ALSA-2026:71016

Dashboard / Vulnerabilities / ALSA-2026:71016

ALSA-2026:71016

Summary: Important: kernel-rt security, bug fix, and enhancement update

Details: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370) * kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831) * kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564) * kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CVE-2026-72261) * kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844) * kernel: net: tun: bound receive headroom (CVE-2026-81000) * kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846) Bug Fix(es) and Enhancement(s): * sctp: prevent peer transport count overflow [almalinux-8.10.z] (JIRA:AlmaLinux-216297) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://access.redhat.com/errata/RHSA-2026:71016, https://access.redhat.com/security/cve/CVE-2026-43370, https://access.redhat.com/security/cve/CVE-2026-63831, https://access.redhat.com/security/cve/CVE-2026-64564, https://access.redhat.com/security/cve/CVE-2026-72261, https://access.redhat.com/security/cve/CVE-2026-80844, https://access.redhat.com/security/cve/CVE-2026-81000, https://access.redhat.com/security/cve/CVE-2026-89846, https://bugzilla.redhat.com/2468244, https://bugzilla.redhat.com/2502243, https://bugzilla.redhat.com/2510890, https://bugzilla.redhat.com/2516527, https://bugzilla.redhat.com/2528676, https://bugzilla.redhat.com/2532176, https://bugzilla.redhat.com/2535391, https://errata.almalinux.org/8/ALSA-2026-71016.html