ALSA-2026:92209

Dashboard / Vulnerabilities / ALSA-2026:92209

ALSA-2026:92209

Summary: Important: kernel security, bug fix, and enhancement update

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288) * kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289) * kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011) * kernel: KEYS: encrypted: fix integer overflow of datablob_len (CVE-2026-98222) Bug Fix(es) and Enhancement(s): * ipv4: ip_gre: make ipgre_header() robust (rhel-8.10.z) (JIRA:RHEL-271135) * ip6_gre: make ip6gre_header() robust (rhel-8.10.z) (JIRA:RHEL-271136) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://access.redhat.com/errata/RHSA-2026:92209, https://access.redhat.com/security/cve/CVE-2026-72288, https://access.redhat.com/security/cve/CVE-2026-72289, https://access.redhat.com/security/cve/CVE-2026-90011, https://access.redhat.com/security/cve/CVE-2026-98222, https://bugzilla.redhat.com/2516526, https://bugzilla.redhat.com/2516657, https://bugzilla.redhat.com/2535227, https://bugzilla.redhat.com/2546385, https://errata.almalinux.org/8/ALSA-2026-92209.html