Release kernel-5.14.0-687.58.1.el9_8 ALSA-2026:83156

This is an automated kernel security-update tracker for AlmaLinux 9 (kernel-5.14.0-687.58.1.el9_8). The body lists about 20 CVE-tagged fixes in net/sched, wifi/mac80211, KVM arm64, ASoC SOF, netfilter, NFSD and SUNRPC, plus the per-architecture package list, but it names no file or test to change. The thread has 312 comments and no assignee, so it is a discussion and tracking thread rather than a code task for a first-time contributor.

kernel security update
Severity: Important
Description
The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
• kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011)
• kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030)
• kernel: wifi: cfg80211: use wiphy work for socket owner autodisconnect (CVE-2026-68404)
• kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377)
• kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140)
• kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)
• kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288)
• kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)
• kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320)
• kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)
• kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)
• kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985)
• kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)
• kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CVE-2026-81003)
• kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036)
• kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207)
• kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected packages:
kernel-5.14.0-687.58.1.el9_8.x86_64
kernel-abi-stablelists-5.14.0-687.58.1.el9_8.noarch
kernel-core-5.14.0-687.58.1.el9_8.x86_64
kernel-debug-5.14.0-687.58.1.el9_8.x86_64
kernel-debug-core-5.14.0-687.58.1.el9_8.x86_64
kernel-debug-devel-5.14.0-687.58.1.el9_8.x86_64
kernel-debug-devel-matched-5.14.0-687.58.1.el9_8.x86_64
kernel-debug-modules-5.14.0-687.58.1.el9_8.x86_64
kernel-debug-modules-core-5.14.0-687.58.1.el9_8.x86_64
kernel-debug-modules-extra-5.14.0-687.58.1.el9_8.x86_64
kernel-debug-uki-virt-5.14.0-687.58.1.el9_8.x86_64
kernel-devel-5.14.0-687.58.1.el9_8.x86_64
kernel-devel-matched-5.14.0-687.58.1.el9_8.x86_64
kernel-doc-5.14.0-687.58.1.el9_8.noarch
kernel-headers-5.14.0-687.58.1.el9_8.x86_64
kernel-modules-5.14.0-687.58.1.el9_8.x86_64
kernel-modules-core-5.14.0-687.58.1.el9_8.x86_64
kernel-modules-extra-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-core-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-core-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-debug-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-debug-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-debug-core-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-debug-core-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-debug-devel-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-debug-devel-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-debug-modules-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-debug-modules-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-debug-modules-core-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-debug-modules-core-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-debug-modules-extra-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-debug-modules-extra-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-devel-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-devel-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-modules-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-modules-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-modules-core-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-modules-core-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-modules-extra-5.14.0-687.58.1.el9_8.x86_64
kernel-rt-modules-extra-5.14.0-687.58.1.el9_8.x86_64
kernel-tools-5.14.0-687.58.1.el9_8.x86_64
kernel-tools-libs-5.14.0-687.58.1.el9_8.x86_64
kernel-uki-virt-5.14.0-687.58.1.el9_8.x86_64
kernel-uki-virt-addons-5.14.0-687.58.1.el9_8.x86_64
perf-5.14.0-687.58.1.el9_8.x86_64
python3-perf-5.14.0-687.58.1.el9_8.x86_64
rtla-5.14.0-687.58.1.el9_8.x86_64
rv-5.14.0-687.58.1.el9_8.x86_64
kernel-5.14.0-687.58.1.el9_8.s390x
kernel-abi-stablelists-5.14.0-687.58.1.el9_8.noarch
kernel-core-5.14.0-687.58.1.el9_8.s390x
kernel-debug-5.14.0-687.58.1.el9_8.s390x
kernel-debug-core-5.14.0-687.58.1.el9_8.s390x
kernel-debug-devel-5.14.0-687.58.1.el9_8.s390x
kernel-debug-devel-matched-5.14.0-687.58.1.el9_8.s390x
kernel-debug-modules-5.14.0-687.58.1.el9_8.s390x
kernel-debug-modules-core-5.14.0-687.58.1.el9_8.s390x
kernel-debug-modules-extra-5.14.0-687.58.1.el9_8.s390x
kernel-devel-5.14.0-687.58.1.el9_8.s390x
kernel-devel-matched-5.14.0-687.58.1.el9_8.s390x
kernel-doc-5.14.0-687.58.1.el9_8.noarch
kernel-headers-5.14.0-687.58.1.el9_8.s390x
kernel-modules-5.14.0-687.58.1.el9_8.s390x
kernel-modules-core-5.14.0-687.58.1.el9_8.s390x
kernel-modules-extra-5.14.0-687.58.1.el9_8.s390x
kernel-tools-5.14.0-687.58.1.el9_8.s390x
kernel-zfcpdump-5.14.0-687.58.1.el9_8.s390x
kernel-zfcpdump-core-5.14.0-687.58.1.el9_8.s390x
kernel-zfcpdump-devel-5.14.0-687.58.1.el9_8.s390x
kernel-zfcpdump-devel-matched-5.14.0-687.58.1.el9_8.s390x
kernel-zfcpdump-modules-5.14.0-687.58.1.el9_8.s390x
kernel-zfcpdump-modules-core-5.14.0-687.58.1.el9_8.s390x
kernel-zfcpdump-modules-extra-5.14.0-687.58.1.el9_8.s390x
perf-5.14.0-687.58.1.el9_8.s390x
python3-perf-5.14.0-687.58.1.el9_8.s390x
rtla-5.14.0-687.58.1.el9_8.s390x
rv-5.14.0-687.58.1.el9_8.s390x
kernel-5.14.0-687.58.1.el9_8.ppc64le
kernel-abi-stablelists-5.14.0-687.58.1.el9_8.noarch
kernel-core-5.14.0-687.58.1.el9_8.ppc64le
kernel-debug-5.14.0-687.58.1.el9_8.ppc64le
kernel-debug-core-5.14.0-687.58.1.el9_8.ppc64le
kernel-debug-devel-5.14.0-687.58.1.el9_8.ppc64le
kernel-debug-devel-matched-5.14.0-687.58.1.el9_8.ppc64le
kernel-debug-modules-5.14.0-687.58.1.el9_8.ppc64le
kernel-debug-modules-core-5.14.0-687.58.1.el9_8.ppc64le
kernel-debug-modules-extra-5.14.0-687.58.1.el9_8.ppc64le
kernel-devel-5.14.0-687.58.1.el9_8.ppc64le
kernel-devel-matched-5.14.0-687.58.1.el9_8.ppc64le
kernel-doc-5.14.0-687.58.1.el9_8.noarch
kernel-headers-5.14.0-687.58.1.el9_8.ppc64le
kernel-modules-5.14.0-687.58.1.el9_8.ppc64le
kernel-modules-core-5.14.0-687.58.1.el9_8.ppc64le
kernel-modules-extra-5.14.0-687.58.1.el9_8.ppc64le
kernel-tools-5.14.0-687.58.1.el9_8.ppc64le
kernel-tools-libs-5.14.0-687.58.1.el9_8.ppc64le
perf-5.14.0-687.58.1.el9_8.ppc64le
python3-perf-5.14.0-687.58.1.el9_8.ppc64le
rtla-5.14.0-687.58.1.el9_8.ppc64le
rv-5.14.0-687.58.1.el9_8.ppc64le
kernel-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-core-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-debug-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-debug-core-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-debug-devel-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-debug-devel-matched-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-debug-modules-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-debug-modules-core-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-debug-modules-extra-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-devel-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-devel-matched-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-modules-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-modules-core-5.14.0-687.58.1.el9_8.aarch64
kernel-64k-modules-extra-5.14.0-687.58.1.el9_8.aarch64
kernel-abi-stablelists-5.14.0-687.58.1.el9_8.noarch
kernel-core-5.14.0-687.58.1.el9_8.aarch64
kernel-debug-5.14.0-687.58.1.el9_8.aarch64
kernel-debug-core-5.14.0-687.58.1.el9_8.aarch64
kernel-debug-devel-5.14.0-687.58.1.el9_8.aarch64
kernel-debug-devel-matched-5.14.0-687.58.1.el9_8.aarch64
kernel-debug-modules-5.14.0-687.58.1.el9_8.aarch64
kernel-debug-modules-core-5.14.0-687.58.1.el9_8.aarch64
kernel-debug-modules-extra-5.14.0-687.58.1.el9_8.aarch64
kernel-devel-5.14.0-687.58.1.el9_8.aarch64
kernel-devel-matched-5.14.0-687.58.1.el9_8.aarch64
kernel-doc-5.14.0-687.58.1.el9_8.noarch
kernel-headers-5.14.0-687.58.1.el9_8.aarch64
kernel-modules-5.14.0-687.58.1.el9_8.aarch64
kernel-modules-core-5.14.0-687.58.1.el9_8.aarch64
kernel-modules-extra-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-64k-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-64k-core-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-64k-debug-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-64k-debug-core-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-64k-debug-devel-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-64k-debug-modules-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-64k-debug-modules-core-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-64k-debug-modules-extra-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-64k-devel-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-64k-modules-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-64k-modules-core-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-64k-modules-extra-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-core-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-debug-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-debug-core-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-debug-devel-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-debug-modules-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-debug-modules-core-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-debug-modules-extra-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-devel-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-modules-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-modules-core-5.14.0-687.58.1.el9_8.aarch64
kernel-rt-modules-extra-5.14.0-687.58.1.el9_8.aarch64
kernel-tools-5.14.0-687.58.1.el9_8.aarch64
kernel-tools-libs-5.14.0-687.58.1.el9_8.aarch64
perf-5.14.0-687.58.1.el9_8.aarch64
python3-perf-5.14.0-687.58.1.el9_8.aarch64
rtla-5.14.0-687.58.1.el9_8.aarch64
rv-5.14.0-687.58.1.el9_8.aarch64
kernel-cross-headers-5.14.0-687.58.1.el9_8.x86_64
kernel-tools-libs-devel-5.14.0-687.58.1.el9_8.x86_64
libperf-5.14.0-687.58.1.el9_8.x86_64
kernel-cross-headers-5.14.0-687.58.1.el9_8.ppc64le
kernel-tools-libs-devel-5.14.0-687.58.1.el9_8.ppc64le
libperf-5.14.0-687.58.1.el9_8.ppc64le
kernel-cross-headers-5.14.0-687.58.1.el9_8.aarch64
kernel-tools-libs-devel-5.14.0-687.58.1.el9_8.aarch64
libperf-5.14.0-687.58.1.el9_8.aarch64
kernel-cross-headers-5.14.0-687.58.1.el9_8.s390x
libperf-5.14.0-687.58.1.el9_8.s390x