Вернуться к предупреждениям о безопасности

Kernel Security Update — AlmaLinux 8 (ALSA-2026:92209)

ALSA-2026:92209 is a Critical-rated AlmaLinux 8 kernel update (kernel 4.18.0-553.180.1.el8_10, CVSS 9.3) fixing four vulnerabilities: CVE-2026-72288, CVE-2026-72289, CVE-2026-90011 and CVE-2026-98222 — including a KVM arm64 virtual-interrupt race condition. Update and reboot: dnf update kernel, then restart into 4.18.0-553.180.1.el8_10.

Critical 9.3 CVSS
AlmaLinux 8

Что это значит по лицензии SharedLicense

A race condition in KVM's interrupt controller handling (arm64) is a virtualization-isolation flaw class — on ARM hosting nodes it can crash or compromise the boundary between guest and host.

aarch64 kernel-debug-modules-4.18.0-553.180.1.el8_10.aarch64.rpm 0b8c4125e294f40bfc1f37df15d6675b7e83eb33c16f3dccb711d5c04e484ee3 aarch64 kernel-debug-4.18.0-553.180.1.el8_10.aarch64.rpm 0df5e1892b13bdee6968277f7d8188f3b1899b9e9f41f2dc0366ef39928c2a7d aarch64 kernel-headers-4.18.0-553.180.1.el8_10.aarch64.rpm 2086b26f27fd6d6d067bc569e9f743f6564458521485ecdf8a3462828f2b83df aarch64 kernel-cross-headers-4.18.0-553.180.1.el8_10.aarch64.rpm 23e1c4f9680bb5250108df827d1e89ad3940c2c03466646f1b8fae9a3de2048e aarch64 kernel-tools-4.18.0-553.180.1.el8_10.aarch64.rpm 431a929da2ccc6103786bd5e55e424910b0347ddcaacde34764418d101b2c39a aarch64 kernel-debug-devel-4.18.0-553.180.1.el8_10.aarch64.rpm 4745ebe5f30f99aecabd232b9803b1dc2d266a290085023a934e16504330acc1 aarch64 bpftool-4.18.0-553.180.1.el8_10.aarch64.rpm 6291c9488b0c47ab0ef33a9922fcc51fdca8a9dc00ab113575deed956b85108b aarch64 kernel-tools-libs-devel-4.18.0-553.180.1.el8_10.aarch64.rpm 67092226ade820b6d8fb8661543897c383a3ff6cb0df624ea46cb8f48c9004d9 aarch64 perf-4.18.0-553.180.1.el8_10.aarch64.rpm 680b08726db757b26dc8b91fc80c048fc560a14911c05e7b65baece68e7ac0c0 aarch64 python3-perf-4.18.0-553.180.1.el8_10.aarch64.rpm aae977e82f4b86cf874250869c06ff433c5e98fdc1ca53af9d1dfe8022eeb962 aarch64 kernel-modules-extra-4.18.0-553.180.1.el8_10.aarch64.rpm b40c233c1e74a3785a559b261834c062e474b4d17187f264edf2e0c788c529b1 aarch64 kernel-debug-modules-extra-4.18.0-553.180.1.el8_10.aarch64.rpm b4b2af30c6b29ba045a28315e7782c00a580ad0e9c1246b965efe122c9a9a5ef aarch64 kernel-modules-4.18.0-553.180.1.el8_10.aarch64.rpm bfa839858a989ab014b8bc54822feb9570cc9a4760977320e7f4cd5594960b2c aarch64 kernel-debug-core-4.18.0-553.180.1.el8_10.aarch64.rpm c58d3b10c9e4370931861923aad56bd77436d5193f572cf6efdb4d68b29f9685 aarch64 kernel-tools-libs-4.18.0-553.180.1.el8_10.aarch64.rpm c7cda6ea81f54d3e628bce9a04574ec21c16fc1fc212d613204c3b4c4f5dc8d7 aarch64 kernel-4.18.0-553.180.1.el8_10.aarch64.rpm dfa94a74f5eee422d00f762ff1d288a7028b4d210ec44163c017466901562659 aarch64 kernel-devel-4.18.0-553.180.1.el8_10.aarch64.rpm f70d8eab2af0b2ca46bcc6eb0990fb8bea53cde2783975ba1609f633f5de4ee3 aarch64 kernel-core-4.18.0-553.180.1.el8_10.aarch64.rpm f7a0ca39b8babd93768c58c7ec1e5939e9a3cdfa7ea8da97ca0303c469e70c8c noarch kernel-abi-stablelists-4.18.0-553.180.1.el8_10.noarch.rpm 8e34be6f31b1cd5053c947b17ec66e2655b6f254c6334f21b727b2c1357e16e1 noarch kernel-doc-4.18.0-553.180.1.el8_10.noarch.rpm a0450f2efcdedb065c4c8b68fa9b48cc2cc76dd6d5b29ba74c0d8fd8fac79af9 ppc64le kernel-debug-modules-4.18.0-553.180.1.el8_10.ppc64le.rpm 066b8b2b0040d8991c16a8623e94bdd43efb15520ce3d02db5452bc08db214cd ppc64le kernel-debug-devel-4.18.0-553.180.1.el8_10.ppc64le.rpm 10a6fbb9a28288558cc97514eff688ab20414d57c680e0dba85443f914989023 ppc64le kernel-tools-libs-4.18.0-553.180.1.el8_10.ppc64le.rpm 1a2b3a308715de5f6348e16298a8ff85613568d45f2340fad6b97e6258c6ce1b ppc64le kernel-debug-4.18.0-553.180.1.el8_10.ppc64le.rpm 1b042e5a0a56e929171739079b0b3d83c6054af173c1cfb1806e0ce102d50bdd ppc64le perf-4.18.0-553.180.1.el8_10.ppc64le.rpm 29785dd97b342df988a9ae981c36aefbb4b33d3dc9ca82efbc50e578338ed2ac ppc64le kernel-debug-modules-extra-4.18.0-553.180.1.el8_10.ppc64le.rpm 489638421be1f013020873ffaee648d979bf2b5aec3c40944640092a653c29bf ppc64le kernel-tools-4.18.0-553.180.1.el8_10.ppc64le.rpm 4bb43e525abcc939998d10e7d753042c025903ef90d6a976d18b634f8d00dd78 ppc64le kernel-devel-4.18.0-553.180.1.el8_10.ppc64le.rpm 4c82b3cce41b210e2acf2973ad87797c8cf56cfbd80fa7a14376ab3215600b83 ppc64le kernel-headers-4.18.0-553.180.1.el8_10.ppc64le.rpm 51d9e316d839f8b32a9875a3a6692bf7ccf005fa6ec3db6a7367fb80ae5d20d6 ppc64le kernel-cross-headers-4.18.0-553.180.1.el8_10.ppc64le.rpm 60ab2e6b62d07ef81a98ba33f375af55aa05a904c7a30f6fb16d0075199d2451 ppc64le kernel-modules-extra-4.18.0-553.180.1.el8_10.ppc64le.rpm 63b3045b3eb75d60006a512903f69421f88537fb1806d96852486846dfe13412 ppc64le bpftool-4.18.0-553.180.1.el8_10.ppc64le.rpm 79480797ff4382603bd4cfef25c9fd6aa88a10a633fe2dc3429885500b33338c ppc64le kernel-core-4.18.0-553.180.1.el8_10.ppc64le.rpm 7ffc3697eb0250040eb20cb6f0b05f0943379335c520330621aab3ebe3547cfe ppc64le kernel-tools-libs-devel-4.18.0-553.180.1.el8_10.ppc64le.rpm b704a1b7e77b988fc4868c0c1169421659f698612dcb8c3d493fe93fb2acb077 ppc64le kernel-modules-4.18.0-553.180.1.el8_10.ppc64le.rpm d9a88bc3a81dd78c158567ef004bbe2471b03eb8e45954a9df75206a5b51f98b ppc64le kernel-4.18.0-553.180.1.el8_10.ppc64le.rpm f33423aa451bdd983578b49fc1d07ad99b283db86c42fdea37208fc0b231d7d5 ppc64le python3-perf-4.18.0-553.180.1.el8_10.ppc64le.rpm f63fc9f56c9d01ed8f8fd53b52fdccccd57add2cebd4e5b0459ee988747f896a ppc64le kernel-debug-core-4.18.0-553.180.1.el8_10.ppc64le.rpm f7f834169dfebe2057ce0eaa562a3da9824e09f8f255ef9b2138927c8da28d3b s390x perf-4.18.0-553.180.1.el8_10.s390x.rpm 020f8fa6b404ef4a1d21931183cd6639e96e531f32a10acbcb583382e59e3af4 s390x bpftool-4.18.0-553.180.1.el8_10.s390x.rpm 1729e87a330830e646ebd53e731a716d359ad181663aa45516157d73bf7d42a8 s390x kernel-debug-modules-4.18.0-553.180.1.el8_10.s390x.rpm 3ccf5f54ab2de57f9d9f82383bfc19ce5017d9d1c35a0387b3f64027c7e8b931 s390x python3-perf-4.18.0-553.180.1.el8_10.s390x.rpm 40772dab02dd825a8c065997993f0829cd4d67e605aff3300681578d2dc30f60 s390x kernel-debug-4.18.0-553.180.1.el8_10.s390x.rpm 51117e0bff7b0dee90237e4ecdb6ac872e2cfbdf19a76b58be9c53a45ccb1373 s390x kernel-devel-4.18.0-553.180.1.el8_10.s390x.rpm 5d412a95e98605c386322077d296f1354cf696c09e78b7c24bb26392369e15f7 s390x kernel-zfcpdump-modules-extra-4.18.0-553.180.1.el8_10.s390x.rpm 5fe74108913f6613c89f7c09cd947d1b49aa4dcc4b9b72124a5e3823871d5b38 s390x kernel-debug-modules-extra-4.18.0-553.180.1.el8_10.s390x.rpm 6fcdf2f70588aa69eda88c2f8e6be8971044900d29f04eb8019ee28eb22936ec s390x kernel-cross-headers-4.18.0-553.180.1.el8_10.s390x.rpm 71f5979abe5d8c3304c18a2c36ba3deec266c705c7bf696ed69cfbb7ee610a7d s390x kernel-zfcpdump-4.18.0-553.180.1.el8_10.s390x.rpm 730687729307f3d23f62dfbdd7080a4c265d175d22a2338fb31ca69ab2d84361 s390x kernel-4.18.0-553.180.1.el8_10.s390x.rpm 773348a66f8ac09f7f60b21686cbe8d358fc862d9747f200117a0389db67e04c s390x kernel-zfcpdump-devel-4.18.0-553.180.1.el8_10.s390x.rpm 88367c79b042a1775fe99b05e1afd8eef04895794479e2e8f358e13e181300fd s390x kernel-tools-4.18.0-553.180.1.el8_10.s390x.rpm 8a7eee3b81f76dde1dc0d8cfed6436328011c438be8f448eea40894bbfcce2c9 s390x kernel-core-4.18.0-553.180.1.el8_10.s390x.rpm 9cdfb08d01413cdd1a38f7e049b6c4f938471fc44ce8ea72dc4d1872e5a1eb51 s390x kernel-headers-4.18.0-553.180.1.el8_10.s390x.rpm 9d41a472d037f772eea086ce2a58062eb0a3697afcd1bc2c7be306c4366c884c s390x kernel-modules-4.18.0-553.180.1.el8_10.s390x.rpm aad32f624f021460ec885ba319c5abe1b4f7e82071759e903040571e155fb98f s390x kernel-zfcpdump-core-4.18.0-553.180.1.el8_10.s390x.rpm ba057c1521f38322188eb6ae351612d43dd5fafc8aeba0e20690da9d71d79d86 s390x kernel-zfcpdump-modules-4.18.0-553.180.1.el8_10.s390x.rpm c09e2d56955fd2778d25ea999c440d25876c32e1de2c3b4b9ac83fa144e66971 s390x kernel-debug-core-4.18.0-553.180.1.el8_10.s390x.rpm d2c2190b826e22eb58dd731c599612390fa87116b5ae480f0952ce641b9857a1 s390x kernel-debug-devel-4.18.0-553.180.1.el8_10.s390x.rpm d602255b39265c9a0f6fcdb4adacf9116a9c4612a270287d01805e872ea56bb7 s390x kernel-modules-extra-4.18.0-553.180.1.el8_10.s390x.rpm e9f70be0a695c11badb1b2368416de39b9835a5a0876571049ff1b0ec576c239 x86_64 kernel-devel-4.18.0-553.180.1.el8_10.x86_64.rpm 0717d1ef0a8cbf49386ac8864acd80d29e27d21e5b6992ed162f0d966dd2c5c9

Часто задаваемые вопросы

What is ALSA-2026:92209?
It is AlmaLinux's Critical kernel erratum for AlmaLinux 8, updating to 4.18.0-553.180.1.el8_10 and fixing four CVEs (CVE-2026-72288, CVE-2026-72289, CVE-2026-90011, CVE-2026-98222) at aggregate CVSS 9.3 — including a race between interrupt affinity changes and LPI disabling in the KVM arm64 virtual interrupt controller.
Who should apply this update?
All AlmaLinux 8 servers, with priority on ARM64 virtualization hosts (KVM nodes) where the flagged race condition sits directly in the guest-to-host interrupt path.
How do I apply the fix?
Run dnf update kernel kernel-modules kernel-modules-extra and reboot; verify with uname -r. KernelCare users can live-patch (kcarectl --update) and confirm coverage for all four CVEs.
Is CVE-2026-98222 exploited?
No exploitation is reported in the erratum data. With a Critical 9.3 aggregate on kernel fixes, schedule the reboot at the earliest maintenance window rather than waiting.

Проверьте систему на уязвимости

Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.

Проверьте свою систему