AlmaLinux alert ALSA-2026:30848 (kernel)

From:
             
 
AlmaLinux Errata Notifications via Announce <announce@lists.almalinux.org>
To:
             
 
announce@lists.almalinux.org
Subject:
             
 
[Announce] [Security Advisory] ALSA-2026:30848: kernel security, bug fix, and enhancement update (Important)
Date:
             
 
Tue, 30 Jun 2026 17:08:06 +0000
Message-ID:
             
 
<0100019f19809c6f-4a40b09e-7f42-46c6-8121-28fe231493f3-000000@email.amazonses.com>
Archive-link:
             
 
Article
Hi,

You are receiving an AlmaLinux Security update email because you subscribed to receive errata
notifications from AlmaLinux.

AlmaLinux: 9
Type: Security
Severity: Important
Release date: 2026-06-30

Summary:

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation
(CVE-2026-31488)
  * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)
  * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)
  * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090)
  * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054)
  * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898)
  * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
(CVE-2026-46189)
  * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176)
  * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry
(CVE-2026-46316)

Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux-9.8.z]: Update the mlx5 drivers to v6.19 (JIRA:AlmaLinux-169057)
  * iavf: during POD churn vlan filters may not be added for a vlan interface, spoofchk drops
subsequent packets [almalinux-9.8.z] (JIRA:AlmaLinux-172993)
  * nf_conntrack_sctp: vtag corruption with late INIT in ESTABLISHED state across conntrack zones
[almalinux-9.8.z] (JIRA:AlmaLinux-178273)
  * sched/fair: Skip sched_balance_running cmpxchg when balance is not due [almalinux-9.8.z]
(JIRA:AlmaLinux-182776)
  * [REGRESSION] ISST-Spyre: Jenkins workload causes soft lock warning to appear on screen.
Workload hangs. [almalinux-9.8.z] (JIRA:AlmaLinux-183183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments,
and other related information, refer to the CVE page(s) listed in the References section.


Full details, updated packages, references, and other related information:
https://errata.almalinux.org/9/ALSA-2026-30848.html

This message is automatically generated, please don’t reply. For further questions, please, contact
us via the AlmaLinux community chat: https://chat.almalinux.org/.
Want to change your notification settings? Sign in and manage mailing lists on
https://lists.almalinux.org.

Kind regards,
AlmaLinux Team
_______________________________________________
Announce mailing list -- announce@lists.almalinux.org
To unsubscribe send an email to announce-leave@lists.almalinux.org