Skip to content
OpenAdvisories
Medium ALSA-2026:74132 5 CVEs

Moderate: kernel-rt security, bug fix, and enhancement update

Published Sep 30, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)
* kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)
* kernel: net/liquidio: drop cached VF pci_dev LUT (CVE-2026-72329)
* kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099)

Bug Fix(es) and Enhancement(s):

* [AlmaLinux 8.10] "kernel BUG at lib/list_debug.c:28!": list_add corruption in register_trace_event AlmaLinux 8.10 (JIRA:AlmaLinux-214136)
* request_key_auth use-after-free on every request-key upcall since 4.18.0-553.165.1 (regression from CVE-2026-63823 backport) (JIRA:AlmaLinux-270349)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 10

ReleasePackageFixed in
AlmaLinux · 8 kernel-rt 4.18.0-553.170.1.rt7.511.el8_10
AlmaLinux · 8 kernel-rt-core 4.18.0-553.170.1.rt7.511.el8_10
AlmaLinux · 8 kernel-rt-debug 4.18.0-553.170.1.rt7.511.el8_10
AlmaLinux · 8 kernel-rt-debug-core 4.18.0-553.170.1.rt7.511.el8_10
AlmaLinux · 8 kernel-rt-debug-devel 4.18.0-553.170.1.rt7.511.el8_10
AlmaLinux · 8 kernel-rt-debug-modules 4.18.0-553.170.1.rt7.511.el8_10
AlmaLinux · 8 kernel-rt-debug-modules-extra 4.18.0-553.170.1.rt7.511.el8_10
AlmaLinux · 8 kernel-rt-devel 4.18.0-553.170.1.rt7.511.el8_10
AlmaLinux · 8 kernel-rt-modules 4.18.0-553.170.1.rt7.511.el8_10
AlmaLinux · 8 kernel-rt-modules-extra 4.18.0-553.170.1.rt7.511.el8_10

Vulnerabilities 5

  • Critical 9.8
    CVE-2026-64102

    RDMA/siw: Reject MPA FPDU length underflow before signed receive math

    In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw peer can send an iWARP FPDU whose MPA length field (c_hdr->mpa_len, 16 bit big-endian, peer-con…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.3
    CVE-2026-72329

    net/liquidio: drop cached VF pci_dev LUT

    In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pci_dev LUT The PF SR-IOV enable path caches VF pci_dev pointers in dpiring_to_vfpcidev_lut[] by iterating with pci_get_device(). Those entries do not own a refer…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-63823

    keys: Pin request_key_auth payload in instantiate paths

    In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key_auth payload in instantiate paths A: request_key() B: KEYCTL_INSTANTIATE_IOV ================ ========================= create auth key store rka in auth key wait for he…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2026-68299

    vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets

    In the Linux kernel, the following vulnerability has been resolved: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets vmxnet3_get_hdr_len() assumes gdesc->rcd.v4/v6/tcp always describe the outer header, but for a Geneve-encapsulated packet the d…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2026-72099

    dm-integrity: don't increment hash_offset twice

    In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash_offset twice hash_offset is already incremented in the loop "for (i = 0; i < to_copy; i++, ts--)". Do not increment it again.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-64102
  • report
    https://access.redhat.com/security/cve/CVE-2026-68299
  • report
    https://access.redhat.com/security/cve/CVE-2026-72099
  • report
    https://access.redhat.com/security/cve/CVE-2026-72329
  • report
    https://bugzilla.redhat.com/2502494
  • report
    https://bugzilla.redhat.com/2513356
  • report
    https://bugzilla.redhat.com/2516301
  • report
    https://bugzilla.redhat.com/2516445
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-74132.html