Güvenlik Danışarlıklarına Dön

Kernel Security Update — AlmaLinux 8 (ALSA-2026:19666)

ALSA-2026:19666 updates the AlmaLinux 8 kernel to 4.18.0-553.125.1.el8_10, fixing CVE-2026-46300 and CVE-2026-46333 — including 'Fragnesia', a variant of the Dirty Frag page-cache vulnerability family in the ESP/XFRM networking path (out-of-bounds write, CWE-787; aggregate CVSS 7.8). Update and reboot: dnf update kernel, then restart into 4.18.0-553.125.1.el8_10.

High 7.8 CVSS Aktif olarak istismar ediliyor
AlmaLinux 8

SharedLicense lisansı altında bunun anlamı

A Dirty Frag-family write primitive in the ESP/XFRM encryption path extends the kernel page-cache attack surface to encrypted networking states — the escalation class that ends in root, as the original Dirty Frag research demonstrated.

aarch64 kernel-modules-4.18.0-553.125.1.el8_10.aarch64.rpm 266d42f59c0688fa3cca3e99cb15e2285596f307699ecc4e0ad05a52f85de66b aarch64 kernel-headers-4.18.0-553.125.1.el8_10.aarch64.rpm 2b4aa223c7c01bf78328e412b5b504131328f8b3ea202aebed8d7271d5a223fc aarch64 kernel-core-4.18.0-553.125.1.el8_10.aarch64.rpm 361eb998ade7945a9bc1941572f67a13d93aacbfe59db1542d9119fb16bca209 aarch64 kernel-debug-modules-4.18.0-553.125.1.el8_10.aarch64.rpm 3b3dfae5171bcb53460d9a410b64b2c6f78e978e65ced4daf7f8845176e4cb6a aarch64 kernel-debug-devel-4.18.0-553.125.1.el8_10.aarch64.rpm 3b4df07fc6be825a3bcaf79d4b4d2b267311d1092338ce12b39f3c834e8d3fef aarch64 kernel-tools-libs-4.18.0-553.125.1.el8_10.aarch64.rpm 4e8c5af9c8b3d93c2b93bb3a63ee9aea56785b53ed9f8b479283b7592f8c74e8 aarch64 kernel-debug-core-4.18.0-553.125.1.el8_10.aarch64.rpm 731a3153de01a298e84223cf95e6c93b625640519252eaecb149e2ebfd1021d5 aarch64 kernel-debug-4.18.0-553.125.1.el8_10.aarch64.rpm 7609b8eba7fa632d6f4f8ceb06ec9b1a1ac895a413d265d21f6b4d2cee3cec2c aarch64 perf-4.18.0-553.125.1.el8_10.aarch64.rpm 7e12911fbc8c946cb1abb9b9ca30c29bc3fe47271bdba3a6329f1b3105a96942 aarch64 kernel-modules-extra-4.18.0-553.125.1.el8_10.aarch64.rpm 9339d09510ad3aa5fdb69313aaef953f1624c1c44423f1deef6382614da95ec7 aarch64 kernel-devel-4.18.0-553.125.1.el8_10.aarch64.rpm 958aceae2279ea9290ab9ae2f613cace76ed3a79531f44f90aabad98f4db0f77 aarch64 python3-perf-4.18.0-553.125.1.el8_10.aarch64.rpm 99c9cc32e500136df561eec6f1948c5bb511872f8121c8045b555fb8c2518328 aarch64 kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.aarch64.rpm 9a16ebff023c5d1e41b7f9efcce5f64886948cb9436ff476e21390069605d73c aarch64 kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.aarch64.rpm 9be95e9a900de7de591b76229a76ec6dff4b53ad961e3eb4840be4b5f635db09 aarch64 kernel-4.18.0-553.125.1.el8_10.aarch64.rpm a58a81640b0eb23d5ccb6674cfa13d9ea464e0ed7ad94efcbf8090e704da87b0 aarch64 kernel-cross-headers-4.18.0-553.125.1.el8_10.aarch64.rpm bafa56b0d923aefd229780a0d5e98095f02d14c98fd82ec28177b4713cab6b88 aarch64 bpftool-4.18.0-553.125.1.el8_10.aarch64.rpm f3a543edb58b03e2b79c06dff5be938e7ca03d47dab8a1ff5eceeb70120b9b6c aarch64 kernel-tools-4.18.0-553.125.1.el8_10.aarch64.rpm fb0c37019dacd357a4561c4ffc187e9de18d0925b4d405ec76bc8bfa4cc71ea5 noarch kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch.rpm 4309a362ec235450e4161707c384c1d43cb31e0165a1bc4d3788161d7ef35854 noarch kernel-doc-4.18.0-553.125.1.el8_10.noarch.rpm ebfe34ce989cb67998f0f1fbb978f9b8afc6fe2a91bdd3fb2a0456a8e0442690 ppc64le kernel-modules-4.18.0-553.125.1.el8_10.ppc64le.rpm 123d4a3ef4ff49a63072f423d33da2f81d32199c80113398d707f8293f457029 ppc64le kernel-cross-headers-4.18.0-553.125.1.el8_10.ppc64le.rpm 1460d839d94734a782a096857b4ab32d2f0c19dca7d6e6bbe624e61dd665fa03 ppc64le kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.ppc64le.rpm 39e8193f2ba08c19889841b85d7cdd8c1690d3ce942b22f83a58058331e4b63d ppc64le kernel-modules-extra-4.18.0-553.125.1.el8_10.ppc64le.rpm 49a8a6c52c966a4caa22da231cb67d6f85fac18f978c492fdda19aa17cb62a24 ppc64le kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.ppc64le.rpm 4b6412d23b03355840bdbdccbfed39d7840fb4267d88f2829703ce61b9e9f804 ppc64le perf-4.18.0-553.125.1.el8_10.ppc64le.rpm 52ed1c5e6b0d49a2c4b4a76fca221e24425c4c7eee28d0650686fe03026338ea ppc64le kernel-tools-4.18.0-553.125.1.el8_10.ppc64le.rpm 53b8b97676237cbe9fbc8427eb68142fa05e707f579fef3163965e16153b1e23 ppc64le kernel-debug-core-4.18.0-553.125.1.el8_10.ppc64le.rpm 53cf6bd8d60a1cd94a448410906ead508e947ca34f74ea489df0a5cf06cc409e ppc64le kernel-debug-modules-4.18.0-553.125.1.el8_10.ppc64le.rpm 7169ef4c231e751add5dde6715fce89563f1de045bb2007f3623a02bb9e44cba ppc64le kernel-debug-4.18.0-553.125.1.el8_10.ppc64le.rpm 8632973b653f87317444bb2ccb5a64449786d2d8e07d51a6afd51e8d27c6e499 ppc64le kernel-tools-libs-4.18.0-553.125.1.el8_10.ppc64le.rpm 9cb49299b2be222ec533fe956bfdcc1cda9dfcbfe2a1e05b5bbac6754c60e603 ppc64le kernel-devel-4.18.0-553.125.1.el8_10.ppc64le.rpm 9fe49a5d659c0b97d0d72d591c32868dfec54e95126a52981f8255d90ad84a87 ppc64le kernel-core-4.18.0-553.125.1.el8_10.ppc64le.rpm cbf0653cbca391af9753b30f61627d4cb426c76ffb555fc04df39e42375a8e2d ppc64le kernel-4.18.0-553.125.1.el8_10.ppc64le.rpm dae4521b320fb41958c231bb76bca0d71855fc31e1c674d5fb8f4114871d989b ppc64le python3-perf-4.18.0-553.125.1.el8_10.ppc64le.rpm e8c14bbbe1b779a8ffe07debb90b13539b30d7567e3e411a44de68781c9557e8 ppc64le kernel-headers-4.18.0-553.125.1.el8_10.ppc64le.rpm e9064d9eaea263d7ca9b4c261519edae751e837e52bb3246b8056e7dde7f223e ppc64le kernel-debug-devel-4.18.0-553.125.1.el8_10.ppc64le.rpm e986be71819d5dcf9b8c43fda9e889194bd25640e960a4b22fe15e50187af68b ppc64le bpftool-4.18.0-553.125.1.el8_10.ppc64le.rpm eaef890891ad51c081a541ff23c896a5dfbd23dcc9042ecdac61582b4bd476e2 s390x kernel-4.18.0-553.125.1.el8_10.s390x.rpm 055d2d4544f6c4c737660a544ce5d05df6e778f2648c166a230a84e2e9579f04 s390x kernel-zfcpdump-4.18.0-553.125.1.el8_10.s390x.rpm 154dd04d15474dcb91563ae63b933dd48db916980659268668c6137113321da9 s390x perf-4.18.0-553.125.1.el8_10.s390x.rpm 1d0fb1dd786a50280baae504bc800ce7623bf5ffe3fd720a418a1f10634bf5e2 s390x kernel-cross-headers-4.18.0-553.125.1.el8_10.s390x.rpm 218b6dc0b1b5825fe921fbf3dd26418e94a3c73e056ab4cb355bd265dd35064b s390x kernel-modules-4.18.0-553.125.1.el8_10.s390x.rpm 291d048bd187b64d15b5e4754b9a5d3b62565aee0b1db1ddb9609aebfe286534 s390x bpftool-4.18.0-553.125.1.el8_10.s390x.rpm 3de57106afee67e5b440bdbdc66e06654ce37853ce005f1e2e205bc8314bc3b4 s390x kernel-zfcpdump-core-4.18.0-553.125.1.el8_10.s390x.rpm 3e3d38dc176f5d66458d05c19a01099715d30389392c8b1ca8637c5badc6b3c0 s390x kernel-zfcpdump-devel-4.18.0-553.125.1.el8_10.s390x.rpm 40637bd2c155f39db7f8d9494b93fa98baac25e66b4b2779d3aa48457086877d s390x kernel-headers-4.18.0-553.125.1.el8_10.s390x.rpm 4332d822e682d0aaa4705d8c7e6262da95e38d41631704651adf0faad8cf060e s390x python3-perf-4.18.0-553.125.1.el8_10.s390x.rpm 562c75957997634a8ee2648819809cac6432cb85a7af13900b6f26ddb4f92f74 s390x kernel-debug-4.18.0-553.125.1.el8_10.s390x.rpm 61d09b157ea20cdd6bbc394bc77db8e86754628587e084ef865eb29b1c96c4eb s390x kernel-debug-core-4.18.0-553.125.1.el8_10.s390x.rpm 673133dbd11c6d2ed6d5ac282959b7c9121c75d92eb4e2638c541d38958029c7 s390x kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.s390x.rpm 6c12d6411cab65fe414c47d0dcc97be8e6b8ece56ccbdfd9e816a44638d520eb s390x kernel-debug-modules-4.18.0-553.125.1.el8_10.s390x.rpm 99da597ebba0cffad9f1c7563860065be4a1e33b944579b6443077042b5b380b s390x kernel-modules-extra-4.18.0-553.125.1.el8_10.s390x.rpm aa7b72950c031b2f40e44c0461781ed2c5130d1020a4548717e649ab5d5a942d s390x kernel-zfcpdump-modules-4.18.0-553.125.1.el8_10.s390x.rpm b06f1988457099ef9308729e721db56c18a812095f1712eea4b2f4481e62dbe3 s390x kernel-devel-4.18.0-553.125.1.el8_10.s390x.rpm ba9535036202e01a0afbddef9027f4f0aaa00482c45fc125816a7eb3bb4d832d s390x kernel-debug-devel-4.18.0-553.125.1.el8_10.s390x.rpm bda4f0cdc1b616f3e57d737eb3dd622285d08494a415acbd7c07f19b0641376c s390x kernel-tools-4.18.0-553.125.1.el8_10.s390x.rpm c97f834a7b2ab40a74f473718a374728d51c8339e6985d60280c5d7e844175a2 s390x kernel-zfcpdump-modules-extra-4.18.0-553.125.1.el8_10.s390x.rpm eef602e38c946929158bb4c3fee632662a98b0c347d09d2a6a1dfa5ebceb85e2 s390x kernel-core-4.18.0-553.125.1.el8_10.s390x.rpm f87daa070b41187c8d7bf7529d2805687705c55d4d5e8f592e356722dbe71c2a x86_64 kernel-headers-4.18.0-553.125.1.el8_10.x86_64.rpm 0a5f76dd6328be1028c356064d98a70034f3c322cfe46d803063e01a39e31c48

Sıkça Sorulan Sorular

What is 'Fragnesia' (CVE-2026-46300)?
It is a variant of the Dirty Frag vulnerability family — the page-cache tampering class behind the CopyFail/Dirty Frag disclosures — found this time in the kernel's ESP/XFRM (IPsec encryption) handling. It is an out-of-bounds write (CWE-787) fixed alongside CVE-2026-46333 in the AlmaLinux 8 kernel update ALSA-2026:19666 (aggregate CVSS 7.8).
How is this related to the earlier Dirty Frag and CopyFail advisories?
Same research lineage: Dirty Frag (CVE-2026-43284) and CopyFail (CVE-2026-31431) established the page-cache tampering technique, and Fragnesia applies it to IPsec state. Distribution kernel updates like this one close the whole family on AlmaLinux 8.
How do I apply the fix?
Run dnf update kernel kernel-modules kernel-modules-extra and reboot into 4.18.0-553.125.1.el8_10 (verify with uname -r). KernelCare users: kcarectl --update and confirm coverage for both CVEs.
Is the Fragnesia flaw exploitable remotely?
The ESP/XFRM path processes encrypted networking state, but exploitation follows the family pattern: local access combined with network-state manipulation. Treat local privilege escalation as the impact model and patch the kernel on all multi-tenant servers.

Sisteminizi güvenlik açıkları açısından kontrol edin

Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.

Sisteminizi Kontrol Edin