ALSA-2026:95212

Dashboard / Vulnerabilities / ALSA-2026:95212

ALSA-2026:95212

Summary: Important: kernel security, bug fix, and enhancement update

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929) * kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (CVE-2026-64541) * kernel: sctp: clear new_transport when removing a peer (CVE-2026-74586) * kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (CVE-2026-80864) * kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (CVE-2026-80863) * kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488) Bug Fix(es) and Enhancement(s): * AlmaLinux8.10 - s390/smp: Remove conditional emergency signal usage (JIRA:RHEL-298849) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://access.redhat.com/errata/RHSA-2026:95212, https://access.redhat.com/security/cve/CVE-2026-52929, https://access.redhat.com/security/cve/CVE-2026-64541, https://access.redhat.com/security/cve/CVE-2026-74586, https://access.redhat.com/security/cve/CVE-2026-80863, https://access.redhat.com/security/cve/CVE-2026-80864, https://access.redhat.com/security/cve/CVE-2026-89488, https://bugzilla.redhat.com/2492108, https://bugzilla.redhat.com/2507721, https://bugzilla.redhat.com/2521419, https://bugzilla.redhat.com/2528646, https://bugzilla.redhat.com/2528665, https://bugzilla.redhat.com/2532407, https://errata.almalinux.org/8/ALSA-2026-95212.html