ALSA-2026:95100

Dashboard / Vulnerabilities / ALSA-2026:95100

ALSA-2026:95100

Summary: Important: kernel-rt security, bug fix, and enhancement update

Details: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929) * kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (CVE-2026-64541) * kernel: sctp: clear new_transport when removing a peer (CVE-2026-74586) * kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (CVE-2026-80864) * kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (CVE-2026-80863) * kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488) Bug Fix(es) and Enhancement(s): * AlmaLinux8.10 - s390/smp: Remove conditional emergency signal usage (JIRA:RHEL-298849) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://access.redhat.com/errata/RHSA-2026:95100, https://access.redhat.com/security/cve/CVE-2026-52929, https://access.redhat.com/security/cve/CVE-2026-64541, https://access.redhat.com/security/cve/CVE-2026-74586, https://access.redhat.com/security/cve/CVE-2026-80863, https://access.redhat.com/security/cve/CVE-2026-80864, https://access.redhat.com/security/cve/CVE-2026-89488, https://bugzilla.redhat.com/2492108, https://bugzilla.redhat.com/2507721, https://bugzilla.redhat.com/2521419, https://bugzilla.redhat.com/2528646, https://bugzilla.redhat.com/2528665, https://bugzilla.redhat.com/2532407, https://errata.almalinux.org/8/ALSA-2026-95100.html