ALSA-2026:85773

ALSA-2026:85773 · Important: kernel security, bug fix, and enhancement update

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfrm: espintcp: do not reuse an in-progress partial send (CVE-2026-52935) * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196) * kernel: sctp: keep chunk->transport in step with the list it is queued on (CVE-2026-74588) * kernel: sctp: validate cookie AUTH state before use (CVE-2026-74752) * kernel: smb: client: reject a tree connect response whose byte count is too small (CVE-2026-89631) * kernel: sctp: stop processing a packet once its association is deleted (CVE-2026-89479) * kernel: perf: Fix addr_filter_ranges lifetime (CVE-2026-93817) * kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CVE-2026-93288) * kernel: kernel: strparser: use-after-free via msg_timer_work rearm after strp_done() cancellation () * kernel: netfilter: flowtable: hold reference on ct until flow is released (CVE-2026-98320) Bug Fix(es) and Enhancement(s): * gfs2 filesystem withdrawal rework [AlmaLinux-8] (JIRA:AlmaLinux-129363) * Batch: z-stream xfrm - almalinux-8.10.z (NST-Core-26W38) (JIRA:AlmaLinux-256684) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Correctif disponible

Publication

2026-10-20T00:00:00Z

Mise à jour

2026-10-20T16:11:57.453044553Z

Pile logicielle: system

Vérifiez votre serveur →