Kernel-Rt Security Update — AlmaLinux 8 (ALSA-2026:93437)
ALSA-2026:93437 is a Critical-rated kernel-rt update for AlmaLinux 8 (aggregate CVSS 9.8, use-after-free class CWE-416), fixing six CVEs (CVE-2026-63924, CVE-2026-63922, CVE-2026-64109, CVE-2026-72083, CVE-2026-74283, CVE-2026-93787) — including an IPv6 exthdrs pointer-refresh flaw and further memory-safety fixes. RT-kernel servers: dnf update kernel-rt and reboot.
Что это значит по лицензии SharedLicense
Memory-safety flaws in the real-time kernel carry the same local-escalation and crash potential as the standard kernel — on latency-critical nodes running untrusted workloads, availability and isolation both depend on applying these.
Type:
security
Severity:
important
Release date:
2026-11-02
Description:
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)
* kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)
* kernel: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() (CVE-2026-64109)
* kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083)
* kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283)
* kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir (CVE-2026-93787)
* kernel: ZDI-CAN-33367: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation Vulnerability ()
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
- CVE-2026-63922
- CVE-2026-63924
- CVE-2026-64109
- CVE-2026-72083
- CVE-2026-74283
- CVE-2026-93787
- RHSA-2026:93437
- ALSA-2026:93437
Updated packages listed below:
| Architecture | Package | Checksum |
| x86_64 | kernel-rt-debug-modules-4.18.0-553.181.1.rt7.522.el8_10.x86_64.rpm | 2542242eaf8bd62a33b7f7ca7e6da7c086628f2a342acf0c7d14873b959ad4c0 |
| x86_64 | kernel-rt-devel-4.18.0-553.181.1.rt7.522.el8_10.x86_64.rpm | 3818855eed448a0e9fc9c127d66317276aaec8d4b2749a4cb76f4f17eb239d70 |
| x86_64 | kernel-rt-debug-modules-extra-4.18.0-553.181.1.rt7.522.el8_10.x86_64.rpm | 3e496bfb254ba1e6bf9d33b1973ca226cdc41a7ae865eaedb6335075020df3ed |
| x86_64 | kernel-rt-debug-devel-4.18.0-553.181.1.rt7.522.el8_10.x86_64.rpm | 693e90d9274f66e485131d96bf4ab2718959fb95748056137523378498f085ce |
| x86_64 | kernel-rt-modules-4.18.0-553.181.1.rt7.522.el8_10.x86_64.rpm | 6c962bb4026eb42682bb6a428a7f5386f2afb9da747e5810543092f2c3c3e5da |
| x86_64 | kernel-rt-modules-extra-4.18.0-553.181.1.rt7.522.el8_10.x86_64.rpm | 6df948d1d7ad51cfe3a5a7f48f2c19f42935402499d008842f01efb9cf74ce48 |
| x86_64 | kernel-rt-4.18.0-553.181.1.rt7.522.el8_10.x86_64.rpm | 984e8fe24e723edc3547f114f3686c8e74a7b092f7725908923593ebee9f74bf |
| x86_64 | kernel-rt-core-4.18.0-553.181.1.rt7.522.el8_10.x86_64.rpm | a02fccc37426fe71297d1a34482473487ccc0e075782b396c40dac9fc5d12c22 |
| x86_64 | kernel-rt-debug-core-4.18.0-553.181.1.rt7.522.el8_10.x86_64.rpm | f0e31d4eb3404791f4191a2539447a905d5f97b6fe24499b4078258259c775ca |
| x86_64 | kernel-rt-debug-4.18.0-553.181.1.rt7.522.el8_10.x86_64.rpm | f337ca7a28728ea9a21e7608c62ec1f64423a131affbad25674e71576df68d33 |
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.
Часто задаваемые вопросы
What is ALSA-2026:93437?
Do standard-kernel servers need this?
How do I apply the fix?
Which flaw class dominates this batch?
Источники
Проверьте систему на уязвимости
Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.
Проверьте свою систему