Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: openvswitch: defer tunnel netdev_put to RCU release (CVE-2026-31678)
* kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935)
* kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917)
* kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801)
* kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971)
* kernel: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (CVE-2026-63962)
* ker
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (CVE-2026-45859)
* kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
* kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011)
* kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899)
* kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032)
* kernel: wifi: mac80211: bounds-check link_id
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103)
* kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360)
* kernel: vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)
* kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup (CVE-2026-53398)
* kernel: vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)
* kernel: igc: set tx buffer type for SMD frames (CVE-2026-64035)
* kernel: vsock/vmci: fix UAF when peer resets connection during ha
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: netfilter: nf_conncount: increase the connection clean up limit to 64 (CVE-2026-45860)
* kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
* kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CVE-2026-46275)
* kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
* kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
* kernel: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034)
* kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099)
Bug Fix(es) and Enhancement(s):
* gve: backport large queue depth patches [almalinux-10.2.z] (JIRA:AlmaLinux-219261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323)
* kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)
* kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
* kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)
* kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)
* kernel: Linux kernel: Denial of Service in libceph OSD cli
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CVE-2025-39964)
* kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry (CVE-2026-45894)
* kernel: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CVE-2026-45959)
* kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)
* kernel: keys: Pin request_key_auth payload in instantiate paths (CVE-2026-63823)
* kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007)
* kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172)
* kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971)
* kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)
* kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193)
* kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)
* kernel: w
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (CVE-2025-40149)
* kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)
* kernel: drm/xe: Open-code GGTT MMIO access protection (CVE-2026-23466)
* kernel: drm/xe: always keep track of remap prev/next (CVE-2026-31479)
* kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CVE-2026-31566)
* kernel: xfrm: hold dev ref until after transport_finish NF_HOOK
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133)
* kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response (CVE-2026-43334)
* kernel: Bluetooth: virtio_bt: clamp rx length before skb_put (CVE-2026-46123)
* kernel: Bluetooth: serialize accept_q access (CVE-2026-52918)
* kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091)
* kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CVE-2026-53072)
* kernel: net:
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073)
* kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808)
* kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824)
* kernel: smb: client: fix query directory replay double-free (CVE-2026-64387)
* kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145)
* kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)
For m
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: seccomp: passthrough uretprobe systemcall without filtering (CVE-2025-21834)
* kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003)
* kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks (CVE-2026-43454)
* kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)
* kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
* kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202)
* kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264)
* kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
* kernel: perf/aux: Fix page UAF in map_range() (CVE-2026-64300)
* kernel: af_unix: set gc_in_progress to true in unix_gc() (CVE-2026-53361)
Bug Fix(es) and Enhancement(s):
* netfilter: CVE backports for AlmaLinux 10.2.z (JIRA:AlmaLinux-1853
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: fsnotify: Fix ordering of iput() and watched_objects decrement (CVE-2024-53143)
* kernel: shmem: fix recovery on rename failures (CVE-2025-71072)
* kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415)
* kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488)
* kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923)
* kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64
Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CVE-2026-43186)
Bug Fix(es) and Enhancement(s):
* kernel panics caused by NULL pointer dereferences within octeon_ep_vf [almalinux-10.2.z] (JIRA:AlmaLinux-186345)
* ice: driver update 2026-06, part 2 [almalinux-10.2.z] (JIRA:AlmaLinux-193134)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.