Güvenlik Danışarlıklarına Dön

Kernel Security Update — AlmaLinux 10 (ALSA-2026:88477)

ALSA-2026:88477 is an Important-rated AlmaLinux 10 kernel update that moves the kernel to 6.12.0-211.68.1.el10_2, fixing 18 security vulnerabilities across networking, filesystem and driver code — including CVE-2025-38147, where CALIPSO functions were called on AF_INET sockets, and a flaw in ipv4 raw-socket IP_HDRINCL handling with a malformed IHL. Update the kernel and reboot: dnf update kernel kernel-modules kernel-modules-extra, then restart into the new kernel.

Medium 5.5 CVSS
AlmaLinux 10

Etkilenen Sürümler

6.12.0-211.68.1.el10_2

Varsayılan Güncelleme Komutu

dnf update kernel kernel-modules kernel-modules-extra && reboot

SharedLicense lisansı altında bunun anlamı

Kernel flaws in networking paths (CALIPSO labeling, raw IPv4 sockets) are remotely reachable code paths — unpatched, they expose the server to crashes and, depending on the flaw, privilege escalation or memory disclosure from network-triggered states.

aarch64 kernel-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm 01482d3bf5618e9865eafe22261227cc82f96a9b030039bc6f7f6681a929fbbe aarch64 kernel-debug-6.12.0-211.68.1.el10_2.aarch64.rpm 06f59148a158d5e7ec864637aa8503698f651d0f7249b3a59155b4b9f4a7afa4 aarch64 kernel-rt-64k-debug-core-6.12.0-211.68.1.el10_2.aarch64.rpm 076b3a2926041b0c4cdecbbd5399a310a54410db9485069fb39c4ffa7a260038 aarch64 kernel-rt-64k-modules-6.12.0-211.68.1.el10_2.aarch64.rpm 098b3af6f418a28fbe4021b3a630ae7d725db01cba2a3a1ee5b033e9e6a18755 aarch64 kernel-64k-debug-devel-matched-6.12.0-211.68.1.el10_2.aarch64.rpm 0dddfee14acfab3e32ef5bff504f07d093f797dda97eeddee63a9ff2a34776fa aarch64 kernel-debug-devel-matched-6.12.0-211.68.1.el10_2.aarch64.rpm 1600bd4048c860fd10ea23bca74e0856f97e14ed869bcb601e666ae705d40877 aarch64 kernel-64k-debug-6.12.0-211.68.1.el10_2.aarch64.rpm 218dcc35832f3a950cc83d3e87576578adf774c4b50dadc8135a8953547e4e81 aarch64 kernel-64k-debug-modules-6.12.0-211.68.1.el10_2.aarch64.rpm 22dee42232b5f7adadeb429f8df2f695318e3e6e67c58f048e7969e7be3ce500 aarch64 kernel-rt-modules-6.12.0-211.68.1.el10_2.aarch64.rpm 31e149ccd46051fc6df10dd7cf9375722fcc661896cd1aa5f8e7a5b3a65deae9 aarch64 kernel-devel-6.12.0-211.68.1.el10_2.aarch64.rpm 34bab500f6f24798a0baac0ac4b24217e60b1ac224dd2700a745aa2e4acfe24a aarch64 kernel-64k-devel-6.12.0-211.68.1.el10_2.aarch64.rpm 4071d08fc89f44ef66de50b4a6e856fb0dda3b1a0de2c629b9b95b9a7b9ffdf2 aarch64 kernel-rt-debug-core-6.12.0-211.68.1.el10_2.aarch64.rpm 4235a64c16077526583d4b1ee3cc195cd28e6980d228e64caee63da7420b8563 aarch64 kernel-rt-64k-6.12.0-211.68.1.el10_2.aarch64.rpm 44c3e63c655de566ab89753b815aa7455abf98375810a78c3c37f1b9448cfba1 aarch64 rtla-6.12.0-211.68.1.el10_2.aarch64.rpm 47c0bcc62c09ca888c27e3edf75f6ea51b3a517fe16d3639de3daefcb0bd4635 aarch64 kernel-rt-64k-debug-modules-6.12.0-211.68.1.el10_2.aarch64.rpm 48e7a653e153f99298b3c955a34a997aa8a9c93d475a576b61f8768b4371e55f aarch64 kernel-rt-64k-debug-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm 4a9566b7ab72369054be927b1de0fcc70f8816b177c15a01bb98b5aae379daf2 aarch64 kernel-cross-headers-6.12.0-211.68.1.el10_2.aarch64.rpm 5c7cf0ed520de59364bab9f8defc45e5285a41dcdee009946a420519bf4754eb aarch64 kernel-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm 5e186f4131fb46bcfbf05d5dfa91a2bd4afe5243a20d104fe3e9b0d6eb551acf aarch64 kernel-64k-debug-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm 606ebf4a196ba00171c83201f0b8f4ccd677d72daf513ec728aa73a9066783ed aarch64 kernel-rt-64k-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm 61490ec36e6e58e88f0dc84927fbc7a4b5b810d993024e84334425dbab2db38d aarch64 rv-6.12.0-211.68.1.el10_2.aarch64.rpm 621c55952747cb27767a936d1f066f655f283cff294815113f20a07c223b3f4b aarch64 kernel-rt-64k-debug-6.12.0-211.68.1.el10_2.aarch64.rpm 636916bbb76c56f910ec5e040c410be1fa44725ec369c48475708c8a51cb1be2 aarch64 kernel-rt-6.12.0-211.68.1.el10_2.aarch64.rpm 64be7153a319d9300bb457660c84928375a6dc5f3432affd12bb500d447a00d8 aarch64 kernel-rt-64k-core-6.12.0-211.68.1.el10_2.aarch64.rpm 67f0cb1fe8b56a2d39d4aa9668fedb50694498503caaabfc9523e9f5dc9e1c30 aarch64 kernel-debug-core-6.12.0-211.68.1.el10_2.aarch64.rpm 6cb1c8a8b90813406d0b943b202937a6153b836323544b30331603c055c2694f aarch64 kernel-devel-matched-6.12.0-211.68.1.el10_2.aarch64.rpm 779600ab96285af9b002de2848e3bf8d315a56db4211f3d5a201607ce43ad0c5 aarch64 kernel-6.12.0-211.68.1.el10_2.aarch64.rpm 7aa2b1e814c8bbf5178ea05f5e8a42eff2a0ce5be22af0b33916061dc778dd2d aarch64 kernel-rt-debug-6.12.0-211.68.1.el10_2.aarch64.rpm 7bac3d19dc50646bfc8fb4d9f4ca91e7f8e5b86fe6c42b12ad50df7941a7e188 aarch64 python3-perf-6.12.0-211.68.1.el10_2.aarch64.rpm 7e7773cbb54dfd87959e0fab5ae95c9cb0c14331945bed173b8fa0649eb03c85 aarch64 kernel-headers-6.12.0-211.68.1.el10_2.aarch64.rpm 7f714e6b07155c4df3ccf6a9aa238357fb5f3e486fa4d95a82119273683aad38 aarch64 kernel-rt-debug-devel-6.12.0-211.68.1.el10_2.aarch64.rpm 890940dcb020a11f25fb62edc902ea1664ede128ccf236e6ec14795270c14ca6 aarch64 kernel-debug-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm 911f7f68dfffc6ce193fd364a8337d3a0a49ed0ec9606fb4f8ee9e77429898cb aarch64 kernel-rt-64k-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm 93f868bcd4e3a15db37c6c08a45edb8e43b3362b083d1430c65aef26c7d80ef0 aarch64 kernel-uki-virt-addons-6.12.0-211.68.1.el10_2.aarch64.rpm 970895c14d6f687147e888ef067d3c3c61450d2bd25fc01b05ee7182ceb5a6e7 aarch64 kernel-rt-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm a72eeb7fb05f795445a1fec6466da29c0e68c5183b980c9e9b8f5ffb1e586914 aarch64 kernel-64k-debug-core-6.12.0-211.68.1.el10_2.aarch64.rpm a771feee48552180d36bfdf858a5582ebea5383a6f9aeefbdc9fd260fe2ff396 aarch64 kernel-modules-6.12.0-211.68.1.el10_2.aarch64.rpm a9b43c3a6769035c890491f23484c225df8f9955c6103f9416b9a916d68d12fb aarch64 kernel-tools-libs-devel-6.12.0-211.68.1.el10_2.aarch64.rpm b967acd396945ac7133dfe52e5c435ca3975a08744aabc2bc3c3d6cb430c1648 aarch64 kernel-64k-6.12.0-211.68.1.el10_2.aarch64.rpm c322b870d5ebae2ed45106d96bdf07966058abc0ebef78febf347c26d6ab546f aarch64 kernel-debug-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm c3d7a9aef58342f7097fc85df4b07aae57ed14d33fbca3858af3d2789cc2026e aarch64 libperf-6.12.0-211.68.1.el10_2.aarch64.rpm c5d716128b450a6c7f15aa08a89760d6ace45ebbb25262c9d0b8fadd2b2c21ec aarch64 kernel-rt-debug-modules-6.12.0-211.68.1.el10_2.aarch64.rpm c7df32b29d7c86b34d537b856c665197cc75db948194555287bec6ee563cc376 aarch64 kernel-rt-debug-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm c8e8078f064a25353ebb571b7e9fb76123b7b443398f16520f69e70ac9d1b924 aarch64 perf-6.12.0-211.68.1.el10_2.aarch64.rpm cc4e6cb0b7be0e90becfa2174a2aa663ee85e5cf8cc2118a0f9d090c9de3dfe9 aarch64 kernel-debug-modules-6.12.0-211.68.1.el10_2.aarch64.rpm ceada8f0a9cf939c779c3f3840c9ae5d882c8caa8e552286034fa559115a5fa4 aarch64 kernel-64k-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm d6b6cfed92199647914111f7de15448eeedaa341b9ec5a5b29c9010d1a934dc4 aarch64 kernel-64k-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm d854d2fcf1c81d0f8ba88b75cdacdb38b29af324a20d4f25879510cfbf6ab4fc aarch64 kernel-uki-virt-6.12.0-211.68.1.el10_2.aarch64.rpm dbb59de105525b2d5a9bf88e338a4dc6af1d4d3d17816a4b72dc55661dcfd054 aarch64 kernel-64k-debug-devel-6.12.0-211.68.1.el10_2.aarch64.rpm dc4a7da37088801a3878ed8574c8e5fe52c5f76e9d97c51ef25466ee69af1a5d aarch64 kernel-rt-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm dc4b4693e39eaf50d58c3410a0d68c750b33b16d2694ee0e3a939ec53b197bf2 aarch64 kernel-tools-6.12.0-211.68.1.el10_2.aarch64.rpm dc4e4ac6507b32e07b5bdde11de7002ef64fb3b744ab9425d08fd8a80a1ab7e6 aarch64 kernel-modules-extra-matched-6.12.0-211.68.1.el10_2.aarch64.rpm e3214706f71732f5e51535e3ad52172ce5e5c6a89175c1c660036c4a32522460 aarch64 kernel-rt-devel-6.12.0-211.68.1.el10_2.aarch64.rpm e5da4698d5ddf1b21118f4caec87141402bd620cdda58eb28e3fcace9141c2bf aarch64 kernel-core-6.12.0-211.68.1.el10_2.aarch64.rpm e66c976ca849fa4d60bbdfaf4cfc700bf7b2fe2b6dc304e039f65881f3bce801 aarch64 kernel-rt-64k-debug-devel-6.12.0-211.68.1.el10_2.aarch64.rpm e8359343408f677edc21ebedf1d4ca0c4aec4090a89bb6b6c81e078e532233e7 aarch64 kernel-64k-core-6.12.0-211.68.1.el10_2.aarch64.rpm eb72a462973d5949ea1917c7c456a38f09c5c6d8614f0d492fa466083348d2f2 aarch64 kernel-rt-64k-debug-modules-extra-6.12.0-211.68.1.el10_2.aarch64.rpm ec4a4d1070add458f3e75fea4b37d89e4d63b8557a05b7651fe26b2bc86c03c3 aarch64 kernel-64k-debug-modules-core-6.12.0-211.68.1.el10_2.aarch64.rpm ede59b39f5718a1c8bf5a950b965156149e997e4ef0d18d0c744ca94d967b0a4 aarch64 kernel-64k-modules-6.12.0-211.68.1.el10_2.aarch64.rpm ee7f1fde99dc33513962daa41236aa75be8e49989555fa7c76e3f499301b5a7e aarch64 kernel-tools-libs-6.12.0-211.68.1.el10_2.aarch64.rpm f069639f7c903e769a61d8ec21d03a1b77fcdfba5fc8f57c77f17cd7ecee88bb

Sıkça Sorulan Sorular

What is ALSA-2026:88477?
It is AlmaLinux's Important-rated erratum for the AlmaLinux 10 kernel, updating it to 6.12.0-211.68.1.el10_2. It fixes 18 security vulnerabilities (CVE-2025-38147, CVE-2026-64048, CVE-2026-64114, CVE-2026-64266, CVE-2026-64481, CVE-2026-64572, CVE-2026-68202, CVE-2026-68236, CVE-2026-68245, CVE-2026-68278, CVE-2026-68448, CVE-2026-80536, CVE-2026-80590, CVE-2026-80887, CVE-2026-89791, CVE-2026-89811, CVE-2026-93817 and CVE-2026-97493) and carries bug fixes and enhancements.
Which kernel versions are affected?
AlmaLinux 10 kernels before 6.12.0-211.68.1.el10_2. The update also rebuilds the matching kernel-modules, kernel-modules-extra, kernel-debug, kernel-rt and devel packages, so all variants of the 10.x kernel line should be refreshed together.
How do I apply this update?
Run dnf update kernel kernel-modules kernel-modules-extra and reboot into the new kernel — kernel fixes are not active until the server restarts. If KernelCare is installed, kcarectl --update may apply the fixes live; verify coverage with kcarectl --patch-info and confirm uname -r shows 6.12.0-211.68.1.el10_2 after a reboot.
Is CVE-2025-38147 being exploited in the wild?
No exploitation is reported in the AlmaLinux erratum. It is a CALIPSO labeling flaw where kernel functions were called on AF_INET sockets — a correctness bug in a specialized networking path. The 2026-year CVEs in the same erratum are the more current fixes; apply the kernel update for the full set.

Sisteminizi güvenlik açıkları açısından kontrol edin

Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.

Sisteminizi Kontrol Edin