Skip to content
OpenAdvisories
High ALSA-2026:34911 6 CVEs

Important: kernel security, bug fix, and enhancement update

Published Jul 2, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)
* kernel: rxrpc: Fix potential UAF after skb_unshare() failure (CVE-2026-45998)
* kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)
* kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244)
* kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)
* kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)
* kernel: kernel: ipv6 frag escape ()

Bug Fix(es) and Enhancement(s):

* crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-10.2.z] (JIRA:AlmaLinux-182537)
* [ThinkPad Avon/Mario +AlmaLinux 10.2]The OS hang up with CapsLock fliker (JIRA:AlmaLinux-185110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 75

ReleasePackageFixed in
AlmaLinux · 10 kernel 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-debug 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-debug-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-debug-devel 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-debug-devel-matched 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules-extra 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-devel 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-devel-matched 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-modules 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-modules-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-64k-modules-extra 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-abi-stablelists 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-cross-headers 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-debug 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-debug-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-debug-devel 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-debug-devel-matched 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-debug-modules 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-debug-modules-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-debug-modules-extra 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-debug-uki-virt 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-devel 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-devel-matched 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-doc 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-headers 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-modules 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-modules-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-modules-extra 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-modules-extra-matched 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-64k 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-64k-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-devel 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules-extra 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-64k-devel 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules-extra 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-debug 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-debug-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-debug-devel 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules-extra 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-devel 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-modules 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-modules-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-rt-modules-extra 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-tools 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-tools-libs 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-tools-libs-devel 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-uki-virt 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-uki-virt-addons 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-zfcpdump 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-devel 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-devel-matched 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules-core 6.12.0-211.30.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules-extra 6.12.0-211.30.1.el10_2
AlmaLinux · 10 libperf 6.12.0-211.30.1.el10_2
AlmaLinux · 10 perf 6.12.0-211.30.1.el10_2
AlmaLinux · 10 python3-perf 6.12.0-211.30.1.el10_2
AlmaLinux · 10 rtla 6.12.0-211.30.1.el10_2
AlmaLinux · 10 rv 6.12.0-211.30.1.el10_2

Vulnerabilities 6

  • Critical 9.3
    CVE-2026-46316 Public exploit

    KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

    In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's r…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.1
    CVE-2025-10263 Public exploit

    Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X…

    Arm Cortex-X4 Neoverse V3AE Cortex-X925 Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2026-46244

    netfilter: nft_inner: Fix IPv6 inner_thoff desync

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In nft_inner_parse_l2l3(), when processing inner IPv6 packets, ipv6_find_hdr() correctly computes the transport header offset traversing all …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2026-43112

    fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

    In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-46209

    drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()

    In the Linux kernel, the following vulnerability has been resolved: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() drm_gem_fb_init_with_funcs() computes sub-sampled plane dimensions using plain integer division: unsigned…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2026-45998

    rxrpc: Fix potential UAF after skb_unshare() failure

    In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential UAF after skb_unshare() failure If skb_unshare() fails to unshare a packet due to allocation failure in rxrpc_input_packet(), the skb pointer in the parent (rxrpc_io_thre…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-10263
  • report
    https://access.redhat.com/security/cve/CVE-2026-43112
  • report
    https://access.redhat.com/security/cve/CVE-2026-45998
  • report
    https://access.redhat.com/security/cve/CVE-2026-46209
  • report
    https://access.redhat.com/security/cve/CVE-2026-46244
  • report
    https://access.redhat.com/security/cve/CVE-2026-46316
  • report
    https://bugzilla.redhat.com/2467015
  • report
    https://bugzilla.redhat.com/2482024
  • report
    https://bugzilla.redhat.com/2482636
  • report
    https://bugzilla.redhat.com/2484451
  • report
    https://bugzilla.redhat.com/2486958
  • report
    https://bugzilla.redhat.com/2486982
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-34911.html