Skip to content
OpenAdvisories
High ALSA-2026:72623 9 CVEs

Important: kernel security, bug fix, and enhancement update

Published Sep 28, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942)
* kernel: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (CVE-2026-46325)
* kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
* kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341)
* kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875)
* kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)
* kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556)
* kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522)
* kernel: perf: Reject exited events as group leaders (CVE-2026-74753)

Bug Fix(es) and Enhancement(s):

* KVM: s390: Limit adapter indicator access to mapped page [almalinux-9.8.z] (JIRA:AlmaLinux-188656)
* crypto: xxhash64 should not be fips approved [almalinux-9.8.z] (JIRA:AlmaLinux-256437)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 74

ReleasePackageFixed in
AlmaLinux · 9 kernel 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-debug 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-debug-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-debug-devel 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-debug-devel-matched 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-debug-modules 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-debug-modules-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-debug-modules-extra 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-devel 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-devel-matched 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-modules 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-modules-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-64k-modules-extra 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-abi-stablelists 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-cross-headers 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-debug 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-debug-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-debug-devel 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-debug-devel-matched 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-debug-modules 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-debug-modules-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-debug-modules-extra 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-debug-uki-virt 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-devel 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-devel-matched 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-doc 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-headers 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-modules 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-modules-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-modules-extra 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-64k 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-64k-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-64k-debug 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-64k-debug-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-64k-debug-devel 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-64k-debug-modules 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-64k-debug-modules-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-64k-debug-modules-extra 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-64k-devel 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-64k-modules 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-64k-modules-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-64k-modules-extra 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-debug 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-debug-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-debug-devel 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-debug-modules 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-debug-modules-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-debug-modules-extra 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-devel 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-modules 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-modules-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-rt-modules-extra 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-tools 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-tools-libs 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-tools-libs-devel 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-uki-virt 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-uki-virt-addons 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-zfcpdump 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-zfcpdump-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-zfcpdump-devel 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-zfcpdump-devel-matched 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-zfcpdump-modules 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-zfcpdump-modules-core 5.14.0-687.53.1.el9_8
AlmaLinux · 9 kernel-zfcpdump-modules-extra 5.14.0-687.53.1.el9_8
AlmaLinux · 9 libperf 5.14.0-687.53.1.el9_8
AlmaLinux · 9 perf 5.14.0-687.53.1.el9_8
AlmaLinux · 9 python3-perf 5.14.0-687.53.1.el9_8
AlmaLinux · 9 rtla 5.14.0-687.53.1.el9_8
AlmaLinux · 9 rv 5.14.0-687.53.1.el9_8

Vulnerabilities 9

  • Critical 9.8
    CVE-2026-46325

    RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE

    In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE The current implementation incorrectly handles memory regions (MRs) with page sizes different from the system PAGE_SIZE. The…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2026-64102

    RDMA/siw: Reject MPA FPDU length underflow before signed receive math

    In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw peer can send an iWARP FPDU whose MPA length field (c_hdr->mpa_len, 16 bit big-endian, peer-con…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-45942

    ext4: fix e4b bitmap inconsistency reports

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix e4b bitmap inconsistency reports A bitmap inconsistency issue was observed during stress tests under mixed huge-page workloads. Ext4 reported multiple e4b bitmap check failures like…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-53341

    fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()

    In the Linux kernel, the following vulnerability has been resolved: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() may_decode_fh() accesses mount::mnt_ns without holding any locks; that means the mount can concurrently be unmounted, and the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-63875

    arm64: tlb: Flush walk cache when unsharing PMD tables

    In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When huge_pmd_unshare() is called to unshare a PMD table, the tlb_unshare_pmd_ptdesc() function sets tlb->unshared_tables=true but the a…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-64556

    perf/core: Detach event groups during remove_on_exec

    In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_exec perf_event_remove_on_exec() removes events by calling perf_event_exit_event(). For top-level events, this removes the event from the conte…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-74753

    perf: Reject exited events as group leaders

    In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perf_event_remove_on_exec() sets remove-on-exec events to the EXIT state and detaches their group relationships. The event's file descriptor can re…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-80522

    crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

    In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() Perform rctx->cryptlen calculation in tegra_gcm_do_one_req() the same way it is done in tegra_ccm_crypt_init(). The cu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.0
    CVE-2026-52972

    crypto: af_alg - Cap AEAD AD length to 0x80000000

    In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when checking the TX buffer size, cap the associated data length to 0x80000000.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-45942
  • report
    https://access.redhat.com/security/cve/CVE-2026-46325
  • report
    https://access.redhat.com/security/cve/CVE-2026-52972
  • report
    https://access.redhat.com/security/cve/CVE-2026-53341
  • report
    https://access.redhat.com/security/cve/CVE-2026-63875
  • report
    https://access.redhat.com/security/cve/CVE-2026-64102
  • report
    https://access.redhat.com/security/cve/CVE-2026-64556
  • report
    https://access.redhat.com/security/cve/CVE-2026-74753
  • report
    https://access.redhat.com/security/cve/CVE-2026-80522
  • report
    https://bugzilla.redhat.com/2482104
  • report
    https://bugzilla.redhat.com/2487002
  • report
    https://bugzilla.redhat.com/2492364
  • report
    https://bugzilla.redhat.com/2495938
  • report
    https://bugzilla.redhat.com/2502318
  • report
    https://bugzilla.redhat.com/2502494
  • report
    https://bugzilla.redhat.com/2508319
  • report
    https://bugzilla.redhat.com/2524423
  • report
    https://bugzilla.redhat.com/2524434
  • advisory
    https://errata.almalinux.org/9/ALSA-2026-72623.html