Вернуться к предупреждениям о безопасности

Kernel Security Update — AlmaLinux 8 (ALSA-2026:93414)

ALSA-2026:93414 is a Critical-rated AlmaLinux 8 kernel update (kernel 4.18.0-553.182.1.el8_10, CVSS 9.8) fixing CVE-2026-98432 — the IPv4 option structure (inet_opt/ireq_opt) must be freed only after an RCU grace period, a use-after-free class flaw in the TCP handshake path. Update and reboot: dnf update kernel, then restart into 4.18.0-553.182.1.el8_10.

Critical 9.8 CVSS
AlmaLinux 8

Что это значит по лицензии SharedLicense

A use-after-free in the TCP connection-establishment path is reachable remotely through crafted connection attempts — the highest-class kernel exposure, since every internet-facing server accepts TCP connections by definition.

aarch64 kernel-tools-libs-devel-4.18.0-553.182.1.el8_10.aarch64.rpm 0ab9e5c46a9bdeba0edfc050a48a639d7633ffcbd9ac8384b678c8a695adbdef aarch64 bpftool-4.18.0-553.182.1.el8_10.aarch64.rpm 162a7422d7083adcebd40192970dd3e012fdeb45487aa82bf521ebe6f5e42bb4 aarch64 kernel-debug-devel-4.18.0-553.182.1.el8_10.aarch64.rpm 2a5a41d7f710628d9da7d03f9e890bd4e5aeac8b1943a35f3d183ab362a1c335 aarch64 kernel-tools-libs-4.18.0-553.182.1.el8_10.aarch64.rpm 2dfa694018a3bfeb2cfaba93ee8934c91827eb5dffc004b91367d4c5dc7cbcc2 aarch64 kernel-modules-extra-4.18.0-553.182.1.el8_10.aarch64.rpm 38f30d30b979d51d055aeec21a107c09e964c6bd5867268d55659165ef882cb3 aarch64 kernel-core-4.18.0-553.182.1.el8_10.aarch64.rpm 66a950fdbea17c41fcaab7e2dbb6497e55f2018146f7e43e20514ad8005631a2 aarch64 kernel-debug-modules-4.18.0-553.182.1.el8_10.aarch64.rpm 6a38d14392f2327d7ababdd37080b29fdeef624b5803d753b2eb0bfe6bfb6e39 aarch64 kernel-debug-core-4.18.0-553.182.1.el8_10.aarch64.rpm 9a7425fc83320aac3e84614cd057ef62d205a8aa41054b025e084a8a70b4c0df aarch64 python3-perf-4.18.0-553.182.1.el8_10.aarch64.rpm a99feda878ea990cde8000ff1c3f0bdf6d3f7416c78659d28960c35e8338a578 aarch64 kernel-debug-4.18.0-553.182.1.el8_10.aarch64.rpm bd946cd8b927941b30686661930c3b68993d53d0cd30401cf84e7c01ef3bd3f5 aarch64 kernel-tools-4.18.0-553.182.1.el8_10.aarch64.rpm d5ed94eb56c3feba2a8d973bd6ba51cab8ca07f104aabf4e15e3436c6d2bb3c0 aarch64 kernel-devel-4.18.0-553.182.1.el8_10.aarch64.rpm d9ac945ae0b668dd67a631aed02e8a1376af12c1f1ddc87efe9f5ad475b67de2 aarch64 kernel-4.18.0-553.182.1.el8_10.aarch64.rpm de5acf118a92ca98ddc063e48cc5fc84ceaf0df2f7d294abb86c7aae59f90403 aarch64 kernel-debug-modules-extra-4.18.0-553.182.1.el8_10.aarch64.rpm e88a141bb82c99115416313f06105dbf186be0ee2e12599d7c6c07cc26065e0a aarch64 perf-4.18.0-553.182.1.el8_10.aarch64.rpm ee9e0605a4390feb11db09b75e0f145ff06b858ca46e30f4d81ed4a0b03a2937 aarch64 kernel-modules-4.18.0-553.182.1.el8_10.aarch64.rpm f47dc5daa4e8934ca64a9e46dbe7d741a5b971aa56152559c128f8634dc78c48 aarch64 kernel-cross-headers-4.18.0-553.182.1.el8_10.aarch64.rpm f49d09ca023225dd69c388dfb7780f16f8e4079de56c9b0ed53338c040453499 aarch64 kernel-headers-4.18.0-553.182.1.el8_10.aarch64.rpm fcc832107c63a84f092c4843d4182c63fd60499891d59e1cecc269569b2df418 noarch kernel-abi-stablelists-4.18.0-553.182.1.el8_10.noarch.rpm 644099c5517785fbff6834ca69a50d0c02fbb465ebf24624d06141217ef8a2f6 noarch kernel-doc-4.18.0-553.182.1.el8_10.noarch.rpm e6629faea53bbc65580a5c299243755113af132f01b381eebe05d0400cb3543c ppc64le kernel-4.18.0-553.182.1.el8_10.ppc64le.rpm 0ab10b5348d18c845fe46165077ec927f17bf0827c391d2d6e5797914a0c2da0 ppc64le kernel-debug-modules-extra-4.18.0-553.182.1.el8_10.ppc64le.rpm 1035d555087d8474e10b207c6432ab7d56288f4520ed05dca6006dffef997676 ppc64le python3-perf-4.18.0-553.182.1.el8_10.ppc64le.rpm 1814540cd362a02d3bba0540d1ab52c7db129a8f524741614c367864e1cc11c6 ppc64le kernel-debug-devel-4.18.0-553.182.1.el8_10.ppc64le.rpm 2ab8ca8e5f4e61f1dfd6192bc5a5bf2bff698aa69735881ea7a1af6ef0bea1e6 ppc64le kernel-tools-libs-4.18.0-553.182.1.el8_10.ppc64le.rpm 2bfe3a3dc7804248fef93c3d3a3201b2b78e60c052a3de9a1bcbf47f1d1664fe ppc64le kernel-tools-libs-devel-4.18.0-553.182.1.el8_10.ppc64le.rpm 2f2bd48c50d0d5074629ccd28eaec821207a8cd7d7c3c520c345f5bc380e91c9 ppc64le kernel-debug-4.18.0-553.182.1.el8_10.ppc64le.rpm 31de9a11d147e0532a80c583745318635d9650df68c9fae8a703dc5d9cf3b2ec ppc64le kernel-tools-4.18.0-553.182.1.el8_10.ppc64le.rpm 4407a426233d0302fd53c528fd945a9c9eb48015ffbcf352653b27489734e34d ppc64le perf-4.18.0-553.182.1.el8_10.ppc64le.rpm 5be2c1445d16a378addee7acfe3b94b22b1a806a5da0f798a84dd827d4acdecb ppc64le kernel-headers-4.18.0-553.182.1.el8_10.ppc64le.rpm 72992d3701dd368514d74513c7a05a11c57d874bc9f70473cf8bd0c5cadde6e7 ppc64le kernel-core-4.18.0-553.182.1.el8_10.ppc64le.rpm 72dddd32635ec4b0cb6d80dfe50cb0c0958b2f2cdb65e7a12bec45816fb14d49 ppc64le bpftool-4.18.0-553.182.1.el8_10.ppc64le.rpm 82e3099cd3b5ab15a29ed83d3b91dce42ae9f814fd4bc3022964312a47c14934 ppc64le kernel-debug-core-4.18.0-553.182.1.el8_10.ppc64le.rpm 9bdba671d4f4a7c91cff37684a29c3ce0039ea318d4bceabacdd190bbb71df49 ppc64le kernel-modules-4.18.0-553.182.1.el8_10.ppc64le.rpm a5617a553c9ed93bf448d6489eeee89aa25a04741393ee8c543237b634cf0b7b ppc64le kernel-devel-4.18.0-553.182.1.el8_10.ppc64le.rpm a6e6acb668a500d35fa76bbe38b6bfcd2038edfebb6d1d12219b98cc12bfd2fd ppc64le kernel-debug-modules-4.18.0-553.182.1.el8_10.ppc64le.rpm aa2b3a26b8ce924dd13c29197d9d02651eb2cf70b2f4b313b075dfc613adf03e ppc64le kernel-cross-headers-4.18.0-553.182.1.el8_10.ppc64le.rpm c3395d9b16940ae737d34cc6645bc3444e89db7e056b65ec43685ed7565fa28c ppc64le kernel-modules-extra-4.18.0-553.182.1.el8_10.ppc64le.rpm ef8fe88e02675b3eb69517a0482372d290469d4cb5d70e9681e7fc19e6baabee s390x python3-perf-4.18.0-553.182.1.el8_10.s390x.rpm 04b69d6a8c4a0c9be3d5f419b451f83a67c08db13eacee8653c54721a2864fed s390x kernel-debug-modules-extra-4.18.0-553.182.1.el8_10.s390x.rpm 17627ec611e1be286a9348254a08fae431a14aa12fe20b69734d09b66bf4d780 s390x kernel-core-4.18.0-553.182.1.el8_10.s390x.rpm 221aa603192bc08ce85f2b384a92fc1f75ed1ffd0d85afaa60499b274871976b s390x kernel-debug-core-4.18.0-553.182.1.el8_10.s390x.rpm 37dcc119538246ce51b6e207f173cc893fbfa03deef1c6c3c5615eb4808c1173 s390x kernel-zfcpdump-modules-4.18.0-553.182.1.el8_10.s390x.rpm 48a461cfc187886d48b2fd34b70e322ea52efcf91e91014c7fb9687295624ffe s390x kernel-zfcpdump-devel-4.18.0-553.182.1.el8_10.s390x.rpm 500136e46115f81a91f570d4c1f8701f082376bd18f4fcac17516d5b4a6e3a97 s390x kernel-cross-headers-4.18.0-553.182.1.el8_10.s390x.rpm 5583900716853b45c1d9cd725d3cf440c510d0896b56a2d4258571e7648a2c54 s390x kernel-4.18.0-553.182.1.el8_10.s390x.rpm 6168e7b94e43eec44117add29e73b57ac0bdf8ed8da9d06ce06c9c1bae037c5a s390x kernel-modules-extra-4.18.0-553.182.1.el8_10.s390x.rpm 7be0e2915ad74e625e7b1dd1ecff4d83eab6ffe6f8b0d9bb4688c0c673dcc36f s390x kernel-debug-4.18.0-553.182.1.el8_10.s390x.rpm 8c84fa5c52bcc38a11bc42de05024aacc0c396124aba8de56e03a501f4611018 s390x kernel-zfcpdump-4.18.0-553.182.1.el8_10.s390x.rpm a71779ddcc16ffca8d82837d3a18e8389adbe38a489da8dd85e9bd14103c8b0b s390x kernel-debug-modules-4.18.0-553.182.1.el8_10.s390x.rpm a92f7e761d29743596b1d7558a71c47a6b6aa053d4d6a4aa35a106d4d83a26f6 s390x kernel-debug-devel-4.18.0-553.182.1.el8_10.s390x.rpm b2eb1af1f4680e988ff0878e388e420fa07b5fe01b35207c7915fa45049385b6 s390x kernel-zfcpdump-modules-extra-4.18.0-553.182.1.el8_10.s390x.rpm b7d231d6097fe32acb2ca6343af386ba8f4430a1125d2ef8bcca9e6dee4f195e s390x bpftool-4.18.0-553.182.1.el8_10.s390x.rpm b8b4ff065a60a3245c03700333234f3f2a15a0eac21c9b062359400704e65bed s390x kernel-tools-4.18.0-553.182.1.el8_10.s390x.rpm c430f78c6b093202c1e45e734673214f4460d03c232832476168289ef680bd2d s390x kernel-headers-4.18.0-553.182.1.el8_10.s390x.rpm cd752773579558589384039995fd1f601f701fde98ba72b01dcad37892b183d1 s390x kernel-zfcpdump-core-4.18.0-553.182.1.el8_10.s390x.rpm d02100fe858fabbe5b02a0498132030a52b2cf76ff02d154bd66d90e8e13fc5e s390x perf-4.18.0-553.182.1.el8_10.s390x.rpm e1935d694f6b35c13a87e9797594040f96acbe20787fe143eac4b6a05c222788 s390x kernel-devel-4.18.0-553.182.1.el8_10.s390x.rpm e604b65650b920bbdab4e3e372229f8e48723a790116facfa0f885988874102d s390x kernel-modules-4.18.0-553.182.1.el8_10.s390x.rpm f9f125835bc880f4be1a546ec7adde85fbc8570c2660976a2e42319232317425 x86_64 kernel-tools-libs-4.18.0-553.182.1.el8_10.x86_64.rpm 2287b42c6b264af93d21a290a7c0440cc0bd29dfa6c295cf1113ac29b0c734d3

Часто задаваемые вопросы

What is CVE-2026-98432?
It is a use-after-free class flaw in the Linux kernel's IPv4 handling: the inet_opt and ireq_opt option structures must be released only after an RCU grace period, and the pre-fix code freed them early — reachable through normal TCP connection establishment, hence the Critical 9.8 rating.
Who should apply ALSA-2026:93414 urgently?
Every AlmaLinux 8 server accepting network connections — which is all of them. Internet-facing servers should patch at the earliest opportunity given the remote reachability of the flaw path.
How do I apply the fix?
Run dnf update kernel kernel-modules kernel-modules-extra and reboot; verify with uname -r reporting 4.18.0-553.182.1.el8_10. KernelCare users can live-patch and confirm coverage for CVE-2026-98432.
Is this related to the other recent AlmaLinux 8 kernel errata?
It is a separate flaw from ALSA-2026:92209 and 93437 (which fixed the KVM race and ipv6/RCU batch) — AlmaLinux 8 has shipped several kernel errata in close succession, so the practical rule is: be current with the newest one, which covers all earlier fixes.

Проверьте систему на уязвимости

Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.

Проверьте свою систему