ALSA-2026:63013
See a problem?- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:63013.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ALSA-2026:63013
- Related
- Published
- 2026-09-03T00:00:00Z
- Modified
- 2026-09-03T10:56:53Z
- Summary
- Important: kernel-rt security, bug fix, and enhancement update
- Details
-
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
- kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling (CVE-2024-57849)
- kernel: smc91x: fix broken irq-context in PREEMPT_RT (CVE-2025-71132)
- kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
- kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)
- kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)
- kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)
- kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)
- kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)
- kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)
- kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)
- kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)
- kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)
- kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)
- kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)
Bug Fix(es) and Enhancement(s):
- qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-8.10.z] (JIRA:AlmaLinux-193045)
- powerpc/pseries: lparcfg - fix kbuf[] underflow (JIRA:AlmaLinux-240144)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2026:63013
- https://access.redhat.com/security/cve/CVE-2024-57849
- https://access.redhat.com/security/cve/CVE-2025-71132
- https://access.redhat.com/security/cve/CVE-2026-45970
- https://access.redhat.com/security/cve/CVE-2026-53185
- https://access.redhat.com/security/cve/CVE-2026-53391
- https://access.redhat.com/security/cve/CVE-2026-53392
- https://access.redhat.com/security/cve/CVE-2026-53397
- https://access.redhat.com/security/cve/CVE-2026-53399
- https://access.redhat.com/security/cve/CVE-2026-63800
- https://access.redhat.com/security/cve/CVE-2026-64018
- https://access.redhat.com/security/cve/CVE-2026-64268
- https://access.redhat.com/security/cve/CVE-2026-64298
- https://access.redhat.com/security/cve/CVE-2026-68480
- https://access.redhat.com/security/cve/CVE-2026-74581
- https://bugzilla.redhat.com/2337144
- https://bugzilla.redhat.com/2429603
- https://bugzilla.redhat.com/2482006
- https://bugzilla.redhat.com/2492735
- https://bugzilla.redhat.com/2502219
- https://bugzilla.redhat.com/2502227
- https://bugzilla.redhat.com/2502239
- https://bugzilla.redhat.com/2502240
- https://bugzilla.redhat.com/2502260
- https://bugzilla.redhat.com/2502421
- https://bugzilla.redhat.com/2507089
- https://bugzilla.redhat.com/2507208
- https://bugzilla.redhat.com/2508363
- https://bugzilla.redhat.com/2520980
- https://errata.almalinux.org/8/ALSA-2026-63013.html