almalinux/kernel-rt-64k-debug-modules-core

Vulnerabilities (758)

• CVE-2026-52918HigJun 24, 2026
  affected < 6.12.0-211.53.1.el10_2fixed 6.12.0-211.53.1.el10_2

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: serialize accept_q access bt_sock_poll() walks the accept queue without synchronization, while child teardown can unlink the same socket and drop its last reference. The unsynchronized accept queue w

• CVE-2026-52917HigJun 24, 2026
  affected < 5.14.0-687.47.1.el9_8fixed 5.14.0-687.47.1.el9_8

  In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dump_one path The SCTP exact sock_diag lookup can hold a transport reference, block on lock_sock(sk), and then resume after sctp_association_free() has marked the associ

• CVE-2026-52912HigJun 24, 2026
  affected < 5.14.0-687.52.1.el9_8fixed 5.14.0-687.52.1.el9_8

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridge skb->dev while queued br_pass_frame_up() rewrites skb->dev from the ingress port to the bridge master before queueing bridge LOCAL_IN packets. NFQUEUE only holds references on s

• CVE-2026-46331HigJun 16, 2026
  affected < 6.12.0-211.26.1.el10_2fixed 6.12.0-211.26.1.el10_2

  In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key loop using tcfp_off_max_hint, but the hint does not account

• CVE-2026-46330HigJun 9, 2026
  affected < 5.14.0-687.46.1.el9_8fixed 5.14.0-687.46.1.el9_8

  In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This reverts commit d7cd421da9da2cc7b4d25b8537f66db5c8331c40. As reported by Al Viro, the TCP ULP support for SMC is fundamentally broken. The implementation attempt

• CVE-2026-46325CriJun 9, 2026
  affected < 5.14.0-687.53.1.el9_8fixed 5.14.0-687.53.1.el9_8

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE The current implementation incorrectly handles memory regions (MRs) with page sizes different from the system PAGE_SIZE. The core issue is that

• CVE-2026-46323HigJun 9, 2026
  affected < 5.14.0-687.22.1.el9_8fixed 5.14.0-687.22.1.el9_8

  In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the source and GRO skb, without checking the zerocopy status, and in particular the SKBFL_MANAGED_FRAG_REFS flag. When SKBFL_

• CVE-2026-46317HigJun 9, 2026
  affected < 6.12.0-211.61.1.el10_2fixed 6.12.0-211.61.1.el10_2

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested_mmus array behind mmu_lock kvm->arch.nested_mmus[] is walked under kvm->mmu_lock, including from the MMU notifier path (kvm_unmap_gfn_range() -> kvm_nested_s2_unmap()), which can run

• CVE-2026-46316CriJun 9, 2026
  affected < 6.12.0-211.28.1.el10_2fixed 6.12.0-211.28.1.el10_2

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-ITS translation cache with xa_for_each() and drops the cache's reference on each en

• CVE-2025-10263CriJun 9, 2026
  affected < 6.12.0-211.30.1.el10_2fixed 6.12.0-211.30.1.el10_2

  Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher ex

• CVE-2026-46311HigJun 8, 2026
  affected < 6.12.0-211.60.1.el10_2fixed 6.12.0-211.60.1.el10_2

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drm_exec to take both locks i.e vm root bo and wptr_obj bo to access the mapping data properly. This fixes the security issue of unmap the wptr_obj while

• CVE-2026-46306HigJun 8, 2026
  affected < 5.14.0-687.46.1.el9_8fixed 5.14.0-687.46.1.el9_8

  In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7 states that Protocol Field Compression (PFC) is NOT RECOMMENDED for PPPoE. In practice, pppd does not support negotiating PFC for PPPoE session

• CVE-2026-46303HigJun 8, 2026
  affected < 6.12.0-211.42.1.el10_2fixed 6.12.0-211.42.1.el10_2

  In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue() reads rs->cont_extent verbatim from the Rock Ridge CE record and passes it to sb_bread() without checking that the block num

• CVE-2026-46266CriJun 3, 2026
  affected < 5.14.0-687.46.1.el9_8fixed 5.14.0-687.46.1.el9_8

  In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Yizhou Zhao reported that simply having one RAW socket on protocol IPPROTO_RAW (255) was dangerous. socket(AF_INET, SOCK_RAW, 255); A malicious in

• CVE-2026-46259HigJun 3, 2026
  affected < 5.14.0-687.22.1.el9_8fixed 5.14.0-687.22.1.el9_8

  In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when reading real_parent in do_task_stat() When reading /proc/[pid]/stat, do_task_stat() accesses task->real_parent without proper RCU protection, which leads to: cpu 0

• CVE-2026-46244CriJun 3, 2026
  affected < 6.12.0-211.30.1.el10_2fixed 6.12.0-211.30.1.el10_2

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In nft_inner_parse_l2l3(), when processing inner IPv6 packets, ipv6_find_hdr() correctly computes the transport header offset traversing all extension headers,

• CVE-2026-46243HigJun 1, 2026
  affected < 6.12.0-211.20.1.el10_2fixed 6.12.0-211.20.1.el10_2

  In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating in

• CVE-2026-46242HigMay 30, 2026
  affected < 6.12.0-211.31.1.el10_2fixed 6.12.0-211.31.1.el10_2

  In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) cleared file->f_ep under file->f_lock but then kept using @file inside the critical section (is_file_epoll(), hlist

• CVE-2026-46230HigMay 28, 2026
  affected < 6.12.0-211.60.1.el10_2fixed 6.12.0-211.60.1.el10_2

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg Check bounds against the end of the BO whenever we access the msg.

• CVE-2026-46227HigMay 28, 2026
  affected < 5.14.0-687.22.1.el9_8fixed 5.14.0-687.22.1.el9_8

  In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL The SCTP_SENDALL path in sctp_sendmsg() iterates ep->asocs with list_for_each_entry_safe(), which caches the next entry in @tmp before t