[ALSA-2026:71232] Important: kernel security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-09-25
Description:
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: block: zero non-PI portion of auto integrity buffer (CVE-2026-23007) * kernel: af_unix: Drop all SCM attributes for SOCKMAP (CVE-2026-53005) * kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831) * kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush() (CVE-2026-63802) * kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() (CVE-2026-64053) * kernel: smb: client: fix double-free in SMB2_flush() replay (CVE-2026-64383) * kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534) * kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564) * kernel: ALSA: timer: drain a slave's callback before its master detaches it (CVE-2026-68201) * kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CVE-2026-72261) * kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844) * kernel: net: tun: bound receive headroom (CVE-2026-81000) * kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846) Bug Fix(es) and Enhancement(s): * sctp: prevent peer transport count overflow [almalinux-9.8.z] (JIRA:AlmaLinux-216251) * netfilter: nftables CVE and memory safety backports for 9.8 (JIRA:AlmaLinux-236634) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 kernel-debug-modules-5.14.0-687.51.1.el9_8.aarch64.rpm 2f0a73de3c3e864a4bc1d762b645fcd3fa726cc06f89e828e9e82912b4237ee8
aarch64 kernel-debug-5.14.0-687.51.1.el9_8.aarch64.rpm 30d2f4a1f612b41bf90910f727360621ff5f9c001d5c2ecc0ff45385961a30ae
aarch64 kernel-debug-core-5.14.0-687.51.1.el9_8.aarch64.rpm 36b8ca300e6e9b5d00c431c226a6de5ef4287aafc037e60f8ad4b5786641525a
aarch64 kernel-core-5.14.0-687.51.1.el9_8.aarch64.rpm 5e80248481165fd0b8c3509d4dda694a871fcd55944cc2ee6f48c77a5c38cc24
aarch64 kernel-64k-debug-modules-extra-5.14.0-687.51.1.el9_8.aarch64.rpm 66aac5aae5ffabeee74adbddf9d4d785472534aef0523842ec005aa4759fce4f
aarch64 kernel-64k-debug-5.14.0-687.51.1.el9_8.aarch64.rpm 6a5b4e4f9a56788f466713a35d9e3fd06988e3c3bef9b69f8d141e0c585cc768
aarch64 kernel-64k-debug-modules-core-5.14.0-687.51.1.el9_8.aarch64.rpm 790eb4693e4e33d6e3751a6a2869add8496983db21ee9eaa76fcf66f16070c12
aarch64 kernel-64k-core-5.14.0-687.51.1.el9_8.aarch64.rpm 801ace148c4e76666d05ccf6edd9a8d4626f66d28f37817587148bd569dff4e9
aarch64 kernel-5.14.0-687.51.1.el9_8.aarch64.rpm 9bea6ef1e1c9464d6172027119aab1cfc10b06506b0e6929f20d2ca78a8153d8
aarch64 kernel-debug-modules-core-5.14.0-687.51.1.el9_8.aarch64.rpm bf04252bde6e8c00653c2639faf28fcf238511344319c95b3ecec5e59b34d9a3
aarch64 kernel-64k-debug-modules-5.14.0-687.51.1.el9_8.aarch64.rpm cc3199ae75624457d84faddaccb5b09f97f8a20d49b380716818c144e72e9202
aarch64 kernel-64k-modules-core-5.14.0-687.51.1.el9_8.aarch64.rpm cf37ef08015808e29bcf7f9f0a47aa518731e4220007a75f631cdc418b88fabc
aarch64 kernel-64k-modules-extra-5.14.0-687.51.1.el9_8.aarch64.rpm d09ee0017ee023d0401e39c095eeceb9bf153317488f7e6df926c2fb3f8183c3
aarch64 kernel-64k-debug-core-5.14.0-687.51.1.el9_8.aarch64.rpm d2accddc33c13b557d77c05f364536e4a34236cea2cc21426f1119b5d166a397
aarch64 kernel-64k-modules-5.14.0-687.51.1.el9_8.aarch64.rpm f6d30d6be88650ccfbdf1f67c2dff43e43ee83e413b961000b208c98e7f111c4
aarch64 kernel-64k-5.14.0-687.51.1.el9_8.aarch64.rpm fcb2dfa5940c1954af7185ae3d2fe9d2f54b1bbabc9c0efe0f1367f910aea24b
noarch kernel-abi-stablelists-5.14.0-687.51.1.el9_8.noarch.rpm 90a6ad0366c68ad1b02c60002a41919ec1722ea8b8bd22794bc71cdde9822d76
ppc64le kernel-debug-core-5.14.0-687.51.1.el9_8.ppc64le.rpm 0b996ff92523982383feeeced0c4efe883b9a12237aa88bb814fc2f7deb26272
ppc64le kernel-core-5.14.0-687.51.1.el9_8.ppc64le.rpm 637753744a165aded2bbb7d4d4d26a5a695e9cf59cbff8245c22128fd5010fb6
ppc64le kernel-debug-5.14.0-687.51.1.el9_8.ppc64le.rpm cfdb4310fc961e4ed0925e26f7a1ad3686d075293ef10eee13c31154a3ddad30
ppc64le kernel-debug-modules-5.14.0-687.51.1.el9_8.ppc64le.rpm d29811d54da76b984d445ea68fff5dfd5f0a8ab6f6889e7773506b24ecb3634b
ppc64le kernel-debug-modules-core-5.14.0-687.51.1.el9_8.ppc64le.rpm db4611c855c8e38c6a3476ede339981860f766828722b7ad86edb907097056a9
ppc64le kernel-5.14.0-687.51.1.el9_8.ppc64le.rpm e51d1e6348f61e1626766a4a7b360d08197601af0a20e387ff6462ce4d48ac2a
s390x kernel-core-5.14.0-687.51.1.el9_8.s390x.rpm 4605ec85a804f9f945b493b622008e880e92080b528c262db19e564989743789
s390x kernel-debug-5.14.0-687.51.1.el9_8.s390x.rpm 6362632c2fa641b7525368160bd570a2665d8ef850208083bbf6a6e00ae1f949
s390x kernel-5.14.0-687.51.1.el9_8.s390x.rpm 656c8f15869d6d74b548f4ac48a22b0fcea25ecdd650c12f8da9fb4196ad230f
s390x kernel-debug-modules-5.14.0-687.51.1.el9_8.s390x.rpm 7a3089e5ea17c7aaa682be310de0d64ecb939690a2a0aa22a21b3037bac0daad
s390x kernel-debug-core-5.14.0-687.51.1.el9_8.s390x.rpm aceb20f9228d908c9330d4733cb1dce5b3c345259f4a662a0a6587b9276919c9
x86_64 kernel-5.14.0-687.51.1.el9_8.x86_64.rpm 23e00bacfcf5d5b51dbb97c88055e89a4083e3e481c738ae293d57c23a07216f
x86_64 kernel-debug-core-5.14.0-687.51.1.el9_8.x86_64.rpm 3b3a92a5bc334d67ec30b5e176d35a60e079af8a07a63806f28eda5a343211a9
x86_64 kernel-debug-modules-5.14.0-687.51.1.el9_8.x86_64.rpm 55c913d239f56d47d471c7ca2a16b4bacdfa388a991fbaf5732e29bf3ca900c4
x86_64 kernel-debug-5.14.0-687.51.1.el9_8.x86_64.rpm c9a0514eead7527a0f9fa9b37573996f73201d180e98898df38ae81e4fb1c107
x86_64 kernel-core-5.14.0-687.51.1.el9_8.x86_64.rpm f1499b01e64a338db6e402fd64f09b1ea6199a08c4fe8530e2210931e042da58
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.