Release kernel-5.14.0-687.55.1.el9_8 ALSA-2026:76739
Chưa có ai nhận issue này.
Đánh giá
- Độ khó
- 5/5
- Thời gian dự kiến
- Hơn một tuần
- Mức phù hợp với người mới
- 5/100
- Loại issue
- Lỗi
- Độ rõ ràng
- Cần làm rõ
- Mức độ hoạt động
- Sôi nổi
- Công nghệ
- linux
- Lĩnh vực
- operating-systems
Hướng nghiên cứu
This is an automated AlmaLinux kernel release tracker listing CVE fixes and bug fixes, with no specific file, test or entry point named. It is not a single change a newcomer can make. Done would mean the listed CVEs and bugs are verified fixed in the released packages, which needs maintainer-level kernel knowledge.
Do mô hình lập chỉ mục viết ra từ nội dung của issue.
Mô tả
kernel security, bug fix, and enhancement update
Severity: Important
Description
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (CVE-2025-40149)
- kernel: ipv6: add NULL checks for idev in SRv6 paths (CVE-2026-23442)
- kernel: thermal: core: Fix thermal zone device registration error path (CVE-2026-43332)
- kernel: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CVE-2026-46076)
- kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)
- kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CVE-2026-46275)
- kernel: KVM: arm64: Reassign nested_mmus array behind mmu_lock (CVE-2026-46317)
- kernel: netfilter: nf_log: validate MAC header was set before dumping it (CVE-2026-52942)
- kernel: gfs2: add some missing log locking (CVE-2026-53049)
- kernel: netfilter: nf_conntrack_sip: don't use simple_strtoul (CVE-2026-52986)
- kernel: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CVE-2026-53357)
- kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
- kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)
- kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)
- kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)
- kernel: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (CVE-2026-63993)
- kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984)
- kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
- kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
- kernel: Kernel SMB client: Double-free vulnerability allows remote denial of service or privilege escalation (CVE-2026-64385)
- kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CVE-2026-64557)
- kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
- kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
- kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099)
- kernel: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CVE-2026-72289)
- kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
- kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
- kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)
- kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
- kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
- kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792)
- kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
- kernel: nvme-tcp: reject a read that transferred too few bytes (CVE-2026-89480)
- kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
- kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
- kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
- kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)
- kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CVE-2026-93288)
Bug Fix(es) and Enhancement(s):
- [AlmaLinux-9.8] kernel BUG at lib/list_debug.c:23! observed with liburing buf-ring-upgrade.t [almalinux-9.8.z] (JIRA:AlmaLinux-254192)
- hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info [almalinux-9.8.z] (JIRA:AlmaLinux-262029)
- AlmaLinux9.4 - kernel: CPU hotplug unsupported by CPUMF [almalinux-9.8.z] (JIRA:AlmaLinux-270892)
- Accel-DSA: dmaengine: idxd: kernel oops on unbind [almalinux-9.8.z] (JIRA:AlmaLinux-274410)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
kernel-5.14.0-687.55.1.el9_8.x86_64
kernel-abi-stablelists-5.14.0-687.55.1.el9_8.noarch
kernel-core-5.14.0-687.55.1.el9_8.x86_64
kernel-debug-5.14.0-687.55.1.el9_8.x86_64
kernel-debug-core-5.14.0-687.55.1.el9_8.x86_64
kernel-debug-devel-5.14.0-687.55.1.el9_8.x86_64
kernel-debug-devel-matched-5.14.0-687.55.1.el9_8.x86_64
kernel-debug-modules-5.14.0-687.55.1.el9_8.x86_64
kernel-debug-modules-core-5.14.0-687.55.1.el9_8.x86_64
kernel-debug-modules-extra-5.14.0-687.55.1.el9_8.x86_64
kernel-debug-uki-virt-5.14.0-687.55.1.el9_8.x86_64
kernel-devel-5.14.0-687.55.1.el9_8.x86_64
kernel-devel-matched-5.14.0-687.55.1.el9_8.x86_64
kernel-doc-5.14.0-687.55.1.el9_8.noarch
kernel-headers-5.14.0-687.55.1.el9_8.x86_64
kernel-modules-5.14.0-687.55.1.el9_8.x86_64
kernel-modules-core-5.14.0-687.55.1.el9_8.x86_64
kernel-modules-extra-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-core-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-core-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-debug-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-debug-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-debug-core-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-debug-core-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-debug-devel-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-debug-devel-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-debug-modules-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-debug-modules-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-debug-modules-core-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-debug-modules-core-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-debug-modules-extra-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-debug-modules-extra-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-devel-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-devel-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-modules-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-modules-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-modules-core-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-modules-core-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-modules-extra-5.14.0-687.55.1.el9_8.x86_64
kernel-rt-modules-extra-5.14.0-687.55.1.el9_8.x86_64
kernel-tools-5.14.0-687.55.1.el9_8.x86_64
kernel-tools-libs-5.14.0-687.55.1.el9_8.x86_64
kernel-uki-virt-5.14.0-687.55.1.el9_8.x86_64
kernel-uki-virt-addons-5.14.0-687.55.1.el9_8.x86_64
perf-5.14.0-687.55.1.el9_8.x86_64
python3-perf-5.14.0-687.55.1.el9_8.x86_64
rtla-5.14.0-687.55.1.el9_8.x86_64
rv-5.14.0-687.55.1.el9_8.x86_64
kernel-5.14.0-687.55.1.el9_8.s390x
kernel-abi-stablelists-5.14.0-687.55.1.el9_8.noarch
kernel-core-5.14.0-687.55.1.el9_8.s390x
kernel-debug-5.14.0-687.55.1.el9_8.s390x
kernel-debug-core-5.14.0-687.55.1.el9_8.s390x
kernel-debug-devel-5.14.0-687.55.1.el9_8.s390x
kernel-debug-devel-matched-5.14.0-687.55.1.el9_8.s390x
kernel-debug-modules-5.14.0-687.55.1.el9_8.s390x
kernel-debug-modules-core-5.14.0-687.55.1.el9_8.s390x
kernel-debug-modules-extra-5.14.0-687.55.1.el9_8.s390x
kernel-devel-5.14.0-687.55.1.el9_8.s390x
kernel-devel-matched-5.14.0-687.55.1.el9_8.s390x
kernel-doc-5.14.0-687.55.1.el9_8.noarch
kernel-headers-5.14.0-687.55.1.el9_8.s390x
kernel-modules-5.14.0-687.55.1.el9_8.s390x
kernel-modules-core-5.14.0-687.55.1.el9_8.s390x
kernel-modules-extra-5.14.0-687.55.1.el9_8.s390x
kernel-tools-5.14.0-687.55.1.el9_8.s390x
kernel-zfcpdump-5.14.0-687.55.1.el9_8.s390x
kernel-zfcpdump-core-5.14.0-687.55.1.el9_8.s390x
kernel-zfcpdump-devel-5.14.0-687.55.1.el9_8.s390x
kernel-zfcpdump-devel-matched-5.14.0-687.55.1.el9_8.s390x
kernel-zfcpdump-modules-5.14.0-687.55.1.el9_8.s390x
kernel-zfcpdump-modules-core-5.14.0-687.55.1.el9_8.s390x
kernel-zfcpdump-modules-extra-5.14.0-687.55.1.el9_8.s390x
perf-5.14.0-687.55.1.el9_8.s390x
python3-perf-5.14.0-687.55.1.el9_8.s390x
rtla-5.14.0-687.55.1.el9_8.s390x
rv-5.14.0-687.55.1.el9_8.s390x
kernel-5.14.0-687.55.1.el9_8.ppc64le
kernel-abi-stablelists-5.14.0-687.55.1.el9_8.noarch
kernel-core-5.14.0-687.55.1.el9_8.ppc64le
kernel-debug-5.14.0-687.55.1.el9_8.ppc64le
kernel-debug-core-5.14.0-687.55.1.el9_8.ppc64le
kernel-debug-devel-5.14.0-687.55.1.el9_8.ppc64le
kernel-debug-devel-matched-5.14.0-687.55.1.el9_8.ppc64le
kernel-debug-modules-5.14.0-687.55.1.el9_8.ppc64le
kernel-debug-modules-core-5.14.0-687.55.1.el9_8.ppc64le
kernel-debug-modules-extra-5.14.0-687.55.1.el9_8.ppc64le
kernel-devel-5.14.0-687.55.1.el9_8.ppc64le
kernel-devel-matched-5.14.0-687.55.1.el9_8.ppc64le
kernel-doc-5.14.0-687.55.1.el9_8.noarch
kernel-headers-5.14.0-687.55.1.el9_8.ppc64le
kernel-modules-5.14.0-687.55.1.el9_8.ppc64le
kernel-modules-core-5.14.0-687.55.1.el9_8.ppc64le
kernel-modules-extra-5.14.0-687.55.1.el9_8.ppc64le
kernel-tools-5.14.0-687.55.1.el9_8.ppc64le
kernel-tools-libs-5.14.0-687.55.1.el9_8.ppc64le
perf-5.14.0-687.55.1.el9_8.ppc64le
python3-perf-5.14.0-687.55.1.el9_8.ppc64le
rtla-5.14.0-687.55.1.el9_8.ppc64le
rv-5.14.0-687.55.1.el9_8.ppc64le
kernel-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-core-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-debug-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-debug-core-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-debug-devel-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-debug-devel-matched-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-debug-modules-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-debug-modules-core-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-debug-modules-extra-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-devel-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-devel-matched-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-modules-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-modules-core-5.14.0-687.55.1.el9_8.aarch64
kernel-64k-modules-extra-5.14.0-687.55.1.el9_8.aarch64
kernel-abi-stablelists-5.14.0-687.55.1.el9_8.noarch
kernel-core-5.14.0-687.55.1.el9_8.aarch64
kernel-debug-5.14.0-687.55.1.el9_8.aarch64
kernel-debug-core-5.14.0-687.55.1.el9_8.aarch64
kernel-debug-devel-5.14.0-687.55.1.el9_8.aarch64
kernel-debug-devel-matched-5.14.0-687.55.1.el9_8.aarch64
kernel-debug-modules-5.14.0-687.55.1.el9_8.aarch64
kernel-debug-modules-core-5.14.0-687.55.1.el9_8.aarch64
kernel-debug-modules-extra-5.14.0-687.55.1.el9_8.aarch64
kernel-devel-5.14.0-687.55.1.el9_8.aarch64
kernel-devel-matched-5.14.0-687.55.1.el9_8.aarch64
kernel-doc-5.14.0-687.55.1.el9_8.noarch
kernel-headers-5.14.0-687.55.1.el9_8.aarch64
kernel-modules-5.14.0-687.55.1.el9_8.aarch64
kernel-modules-core-5.14.0-687.55.1.el9_8.aarch64
kernel-modules-extra-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-64k-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-64k-core-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-64k-debug-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-64k-debug-core-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-64k-debug-devel-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-64k-debug-modules-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-64k-debug-modules-core-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-64k-debug-modules-extra-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-64k-devel-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-64k-modules-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-64k-modules-core-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-64k-modules-extra-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-core-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-debug-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-debug-core-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-debug-devel-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-debug-modules-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-debug-modules-core-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-debug-modules-extra-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-devel-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-modules-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-modules-core-5.14.0-687.55.1.el9_8.aarch64
kernel-rt-modules-extra-5.14.0-687.55.1.el9_8.aarch64
kernel-tools-5.14.0-687.55.1.el9_8.aarch64
kernel-tools-libs-5.14.0-687.55.1.el9_8.aarch64
perf-5.14.0-687.55.1.el9_8.aarch64
python3-perf-5.14.0-687.55.1.el9_8.aarch64
rtla-5.14.0-687.55.1.el9_8.aarch64
rv-5.14.0-687.55.1.el9_8.aarch64
kernel-cross-headers-5.14.0-687.55.1.el9_8.x86_64
kernel-tools-libs-devel-5.14.0-687.55.1.el9_8.x86_64
libperf-5.14.0-687.55.1.el9_8.x86_64
kernel-cross-headers-5.14.0-687.55.1.el9_8.ppc64le
kernel-tools-libs-devel-5.14.0-687.55.1.el9_8.ppc64le
libperf-5.14.0-687.55.1.el9_8.ppc64le
kernel-cross-headers-5.14.0-687.55.1.el9_8.aarch64
kernel-tools-libs-devel-5.14.0-687.55.1.el9_8.aarch64
libperf-5.14.0-687.55.1.el9_8.aarch64
kernel-cross-headers-5.14.0-687.55.1.el9_8.s390x
libperf-5.14.0-687.55.1.el9_8.s390x
- Ngôn ngữ chính
- Không có dữ liệu ngôn ngữ
- Star
- 2
- Fork
- 0
- Chỉ số merge pull request
- Không có pull request nào được merge trong 30 ngày
Chuẩn bị môi trường
- Không có Dockerfile hay tệp Docker Compose
- Không có mẫu pull request
- Đọc hướng dẫn đóng góp
Bắt đầu từ đâu
- Đọc hết issue, rồi đọc hướng dẫn đóng góp của dự án.
- Bình luận trên issue rằng bạn sẽ nhận — tránh hai người làm cùng một việc.
- Fork repository và làm thay đổi trên một nhánh.
- Mở pull request có tham chiếu số hiệu của issue.
Issue khác của AlmaLinux/updates
-
Độ khó 1/5 Dưới một giờ Mức phù hợp với người mới 85/100
-
Độ khó 1/5 Dưới một giờ Mức phù hợp với người mới 60/100
-
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 62/100
-
Độ khó 4/5 3-5 ngày Mức phù hợp với người mới 35/100
-
Độ khó 5/5 Hơn một tuần Mức phù hợp với người mới 20/100
Tất cả issue của AlmaLinux/updates
Issue tương tự
-
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 68/100
shenmintao/aic8800d80#107 · 1 bình luận ·
-
bug
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 82/100
bradcypert/plum#240 ·
Maintainer thường phản hồi trong vòng 1 ngày
-
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 65/100
Maintainer thường phản hồi trong vòng 1 ngày
-
Add KestrelĐang mở
Độ khó 1/5 Dưới một giờ Mức phù hợp với người mới 72/100
jubalh/awesome-os#135 ·
-
[Bug]hl_get_ustring() dereferences a NULL code->ustrings when the string table is empty (CWE-476)Đang mở
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 73/100
HaxeFoundation/hashlink#997 ·
Maintainer thường phản hồi trong vòng 1 ngày