Summary
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411)
* kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198)
Bug Fix(es) and Enhancement(s):
* [AlmaLinux 9.8 Bug] qla2xxx flash image validation failure [almalinux-9.8.z] (JIRA:AlmaLinux-181886)
* crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-9.8.z] (JIRA:AlmaLinux-182540)
* tegra-se fixes and updates [almalinux-9.8.z] (JIRA:AlmaLinux-182760)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 74
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | kernel | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-debug | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-debug-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-debug-devel | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-debug-devel-matched | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-debug-modules | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-debug-modules-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-debug-modules-extra | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-devel | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-devel-matched | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-modules | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-modules-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-64k-modules-extra | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-abi-stablelists | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-cross-headers | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-debug | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-debug-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-debug-devel | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-debug-devel-matched | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-debug-modules | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-debug-modules-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-debug-modules-extra | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-debug-uki-virt | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-devel | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-devel-matched | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-doc | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-headers | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-modules | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-modules-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-modules-extra | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-64k | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-64k-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-64k-debug | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-64k-debug-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-64k-debug-devel | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-64k-debug-modules | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-64k-debug-modules-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-64k-debug-modules-extra | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-64k-devel | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-64k-modules | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-64k-modules-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-64k-modules-extra | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-debug | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-debug-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-debug-devel | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-debug-modules | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-debug-modules-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-debug-modules-extra | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-devel | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-modules | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-modules-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-rt-modules-extra | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-tools | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-tools-libs | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-tools-libs-devel | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-uki-virt | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-uki-virt-addons | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-zfcpdump | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-zfcpdump-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-zfcpdump-devel | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-zfcpdump-devel-matched | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-zfcpdump-modules | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-zfcpdump-modules-core | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | kernel-zfcpdump-modules-extra | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | libperf | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | perf | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | python3-perf | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | rtla | 5.14.0-687.20.1.el9_8 |
| AlmaLinux · 9 | rv | 5.14.0-687.20.1.el9_8 |
Vulnerabilities 2
-
Critical 9.8
tcp: fix potential race in tcp_v6_syn_recv_sock()
In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late. After tcp_v4_syn_recv_sock(), the child socket is a…
-
Unscored —
net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1]. The ATM send path (sendmsg -> vcc_sendmsg -> sigd_send) reads the vcc pointer from msg->vcc and …