Güvenlik Danışarlıklarına Dön

Kernel Security Update — AlmaLinux 8 (ALSA-2026:93414)

ALSA-2026:93414 is a Critical-rated AlmaLinux 8 kernel update (kernel 4.18.0-553.182.1.el8_10, CVSS 9.8) fixing CVE-2026-98432 — the IPv4 option structure (inet_opt/ireq_opt) must be freed only after an RCU grace period, a use-after-free class flaw in the TCP handshake path. Update and reboot: dnf update kernel, then restart into 4.18.0-553.182.1.el8_10.

Critical 9.8 CVSS
AlmaLinux 8

SharedLicense lisansı altında bunun anlamı

A use-after-free in the TCP connection-establishment path is reachable remotely through crafted connection attempts — the highest-class kernel exposure, since every internet-facing server accepts TCP connections by definition.

aarch64 kernel-tools-libs-devel-4.18.0-553.182.1.el8_10.aarch64.rpm 0ab9e5c46a9bdeba0edfc050a48a639d7633ffcbd9ac8384b678c8a695adbdef aarch64 bpftool-4.18.0-553.182.1.el8_10.aarch64.rpm 162a7422d7083adcebd40192970dd3e012fdeb45487aa82bf521ebe6f5e42bb4 aarch64 kernel-debug-devel-4.18.0-553.182.1.el8_10.aarch64.rpm 2a5a41d7f710628d9da7d03f9e890bd4e5aeac8b1943a35f3d183ab362a1c335 aarch64 kernel-tools-libs-4.18.0-553.182.1.el8_10.aarch64.rpm 2dfa694018a3bfeb2cfaba93ee8934c91827eb5dffc004b91367d4c5dc7cbcc2 aarch64 kernel-modules-extra-4.18.0-553.182.1.el8_10.aarch64.rpm 38f30d30b979d51d055aeec21a107c09e964c6bd5867268d55659165ef882cb3 aarch64 kernel-core-4.18.0-553.182.1.el8_10.aarch64.rpm 66a950fdbea17c41fcaab7e2dbb6497e55f2018146f7e43e20514ad8005631a2 aarch64 kernel-debug-modules-4.18.0-553.182.1.el8_10.aarch64.rpm 6a38d14392f2327d7ababdd37080b29fdeef624b5803d753b2eb0bfe6bfb6e39 aarch64 kernel-debug-core-4.18.0-553.182.1.el8_10.aarch64.rpm 9a7425fc83320aac3e84614cd057ef62d205a8aa41054b025e084a8a70b4c0df aarch64 python3-perf-4.18.0-553.182.1.el8_10.aarch64.rpm a99feda878ea990cde8000ff1c3f0bdf6d3f7416c78659d28960c35e8338a578 aarch64 kernel-debug-4.18.0-553.182.1.el8_10.aarch64.rpm bd946cd8b927941b30686661930c3b68993d53d0cd30401cf84e7c01ef3bd3f5 aarch64 kernel-tools-4.18.0-553.182.1.el8_10.aarch64.rpm d5ed94eb56c3feba2a8d973bd6ba51cab8ca07f104aabf4e15e3436c6d2bb3c0 aarch64 kernel-devel-4.18.0-553.182.1.el8_10.aarch64.rpm d9ac945ae0b668dd67a631aed02e8a1376af12c1f1ddc87efe9f5ad475b67de2 aarch64 kernel-4.18.0-553.182.1.el8_10.aarch64.rpm de5acf118a92ca98ddc063e48cc5fc84ceaf0df2f7d294abb86c7aae59f90403 aarch64 kernel-debug-modules-extra-4.18.0-553.182.1.el8_10.aarch64.rpm e88a141bb82c99115416313f06105dbf186be0ee2e12599d7c6c07cc26065e0a aarch64 perf-4.18.0-553.182.1.el8_10.aarch64.rpm ee9e0605a4390feb11db09b75e0f145ff06b858ca46e30f4d81ed4a0b03a2937 aarch64 kernel-modules-4.18.0-553.182.1.el8_10.aarch64.rpm f47dc5daa4e8934ca64a9e46dbe7d741a5b971aa56152559c128f8634dc78c48 aarch64 kernel-cross-headers-4.18.0-553.182.1.el8_10.aarch64.rpm f49d09ca023225dd69c388dfb7780f16f8e4079de56c9b0ed53338c040453499 aarch64 kernel-headers-4.18.0-553.182.1.el8_10.aarch64.rpm fcc832107c63a84f092c4843d4182c63fd60499891d59e1cecc269569b2df418 noarch kernel-abi-stablelists-4.18.0-553.182.1.el8_10.noarch.rpm 644099c5517785fbff6834ca69a50d0c02fbb465ebf24624d06141217ef8a2f6 noarch kernel-doc-4.18.0-553.182.1.el8_10.noarch.rpm e6629faea53bbc65580a5c299243755113af132f01b381eebe05d0400cb3543c ppc64le kernel-4.18.0-553.182.1.el8_10.ppc64le.rpm 0ab10b5348d18c845fe46165077ec927f17bf0827c391d2d6e5797914a0c2da0 ppc64le kernel-debug-modules-extra-4.18.0-553.182.1.el8_10.ppc64le.rpm 1035d555087d8474e10b207c6432ab7d56288f4520ed05dca6006dffef997676 ppc64le python3-perf-4.18.0-553.182.1.el8_10.ppc64le.rpm 1814540cd362a02d3bba0540d1ab52c7db129a8f524741614c367864e1cc11c6 ppc64le kernel-debug-devel-4.18.0-553.182.1.el8_10.ppc64le.rpm 2ab8ca8e5f4e61f1dfd6192bc5a5bf2bff698aa69735881ea7a1af6ef0bea1e6 ppc64le kernel-tools-libs-4.18.0-553.182.1.el8_10.ppc64le.rpm 2bfe3a3dc7804248fef93c3d3a3201b2b78e60c052a3de9a1bcbf47f1d1664fe ppc64le kernel-tools-libs-devel-4.18.0-553.182.1.el8_10.ppc64le.rpm 2f2bd48c50d0d5074629ccd28eaec821207a8cd7d7c3c520c345f5bc380e91c9 ppc64le kernel-debug-4.18.0-553.182.1.el8_10.ppc64le.rpm 31de9a11d147e0532a80c583745318635d9650df68c9fae8a703dc5d9cf3b2ec ppc64le kernel-tools-4.18.0-553.182.1.el8_10.ppc64le.rpm 4407a426233d0302fd53c528fd945a9c9eb48015ffbcf352653b27489734e34d ppc64le perf-4.18.0-553.182.1.el8_10.ppc64le.rpm 5be2c1445d16a378addee7acfe3b94b22b1a806a5da0f798a84dd827d4acdecb ppc64le kernel-headers-4.18.0-553.182.1.el8_10.ppc64le.rpm 72992d3701dd368514d74513c7a05a11c57d874bc9f70473cf8bd0c5cadde6e7 ppc64le kernel-core-4.18.0-553.182.1.el8_10.ppc64le.rpm 72dddd32635ec4b0cb6d80dfe50cb0c0958b2f2cdb65e7a12bec45816fb14d49 ppc64le bpftool-4.18.0-553.182.1.el8_10.ppc64le.rpm 82e3099cd3b5ab15a29ed83d3b91dce42ae9f814fd4bc3022964312a47c14934 ppc64le kernel-debug-core-4.18.0-553.182.1.el8_10.ppc64le.rpm 9bdba671d4f4a7c91cff37684a29c3ce0039ea318d4bceabacdd190bbb71df49 ppc64le kernel-modules-4.18.0-553.182.1.el8_10.ppc64le.rpm a5617a553c9ed93bf448d6489eeee89aa25a04741393ee8c543237b634cf0b7b ppc64le kernel-devel-4.18.0-553.182.1.el8_10.ppc64le.rpm a6e6acb668a500d35fa76bbe38b6bfcd2038edfebb6d1d12219b98cc12bfd2fd ppc64le kernel-debug-modules-4.18.0-553.182.1.el8_10.ppc64le.rpm aa2b3a26b8ce924dd13c29197d9d02651eb2cf70b2f4b313b075dfc613adf03e ppc64le kernel-cross-headers-4.18.0-553.182.1.el8_10.ppc64le.rpm c3395d9b16940ae737d34cc6645bc3444e89db7e056b65ec43685ed7565fa28c ppc64le kernel-modules-extra-4.18.0-553.182.1.el8_10.ppc64le.rpm ef8fe88e02675b3eb69517a0482372d290469d4cb5d70e9681e7fc19e6baabee s390x python3-perf-4.18.0-553.182.1.el8_10.s390x.rpm 04b69d6a8c4a0c9be3d5f419b451f83a67c08db13eacee8653c54721a2864fed s390x kernel-debug-modules-extra-4.18.0-553.182.1.el8_10.s390x.rpm 17627ec611e1be286a9348254a08fae431a14aa12fe20b69734d09b66bf4d780 s390x kernel-core-4.18.0-553.182.1.el8_10.s390x.rpm 221aa603192bc08ce85f2b384a92fc1f75ed1ffd0d85afaa60499b274871976b s390x kernel-debug-core-4.18.0-553.182.1.el8_10.s390x.rpm 37dcc119538246ce51b6e207f173cc893fbfa03deef1c6c3c5615eb4808c1173 s390x kernel-zfcpdump-modules-4.18.0-553.182.1.el8_10.s390x.rpm 48a461cfc187886d48b2fd34b70e322ea52efcf91e91014c7fb9687295624ffe s390x kernel-zfcpdump-devel-4.18.0-553.182.1.el8_10.s390x.rpm 500136e46115f81a91f570d4c1f8701f082376bd18f4fcac17516d5b4a6e3a97 s390x kernel-cross-headers-4.18.0-553.182.1.el8_10.s390x.rpm 5583900716853b45c1d9cd725d3cf440c510d0896b56a2d4258571e7648a2c54 s390x kernel-4.18.0-553.182.1.el8_10.s390x.rpm 6168e7b94e43eec44117add29e73b57ac0bdf8ed8da9d06ce06c9c1bae037c5a s390x kernel-modules-extra-4.18.0-553.182.1.el8_10.s390x.rpm 7be0e2915ad74e625e7b1dd1ecff4d83eab6ffe6f8b0d9bb4688c0c673dcc36f s390x kernel-debug-4.18.0-553.182.1.el8_10.s390x.rpm 8c84fa5c52bcc38a11bc42de05024aacc0c396124aba8de56e03a501f4611018 s390x kernel-zfcpdump-4.18.0-553.182.1.el8_10.s390x.rpm a71779ddcc16ffca8d82837d3a18e8389adbe38a489da8dd85e9bd14103c8b0b s390x kernel-debug-modules-4.18.0-553.182.1.el8_10.s390x.rpm a92f7e761d29743596b1d7558a71c47a6b6aa053d4d6a4aa35a106d4d83a26f6 s390x kernel-debug-devel-4.18.0-553.182.1.el8_10.s390x.rpm b2eb1af1f4680e988ff0878e388e420fa07b5fe01b35207c7915fa45049385b6 s390x kernel-zfcpdump-modules-extra-4.18.0-553.182.1.el8_10.s390x.rpm b7d231d6097fe32acb2ca6343af386ba8f4430a1125d2ef8bcca9e6dee4f195e s390x bpftool-4.18.0-553.182.1.el8_10.s390x.rpm b8b4ff065a60a3245c03700333234f3f2a15a0eac21c9b062359400704e65bed s390x kernel-tools-4.18.0-553.182.1.el8_10.s390x.rpm c430f78c6b093202c1e45e734673214f4460d03c232832476168289ef680bd2d s390x kernel-headers-4.18.0-553.182.1.el8_10.s390x.rpm cd752773579558589384039995fd1f601f701fde98ba72b01dcad37892b183d1 s390x kernel-zfcpdump-core-4.18.0-553.182.1.el8_10.s390x.rpm d02100fe858fabbe5b02a0498132030a52b2cf76ff02d154bd66d90e8e13fc5e s390x perf-4.18.0-553.182.1.el8_10.s390x.rpm e1935d694f6b35c13a87e9797594040f96acbe20787fe143eac4b6a05c222788 s390x kernel-devel-4.18.0-553.182.1.el8_10.s390x.rpm e604b65650b920bbdab4e3e372229f8e48723a790116facfa0f885988874102d s390x kernel-modules-4.18.0-553.182.1.el8_10.s390x.rpm f9f125835bc880f4be1a546ec7adde85fbc8570c2660976a2e42319232317425 x86_64 kernel-tools-libs-4.18.0-553.182.1.el8_10.x86_64.rpm 2287b42c6b264af93d21a290a7c0440cc0bd29dfa6c295cf1113ac29b0c734d3

Sıkça Sorulan Sorular

What is CVE-2026-98432?
It is a use-after-free class flaw in the Linux kernel's IPv4 handling: the inet_opt and ireq_opt option structures must be released only after an RCU grace period, and the pre-fix code freed them early — reachable through normal TCP connection establishment, hence the Critical 9.8 rating.
Who should apply ALSA-2026:93414 urgently?
Every AlmaLinux 8 server accepting network connections — which is all of them. Internet-facing servers should patch at the earliest opportunity given the remote reachability of the flaw path.
How do I apply the fix?
Run dnf update kernel kernel-modules kernel-modules-extra and reboot; verify with uname -r reporting 4.18.0-553.182.1.el8_10. KernelCare users can live-patch and confirm coverage for CVE-2026-98432.
Is this related to the other recent AlmaLinux 8 kernel errata?
It is a separate flaw from ALSA-2026:92209 and 93437 (which fixed the KVM race and ipv6/RCU batch) — AlmaLinux 8 has shipped several kernel errata in close succession, so the practical rule is: be current with the newest one, which covers all earlier fixes.

Sisteminizi güvenlik açıkları açısından kontrol edin

Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.

Sisteminizi Kontrol Edin