Skip to content
OpenAdvisories
High ALSA-2026:30848 9 CVEs

Important: kernel security, bug fix, and enhancement update

Published Jun 29, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488)
* kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)
* kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)
* kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090)
* kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054)
* kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898)
* kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)
* kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176)
* kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

Bug Fix(es) and Enhancement(s):

* [AlmaLinux-9.8.z]: Update the mlx5 drivers to v6.19 (JIRA:AlmaLinux-169057)
* iavf: during POD churn vlan filters may not be added for a vlan interface, spoofchk drops subsequent packets [almalinux-9.8.z] (JIRA:AlmaLinux-172993)
* nf_conntrack_sctp: vtag corruption with late INIT in ESTABLISHED state across conntrack zones [almalinux-9.8.z] (JIRA:AlmaLinux-178273)
* sched/fair: Skip sched_balance_running cmpxchg when balance is not due [almalinux-9.8.z] (JIRA:AlmaLinux-182776)
* [REGRESSION] ISST-Spyre: Jenkins workload causes soft lock warning to appear on screen. Workload hangs. [almalinux-9.8.z] (JIRA:AlmaLinux-183183)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 74

ReleasePackageFixed in
AlmaLinux · 9 kernel 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-debug 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-debug-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-debug-devel 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-debug-devel-matched 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-debug-modules 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-debug-modules-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-debug-modules-extra 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-devel 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-devel-matched 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-modules 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-modules-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-64k-modules-extra 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-abi-stablelists 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-cross-headers 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-debug 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-debug-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-debug-devel 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-debug-devel-matched 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-debug-modules 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-debug-modules-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-debug-modules-extra 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-debug-uki-virt 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-devel 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-devel-matched 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-doc 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-headers 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-modules 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-modules-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-modules-extra 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-64k 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-64k-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-64k-debug 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-64k-debug-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-64k-debug-devel 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-64k-debug-modules 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-64k-debug-modules-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-64k-debug-modules-extra 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-64k-devel 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-64k-modules 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-64k-modules-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-64k-modules-extra 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-debug 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-debug-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-debug-devel 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-debug-modules 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-debug-modules-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-debug-modules-extra 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-devel 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-modules 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-modules-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-rt-modules-extra 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-tools 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-tools-libs 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-tools-libs-devel 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-uki-virt 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-uki-virt-addons 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-zfcpdump 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-zfcpdump-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-zfcpdump-devel 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-zfcpdump-devel-matched 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-zfcpdump-modules 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-zfcpdump-modules-core 5.14.0-687.19.1.el9_8
AlmaLinux · 9 kernel-zfcpdump-modules-extra 5.14.0-687.19.1.el9_8
AlmaLinux · 9 libperf 5.14.0-687.19.1.el9_8
AlmaLinux · 9 perf 5.14.0-687.19.1.el9_8
AlmaLinux · 9 python3-perf 5.14.0-687.19.1.el9_8
AlmaLinux · 9 rtla 5.14.0-687.19.1.el9_8
AlmaLinux · 9 rv 5.14.0-687.19.1.el9_8

Vulnerabilities 9

  • Critical 9.8
    CVE-2026-43038

    ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: In ip6_err_gen_icmpv6_unreach(), the skb is an outer IPv4 ICMP error packet where its cb contains an I…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2026-45898

    RDMA/iwcm: Fix workqueue list corruption by removing work_list

    In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removing work_list The commit e1168f0 ("RDMA/iwcm: Simplify cm_event_handler()") changed the work submission logic to unconditionally call queue_wo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.3
    CVE-2026-46316 Public exploit

    KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

    In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's r…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-31488

    drm/amd/display: Do not skip unrelated mode changes in DSC validation

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 ("drm/amd/display: Add dsc pre-validation in atomic check"), amdgpu resets the CRTC sta…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-43329

    netfilter: flowtable: strictly check for maximum number of actions

    In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtable hardware offload actions in IPv6 is: * ethernet mangling (4 payload actions, 2 for each ethe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-46090

    ALSA: aloop: Fix peer runtime UAF during format-change stop

    In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopback_check_format() may stop the capture side when playback starts with parameters that no longer match a running capture strea…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-46176

    RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()

    In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() mlx5_ib_dev_res_srq_init() allocates two SRQs, s0 and s1. When ib_create_srq() fails for s1, the error branch destroys s0 …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2026-46054

    selinux: fix overlayfs mmap() and mprotect() access checks

    In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is able to access the top level file (the "…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2026-46189

    RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

    In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path Sashiko points out that pvrdma_uar_free() is already called within pvrdma_dealloc_ucontext(), so calling it before trigg…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-31488
  • report
    https://access.redhat.com/security/cve/CVE-2026-43038
  • report
    https://access.redhat.com/security/cve/CVE-2026-43329
  • report
    https://access.redhat.com/security/cve/CVE-2026-45898
  • report
    https://access.redhat.com/security/cve/CVE-2026-46054
  • report
    https://access.redhat.com/security/cve/CVE-2026-46090
  • report
    https://access.redhat.com/security/cve/CVE-2026-46176
  • report
    https://access.redhat.com/security/cve/CVE-2026-46189
  • report
    https://bugzilla.redhat.com/2460619
  • report
    https://bugzilla.redhat.com/2464397
  • report
    https://bugzilla.redhat.com/2468124
  • report
    https://bugzilla.redhat.com/2481980
  • report
    https://bugzilla.redhat.com/2482025
  • report
    https://bugzilla.redhat.com/2482031
  • report
    https://bugzilla.redhat.com/2482588
  • report
    https://bugzilla.redhat.com/2482594
  • advisory
    https://errata.almalinux.org/9/ALSA-2026-30848.html