Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux kernel updates prevent possible system break or takeover
published 7 months ago
Summary
All AlmaLinux kernel packages are affected. Some flaws in the core code could let an attacker cause the system to crash or gain higher privileges, which could disrupt services or expose data. Apply the latest kernel updates from AlmaLinux as soon as possible.
What to do
- Update almalinux bpftool to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-abi-stablelists to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-core to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-cross-headers to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-debug to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-debug-core to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-debug-devel to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-debug-modules to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-debug-modules-extra to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-devel to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-doc to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-headers to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-modules to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-modules-extra to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-tools to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-tools-libs to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-tools-libs-devel to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-zfcpdump to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-zfcpdump-core to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-zfcpdump-devel to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-zfcpdump-modules to version 4.18.0-553.117.1.el8_10.
- Update almalinux kernel-zfcpdump-modules-extra to version 4.18.0-553.117.1.el8_10.
- Update almalinux perf to version 4.18.0-553.117.1.el8_10.
- Update almalinux python3-perf to version 4.18.0-553.117.1.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | bpftool |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-abi-stablelists |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-core |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-cross-headers |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug-core |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug-devel |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug-modules |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug-modules-extra |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-devel |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-doc |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-headers |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-modules |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-modules-extra |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-tools |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-tools-libs |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-tools-libs-devel |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump-core |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump-devel |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump-modules |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump-modules-extra |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | perf |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
| AlmaLinux:8 | almalinux | python3-perf |
< 4.18.0-553.117.1.el8_10 Fix: upgrade to 4.18.0-553.117.1.el8_10
|
Original advisory text
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: nouveau: fix instmem race condition around ptr stores (CVE-2024-26984)
* kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
* kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231)
* kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation. (CVE-2025-71238)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* kernel: nouveau: fix instmem race condition around ptr stores (CVE-2024-26984)
* kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
* kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231)
* kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation. (CVE-2025-71238)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:6571 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-26984 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-71238 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-23193 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-23231 Third Party Advisory
- https://bugzilla.redhat.com/2278333 Third Party Advisory
- https://bugzilla.redhat.com/2439887 Third Party Advisory
- https://bugzilla.redhat.com/2444376 Third Party Advisory
- https://bugzilla.redhat.com/2444398 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2026-6571.html Vendor Advisory
Timeline
Published6 Apr 2026
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2026:6571 · OSV
Track software like this
Free during beta