Skip to content
OpenAdvisories
High ALSA-2026:53330 7 CVEs

Important: kernel security, bug fix, and enhancement update

Published Aug 11, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: fsnotify: Fix ordering of iput() and watched_objects decrement (CVE-2024-53143)
* kernel: shmem: fix recovery on rename failures (CVE-2025-71072)
* kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (CVE-2026-23415)
* kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488)
* kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923)
* kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368)
* kernel: net: openvswitch: reject oversized nested action attrs (CVE-2026-64531)

Bug Fix(es) and Enhancement(s):

* Kernel oops after increasing max number of mac addresses of a mlx5 VF [almalinux-10.2.z] (JIRA:AlmaLinux-213035)
* AlmaLinux10.0 - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl [almalinux-10.2.z] (JIRA:AlmaLinux-222503)
* AlmaLinux10.0 - s390/pkey: Check length in pkey_pckmo handler implementation [almalinux-10.2.z] (JIRA:AlmaLinux-222505)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 75

ReleasePackageFixed in
AlmaLinux · 10 kernel 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-debug 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-debug-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-debug-devel 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-debug-devel-matched 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules-extra 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-devel 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-devel-matched 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-modules 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-modules-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-64k-modules-extra 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-abi-stablelists 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-cross-headers 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-debug 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-debug-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-debug-devel 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-debug-devel-matched 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-debug-modules 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-debug-modules-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-debug-modules-extra 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-debug-uki-virt 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-devel 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-devel-matched 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-doc 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-headers 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-modules 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-modules-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-modules-extra 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-modules-extra-matched 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-64k 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-64k-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-devel 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules-extra 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-64k-devel 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules-extra 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-debug 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-debug-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-debug-devel 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules-extra 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-devel 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-modules 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-modules-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-rt-modules-extra 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-tools 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-tools-libs 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-tools-libs-devel 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-uki-virt 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-uki-virt-addons 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-zfcpdump 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-devel 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-devel-matched 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules-core 6.12.0-211.46.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules-extra 6.12.0-211.46.1.el10_2
AlmaLinux · 10 libperf 6.12.0-211.46.1.el10_2
AlmaLinux · 10 perf 6.12.0-211.46.1.el10_2
AlmaLinux · 10 python3-perf 6.12.0-211.46.1.el10_2
AlmaLinux · 10 rtla 6.12.0-211.46.1.el10_2
AlmaLinux · 10 rv 6.12.0-211.46.1.el10_2

Vulnerabilities 7

  • High 8.2
    CVE-2025-71072

    shmem: fix recovery on rename failures

    In the Linux kernel, the following vulnerability has been resolved: shmem: fix recovery on rename failures maple_tree insertions can fail if we are seriously short on memory; simple_offset_rename() does not recover well if it runs into that. The same goes for…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.1
    CVE-2026-64368

    mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

    In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled When init (zeroing) on allocation is requested, for kmalloc() we generally have to zero the full object size even if…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-53143

    fsnotify: Fix ordering of iput() and watched_objects decrement

    In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput() and watched_objects decrement Ensure the superblock is kept alive until we're done with iput(). Holding a reference to an inode is not allowed unless we ensur…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-23415 Public exploit

    futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()

    In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() During futex_key_to_node_opt() execution, vma->vm_policy is read under speculative mmap lock and RCU. Concurrently, mbi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-31488

    drm/amd/display: Do not skip unrelated mode changes in DSC validation

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 ("drm/amd/display: Add dsc pre-validation in atomic check"), amdgpu resets the CRTC sta…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-52923 Public exploit

    ipc: limit next_id allocation to the valid ID range

    In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request the next SysV IPC id through ids->next_id. ipc_idr_alloc() currently forwards that request t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-64531 Public exploit

    net: openvswitch: reject oversized nested action attrs

    In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbeh…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2024-53143
  • report
    https://access.redhat.com/security/cve/CVE-2025-71072
  • report
    https://access.redhat.com/security/cve/CVE-2026-23415
  • report
    https://access.redhat.com/security/cve/CVE-2026-31488
  • report
    https://access.redhat.com/security/cve/CVE-2026-52923
  • report
    https://access.redhat.com/security/cve/CVE-2026-64368
  • report
    https://access.redhat.com/security/cve/CVE-2026-64531
  • report
    https://bugzilla.redhat.com/2330957
  • report
    https://bugzilla.redhat.com/2429083
  • report
    https://bugzilla.redhat.com/2454320
  • report
    https://bugzilla.redhat.com/2460619
  • report
    https://bugzilla.redhat.com/2492094
  • report
    https://bugzilla.redhat.com/2507213
  • report
    https://bugzilla.redhat.com/2507402
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-53330.html