alsa-2026:61887
Vulnerability from osv_almalinux
Published
2026-09-01 00:00
Modified
2026-09-04 20:49
Summary
Important: kernel security, bug fix, and enhancement update
Details
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: seccomp: passthrough uretprobe systemcall without filtering (CVE-2025-21834)
- kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003)
- kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks (CVE-2026-43454)
- kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)
- kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
- kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
- kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053)
- kernel: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CVE-2026-53026)
- kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)
- kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)
- kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
- kernel: mm/list_lru: drain before clearing xarray entry on reparent (CVE-2026-53153)
- kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)
- kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)
- kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)
- kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)
- kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)
- kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)
- kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136)
- kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)
- kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)
- kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438)
- kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304)
- kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)
- kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490)
- kernel: mm: shrinker: fix shrinker_info teardown race with expansion (CVE-2026-64418)
- kernel: smb: client: fix change notify replay double-free (CVE-2026-64384)
- kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277)
- kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)
- kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)
- kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086)
- kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166)
- kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069)
- kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130)
- kernel: ceph: give up on paths longer than PATH_MAX (CVE-2024-53685)
- kernel: ceph: fix memory leaks in ceph_mdsc_build_path() (CVE-2026-43419)
- kernel: ceph: add a bunch of missing ceph_path_info initializers (CVE-2026-43408)
Bug Fix(es) and Enhancement(s):
- AlmaLinux 10: s390: Revert support for DCACHE_WORD_ACCESS [almalinux-10.2.z] (JIRA:AlmaLinux-188180)
- qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-10.2.z] (JIRA:AlmaLinux-193043)
- ss core dumped when there is an SCTP session [almalinux-10.2.z] (JIRA:AlmaLinux-212393)
- [AlmaLinux-10.2.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-218627)
- AlmaLinux10.0 - s390/pfault: Fix virtual vs physical address confusion [almalinux-10.2.z] (JIRA:AlmaLinux-222507)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-debug"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-debug-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-debug-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-debug-devel-matched"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-debug-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-debug-modules-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-debug-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-devel-matched"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-modules-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-64k-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-abi-stablelists"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-cross-headers"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-debug"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-debug-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-debug-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-debug-devel-matched"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-debug-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-debug-modules-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-debug-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-debug-uki-virt"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-devel-matched"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-doc"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-headers"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-modules-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-modules-extra-matched"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-64k"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-64k-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-64k-debug"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-64k-debug-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-64k-debug-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-64k-debug-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-64k-debug-modules-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-64k-debug-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-64k-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-64k-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-64k-modules-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-64k-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-debug"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-debug-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-debug-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-debug-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-debug-modules-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-debug-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-modules-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-rt-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-tools"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-tools-libs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-tools-libs-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-uki-virt"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-uki-virt-addons"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-zfcpdump"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-zfcpdump-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-zfcpdump-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-zfcpdump-devel-matched"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-zfcpdump-modules"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-zfcpdump-modules-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "kernel-zfcpdump-modules-extra"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "libperf"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "perf"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "python3-perf"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "rtla"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "rv"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.12.0-211.50.1.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "The kernel packages contain the Linux kernel, the core of any Linux operating system. \n\nSecurity Fix(es): \n\n * kernel: seccomp: passthrough uretprobe systemcall without filtering (CVE-2025-21834)\n * kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003)\n * kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks (CVE-2026-43454)\n * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)\n * kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)\n * kernel: ip6_gre: Use cached t-\u003enet in ip6erspan_changelink() (CVE-2026-46120)\n * kernel: iommu/amd: Fix clone_alias() to use the original device\u0027s devid (CVE-2026-53053)\n * kernel: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CVE-2026-53026)\n * kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)\n * kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)\n * kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)\n * kernel: mm/list_lru: drain before clearing xarray entry on reparent (CVE-2026-53153)\n * kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)\n * kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)\n * kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)\n * kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)\n * kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)\n * kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)\n * kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136)\n * kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)\n * kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)\n * kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438)\n * kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304)\n * kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)\n * kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490)\n * kernel: mm: shrinker: fix shrinker_info teardown race with expansion (CVE-2026-64418)\n * kernel: smb: client: fix change notify replay double-free (CVE-2026-64384)\n * kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277)\n * kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)\n * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)\n * kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086)\n * kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166)\n * kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069)\n * kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130)\n * kernel: ceph: give up on paths longer than PATH_MAX (CVE-2024-53685)\n * kernel: ceph: fix memory leaks in ceph_mdsc_build_path() (CVE-2026-43419)\n * kernel: ceph: add a bunch of missing ceph_path_info initializers (CVE-2026-43408)\n\n\nBug Fix(es) and Enhancement(s): \n\n * AlmaLinux 10: s390: Revert support for DCACHE_WORD_ACCESS [almalinux-10.2.z] (JIRA:AlmaLinux-188180)\n * qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-10.2.z] (JIRA:AlmaLinux-193043)\n * ss core dumped when there is an SCTP session [almalinux-10.2.z] (JIRA:AlmaLinux-212393)\n * [AlmaLinux-10.2.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-218627)\n * AlmaLinux10.0 - s390/pfault: Fix virtual vs physical address confusion [almalinux-10.2.z] (JIRA:AlmaLinux-222507)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
"id": "ALSA-2026:61887",
"modified": "2026-09-04T20:49:06Z",
"published": "2026-09-01T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:61887"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2025-21834"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-23003"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-43450"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-43454"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-45970"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-46120"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53026"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53053"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53153"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53185"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53189"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53196"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53391"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53392"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53397"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-53399"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-63800"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64018"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64136"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64189"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64276"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64277"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64298"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64304"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64320"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64384"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64418"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64438"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-64490"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-68086"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-68166"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-68480"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-72069"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-72130"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2350398"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2432681"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2468145"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2468228"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2482006"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2482614"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492310"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492454"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492735"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492750"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492788"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2492790"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2502219"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2502227"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2502239"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2502240"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2502260"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2502421"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2502527"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2502889"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2507061"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2507118"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2507119"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2507208"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2507277"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2507285"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2507287"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2507290"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2507301"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2508363"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2513141"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2513167"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2516248"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2516448"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/10/ALSA-2026-61887.html"
}
],
"related": [
"CVE-2025-21834",
"CVE-2026-23003",
"CVE-2026-43454",
"CVE-2026-43450",
"CVE-2026-45970",
"CVE-2026-46120",
"CVE-2026-53053",
"CVE-2026-53026",
"CVE-2026-53185",
"CVE-2026-53196",
"CVE-2026-53189",
"CVE-2026-53153",
"CVE-2026-63800",
"CVE-2026-53397",
"CVE-2026-53399",
"CVE-2026-53392",
"CVE-2026-53391",
"CVE-2026-64018",
"CVE-2026-64136",
"CVE-2026-64189",
"CVE-2026-64320",
"CVE-2026-64438",
"CVE-2026-64304",
"CVE-2026-64298",
"CVE-2026-64490",
"CVE-2026-64418",
"CVE-2026-64384",
"CVE-2026-64277",
"CVE-2026-64276",
"CVE-2026-68480",
"CVE-2026-68086",
"CVE-2026-68166",
"CVE-2026-72069",
"CVE-2026-72130",
"CVE-2024-53685",
"CVE-2026-43419",
"CVE-2026-43408"
],
"summary": "Important: kernel security, bug fix, and enhancement update"
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…