Skip to content
OpenAdvisories
High ALSA-2026:54343 6 CVEs

Important: kernel security, bug fix, and enhancement update

Published Aug 12, 2026 · Updated Nov 2, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: accel/ivpu: Fix signed integer truncation in IPC receive (CVE-2026-53202)
* kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264)
* kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
* kernel: perf/aux: Fix page UAF in map_range() (CVE-2026-64300)
* kernel: af_unix: set gc_in_progress to true in unix_gc() (CVE-2026-53361)

Bug Fix(es) and Enhancement(s):

* netfilter: CVE backports for AlmaLinux 10.2.z (JIRA:AlmaLinux-185311)
* tlbflush - Windows Driver Verifier catches FLTMGR/Ntfs crashes during KVM 42-VM soak test on AMD EPYC Turin [almalinux-10.2.z] (JIRA:AlmaLinux-214436)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 75

ReleasePackageFixed in
AlmaLinux · 10 kernel 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-debug 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-debug-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-debug-devel 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-debug-devel-matched 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules-extra 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-devel 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-devel-matched 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-modules 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-modules-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-64k-modules-extra 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-abi-stablelists 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-cross-headers 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-debug 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-debug-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-debug-devel 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-debug-devel-matched 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-debug-modules 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-debug-modules-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-debug-modules-extra 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-debug-uki-virt 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-devel 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-devel-matched 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-doc 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-headers 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-modules 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-modules-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-modules-extra 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-modules-extra-matched 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-64k 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-64k-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-devel 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules-extra 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-64k-devel 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules-extra 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-debug 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-debug-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-debug-devel 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules-extra 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-devel 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-modules 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-modules-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-rt-modules-extra 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-tools 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-tools-libs 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-tools-libs-devel 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-uki-virt 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-uki-virt-addons 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-zfcpdump 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-devel 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-devel-matched 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules-core 6.12.0-211.47.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules-extra 6.12.0-211.47.1.el10_2
AlmaLinux · 10 libperf 6.12.0-211.47.1.el10_2
AlmaLinux · 10 perf 6.12.0-211.47.1.el10_2
AlmaLinux · 10 python3-perf 6.12.0-211.47.1.el10_2
AlmaLinux · 10 rtla 6.12.0-211.47.1.el10_2
AlmaLinux · 10 rv 6.12.0-211.47.1.el10_2

Vulnerabilities 6

  • Critical 9.8
    CVE-2026-63887

    scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf

    In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf iscsi_encode_text_output() concatenates "key=value\0" records into login->rsp_buf, an 8192-byte kzalloc(MAX_KEY_VALUE_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-52912

    netfilter: nf_queue: hold bridge skb->dev while queued

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridge skb->dev while queued br_pass_frame_up() rewrites skb->dev from the ingress port to the bridge master before queueing bridge LOCAL_IN packets. NFQUEUE only ho…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-53202

    accel/ivpu: Fix signed integer truncation in IPC receive

    In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied data_size is cast to signed int before being used in min_t(). Large unsigned val…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-53264 Public exploit

    net/sched: act_api: use RCU with deferred freeing for action lifecycle

    In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred freeing for action lifecycle When NEWTFILTER and DELFILTER are run concurrently it is possible to create a race with an associated action. Let's illu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-64300

    perf/aux: Fix page UAF in map_range()

    In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in map_range() map_range() reads rb->aux_pages[], rb->aux_nr_pages and rb->aux_pgoff via perf_mmap_to_page() while holding only event->mmap_mutex. Those fields are seri…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2026-53361 Public exploit

    af_unix: Set gc_in_progress to true in unix_gc().

    In the Linux kernel, the following vulnerability has been resolved: af_unix: Set gc_in_progress to true in unix_gc(). Igor Ushakov reported that unix_gc() could run with gc_in_progress being false if the work is scheduled while running: Thread 1 Thread 2 Thre…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-53202
  • report
    https://access.redhat.com/security/cve/CVE-2026-53264
  • report
    https://access.redhat.com/security/cve/CVE-2026-63887
  • report
    https://access.redhat.com/security/cve/CVE-2026-64300
  • report
    https://bugzilla.redhat.com/2492823
  • report
    https://bugzilla.redhat.com/2492851
  • report
    https://bugzilla.redhat.com/2502447
  • report
    https://bugzilla.redhat.com/2507040
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-54343.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2026-52912.html