सुरक्षा सलाह पर वापस जाएँ

Kernel Security Update — AlmaLinux 10 (ALSA-2026:88477)

ALSA-2026:88477 is an Important-rated AlmaLinux 10 kernel update that moves the kernel to 6.12.0-211.68.1.el10_2, fixing 18 security vulnerabilities across networking, filesystem and driver code — including CVE-2025-38147, where CALIPSO functions were called on AF_INET sockets, and a flaw in ipv4 raw-socket IP_HDRINCL handling with a malformed IHL. Update the kernel and reboot: dnf update kernel kernel-modules kernel-modules-extra, then restart into the new kernel.

Medium 5.5 CVSS
AlmaLinux 10

प्रभावित संस्करण

6.12.0-211.68.1.el10_2

डिफ़ॉल्ट अपडेट कमांड

dnf update kernel kernel-modules kernel-modules-extra && reboot

SharedLicense लाइसेंस के तहत इसका अर्थ

Kernel flaws in networking paths (CALIPSO labeling, raw IPv4 sockets) are remotely reachable code paths — unpatched, they expose the server to crashes and, depending on the flaw, privilege escalation or memory disclosure from network-triggered states.

aarch64 kernel-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm 01482d3bf5618e9865eafe22261227cc82f96a9b030039bc6f7f6681a929fbbe aarch64 kernel-debug-6.12.0-211.68.1.el10_2.aarch64.rpm 06f59148a158d5e7ec864637aa8503698f651d0f7249b3a59155b4b9f4a7afa4 aarch64 kernel-rt-64k-debug-core-6.12.0-211.68.1.el10_2.aarch64.rpm 076b3a2926041b0c4cdecbbd5399a310a54410db9485069fb39c4ffa7a260038 aarch64 kernel-rt-64k-modules-6.12.0-211.68.1.el10_2.aarch64.rpm 098b3af6f418a28fbe4021b3a630ae7d725db01cba2a3a1ee5b033e9e6a18755 aarch64 kernel-64k-debug-devel-matched-6.12.0-211.68.1.el10_2.aarch64.rpm 0dddfee14acfab3e32ef5bff504f07d093f797dda97eeddee63a9ff2a34776fa aarch64 kernel-debug-devel-matched-6.12.0-211.68.1.el10_2.aarch64.rpm 1600bd4048c860fd10ea23bca74e0856f97e14ed869bcb601e666ae705d40877 aarch64 kernel-64k-debug-6.12.0-211.68.1.el10_2.aarch64.rpm 218dcc35832f3a950cc83d3e87576578adf774c4b50dadc8135a8953547e4e81 aarch64 kernel-64k-debug-modules-6.12.0-211.68.1.el10_2.aarch64.rpm 22dee42232b5f7adadeb429f8df2f695318e3e6e67c58f048e7969e7be3ce500 aarch64 kernel-rt-modules-6.12.0-211.68.1.el10_2.aarch64.rpm 31e149ccd46051fc6df10dd7cf9375722fcc661896cd1aa5f8e7a5b3a65deae9 aarch64 kernel-devel-6.12.0-211.68.1.el10_2.aarch64.rpm 34bab500f6f24798a0baac0ac4b24217e60b1ac224dd2700a745aa2e4acfe24a aarch64 kernel-64k-devel-6.12.0-211.68.1.el10_2.aarch64.rpm 4071d08fc89f44ef66de50b4a6e856fb0dda3b1a0de2c629b9b95b9a7b9ffdf2 aarch64 kernel-rt-debug-core-6.12.0-211.68.1.el10_2.aarch64.rpm 4235a64c16077526583d4b1ee3cc195cd28e6980d228e64caee63da7420b8563 aarch64 kernel-rt-64k-6.12.0-211.68.1.el10_2.aarch64.rpm 44c3e63c655de566ab89753b815aa7455abf98375810a78c3c37f1b9448cfba1 aarch64 rtla-6.12.0-211.68.1.el10_2.aarch64.rpm 47c0bcc62c09ca888c27e3edf75f6ea51b3a517fe16d3639de3daefcb0bd4635 aarch64 kernel-rt-64k-debug-modules-6.12.0-211.68.1.el10_2.aarch64.rpm 48e7a653e153f99298b3c955a34a997aa8a9c93d475a576b61f8768b4371e55f aarch64 kernel-rt-64k-debug-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm 4a9566b7ab72369054be927b1de0fcc70f8816b177c15a01bb98b5aae379daf2 aarch64 kernel-cross-headers-6.12.0-211.68.1.el10_2.aarch64.rpm 5c7cf0ed520de59364bab9f8defc45e5285a41dcdee009946a420519bf4754eb aarch64 kernel-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm 5e186f4131fb46bcfbf05d5dfa91a2bd4afe5243a20d104fe3e9b0d6eb551acf aarch64 kernel-64k-debug-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm 606ebf4a196ba00171c83201f0b8f4ccd677d72daf513ec728aa73a9066783ed aarch64 kernel-rt-64k-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm 61490ec36e6e58e88f0dc84927fbc7a4b5b810d993024e84334425dbab2db38d aarch64 rv-6.12.0-211.68.1.el10_2.aarch64.rpm 621c55952747cb27767a936d1f066f655f283cff294815113f20a07c223b3f4b aarch64 kernel-rt-64k-debug-6.12.0-211.68.1.el10_2.aarch64.rpm 636916bbb76c56f910ec5e040c410be1fa44725ec369c48475708c8a51cb1be2 aarch64 kernel-rt-6.12.0-211.68.1.el10_2.aarch64.rpm 64be7153a319d9300bb457660c84928375a6dc5f3432affd12bb500d447a00d8 aarch64 kernel-rt-64k-core-6.12.0-211.68.1.el10_2.aarch64.rpm 67f0cb1fe8b56a2d39d4aa9668fedb50694498503caaabfc9523e9f5dc9e1c30 aarch64 kernel-debug-core-6.12.0-211.68.1.el10_2.aarch64.rpm 6cb1c8a8b90813406d0b943b202937a6153b836323544b30331603c055c2694f aarch64 kernel-devel-matched-6.12.0-211.68.1.el10_2.aarch64.rpm 779600ab96285af9b002de2848e3bf8d315a56db4211f3d5a201607ce43ad0c5 aarch64 kernel-6.12.0-211.68.1.el10_2.aarch64.rpm 7aa2b1e814c8bbf5178ea05f5e8a42eff2a0ce5be22af0b33916061dc778dd2d aarch64 kernel-rt-debug-6.12.0-211.68.1.el10_2.aarch64.rpm 7bac3d19dc50646bfc8fb4d9f4ca91e7f8e5b86fe6c42b12ad50df7941a7e188 aarch64 python3-perf-6.12.0-211.68.1.el10_2.aarch64.rpm 7e7773cbb54dfd87959e0fab5ae95c9cb0c14331945bed173b8fa0649eb03c85 aarch64 kernel-headers-6.12.0-211.68.1.el10_2.aarch64.rpm 7f714e6b07155c4df3ccf6a9aa238357fb5f3e486fa4d95a82119273683aad38 aarch64 kernel-rt-debug-devel-6.12.0-211.68.1.el10_2.aarch64.rpm 890940dcb020a11f25fb62edc902ea1664ede128ccf236e6ec14795270c14ca6 aarch64 kernel-debug-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm 911f7f68dfffc6ce193fd364a8337d3a0a49ed0ec9606fb4f8ee9e77429898cb aarch64 kernel-rt-64k-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm 93f868bcd4e3a15db37c6c08a45edb8e43b3362b083d1430c65aef26c7d80ef0 aarch64 kernel-uki-virt-addons-6.12.0-211.68.1.el10_2.aarch64.rpm 970895c14d6f687147e888ef067d3c3c61450d2bd25fc01b05ee7182ceb5a6e7 aarch64 kernel-rt-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm a72eeb7fb05f795445a1fec6466da29c0e68c5183b980c9e9b8f5ffb1e586914 aarch64 kernel-64k-debug-core-6.12.0-211.68.1.el10_2.aarch64.rpm a771feee48552180d36bfdf858a5582ebea5383a6f9aeefbdc9fd260fe2ff396 aarch64 kernel-modules-6.12.0-211.68.1.el10_2.aarch64.rpm a9b43c3a6769035c890491f23484c225df8f9955c6103f9416b9a916d68d12fb aarch64 kernel-tools-libs-devel-6.12.0-211.68.1.el10_2.aarch64.rpm b967acd396945ac7133dfe52e5c435ca3975a08744aabc2bc3c3d6cb430c1648 aarch64 kernel-64k-6.12.0-211.68.1.el10_2.aarch64.rpm c322b870d5ebae2ed45106d96bdf07966058abc0ebef78febf347c26d6ab546f aarch64 kernel-debug-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm c3d7a9aef58342f7097fc85df4b07aae57ed14d33fbca3858af3d2789cc2026e aarch64 libperf-6.12.0-211.68.1.el10_2.aarch64.rpm c5d716128b450a6c7f15aa08a89760d6ace45ebbb25262c9d0b8fadd2b2c21ec aarch64 kernel-rt-debug-modules-6.12.0-211.68.1.el10_2.aarch64.rpm c7df32b29d7c86b34d537b856c665197cc75db948194555287bec6ee563cc376 aarch64 kernel-rt-debug-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm c8e8078f064a25353ebb571b7e9fb76123b7b443398f16520f69e70ac9d1b924 aarch64 perf-6.12.0-211.68.1.el10_2.aarch64.rpm cc4e6cb0b7be0e90becfa2174a2aa663ee85e5cf8cc2118a0f9d090c9de3dfe9 aarch64 kernel-debug-modules-6.12.0-211.68.1.el10_2.aarch64.rpm ceada8f0a9cf939c779c3f3840c9ae5d882c8caa8e552286034fa559115a5fa4 aarch64 kernel-64k-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm d6b6cfed92199647914111f7de15448eeedaa341b9ec5a5b29c9010d1a934dc4 aarch64 kernel-64k-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm d854d2fcf1c81d0f8ba88b75cdacdb38b29af324a20d4f25879510cfbf6ab4fc aarch64 kernel-uki-virt-6.12.0-211.68.1.el10_2.aarch64.rpm dbb59de105525b2d5a9bf88e338a4dc6af1d4d3d17816a4b72dc55661dcfd054 aarch64 kernel-64k-debug-devel-6.12.0-211.68.1.el10_2.aarch64.rpm dc4a7da37088801a3878ed8574c8e5fe52c5f76e9d97c51ef25466ee69af1a5d aarch64 kernel-rt-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm dc4b4693e39eaf50d58c3410a0d68c750b33b16d2694ee0e3a939ec53b197bf2 aarch64 kernel-tools-6.12.0-211.68.1.el10_2.aarch64.rpm dc4e4ac6507b32e07b5bdde11de7002ef64fb3b744ab9425d08fd8a80a1ab7e6 aarch64 kernel-modules-extra-matched-6.12.0-211.68.1.el10_2.aarch64.rpm e3214706f71732f5e51535e3ad52172ce5e5c6a89175c1c660036c4a32522460 aarch64 kernel-rt-devel-6.12.0-211.68.1.el10_2.aarch64.rpm e5da4698d5ddf1b21118f4caec87141402bd620cdda58eb28e3fcace9141c2bf aarch64 kernel-core-6.12.0-211.68.1.el10_2.aarch64.rpm e66c976ca849fa4d60bbdfaf4cfc700bf7b2fe2b6dc304e039f65881f3bce801 aarch64 kernel-rt-64k-debug-devel-6.12.0-211.68.1.el10_2.aarch64.rpm e8359343408f677edc21ebedf1d4ca0c4aec4090a89bb6b6c81e078e532233e7 aarch64 kernel-64k-core-6.12.0-211.68.1.el10_2.aarch64.rpm eb72a462973d5949ea1917c7c456a38f09c5c6d8614f0d492fa466083348d2f2 aarch64 kernel-rt-64k-debug-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm ec4a4d1070add458f3e75fea4b37d89e4d63b8557a05b7651fe26b2bc86c03c3 aarch64 kernel-64k-debug-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm ede59b39f5718a1c8bf5a950b965156149e997e4ef0d18d0c744ca94d967b0a4 aarch64 kernel-64k-modules-6.12.0-211.68.1.el10_2.aarch64.rpm ee7f1fde99dc33513962daa41236aa75be8e49989555fa7c76e3f499301b5a7e aarch64 kernel-tools-libs-6.12.0-211.68.1.el10_2.aarch64.rpm f069639f7c903e769a61d8ec21d03a1b77fcdfba5fc8f57c77f17cd7ecee88bb

अक्सर पूछे जाने वाले प्रश्न

What is ALSA-2026:88477?
It is AlmaLinux's Important-rated erratum for the AlmaLinux 10 kernel, updating it to 6.12.0-211.68.1.el10_2. It fixes 18 security vulnerabilities (CVE-2025-38147, CVE-2026-64048, CVE-2026-64114, CVE-2026-64266, CVE-2026-64481, CVE-2026-64572, CVE-2026-68202, CVE-2026-68236, CVE-2026-68245, CVE-2026-68278, CVE-2026-68448, CVE-2026-80536, CVE-2026-80590, CVE-2026-80887, CVE-2026-89791, CVE-2026-89811, CVE-2026-93817 and CVE-2026-97493) and carries bug fixes and enhancements.
Which kernel versions are affected?
AlmaLinux 10 kernels before 6.12.0-211.68.1.el10_2. The update also rebuilds the matching kernel-modules, kernel-modules-extra, kernel-debug, kernel-rt and devel packages, so all variants of the 10.x kernel line should be refreshed together.
How do I apply this update?
Run dnf update kernel kernel-modules kernel-modules-extra and reboot into the new kernel — kernel fixes are not active until the server restarts. If KernelCare is installed, kcarectl --update may apply the fixes live; verify coverage with kcarectl --patch-info and confirm uname -r shows 6.12.0-211.68.1.el10_2 after a reboot.
Is CVE-2025-38147 being exploited in the wild?
No exploitation is reported in the AlmaLinux erratum. It is a CALIPSO labeling flaw where kernel functions were called on AF_INET sockets — a correctness bug in a specialized networking path. The 2026-year CVEs in the same erratum are the more current fixes; apply the kernel update for the full set.

अपने सिस्टम में भेद्यताओं की जाँच करें

अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।

अपना सिस्टम जाँचें