71c227cd47ba028fbe2c864eab5674fdca95fa93be68bce602ce2b4692a2a8cf
aarch64 kernel-devel-4.18.0-553.164.1.el8_10.aarch64.rpm 72de09447f5892871031424f9af9db958b403f7eb54ba07c1657f6d07161333e
aarch64 kernel-tools-libs-4.18.0-553.164.1.el8_10.aarch64.rpm 740b0e677e66a80e1b36ee8c2fa2d7b90637dced10c3aca719e721cb9d1d11a1
aarch64 python3-perf-4.18.0-553.164.1.el8_10.aarch64.rpm 7b944d640115da82a6b402de59363d775f5f76a244bf9340a742558123e7644a
aarch64 perf-4.18.0-553.164.1.el8_10.aarch64.rpm 8acc64c601da12903cef29eb2200ade395ffbc6e578039ea6958e91c0ed23a7b
aarch64 kernel-headers-4.18.0-553.164.1.el8_10.aarch64.rpm 91f5aef8fff518435e31195ece5fd8223aea0b4d60af9b50c33b3856f3e14eb1
aarch64 kernel-cross-headers-4.18.0-553.164.1.el8_10.aarch64.rpm 9cdb10edad8139c7f191dc02a7d21247bdc1efa1b3f0f34ef7a53dc5ec565726
aarch64 kernel-4.18.0-553.164.1.el8_10.aarch64.rpm ac9ef9c54808dde7714cdf4b6ebd1e66fd7cb1faf9041eb0020eb29e493ca508
aarch64 kernel-modules-4.18.0-553.164.1.el8_10.aarch64.rpm c75a7a1447e5cd4faca241803e7c4647d96755ea991234b94f0ab4c8190569b0
aarch64 kernel-debug-core-4.18.0-553.164.1.el8_10.aarch64.rpm d50bb53990cf85575162f6ccf4c5f64a9fa3f9f56c38e0739e3e672f5c4beb03
aarch64 kernel-tools-4.18.0-553.164.1.el8_10.aarch64.rpm ed5138d54fb4c4b9b246d14491a3592df2c45decbafca41149cec473d5fe2923
noarch kernel-abi-stablelists-4.18.0-553.164.1.el8_10.noarch.rpm 11c7a78cf4f49ec6f5d3959f9522e84540d1b8ec8d977dbd766b4206187653bb
noarch kernel-doc-4.18.0-553.164.1.el8_10.noarch.rpm c9852c268bf79abcd534bcfd5e8d64d41756a489b954d2f45c5cd977dc877617
ppc64le kernel-debug-modules-extra-4.18.0-553.164.1.el8_10.ppc64le.rpm 08f8a453b340a01796abe058586a33b82c81f6c5b411ef99406b296f5a26253b
ppc64le kernel-debug-modules-4.18.0-553.164.1.el8_10.ppc64le.rpm 0be0ad5afac24f91868b3da485773a75dbe8b0402047cbec0ef065856576b7a0
ppc64le python3-perf-4.18.0-553.164.1.el8_10.ppc64le.rpm 0cf2c8e47856937b5a62c934c6c01d3a0b3c38561072e3914a846f0eff16c71d
ppc64le kernel-debug-4.18.0-553.164.1.el8_10.ppc64le.rpm 1994209fdccfd4e0bf14f8c7a37f4e69939531b64cc5163d4158171b49fed18e
ppc64le kernel-tools-libs-devel-4.18.0-553.164.1.el8_10.ppc64le.rpm 2c8499c24990f4e34dc03de7c84c080a81bb1b03d38df1605f52c9e5cf16987f
ppc64le kernel-debug-core-4.18.0-553.164.1.el8_10.ppc64le.rpm 3482d443e24696c7bf6e105aaa6417394f9c5e7800648cfe52cf56bf54e80dcf
ppc64le kernel-modules-4.18.0-553.164.1.el8_10.ppc64le.rpm 3dee1df11f49c362544fad831d4e66c7e5ef57802fca64b8bf85a5f53042bdec
ppc64le kernel-tools-4.18.0-553.164.1.el8_10.ppc64le.rpm 3f21e74e360a0373f0103c573e9dda58f35dbef03b188f9d73b38f179349639c
ppc64le bpftool-4.18.0-553.164.1.el8_10.ppc64le.rpm 5746dfaae1052201d580b7c00310dc016d0d18c92ab1624cd97191954dd9e53f
ppc64le kernel-modules-extra-4.18.0-553.164.1.el8_10.ppc64le.rpm 5dbf7cb76a31e0e1b129f48c8d9d7b655632520911b750e219cb624457dc9f36
ppc64le kernel-cross-headers-4.18.0-553.164.1.el8_10.ppc64le.rpm 6fd50db3ada7a2b8d09bb5eb64f8d2bac0b6cf162973b3a67fe4c10e7ecccdd2
ppc64le kernel-4.18.0-553.164.1.el8_10.ppc64le.rpm 804e1a47ce64ecc72215a39b68e2125320e431b9992b5f231dd9dd442d0c0df1
ppc64le kernel-debug-devel-4.18.0-553.164.1.el8_10.ppc64le.rpm 97823df119e8f736f3c516c45b7daf62456dd6e1b2795c37dde4ef86e81ee737
ppc64le perf-4.18.0-553.164.1.el8_10.ppc64le.rpm ab7cc9cba348eb9c3d6f5ab28f5619354e8f8f6f4f3eb48636289773569769d4
ppc64le kernel-tools-libs-4.18.0-553.164.1.el8_10.ppc64le.rpm c7494ca7170ce0763a85bbc189c99a2f337e1fd7a57e0ee801fe030eaf91cb80
ppc64le kernel-devel-4.18.0-553.164.1.el8_10.ppc64le.rpm e1e756a0196084667ae7d8a9427e1a536f8306ce4ad27cd1bae425a3c129b15b
ppc64le kernel-core-4.18.0-553.164.1.el8_10.ppc64le.rpm e83e98bb76bd92d5b801aa7f3399f3cc5bd7c4c1a158c0cf64186a6818b0f0a6
ppc64le kernel-headers-4.18.0-553.164.1.el8_10.ppc64le.rpm f332758c2bd8bfefcfb1139f5a4dac9303f00212c4657055e836773869382b35
s390x kernel-zfcpdump-devel-4.18.0-553.164.1.el8_10.s390x.rpm 038f85e06d29017a0a828510cdffe625efa5cbddcf463ada2900ec73d995f919
s390x python3-perf-4.18.0-553.164.1.el8_10.s390x.rpm 1d545e9f61b8c1811cfecbd1c815c3c7193ac909c97e0962303cdcc9a9163cdd
s390x kernel-zfcpdump-core-4.18.0-553.164.1.el8_10.s390x.rpm 2006f107db94436a82edfcbee30aab962572b1f173d0f918b6dc30df177239a7
s390x kernel-headers-4.18.0-553.164.1.el8_10.s390x.rpm 2c8714d365751200ba2a123c406117bb877d78dec59556a714c8a19afb6d4b1d
s390x kernel-tools-4.18.0-553.164.1.el8_10.s390x.rpm 30e6c70f66acb7cef798b583785d78b2b85253cf3f605f8f40886fb42f850a18
s390x kernel-core-4.18.0-553.164.1.el8_10.s390x.rpm 32fee2cc29a8e30286963d41146b48843db956a1b4703e1deaf67a0eb609a67b
s390x kernel-modules-extra-4.18.0-553.164.1.el8_10.s390x.rpm 429ffcc1337add8a5620231886f1a8fa1fd09b62e6f7a97475c09c314e2ac75f
s390x kernel-devel-4.18.0-553.164.1.el8_10.s390x.rpm 4c0b1e529e4547c60e61c704e47fe80bd47f4a5647f50ffba4e28822cc07992f
s390x perf-4.18.0-553.164.1.el8_10.s390x.rpm 5b9297be6199204bc6086f3c04d65f52a1eee12fa652335a26df2435603fd3c1
s390x kernel-zfcpdump-modules-extra-4.18.0-553.164.1.el8_10.s390x.rpm 5ed50efe5fddc03f6e474d61725afb9a4579b5a5605e137122c590355b5077ba
s390x kernel-modules-4.18.0-553.164.1.el8_10.s390x.rpm 650901ea24e56d1a8767d7273d2876e40f9e7cb24fff2989ab46df6143e5824f
s390x kernel-zfcpdump-4.18.0-553.164.1.el8_10.s390x.rpm 67a7689e483878e7b5208154a13a7e3ff9f9d825641d4e0a57982060f76674be
s390x kernel-debug-devel-4.18.0-553.164.1.el8_10.s390x.rpm 96c9a51937ce7af9b27ce24fbe9f9ac6ac14db23f985a1e8e459c39418983ff4
s390x kernel-debug-modules-4.18.0-553.164.1.el8_10.s390x.rpm a92652b2cfc76e588ed468495b46e37e2095e89dbc4c3787a77d04b9fc58964f
s390x kernel-4.18.0-553.164.1.el8_10.s390x.rpm b33d00cccf40187412ee151fcd67a6fcb176204e9983520886dcaf16674cd5ac
s390x kernel-debug-modules-extra-4.18.0-553.164.1.el8_10.s390x.rpm b50ec900fc8d107b94ba72c32d0e969a38ea1b4cde7578ffa902828452d444c1
s390x kernel-debug-4.18.0-553.164.1.el8_10.s390x.rpm bb29321aaf039cefa1dce6e31f03686c798261e688ec6acdf8392e1f3fae70ed
s390x bpftool-4.18.0-553.164.1.el8_10.s390x.rpm bc01f1482e79edfdc56e364dbb1cd46977e6bb0835e7f2fa03e7c60225da2e4f
s390x kernel-debug-core-4.18.0-553.164.1.el8_10.s390x.rpm de5c6e2c77225ce4412e63856353dffffdff382192f345f6fb751c3e5694ebd0
s390x kernel-cross-headers-4.18.0-553.164.1.el8_10.s390x.rpm e3e78ab1865f51014a9f4208b6f35194b9b4993b23e54403f52f74cc8e64b82c
s390x kernel-zfcpdump-modules-4.18.0-553.164.1.el8_10.s390x.rpm ee46fe91b3dd9fd0c8bd62ec4d061c43839f8927df276fea39ae1f0a1ef7422d
x86_64 kernel-cross-headers-4.18.0-553.164.1.el8_10.x86_64.rpm 0b2b033f95444260d795775475db28f391aa9709090d292b98b246e27def8ec2
x86_64 kernel-modules-extra-4.18.0-553.164.1.el8_10.x86_64.rpm 1c4751cd2992f92b16ce254fdb291666c51b15e6a5debad02ff2e5e0849a44f9
x86_64 bpftool-4.18.0-553.164.1.el8_10.x86_64.rpm 1e32946e2a9ea2a021786b1d4c71ee29450921743022cf01244b34fc5bf4e9b0
x86_64 kernel-tools-libs-4.18.0-553.164.1.el8_10.x86_64.rpm 272b4deb742fec0ea3fd9ac473929e415acee1f249b6a1bb5003df58037eb3df
x86_64 kernel-debug-modules-extra-4.18.0-553.164.1.el8_10.x86_64.rpm 2a778ba2c700485580b872481aba79608a6295ebc72ec24d9091672f695e8722
x86_64 kernel-debug-modules-4.18.0-553.164.1.el8_10.x86_64.rpm 2ab4f9a51c7dda3c9d42386ceb625eb8188cf950497f8bbe143c190080a3ad42
x86_64 python3-perf-4.18.0-553.164.1.el8_10.x86_64.rpm 2e5453ec85a60c04ca461efe1a80046c820445e807f27f7f14fbc580c92f2903
x86_64 kernel-tools-4.18.0-553.164.1.el8_10.x86_64.rpm 504d9ae9de8f4c83e069a2bfbb73552827ce7202883ce6666f0517eabd2ee17d
x86_64 kernel-core-4.18.0-553.164.1.el8_10.x86_64.rpm 56f35e4550d38221a6c3f26fce55cb98fb440e3e47e49ffb36be40c77add9483
x86_64 kernel-debug-devel-4.18.0-553.164.1.el8_10.x86_64.rpm 5905e0a84b582d1caad92d4e3fb1e6eab4979c90847b2f59ff1276fb164d6b5a
x86_64 kernel-debug-core-4.18.0-553.164.1.el8_10.x86_64.rpm 796c1da0761a5d1ae095abe5d2ca56ae4ef8a155a691edad2b93495a12d0d22f
x86_64 kernel-tools-libs-devel-4.18.0-553.164.1.el8_10.x86_64.rpm 897f45adeac02a6f3df4a4a87b8874e2b2a3b99997e9d629597a7b353a327cf9
x86_64 kernel-debug-4.18.0-553.164.1.el8_10.x86_64.rpm 8cfccdd8aac480e322985f4eb6760a950b17fcd2fb4c8549c1042d1b5a282157
x86_64 kernel-devel-4.18.0-553.164.1.el8_10.x86_64.rpm 9db63fc107fc35530a31f0e3eed0cf5a6727bd0df6c140c2645cb637214faf4b
x86_64 kernel-modules-4.18.0-553.164.1.el8_10.x86_64.rpm 9f83fa92c5080e954d2b1a9c30ff322affd3a00f2b8199a1b45b81af2f7502f0
x86_64 kernel-headers-4.18.0-553.164.1.el8_10.x86_64.rpm bd75ecda0d21a3008f22ab7add60c68820c3ebc63e849da20f6eaa3e6781cc42
x86_64 perf-4.18.0-553.164.1.el8_10.x86_64.rpm be601c4b670aaaaee5ec6cd7bef585fdbb56346d4e907af4680216fe15982664
x86_64 kernel-4.18.0-553.164.1.el8_10.x86_64.rpm ed3908e6d1f21ba46ff304a96b4556ff413f6b40e7aa5df4ec79da59e1dff2bf
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.