Back to Security Advisories

Kernel Security Update — AlmaLinux 10 (ALSA-2026:13566)

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270) * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (C…

High 7.8 CVSS Actively exploited
AlmaLinux 10

Type:

security

Severity:

important

Release date:

2026-10-26

Description:

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
* kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
* kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)
* kernel: crypto: algif_aead – Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture Package Checksum
noarch kernel-doc-6.12.0-124.55.1.el10_1.noarch.rpm 12002e6d68a8fe39eee04e99163f439949d5e0124ca59a6e9cf2ffb5fe92583c
noarch kernel-abi-stablelists-6.12.0-124.55.1.el10_1.noarch.rpm 52b3e4814ed8a621b2cbbb5b40d35710a405ad62a572e5eac79ebfe8d73a1f09

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System