Volver a los avisos de seguridad

Kernel Security Update — AlmaLinux 9 (ALSA-2026:47040)

This is a security release for AlmaLinux 9. Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.

High
AlmaLinux 9

Comandos de corrección

EL8+ (AlmaLinux/CloudLinux/Rocky)

sudo dnf update

Lo que esto significa bajo una licencia de SharedLicense

Your SharedLicense license itself is not affected — this is a change in AlmaLinux 9 software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797)
* kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002)
* kernel: futex: Drop CLONE_THREAD requirement for private defa…

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797)
  * kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002)
  * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
  * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281)
  * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017)

Bug Fix(es) and Enhancement(s):  

  * general protection fault during exportfs / nfsd4_revoke_states [almalinux-9.8.z] (JIRA:AlmaLinux-188257)
  * Enable Pretimeout Watchdog Panic Functionality on x86 [almalinux-9.8.z] (JIRA:AlmaLinux-193729)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Referencias

Avisos de seguridad

Avisos relacionados

cPanel CVE-2026-87899: Privilege Escalation

2026-09-23 00:00:00

WP Toolkit for cPanel CVE-2026-87900: Argument Injection

2026-09-23 00:00:00

Plesk CVE-2026-68492: Untrusted Search Path

2026-09-23 00:00:00

Comprueba tu sistema en busca de vulnerabilidades

Selecciona tu producto y sistema operativo para ver los comandos de corrección exactos que se aplican a ti.

Comprueba tu sistema