p PatchFirst

ALSA-2026:63013

ALSA-2026:63013 · Important: kernel-rt security, bug fix, and enhancement update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling (CVE-2024-57849) * kernel: smc91x: fix broken irq-context in PREEMPT_RT (CVE-2025-71132) * kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970) * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185) * kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800) * kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397) * kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399) * kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392) * kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391) * kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018) * kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268) * kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298) * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480) * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581) Bug Fix(es) and Enhancement(s): * qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-8.10.z] (JIRA:AlmaLinux-193045) * powerpc/pseries: lparcfg - fix kbuf[] underflow (JIRA:AlmaLinux-240144) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • kernel-rt AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.18.0-553.159.1.rt7.500.el8_10

    Update to 4.18.0-553.159.1.rt7.500.el8_10

  • kernel-rt-core AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.18.0-553.159.1.rt7.500.el8_10

    Update to 4.18.0-553.159.1.rt7.500.el8_10

  • kernel-rt-debug AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.18.0-553.159.1.rt7.500.el8_10

    Update to 4.18.0-553.159.1.rt7.500.el8_10

  • kernel-rt-debug-core AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.18.0-553.159.1.rt7.500.el8_10

    Update to 4.18.0-553.159.1.rt7.500.el8_10

  • kernel-rt-debug-devel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.18.0-553.159.1.rt7.500.el8_10

    Update to 4.18.0-553.159.1.rt7.500.el8_10

  • kernel-rt-debug-modules AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.18.0-553.159.1.rt7.500.el8_10

    Update to 4.18.0-553.159.1.rt7.500.el8_10

  • kernel-rt-debug-modules-extra AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.18.0-553.159.1.rt7.500.el8_10

    Update to 4.18.0-553.159.1.rt7.500.el8_10

  • kernel-rt-devel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.18.0-553.159.1.rt7.500.el8_10

    Update to 4.18.0-553.159.1.rt7.500.el8_10

  • kernel-rt-modules AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.18.0-553.159.1.rt7.500.el8_10

    Update to 4.18.0-553.159.1.rt7.500.el8_10

  • kernel-rt-modules-extra AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 4.18.0-553.159.1.rt7.500.el8_10

    Update to 4.18.0-553.159.1.rt7.500.el8_10

Original sources

Check your server →