Skip to content
OpenAdvisories
Medium ALSA-2026:93911 1 CVE

Moderate: kernel security update

Published Nov 2, 2026 · Updated Nov 2, 2026

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ethtool: cmis: require exact CDB reply length (CVE-2026-63996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 75

ReleasePackageFixed in
AlmaLinux · 10 kernel 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-debug 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-debug-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-debug-devel 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-debug-devel-matched 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-debug-modules-extra 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-devel 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-devel-matched 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-modules 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-modules-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-64k-modules-extra 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-abi-stablelists 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-cross-headers 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-debug 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-debug-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-debug-devel 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-debug-devel-matched 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-debug-modules 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-debug-modules-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-debug-modules-extra 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-debug-uki-virt 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-devel 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-devel-matched 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-doc 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-headers 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-modules 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-modules-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-modules-extra 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-modules-extra-matched 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-64k 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-64k-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-devel 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-64k-debug-modules-extra 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-64k-devel 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-64k-modules-extra 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-debug 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-debug-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-debug-devel 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-debug-modules-extra 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-devel 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-modules 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-modules-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-rt-modules-extra 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-tools 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-tools-libs 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-tools-libs-devel 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-uki-virt 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-uki-virt-addons 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-zfcpdump 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-devel 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-devel-matched 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules-core 6.12.0-211.73.1.el10_2
AlmaLinux · 10 kernel-zfcpdump-modules-extra 6.12.0-211.73.1.el10_2
AlmaLinux · 10 libperf 6.12.0-211.73.1.el10_2
AlmaLinux · 10 perf 6.12.0-211.73.1.el10_2
AlmaLinux · 10 python3-perf 6.12.0-211.73.1.el10_2
AlmaLinux · 10 rtla 6.12.0-211.73.1.el10_2
AlmaLinux · 10 rv 6.12.0-211.73.1.el10_2

Vulnerabilities 1

  • High 7.8

    ethtool: cmis: require exact CDB reply length

    In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: require exact CDB reply length Malicious SFP module could respond with rpl_len longer than what cmis_cdb_process_reply() expected, leading to OOB writes. Malicious HW is a bit …

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-63996
  • report
    https://bugzilla.redhat.com/2502420
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-93911.html