Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux kernel could let attackers gain network control
published 3 months ago
Summary
The Linux kernel packages for AlmaLinux have several gaps that could let an attacker manipulate network functions or bypass file‑access checks. This could let a malicious user influence network traffic or read files they shouldn’t. Update the AlmaLinux kernel packages to the latest versions as soon as possible to apply the fixes.
What to do
- Update almalinux bpftool to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-abi-stablelists to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-core to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-cross-headers to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-debug to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-debug-core to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-debug-devel to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-debug-modules to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-debug-modules-extra to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-devel to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-doc to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-headers to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-modules to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-modules-extra to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-tools to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-tools-libs to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-tools-libs-devel to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-zfcpdump to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-zfcpdump-core to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-zfcpdump-devel to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-zfcpdump-modules to version 4.18.0-553.150.1.el8_10.
- Update almalinux kernel-zfcpdump-modules-extra to version 4.18.0-553.150.1.el8_10.
- Update almalinux perf to version 4.18.0-553.150.1.el8_10.
- Update almalinux python3-perf to version 4.18.0-553.150.1.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | bpftool |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-abi-stablelists |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-core |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-cross-headers |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug-core |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug-devel |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug-modules |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug-modules-extra |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-devel |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-doc |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-headers |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-modules |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-modules-extra |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-tools |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-tools-libs |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-tools-libs-devel |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump-core |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump-devel |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump-modules |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump-modules-extra |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | perf |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
| AlmaLinux:8 | almalinux | python3-perf |
< 4.18.0-553.150.1.el8_10 Fix: upgrade to 4.18.0-553.150.1.el8_10
|
Original advisory text
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)
* kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
* kernel: fanotify: fix false positive on permission events (CVE-2026-46150)
* kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle ()
* kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CVE-2026-64530)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)
* kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
* kernel: fanotify: fix false positive on permission events (CVE-2026-46150)
* kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle ()
* kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CVE-2026-64530)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:49214 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-31692 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-43116 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-46150 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-64530 Third Party Advisory
- https://bugzilla.redhat.com/2464093 Third Party Advisory
- https://bugzilla.redhat.com/2467005 Third Party Advisory
- https://bugzilla.redhat.com/2482612 Third Party Advisory
- https://bugzilla.redhat.com/2504052 Third Party Advisory
- https://bugzilla.redhat.com/2507345 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2026-49214.html Vendor Advisory
Timeline
Published31 Jul 2026
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2026:49214 · OSV
Track software like this
Free during beta