<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5267</id>
    <title>Important: kernel-rt security and bug fix update</title>
    <issued date="2022-06-28 00:00:00"/>
    <updated date="2022-06-30 08:42:04"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for kernel-rt-modules-extra is now available for AlmaLinux 9.</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012)
* kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729)
* kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-1966)
* kernel: buffer overflow in IPsec ESP transformation code (CVE-2022-27666)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* kernel-rt: update RT source tree to the latest AlmaLinux-9.0.z1 Batch (BZ#2089492)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5267" id="RHSA-2022:5267" type="rhsa" title="RHSA-2022:5267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1012" id="CVE-2022-1012" type="cve" title="CVE-2022-1012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1729" id="CVE-2022-1729" type="cve" title="CVE-2022-1729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1966" id="CVE-2022-1966" type="cve" title="CVE-2022-1966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27666" id="CVE-2022-27666" type="cve" title="CVE-2022-27666"/>
      <reference href="https://bugzilla.redhat.com/2061633" id="2061633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064604" id="2064604" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2086753" id="2086753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092427" id="2092427" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-5267.html" id="ALSA-2022:5267" type="self" title="ALSA-2022:5267"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_default</name>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="70.17.1.rt21.89.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm</filename>
          <sum type="sha256">02fc0158918e30273b82afc53fac22e69dd28ba3050e46d2b28e56cf70056d8d</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="70.17.1.rt21.89.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.src.rpm">
          <filename>kernel-rt-devel-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm</filename>
          <sum type="sha256">5c3a42b7fabaaccb7b15fa5d43d982893613ac4fbea2c147a0263101b278a569</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="70.17.1.rt21.89.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm</filename>
          <sum type="sha256">6ec45928bbbfdad22d03a8957f13f63c351b2c48e4e8766745fae57a8c53db3a</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="70.17.1.rt21.89.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm</filename>
          <sum type="sha256">7a0ccd9fe5c04bc2c591a17723dad834f29ca031c3ccfc9a9e42594b9444a5ef</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="70.17.1.rt21.89.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.src.rpm">
          <filename>kernel-rt-core-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm</filename>
          <sum type="sha256">8ed218996e2991b7dc6e4daa81d88c77178922dafc6f82d464060700073cc6ed</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="70.17.1.rt21.89.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.src.rpm">
          <filename>kernel-rt-debug-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm</filename>
          <sum type="sha256">a13b1749dcce5802bf77a55621c4109ce184e391e7a162fd18367a1f9c5108cf</sum>
        </package>
        <package name="kernel-rt-debug-kvm" version="5.14.0" release="70.17.1.rt21.89.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.src.rpm">
          <filename>kernel-rt-debug-kvm-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm</filename>
          <sum type="sha256">a9999f42cf0a40500ec4de44a1a996dae81d9aba5a8ba7d9d3adff532fb04f09</sum>
        </package>
        <package name="kernel-rt-kvm" version="5.14.0" release="70.17.1.rt21.89.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.src.rpm">
          <filename>kernel-rt-kvm-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm</filename>
          <sum type="sha256">bb8a24390b05a735df0a1b6a207873c7bf2badacbe7b8e9fe072c869116606f0</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="70.17.1.rt21.89.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm</filename>
          <sum type="sha256">be10c8e75bf9b67c081002fce5b7331b0d6bdd1a6e56ea412c44b4552a8ce9d7</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="70.17.1.rt21.89.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.src.rpm">
          <filename>kernel-rt-modules-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm</filename>
          <sum type="sha256">e1bd8711e63d6ca50f96aaf45d48bf7f9f11c9ccf685da983b6707c76533bcda</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="70.17.1.rt21.89.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.src.rpm">
          <filename>kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm</filename>
          <sum type="sha256">ea50dd085d2efd0278c94383f6b761ce10507f35231b1cdc7e204cb6828bd5e5</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="70.17.1.rt21.89.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.17.1.rt21.89.el9_0.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-70.17.1.rt21.89.el9_0.x86_64.rpm</filename>
          <sum type="sha256">eba7e7ff0c517fc97dc42d0bf54680eb8df08099195cd45fa1c55741022c1190</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6002</id>
    <title>Moderate: kernel-rt security and bug fix update</title>
    <issued date="2022-08-09 00:00:00"/>
    <updated date="2022-08-10 17:13:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel-rt security and bug fix update</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* information leak in scsi_ioctl() (CVE-2022-0494)
* use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* update RT source tree to the latest AlmaLinux-9.0.z2 Batch (BZ#2105450)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6002" id="RHSA-2022:6002" type="rhsa" title="RHSA-2022:6002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0494" id="CVE-2022-0494" type="cve" title="CVE-2022-0494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1055" id="CVE-2022-1055" type="cve" title="CVE-2022-1055"/>
      <reference href="https://bugzilla.redhat.com/2039448" id="2039448" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070220" id="2070220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6002.html" id="ALSA-2022:6002" type="self" title="ALSA-2022:6002"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="70.22.1.rt21.94.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm</filename>
          <sum type="sha256">116d33fd3a0dd5c999abf1ee4d4e690b4e75ea86fd80b9002edeb8becc0e1341</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="70.22.1.rt21.94.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm</filename>
          <sum type="sha256">1b0e16d636f33d1be271553d4a993472b15d8da2f810c50f785b102ef749c035</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="70.22.1.rt21.94.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.src.rpm">
          <filename>kernel-rt-modules-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm</filename>
          <sum type="sha256">61850b344f050da506f281c851f6b0335b875038f87c42b69e60255006e433aa</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="70.22.1.rt21.94.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm</filename>
          <sum type="sha256">6b27adeced04870aa2f31dbc18a6300c318719a87f51d1eb266b08fb519dadba</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="70.22.1.rt21.94.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.src.rpm">
          <filename>kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm</filename>
          <sum type="sha256">7117b62db32997376a1254a650b14459fde820b17a75c5e6ea39c2a2533593d9</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="70.22.1.rt21.94.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.src.rpm">
          <filename>kernel-rt-debug-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm</filename>
          <sum type="sha256">79284ec50e9254817704b069c701ce02b0328e0f66f2cddae5d14424c055511a</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="70.22.1.rt21.94.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.src.rpm">
          <filename>kernel-rt-devel-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm</filename>
          <sum type="sha256">7ba96c6cd7e9c7da0c5f96151bdbc1d503de636de55f59cc6741af2c544d0a39</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="70.22.1.rt21.94.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.src.rpm">
          <filename>kernel-rt-core-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm</filename>
          <sum type="sha256">89a45aa02cce57a107927d649e0b0cd0cb5231867bcedd857f0048efc60d4962</sum>
        </package>
        <package name="kernel-rt-kvm" version="5.14.0" release="70.22.1.rt21.94.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.src.rpm">
          <filename>kernel-rt-kvm-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm</filename>
          <sum type="sha256">8c5d858f36bd7d9e74bcee226f0c4ca7610ac6171abed75df18ee6107d1e6378</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="70.22.1.rt21.94.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm</filename>
          <sum type="sha256">9d2382b6092e4c4ab7da79d8d0d3ecf017628d80098a525ab1e933d3970c8206</sum>
        </package>
        <package name="kernel-rt-debug-kvm" version="5.14.0" release="70.22.1.rt21.94.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.src.rpm">
          <filename>kernel-rt-debug-kvm-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm</filename>
          <sum type="sha256">bb3791f9d6c26492de063af4776acbb93d78d60aff76d99a8fbf98bb28aa575f</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="70.22.1.rt21.94.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.22.1.rt21.94.el9_0.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-70.22.1.rt21.94.el9_0.x86_64.rpm</filename>
          <sum type="sha256">e385889167a3b8455f7e4e59480da73027dbf237901506f0ba3be367fbc5d311</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6582</id>
    <title>Important: kernel-rt security and bug fix update</title>
    <issued date="2022-09-20 00:00:00"/>
    <updated date="2022-10-19 06:58:18"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel-rt security and bug fix update</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: heap overflow in nft_set_elem_init() (CVE-2022-34918)
* kernel: vulnerability of buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel-rt: update RT source tree to the latest AlmaLinux-9.0.z3 Batch (BZ#2119577)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6582" id="RHSA-2022:6582" type="rhsa" title="RHSA-2022:6582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2078" id="CVE-2022-2078" type="cve" title="CVE-2022-2078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34918" id="CVE-2022-34918" type="cve" title="CVE-2022-34918"/>
      <reference href="https://bugzilla.redhat.com/2096178" id="2096178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2104423" id="2104423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-6582.html" id="ALSA-2022:6582" type="self" title="ALSA-2022:6582"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_default</name>
        <package name="kernel-rt-devel" version="5.14.0" release="70.26.1.rt21.98.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.26.1.rt21.98.el9_0.src.rpm">
          <filename>kernel-rt-devel-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm</filename>
          <sum type="sha256">05e0cacef674cf2b0dfd1cc09e0efc0e2617d1894ac847073ea6ed983167f313</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="70.26.1.rt21.98.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.26.1.rt21.98.el9_0.src.rpm">
          <filename>kernel-rt-debug-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm</filename>
          <sum type="sha256">090573e278259cf26a105490877354dddceaf1cc9908f6985fe067b6d1f1da9e</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="70.26.1.rt21.98.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.26.1.rt21.98.el9_0.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm</filename>
          <sum type="sha256">48501de0d744f4b187b92c7af7749bb94b0360578292fa618ceb9e5577e1a254</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="70.26.1.rt21.98.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.26.1.rt21.98.el9_0.src.rpm">
          <filename>kernel-rt-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm</filename>
          <sum type="sha256">561a7c0a1918a46726749136e46693ed760454bd2fc9ee21082d33450e31dbac</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="70.26.1.rt21.98.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.26.1.rt21.98.el9_0.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm</filename>
          <sum type="sha256">8dc9a03abad39a8a51da61fe1a3ea80a2d20f5461a9630d376f3181bebe297c4</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="70.26.1.rt21.98.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.26.1.rt21.98.el9_0.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm</filename>
          <sum type="sha256">a9c49daf145cbe20bdda8d254886c341254f16414a756ae069d2537866e90218</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="70.26.1.rt21.98.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.26.1.rt21.98.el9_0.src.rpm">
          <filename>kernel-rt-core-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm</filename>
          <sum type="sha256">d80eba61ef97b765e93d01fdd5104ff7b96b63962f96dc53c82fe70fada9428e</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="70.26.1.rt21.98.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.26.1.rt21.98.el9_0.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm</filename>
          <sum type="sha256">edd7c6b9959e572020a95cc73752ebe154e5041fd4622524c50e435385290f10</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="70.26.1.rt21.98.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.26.1.rt21.98.el9_0.src.rpm">
          <filename>kernel-rt-modules-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm</filename>
          <sum type="sha256">f464d927fd6cd58417376747f6c2c8cf4dd4a0d7befb20d0c3a842fe99f1b3c0</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="70.26.1.rt21.98.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.26.1.rt21.98.el9_0.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-70.26.1.rt21.98.el9_0.x86_64.rpm</filename>
          <sum type="sha256">f5942ea6b980be844435fc6116e0a70e68d74201eceb953c46de91732f54a5c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7319</id>
    <title>Important: kernel-rt security and bug fix update</title>
    <issued date="2022-11-02 00:00:00"/>
    <updated date="2022-11-03 05:54:40"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel-rt security and bug fix update</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585)
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Update RT source tree to the latest AlmaLinux-9.0.z4 Batch (BZ#2123498)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7319" id="RHSA-2022:7319" type="rhsa" title="RHSA-2022:7319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2585" id="CVE-2022-2585" type="cve" title="CVE-2022-2585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30594" id="CVE-2022-30594" type="cve" title="CVE-2022-30594"/>
      <reference href="https://bugzilla.redhat.com/2085300" id="2085300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114874" id="2114874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7319.html" id="ALSA-2022:7319" type="self" title="ALSA-2022:7319"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="70.30.1.rt21.102.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.30.1.rt21.102.el9_0.src.rpm">
          <filename>kernel-rt-debug-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm</filename>
          <sum type="sha256">4871c624ca26f06a71131edaa50a639eb6388473d4023d5aff7d9ca10d788391</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="70.30.1.rt21.102.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.30.1.rt21.102.el9_0.src.rpm">
          <filename>kernel-rt-core-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm</filename>
          <sum type="sha256">6702155baf6bb39c0f82345f97a6993e7bb0909b5d2f30a44556eb8e7eea0d28</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="70.30.1.rt21.102.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.30.1.rt21.102.el9_0.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm</filename>
          <sum type="sha256">9cbdc61b7daa5be70b546814664b2865fd8014ac591d96182b5dcdd9a1dae159</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="70.30.1.rt21.102.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.30.1.rt21.102.el9_0.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm</filename>
          <sum type="sha256">9ee443ff3885ff2402ba2bb051121a17fc4a14935bc64441893728a8a408166b</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="70.30.1.rt21.102.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.30.1.rt21.102.el9_0.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm</filename>
          <sum type="sha256">a3991f08bc2bf98d5780480df3a2fbc1b0eec6af2363159350b90312daf9d256</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="70.30.1.rt21.102.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.30.1.rt21.102.el9_0.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm</filename>
          <sum type="sha256">b6852b3a1cccc8b2271901b3599bef1a46689760449e5fab27feab3aadde3dcc</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="70.30.1.rt21.102.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.30.1.rt21.102.el9_0.src.rpm">
          <filename>kernel-rt-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm</filename>
          <sum type="sha256">c504aadffc191e2a2ab8299f77a6de78356f4c6788f4f77c7570522c96ad0980</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="70.30.1.rt21.102.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.30.1.rt21.102.el9_0.src.rpm">
          <filename>kernel-rt-devel-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm</filename>
          <sum type="sha256">de9ef40ecb358f188fb8c4f0d5cf5d50100cbe9581dc0217286a89b6215b0781</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="70.30.1.rt21.102.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.30.1.rt21.102.el9_0.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm</filename>
          <sum type="sha256">ecc44ab950cbb3eec9f15192e6e37ac6b5b8b9e906e3711cbfbd4fa220d253da</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="70.30.1.rt21.102.el9_0" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-70.30.1.rt21.102.el9_0.src.rpm">
          <filename>kernel-rt-modules-5.14.0-70.30.1.rt21.102.el9_0.x86_64.rpm</filename>
          <sum type="sha256">efeb5eec080b517ffc49c5000802fc719cc351b1a5d45eb8ce8f61bf351b6f6f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7933</id>
    <title>Moderate: kernel-rt security and bug fix update</title>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-18 08:38:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel-rt security and bug fix update</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516)
* use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640)
* smb2_ioctl_query_info NULL pointer dereference (CVE-2022-0168)
* NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617)
* swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854)
* uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016)
* race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048)
* use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184)
* concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources (CVE-2022-1280)
* kernel info leak issue in pfkey_register (CVE-2022-1353)
* use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679)
* NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852)
* fanotify misuses fd_install() which could lead to use-after-free (CVE-2022-1998)
* nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586)
* openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639)
* slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368)
* incomplete clean-up of multi-core shared buffers (aka SBDR) (CVE-2022-21123)
* incomplete clean-up of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125)
* incomplete clean-up in specific special register write operations (aka DRPW) (CVE-2022-21166)
* possible to use the debugger to write zero into a location of choice (CVE-2022-21499)
* AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900)
* AMD: Branch Type Confusion (non-retbleed) (CVE-2022-23825)
* Intel: Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)
* double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390)
* use after free in SUNRPC subsystem (CVE-2022-28893)
* use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581)
* Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)
* DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946)
* nf_tables disallow binding to already bound chain (CVE-2022-39190)
* nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7933" id="RHSA-2022:7933" type="rhsa" title="RHSA-2022:7933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36516" id="CVE-2020-36516" type="cve" title="CVE-2020-36516"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3640" id="CVE-2021-3640" type="cve" title="CVE-2021-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0168" id="CVE-2022-0168" type="cve" title="CVE-2022-0168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0617" id="CVE-2022-0617" type="cve" title="CVE-2022-0617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0854" id="CVE-2022-0854" type="cve" title="CVE-2022-0854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1016" id="CVE-2022-1016" type="cve" title="CVE-2022-1016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1048" id="CVE-2022-1048" type="cve" title="CVE-2022-1048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1184" id="CVE-2022-1184" type="cve" title="CVE-2022-1184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1280" id="CVE-2022-1280" type="cve" title="CVE-2022-1280"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1353" id="CVE-2022-1353" type="cve" title="CVE-2022-1353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1679" id="CVE-2022-1679" type="cve" title="CVE-2022-1679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1852" id="CVE-2022-1852" type="cve" title="CVE-2022-1852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1998" id="CVE-2022-1998" type="cve" title="CVE-2022-1998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20368" id="CVE-2022-20368" type="cve" title="CVE-2022-20368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21123" id="CVE-2022-21123" type="cve" title="CVE-2022-21123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21125" id="CVE-2022-21125" type="cve" title="CVE-2022-21125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21166" id="CVE-2022-21166" type="cve" title="CVE-2022-21166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21499" id="CVE-2022-21499" type="cve" title="CVE-2022-21499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23816" id="CVE-2022-23816" type="cve" title="CVE-2022-23816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23825" id="CVE-2022-23825" type="cve" title="CVE-2022-23825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24448" id="CVE-2022-24448" type="cve" title="CVE-2022-24448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2586" id="CVE-2022-2586" type="cve" title="CVE-2022-2586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26373" id="CVE-2022-26373" type="cve" title="CVE-2022-26373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2639" id="CVE-2022-2639" type="cve" title="CVE-2022-2639"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28390" id="CVE-2022-28390" type="cve" title="CVE-2022-28390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28893" id="CVE-2022-28893" type="cve" title="CVE-2022-28893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29581" id="CVE-2022-29581" type="cve" title="CVE-2022-29581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29900" id="CVE-2022-29900" type="cve" title="CVE-2022-29900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29901" id="CVE-2022-29901" type="cve" title="CVE-2022-29901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36946" id="CVE-2022-36946" type="cve" title="CVE-2022-36946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39190" id="CVE-2022-39190" type="cve" title="CVE-2022-39190"/>
      <reference href="https://bugzilla.redhat.com/1980646" id="1980646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2037386" id="2037386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2051444" id="2051444" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2052312" id="2052312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2053632" id="2053632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2058395" id="2058395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2059928" id="2059928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066614" id="2066614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066706" id="2066706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066819" id="2066819" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070205" id="2070205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2071022" id="2071022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073064" id="2073064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074208" id="2074208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084125" id="2084125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084183" id="2084183" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084479" id="2084479" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2088021" id="2088021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2089815" id="2089815" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090226" id="2090226" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090237" id="2090237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090240" id="2090240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090241" id="2090241" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103148" id="2103148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103153" id="2103153" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114878" id="2114878" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115065" id="2115065" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115278" id="2115278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123695" id="2123695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2129152" id="2129152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2022-7933.html" id="ALSA-2022:7933" type="self" title="ALSA-2022:7933"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_1_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_1_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="162.6.1.rt21.168.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.6.1.rt21.168.el9_1.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm</filename>
          <sum type="sha256">083a6bc434be72042214aea26a0e53719670a57ecab80d3686cc0bacfb26564a</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="162.6.1.rt21.168.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.6.1.rt21.168.el9_1.src.rpm">
          <filename>kernel-rt-core-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm</filename>
          <sum type="sha256">29beefdc41073c2e3b01337239579ddfdfba29b59a2b57ae9da1dccbbcd8bba2</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="162.6.1.rt21.168.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.6.1.rt21.168.el9_1.src.rpm">
          <filename>kernel-rt-modules-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm</filename>
          <sum type="sha256">5330dfabc8542eda5cd5ee1636607a50f5c621a1b899797a30af4c6e0afb40b9</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="162.6.1.rt21.168.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.6.1.rt21.168.el9_1.src.rpm">
          <filename>kernel-rt-debug-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm</filename>
          <sum type="sha256">54dde644138a591b22123832d9b1bb4470c92e536b98d7057ec9dd4c0a7488bc</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="162.6.1.rt21.168.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.6.1.rt21.168.el9_1.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm</filename>
          <sum type="sha256">6e76e1e8438b6bf657f93cf017d9fd2efecef0506622cf5f746245a1372a78f8</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="162.6.1.rt21.168.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.6.1.rt21.168.el9_1.src.rpm">
          <filename>kernel-rt-devel-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm</filename>
          <sum type="sha256">7cf46de31efd40cbc6c2b9d704580e29ffe876bc2e3ff91607279a8d5b79b92f</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="162.6.1.rt21.168.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.6.1.rt21.168.el9_1.src.rpm">
          <filename>kernel-rt-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm</filename>
          <sum type="sha256">c5a131fa62367c9583bad51a70cf5db03e3a2cfe3f4d4fb89ae0264c3cf1e904</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="162.6.1.rt21.168.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.6.1.rt21.168.el9_1.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm</filename>
          <sum type="sha256">df23c4b687ef4b9fdb6fa0e9398d98291641baddcfe6ea4d261360f4a628e755</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="162.6.1.rt21.168.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.6.1.rt21.168.el9_1.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm</filename>
          <sum type="sha256">e6c3683aa8842bcff86a9d3f597bebebf7745d6ca8654721f338b812b6e69dae</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="162.6.1.rt21.168.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.6.1.rt21.168.el9_1.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-162.6.1.rt21.168.el9_1.x86_64.rpm</filename>
          <sum type="sha256">e756f4c1deca3282592cf69fdf094f3f353e4eb3a04d9f75fe2e54fb7c27a1f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0300</id>
    <title>Important: kernel-rt security and bug fix update</title>
    <issued date="2023-01-23 00:00:00"/>
    <updated date="2023-01-24 14:46:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel-rt security and bug fix update</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959)
* kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)
* kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)
* kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)
* kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077)
* kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* DELL EMC: System is not booting into RT Kernel with perc12 [kernel-rt] (BZ#2139863)
* kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z1 Batch (BZ#2141817)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0300" id="RHSA-2023:0300" type="rhsa" title="RHSA-2023:0300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2959" id="CVE-2022-2959" type="cve" title="CVE-2022-2959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2964" id="CVE-2022-2964" type="cve" title="CVE-2022-2964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30594" id="CVE-2022-30594" type="cve" title="CVE-2022-30594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3077" id="CVE-2022-3077" type="cve" title="CVE-2022-3077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4139" id="CVE-2022-4139" type="cve" title="CVE-2022-4139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43945" id="CVE-2022-43945" type="cve" title="CVE-2022-43945"/>
      <reference href="https://bugzilla.redhat.com/2067482" id="2067482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2085300" id="2085300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103681" id="2103681" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123309" id="2123309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2141752" id="2141752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147572" id="2147572" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0300.html" id="ALSA-2023:0300" type="self" title="ALSA-2023:0300"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_1_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_1_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="162.12.1.rt21.175.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.12.1.rt21.175.el9_1.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm</filename>
          <sum type="sha256">0a7850666dba9db542b5ea2b79bf93a19d969c83be4ebd90ea433d63c3175152</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="162.12.1.rt21.175.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.12.1.rt21.175.el9_1.src.rpm">
          <filename>kernel-rt-core-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm</filename>
          <sum type="sha256">4bf08730af33c901e5be9a9fff74ce51534ff7e422009b17892159653ba61d4c</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="162.12.1.rt21.175.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.12.1.rt21.175.el9_1.src.rpm">
          <filename>kernel-rt-modules-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm</filename>
          <sum type="sha256">564f016406f8e55cd77f969ab291deab70dad24c52288dc43307180b75239474</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="162.12.1.rt21.175.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.12.1.rt21.175.el9_1.src.rpm">
          <filename>kernel-rt-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm</filename>
          <sum type="sha256">57bb4cb752468ac2f2dcbabddac35df796795f301c9e6bc37ee5e7e2d0f3f0cf</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="162.12.1.rt21.175.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.12.1.rt21.175.el9_1.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm</filename>
          <sum type="sha256">87723b3f45262dc142b53a9909075059e8122a8771ea0f30a44d769706df182d</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="162.12.1.rt21.175.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.12.1.rt21.175.el9_1.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm</filename>
          <sum type="sha256">92eaea611a5f45c63629a46d876b9130780125705b1864f6d9cc4abae2b57f5e</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="162.12.1.rt21.175.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.12.1.rt21.175.el9_1.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm</filename>
          <sum type="sha256">962abe9e03f83231af32ed06f3cf6ed6ffac131992b89f5b5f6b3cbb3ee40f55</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="162.12.1.rt21.175.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.12.1.rt21.175.el9_1.src.rpm">
          <filename>kernel-rt-debug-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm</filename>
          <sum type="sha256">ae8187e63c33553c60a6d552cf58303765f472fea78c5a13284f469c8c19e05f</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="162.12.1.rt21.175.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.12.1.rt21.175.el9_1.src.rpm">
          <filename>kernel-rt-devel-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm</filename>
          <sum type="sha256">d3a9e81e4c2840bdb2c38dcb3e98529423cf00aae7bf7b8245dad8f0b06569ad</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="162.12.1.rt21.175.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.12.1.rt21.175.el9_1.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-162.12.1.rt21.175.el9_1.x86_64.rpm</filename>
          <sum type="sha256">e000bc13ee0a3c4bfa099a8f623abc5280615670e19fade542454d20d1bd0a49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0979</id>
    <title>Important: kernel-rt security and bug fix update</title>
    <issued date="2023-02-28 00:00:00"/>
    <updated date="2023-02-28 18:38:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel-rt security and bug fix update</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)
* kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)
* kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack (CVE-2022-4379)
* kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan (CVE-2023-0179)
* kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z2 Batch (BZ#2160463)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0979" id="RHSA-2023:0979" type="rhsa" title="RHSA-2023:0979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2873" id="CVE-2022-2873" type="cve" title="CVE-2022-2873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3564" id="CVE-2022-3564" type="cve" title="CVE-2022-3564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4378" id="CVE-2022-4378" type="cve" title="CVE-2022-4378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4379" id="CVE-2022-4379" type="cve" title="CVE-2022-4379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0179" id="CVE-2023-0179" type="cve" title="CVE-2023-0179"/>
      <reference href="https://bugzilla.redhat.com/2119048" id="2119048" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150999" id="2150999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152548" id="2152548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152807" id="2152807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161713" id="2161713" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-0979.html" id="ALSA-2023:0979" type="self" title="ALSA-2023:0979"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_1_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_1_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="162.18.1.rt21.181.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.18.1.rt21.181.el9_1.src.rpm">
          <filename>kernel-rt-debug-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm</filename>
          <sum type="sha256">0cfc3def03dec03b23599afd7f1c29ff63e5e008d71c44a42ea59c9fd2223a1e</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="162.18.1.rt21.181.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.18.1.rt21.181.el9_1.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm</filename>
          <sum type="sha256">281a886d05b73d4f16b29130076bca174fb89ea6b9f7a76b7864285bfdaef483</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="162.18.1.rt21.181.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.18.1.rt21.181.el9_1.src.rpm">
          <filename>kernel-rt-devel-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm</filename>
          <sum type="sha256">61713a6114b14367b326710fd5ebc4174aa8dc1780c885315941466af26e9c4a</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="162.18.1.rt21.181.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.18.1.rt21.181.el9_1.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm</filename>
          <sum type="sha256">630b7b7e9ef0789d869be25e4ffa72e5682718266f1ec5a2b88faf02a94f7643</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="162.18.1.rt21.181.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.18.1.rt21.181.el9_1.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm</filename>
          <sum type="sha256">6a29c8005f06ad5ef52aa2ecc02a9d03af89ec029298d26dfac497eac364f8f0</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="162.18.1.rt21.181.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.18.1.rt21.181.el9_1.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm</filename>
          <sum type="sha256">702f4e9976bb581b1581b4ec5b4b856a61ec1f7c84519928b04120334f029d7e</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="162.18.1.rt21.181.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.18.1.rt21.181.el9_1.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm</filename>
          <sum type="sha256">77097a64ad5b7fb1f529b5d0b60ddb008993de5230daf3b60f6a025c031a0cf9</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="162.18.1.rt21.181.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.18.1.rt21.181.el9_1.src.rpm">
          <filename>kernel-rt-core-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm</filename>
          <sum type="sha256">7929a3cb0ac6edf47fc38195050f659162852119ad0a81baf8a7c46e585146ab</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="162.18.1.rt21.181.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.18.1.rt21.181.el9_1.src.rpm">
          <filename>kernel-rt-modules-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm</filename>
          <sum type="sha256">7dbc56b0bec658a15b6a29b53a7e702d620d96fca3c8b3fe91ae52db886bda4d</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="162.18.1.rt21.181.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.18.1.rt21.181.el9_1.src.rpm">
          <filename>kernel-rt-5.14.0-162.18.1.rt21.181.el9_1.x86_64.rpm</filename>
          <sum type="sha256">921fb662e5944b4d9ee844f7b234ad4b837d8b8903c608cf3a47e69b6f022ec3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1469</id>
    <title>Important: kernel-rt security and bug fix update</title>
    <issued date="2023-03-27 00:00:00"/>
    <updated date="2023-03-27 22:27:38"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel-rt security and bug fix update</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)
* ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266)
* kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z3 Batch (BZ#2170460)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1469" id="RHSA-2023:1469" type="rhsa" title="RHSA-2023:1469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4269" id="CVE-2022-4269" type="cve" title="CVE-2022-4269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4744" id="CVE-2022-4744" type="cve" title="CVE-2022-4744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0266" id="CVE-2023-0266" type="cve" title="CVE-2023-0266"/>
      <reference href="https://bugzilla.redhat.com/2150272" id="2150272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156322" id="2156322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163379" id="2163379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1469.html" id="ALSA-2023:1469" type="self" title="ALSA-2023:1469"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_1_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_1_default</name>
        <package name="kernel-rt-devel" version="5.14.0" release="162.22.2.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.22.2.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-devel-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">24429bbdfbb7d6c11f96f4e8a1c79c629c6b8167435fc0178a900f3f61ea1727</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="162.22.2.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.22.2.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">2a78129508af1271e0b475659eaa7c1a812ea3c25157702266ae96c5fe235a7d</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="162.22.2.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.22.2.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">2b4087ebc0e4ce975c51e978ae03ed27d81ca77a4c4e3a9b4936e45185950daf</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="162.22.2.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.22.2.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-modules-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">3922bb002b6e10ed63ca8268c037e1e553db276910533d4929e4efd7719eef13</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="162.22.2.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.22.2.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">6c12b388834ce27975072118d26735f281e758d6f86633eec4040488c10fe8fd</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="162.22.2.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.22.2.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-core-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">c25b049bbbb455c8cfae802648c796aec8f4ba0467893d07c8c7e24d940b9371</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="162.22.2.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.22.2.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">d023f203898cc557ccf224f4f8ed1a3fc35158abb39b1160665663df25d01570</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="162.22.2.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.22.2.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">dce6da9e3425eab693e56a8cb83fffc445f843353b2229e1f4f381e8a52b1701</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="162.22.2.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.22.2.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">dcf85d6aa86c566ba56555695fe6b790bf15a6d5cb87d82687e3cd492455d663</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="162.22.2.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.22.2.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-debug-5.14.0-162.22.2.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">ee09ad9594ac8facdecd01ca1b7fb882bc9f1b11906937aad0d1a363f3bd7195</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1691</id>
    <title>Important: kernel-rt security and bug fix update</title>
    <issued date="2023-04-11 00:00:00"/>
    <updated date="2023-04-20 13:48:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel-rt security and bug fix update</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel-rt: update RT source tree to the latest AlmaLinux-9.1.z3 Batch (BZ#2182066)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1691" id="RHSA-2023:1691" type="rhsa" title="RHSA-2023:1691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0386" id="CVE-2023-0386" type="cve" title="CVE-2023-0386"/>
      <reference href="https://bugzilla.redhat.com/2159505" id="2159505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-1691.html" id="ALSA-2023:1691" type="self" title="ALSA-2023:1691"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_1_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_1_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="162.23.1.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">197dd84a443fe9ebd45873adc272091a9a6bd8c9062262de12594cf8aa5d707c</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="162.23.1.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-devel-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">26e59648ec81318d9bd835ec7b92655028057694a2269f00ba8a5fb49c10218e</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="162.23.1.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">3a234df0d1a430ef50d0800f35d8796d29ecabdead3a9a55065784b8f6bdb30a</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="162.23.1.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">43b1218eed426f7ab1e47eff69164e7c450d0eb23a5c5b85509c76f2c827329e</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="162.23.1.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">561b6fb5ecedf13d81c38b188a5a241a4fd4bc07b0edb88d68d10594185337dd</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="162.23.1.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">736395f6e27c10faa029740a204e80544c2e8fcc05618cbf7ceb1ebea1ebb532</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="162.23.1.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-core-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">778dbeff0046d86757ee3eed06b98261c9c94515317befbc07380dfe8ae8c406</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="162.23.1.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">a2f17794e8910e088b2f820cfe8e2a9773fdd4c037bc5795b6883322afa000da</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="162.23.1.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-debug-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">e008df3e62d7a258ca426991572bceee219518619438430ebf8139abcb446e79</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="162.23.1.rt21.186.el9_1" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-162.23.1.rt21.186.el9_1.src.rpm">
          <filename>kernel-rt-modules-5.14.0-162.23.1.rt21.186.el9_1.x86_64.rpm</filename>
          <sum type="sha256">ffceae49933b846fbedf434cc0630e8e2bae8d1b9df0f46d068380e939ef278f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2148</id>
    <title>Important: kernel-rt security and bug fix update</title>
    <issued date="2023-05-09 00:00:00"/>
    <updated date="2023-05-11 14:31:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel-rt security and bug fix update</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896)
* net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)
* hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341)
* malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655)
* possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462)
* KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789)
* use-after-free in free_pipe_info() could lead to privilege escalation (CVE-2022-1882)
* KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196)
* netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663)
* race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028)
* out-of-bounds read in fib_nh_match of the file net/ipv4/fib_semantics.c (CVE-2022-3435)
* race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522)
* memory leak in ipv6_renew_options() (CVE-2022-3524)
* data races around icsk-&gt;icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566)
* data races around sk-&gt;sk_prot (CVE-2022-3567)
* memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619)
* denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623)
* use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625)
* USB-accessible buffer overflow in brcmfmac (CVE-2022-3628)
* use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (CVE-2022-3640)
* Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707)
* mptcp: NULL pointer dereference in subflow traversal at disconnect time (CVE-2022-4128)
* l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129)
* igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141)
* lockdown bypass using IMA (CVE-2022-21505)
* double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c (CVE-2022-28388)
* network backend may cause Linux netfront to use freed SKBs (XSA-405) (CVE-2022-33743)
* unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188)
* TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189)
* u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674)
* use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)
* use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720)
* BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721)
* Denial of service in beacon protection for P2P-device (CVE-2022-42722)
* memory corruption in usbmon driver (CVE-2022-43750)
* NULL pointer dereference in traffic control subsystem (CVE-2022-47929)
* NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394)
* use-after-free due to race condition in qdisc_graft() (CVE-2023-0590)
* use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195)
* denial of service in tipc_conn_close (CVE-2023-1382)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2148" id="RHSA-2023:2148" type="rhsa" title="RHSA-2023:2148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-26341" id="CVE-2021-26341" type="cve" title="CVE-2021-26341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33655" id="CVE-2021-33655" type="cve" title="CVE-2021-33655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1462" id="CVE-2022-1462" type="cve" title="CVE-2022-1462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1789" id="CVE-2022-1789" type="cve" title="CVE-2022-1789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1882" id="CVE-2022-1882" type="cve" title="CVE-2022-1882"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20141" id="CVE-2022-20141" type="cve" title="CVE-2022-20141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21505" id="CVE-2022-21505" type="cve" title="CVE-2022-21505"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2196" id="CVE-2022-2196" type="cve" title="CVE-2022-2196"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2663" id="CVE-2022-2663" type="cve" title="CVE-2022-2663"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28388" id="CVE-2022-28388" type="cve" title="CVE-2022-28388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3028" id="CVE-2022-3028" type="cve" title="CVE-2022-3028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33743" id="CVE-2022-33743" type="cve" title="CVE-2022-33743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3435" id="CVE-2022-3435" type="cve" title="CVE-2022-3435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3522" id="CVE-2022-3522" type="cve" title="CVE-2022-3522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3524" id="CVE-2022-3524" type="cve" title="CVE-2022-3524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3566" id="CVE-2022-3566" type="cve" title="CVE-2022-3566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3567" id="CVE-2022-3567" type="cve" title="CVE-2022-3567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3619" id="CVE-2022-3619" type="cve" title="CVE-2022-3619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3623" id="CVE-2022-3623" type="cve" title="CVE-2022-3623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3625" id="CVE-2022-3625" type="cve" title="CVE-2022-3625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3628" id="CVE-2022-3628" type="cve" title="CVE-2022-3628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3640" id="CVE-2022-3640" type="cve" title="CVE-2022-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3707" id="CVE-2022-3707" type="cve" title="CVE-2022-3707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39188" id="CVE-2022-39188" type="cve" title="CVE-2022-39188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39189" id="CVE-2022-39189" type="cve" title="CVE-2022-39189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4128" id="CVE-2022-4128" type="cve" title="CVE-2022-4128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4129" id="CVE-2022-4129" type="cve" title="CVE-2022-4129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41674" id="CVE-2022-41674" type="cve" title="CVE-2022-41674"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42703" id="CVE-2022-42703" type="cve" title="CVE-2022-42703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42720" id="CVE-2022-42720" type="cve" title="CVE-2022-42720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42721" id="CVE-2022-42721" type="cve" title="CVE-2022-42721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42722" id="CVE-2022-42722" type="cve" title="CVE-2022-42722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42896" id="CVE-2022-42896" type="cve" title="CVE-2022-42896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43750" id="CVE-2022-43750" type="cve" title="CVE-2022-43750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47929" id="CVE-2022-47929" type="cve" title="CVE-2022-47929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0394" id="CVE-2023-0394" type="cve" title="CVE-2023-0394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0461" id="CVE-2023-0461" type="cve" title="CVE-2023-0461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0590" id="CVE-2023-0590" type="cve" title="CVE-2023-0590"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1195" id="CVE-2023-1195" type="cve" title="CVE-2023-1195"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1382" id="CVE-2023-1382" type="cve" title="CVE-2023-1382"/>
      <reference href="https://bugzilla.redhat.com/2061703" id="2061703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073091" id="2073091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078466" id="2078466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2089701" id="2089701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090723" id="2090723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106830" id="2106830" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2107924" id="2107924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108691" id="2108691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114937" id="2114937" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122228" id="2122228" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123056" id="2123056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2124788" id="2124788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130141" id="2130141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133483" id="2133483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133490" id="2133490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134377" id="2134377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134380" id="2134380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134451" id="2134451" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134506" id="2134506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134517" id="2134517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134528" id="2134528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2137979" id="2137979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2139610" id="2139610" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143893" id="2143893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143943" id="2143943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144720" id="2144720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147364" id="2147364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150947" id="2150947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150960" id="2150960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150979" id="2150979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151270" id="2151270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154171" id="2154171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154235" id="2154235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160023" id="2160023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162120" id="2162120" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165721" id="2165721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165741" id="2165741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168246" id="2168246" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2176192" id="2176192" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2177371" id="2177371" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-2148.html" id="ALSA-2023:2148" type="self" title="ALSA-2023:2148"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_2_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_2_default</name>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="284.11.1.rt14.296.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm</filename>
          <sum type="sha256">0f09e987aade16f8af6c1e9fa65298f5c3cf0df7fd720914c845b01cabeaf69b</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="284.11.1.rt14.296.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.src.rpm">
          <filename>kernel-rt-core-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm</filename>
          <sum type="sha256">1924d99cf1b7314af624a56edf302ac296f00e0ecf8adaef6a52c3dad8428ddc</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="284.11.1.rt14.296.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.src.rpm">
          <filename>kernel-rt-modules-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm</filename>
          <sum type="sha256">2b63450d468e187cabb9811c6bab080f2ba3b0435d5d7d25335502d6a41cf7e6</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="284.11.1.rt14.296.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm</filename>
          <sum type="sha256">39b40a7c6fd1e1334cfa8cb890ad8dd0ba1b7edb32f305dcedab9dd5a65c965a</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="284.11.1.rt14.296.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm</filename>
          <sum type="sha256">3be1a80a34f21f2923bee6b18d8e7c72885b7f325fa21accf9262857b2dc59ad</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="284.11.1.rt14.296.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.src.rpm">
          <filename>kernel-rt-debug-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm</filename>
          <sum type="sha256">7d6790befb5635f59abc36a40d0ec81e66fbd5595afa0e718589ca6c9defc83b</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="284.11.1.rt14.296.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm</filename>
          <sum type="sha256">8852c8308f662fcd678606dcd841bd70ef311fdbca9956d6728966dd618b8f09</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="284.11.1.rt14.296.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm</filename>
          <sum type="sha256">9882416f7514afd0dee968135853d17b5f5a01cd3db2b8c2b91906516e061ca8</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="284.11.1.rt14.296.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm</filename>
          <sum type="sha256">bdd183ddc194ec375da0d7d4a03f082d95124a3a8d7ca21dfeca21d5e21289cc</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="284.11.1.rt14.296.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.src.rpm">
          <filename>kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm</filename>
          <sum type="sha256">cefd5a49af76681ba5aa5d114b82a043c0541dc007dfe06dd28597025864f88b</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="284.11.1.rt14.296.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm</filename>
          <sum type="sha256">ee1c597a8e5171319c2a6d7f3f2b8d2309cca7c50663e19d5f9092c05deb482b</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="284.11.1.rt14.296.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.11.1.rt14.296.el9_2.src.rpm">
          <filename>kernel-rt-devel-5.14.0-284.11.1.rt14.296.el9_2.x86_64.rpm</filename>
          <sum type="sha256">fadb325483c93043e5a3e16c310b13e554e27cd957f926d815a8eed25e42bd9d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3708</id>
    <title>Important: kernel-rt security and bug fix update</title>
    <issued date="2023-06-21 00:00:00"/>
    <updated date="2023-07-11 21:09:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel-rt security and bug fix update</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events (CVE-2023-2235)
* kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation (CVE-2023-32233)
* Kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002)
* kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)
* kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194)
* kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference (CVE-2023-28466)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* [RT] Single Node Openshift cluster becomes unreachable after running less than 2 hours (BZ#2186853)
* kernel-rt: update RT source tree to the latest AlmaLinux-9.2.z1 Batch (BZ#2188313)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3708" id="RHSA-2023:3708" type="rhsa" title="RHSA-2023:3708"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2002" id="CVE-2023-2002" type="cve" title="CVE-2023-2002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2124" id="CVE-2023-2124" type="cve" title="CVE-2023-2124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2194" id="CVE-2023-2194" type="cve" title="CVE-2023-2194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2235" id="CVE-2023-2235" type="cve" title="CVE-2023-2235"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28466" id="CVE-2023-28466" type="cve" title="CVE-2023-28466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32233" id="CVE-2023-32233" type="cve" title="CVE-2023-32233"/>
      <reference href="https://bugzilla.redhat.com/2179000" id="2179000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187308" id="2187308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187439" id="2187439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188396" id="2188396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2192589" id="2192589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196105" id="2196105" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-3708.html" id="ALSA-2023:3708" type="self" title="ALSA-2023:3708"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_2_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_2_default</name>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="284.18.1.rt14.303.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm</filename>
          <sum type="sha256">16ec2fce7651996f3a3de88c35365e8cb85d02913ecdb70ae090fac89c3a8333</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="284.18.1.rt14.303.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm</filename>
          <sum type="sha256">43910abc8c5ceb8086c12ea84d7faa21e41a1c73a6ac2cf98927abbb016294d3</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="284.18.1.rt14.303.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.src.rpm">
          <filename>kernel-rt-debug-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm</filename>
          <sum type="sha256">55d8a972ed02da85f322acb8c07ea1764256ce70ac411495f2a425a6bb2371fb</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="284.18.1.rt14.303.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm</filename>
          <sum type="sha256">5627f33bd091366351ec1508a4cb43e28bbed408c0c0230e55d48a5344660f90</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="284.18.1.rt14.303.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm</filename>
          <sum type="sha256">5a1fc4070e6c2156cbc052791691f7cd2dcd249233b090f060c785eb0ee32b40</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="284.18.1.rt14.303.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.src.rpm">
          <filename>kernel-rt-devel-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm</filename>
          <sum type="sha256">5c8a5bdac984f5eccb4da44be9c2ecd690ce8765873aa1d7ad2291f5118bc7be</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="284.18.1.rt14.303.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm</filename>
          <sum type="sha256">7dbf6cf12b72317566adbe84dbed4bb9261db8cd106473d0e60b706dd3510e27</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="284.18.1.rt14.303.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.src.rpm">
          <filename>kernel-rt-core-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm</filename>
          <sum type="sha256">8dccf23c4bbcbf0383217e9d5a46bcc1a394c31482505d4ac3a909a33651850d</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="284.18.1.rt14.303.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.src.rpm">
          <filename>kernel-rt-modules-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm</filename>
          <sum type="sha256">af5489f0b6da033acabc0e4e8384c09bc488acc0a1a7444335aa73f04485c911</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="284.18.1.rt14.303.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.src.rpm">
          <filename>kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm</filename>
          <sum type="sha256">b4ccb088417921462101f49dc102d9f795b189a7b925c5da9f99e7e0a2af5ffb</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="284.18.1.rt14.303.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm</filename>
          <sum type="sha256">b6802bd377ce62531f9e273b5025b7f953adeba3caa0ece154c0349871bb1ee7</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="284.18.1.rt14.303.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.18.1.rt14.303.el9_2.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-284.18.1.rt14.303.el9_2.x86_64.rpm</filename>
          <sum type="sha256">c393dc1e20d8d4b78e3446699cadee0cd3dcbfca79fa65a2cce8f0996c6a8415</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4378</id>
    <title>Important: kernel-rt security and bug fix update</title>
    <issued date="2023-08-01 00:00:00"/>
    <updated date="2023-08-08 13:32:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel-rt security and bug fix update</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: ipvlan: out-of-bounds write caused by unclear skb-&gt;cb (CVE-2023-3090)
* kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)
* kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869)
* kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458)
* kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4378" id="RHSA-2023:4378" type="rhsa" title="RHSA-2023:4378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45869" id="CVE-2022-45869" type="cve" title="CVE-2022-45869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0458" id="CVE-2023-0458" type="cve" title="CVE-2023-0458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1998" id="CVE-2023-1998" type="cve" title="CVE-2023-1998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3090" id="CVE-2023-3090" type="cve" title="CVE-2023-3090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35788" id="CVE-2023-35788" type="cve" title="CVE-2023-35788"/>
      <reference href="https://bugzilla.redhat.com/2151317" id="2151317" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187257" id="2187257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2193219" id="2193219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215768" id="2215768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218672" id="2218672" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-4378.html" id="ALSA-2023:4378" type="self" title="ALSA-2023:4378"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_2_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_2_default</name>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="284.25.1.rt14.310.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm</filename>
          <sum type="sha256">107184266dc3c60a03494d48c8fb878905989bd91d0264fc3f94012d33b5027c</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="284.25.1.rt14.310.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.src.rpm">
          <filename>kernel-rt-modules-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm</filename>
          <sum type="sha256">1432081542e90e08240eae6f2a3b53fc55241bcaa781c648cdd888d4a0067f6b</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="284.25.1.rt14.310.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.src.rpm">
          <filename>kernel-rt-devel-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm</filename>
          <sum type="sha256">3adc440c143c37e58b9556e489325f627bcf9151df6fdb6b0be8cde80cfca65f</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="284.25.1.rt14.310.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.src.rpm">
          <filename>kernel-rt-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm</filename>
          <sum type="sha256">545ca9d209795376ff46d15cae44b23bdb104ff32eaecbde7216ee19f74ff288</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="284.25.1.rt14.310.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.src.rpm">
          <filename>kernel-rt-debug-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm</filename>
          <sum type="sha256">638a43c6ae4f86bf0ccc81f0f1eb06eabd7a49afd11bcc18cfd431025c77898b</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="284.25.1.rt14.310.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm</filename>
          <sum type="sha256">8aacbed8cecab285638d8bf55f6f651947452eaead0d9b304febb941276e47d1</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="284.25.1.rt14.310.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm</filename>
          <sum type="sha256">8c61f2d893b2c9fc16aa4ba46f5d40d5e539068d0da5e54caa5b7f046f06a6a0</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="284.25.1.rt14.310.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm</filename>
          <sum type="sha256">99f1e57410cf9b3067b4a0e1c297bb8fd939915ac193914d751e0ca673a2cc3b</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="284.25.1.rt14.310.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.src.rpm">
          <filename>kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm</filename>
          <sum type="sha256">aae618a108c358df3e1bb54e65b52a52f2c34c994817ad4cd6a4bca5c099d38f</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="284.25.1.rt14.310.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm</filename>
          <sum type="sha256">d5e814a04443b7022881be9c78a5fbf920bf34b6180bcf33d0eac283a10410f5</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="284.25.1.rt14.310.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm</filename>
          <sum type="sha256">e83798e139e8745aca4f193edb000c776f857ba38807267d008851ada228924b</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="284.25.1.rt14.310.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.25.1.rt14.310.el9_2.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-284.25.1.rt14.310.el9_2.x86_64.rpm</filename>
          <sum type="sha256">f065e57c3a682bcd7d9b6adcd3ac80147fd8ed14c7663270144a2d777a6bf357</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5091</id>
    <title>Important: kernel-rt security and bug fix update</title>
    <issued date="2023-09-12 00:00:00"/>
    <updated date="2023-09-14 10:00:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel-rt security and bug fix update</summary>
    <description>The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390)
* kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE (CVE-2023-3610)
* kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776)
* kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)
* kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free (CVE-2023-4147)
* kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248)
* kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001)
* kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637)
* hw: amd: Cross-Process Information Leak (CVE-2023-20593)
* kernel: bypass of shadow stack protection due to a logic error (CVE-2023-21102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel-rt: update RT source tree to the latest AlmaLinux-9.2.z3 Batch (BZ#2228482)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5091" id="RHSA-2023:5091" type="rhsa" title="RHSA-2023:5091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1637" id="CVE-2023-1637" type="cve" title="CVE-2023-1637"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-20593" id="CVE-2023-20593" type="cve" title="CVE-2023-20593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21102" id="CVE-2023-21102" type="cve" title="CVE-2023-21102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31248" id="CVE-2023-31248" type="cve" title="CVE-2023-31248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3390" id="CVE-2023-3390" type="cve" title="CVE-2023-3390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35001" id="CVE-2023-35001" type="cve" title="CVE-2023-35001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3610" id="CVE-2023-3610" type="cve" title="CVE-2023-3610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3776" id="CVE-2023-3776" type="cve" title="CVE-2023-3776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4004" id="CVE-2023-4004" type="cve" title="CVE-2023-4004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4147" id="CVE-2023-4147" type="cve" title="CVE-2023-4147"/>
      <reference href="https://bugzilla.redhat.com/2181891" id="2181891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213260" id="2213260" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213455" id="2213455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2217845" id="2217845" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2220892" id="2220892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2220893" id="2220893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225097" id="2225097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225198" id="2225198" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225239" id="2225239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225275" id="2225275" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2023-5091.html" id="ALSA-2023:5091" type="self" title="ALSA-2023:5091"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_2_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_2_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="284.30.1.rt14.315.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.src.rpm">
          <filename>kernel-rt-debug-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm</filename>
          <sum type="sha256">13b6f1bf17e3573814b877ae2cf2abfda60c6471fdc17ed11f013b3ed14fd0e8</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="284.30.1.rt14.315.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm</filename>
          <sum type="sha256">243cfe90c837c69c2fb2705b4f042444b127b4e71a0b3e03b8c4c1180f0a1ebd</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="284.30.1.rt14.315.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm</filename>
          <sum type="sha256">2595618f4f9d2b606f5c2de0a79d8437a1b72c78129be17e88ae6583d3e0ac6d</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="284.30.1.rt14.315.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm</filename>
          <sum type="sha256">2e4308661b34e11609f08cd8424f6fd5ca6dae4ef14a1f3d97d0c49ccfee6567</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="284.30.1.rt14.315.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.src.rpm">
          <filename>kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm</filename>
          <sum type="sha256">34a6bc1423687e4ec97265404a2e43689848eaca86b194bdf2044cf99e42def9</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="284.30.1.rt14.315.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm</filename>
          <sum type="sha256">3b9d1af521a676844700d5f33e0eab67e3a295ba36f95197a8f6d5a3931c64fc</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="284.30.1.rt14.315.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm</filename>
          <sum type="sha256">697880be5672a5a53e39f210d6153e8c9295e56854aaba1a9db18ef7441f7fe7</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="284.30.1.rt14.315.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm</filename>
          <sum type="sha256">6d4c88905392f01598726da19d7df641ab6febd1b828685052cbb43dfd3ea0c6</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="284.30.1.rt14.315.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.src.rpm">
          <filename>kernel-rt-core-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm</filename>
          <sum type="sha256">8b4a87d4d8aa5815ed5b8494a4ead92c7a655bd7f337792985f960bdbe4c9a1a</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="284.30.1.rt14.315.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.src.rpm">
          <filename>kernel-rt-devel-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm</filename>
          <sum type="sha256">91dc4d0d3ab87eebbd02162c21e6985f7624136b4ad57115cbf622820d0044da</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="284.30.1.rt14.315.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.src.rpm">
          <filename>kernel-rt-modules-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm</filename>
          <sum type="sha256">d568e45e88f7bbcddc6c82ad2bd7361c5985e226ebaddef28e0088fc9e834312</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="284.30.1.rt14.315.el9_2" epoch="0" arch="x86_64" src="kernel-rt-5.14.0-284.30.1.rt14.315.el9_2.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-284.30.1.rt14.315.el9_2.x86_64.rpm</filename>
          <sum type="sha256">fba4dc518c442f0efeca02036b388570e7594e3ff91ea6d3badaf86b727c71f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10274</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-11-26 00:00:00"/>
    <updated date="2024-12-03 07:57:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009)
  * kernel: USB: serial: mos7840: fix crash on resume (CVE-2024-42244)
  * kernel: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CVE-2024-50226)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10274" id="RHSA-2024:10274" type="rhsa" title="RHSA-2024:10274"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41009" id="CVE-2024-41009" type="cve" title="CVE-2024-41009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42244" id="CVE-2024-42244" type="cve" title="CVE-2024-42244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50226" id="CVE-2024-50226" type="cve" title="CVE-2024-50226"/>
      <reference href="https://bugzilla.redhat.com/2298412" id="2298412" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324876" id="2324876" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10274.html" id="ALSA-2024:10274" type="self" title="ALSA-2024:10274"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_5_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_5_default</name>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-503.15.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">008d93db9657f9e9a4160e43262313ccfce9516f88141fd329d463b296f30006</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-5.14.0-503.15.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">0ff3bf997285b587614bb5c86d16b96f6ceeacce34836f1b17a15f33a9fc56b8</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-rt-devel-5.14.0-503.15.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">339c6de9e33d38d13ded96aabf8e67778a611a9c5366115727e52d36ec489be6</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-503.15.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">39011c521798d75dbed5885182b0a99e28289b5522066b8b4b1971660f2b420a</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-503.15.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">55f6d46dbe699e3e5e5e8a05721cda77c1ab7e0d2d6283b0339b28779868b332</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-503.15.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">59f95c18708809a591bb5a40080a11aa06895e34a1939528694b34a726d834ee</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-rt-core-5.14.0-503.15.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">611832dd27b67585e0572b41a75eeb32c5df35bd455389424bfa97ec79398410</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-503.15.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">80abfc39f0d99db2e3185a0449a310d79a0425c578d6a20933166f65d18e1423</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-503.15.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">9edeaf9f4c8494a563f54793034baf23d87b824213eda217ea4cc7c62d5d5ff2</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-5.14.0-503.15.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">c04f3c1a43e421746c7052e57da410337507a6045d56f519a51eeca003e8268e</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-rt-5.14.0-503.15.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">c2a34a3193e72875c5760a44866db5055678d1da4744a9a8bebb3150e3f59c2f</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="503.15.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.15.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-503.15.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">e655428d9b729ff19a04c0b204b09c6d00a255a54b93729a152d201b167d0ea7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10384</id>
    <title>Important: tuned security update</title>
    <issued date="2024-11-26 00:00:00"/>
    <updated date="2024-12-02 10:36:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>tuned security update</summary>
    <description>The tuned packages provide a service that tunes system settings according to a selected profile.  

Security Fix(es):  

  * tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root (CVE-2024-52336)
  * tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVE-2024-52337)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10384" id="RHSA-2024:10384" type="rhsa" title="RHSA-2024:10384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52336" id="CVE-2024-52336" type="cve" title="CVE-2024-52336"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52337" id="CVE-2024-52337" type="cve" title="CVE-2024-52337"/>
      <reference href="https://bugzilla.redhat.com/2324540" id="2324540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324541" id="2324541" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10384.html" id="ALSA-2024:10384" type="self" title="ALSA-2024:10384"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_5_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_5_default</name>
        <package name="tuned-profiles-realtime" version="2.24.0" release="2.el9_5.alma.1" epoch="0" arch="noarch" src="tuned-2.24.0-2.el9_5.alma.1.src.rpm">
          <filename>tuned-profiles-realtime-2.24.0-2.el9_5.alma.1.noarch.rpm</filename>
          <sum type="sha256">3da522cd5b375c06df9a4fa8297226b17d3f192806176a2ee4382e169d4c473f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10939</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-12-11 00:00:00"/>
    <updated date="2024-12-16 15:05:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
  * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)
  * kernel: iommu: Restore lost return in iommu_report_device_fault() (CVE-2024-44994)
  * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)
  * kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook (CVE-2024-46695)
  * kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CVE-2024-49949)
  * kernel: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CVE-2024-50251)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10939" id="RHSA-2024:10939" type="rhsa" title="RHSA-2024:10939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26615" id="CVE-2024-26615" type="cve" title="CVE-2024-26615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43854" id="CVE-2024-43854" type="cve" title="CVE-2024-43854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44994" id="CVE-2024-44994" type="cve" title="CVE-2024-44994"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45018" id="CVE-2024-45018" type="cve" title="CVE-2024-45018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46695" id="CVE-2024-46695" type="cve" title="CVE-2024-46695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49949" id="CVE-2024-49949" type="cve" title="CVE-2024-49949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50251" id="CVE-2024-50251" type="cve" title="CVE-2024-50251"/>
      <reference href="https://bugzilla.redhat.com/2267355" id="2267355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309857" id="2309857" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311715" id="2311715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312083" id="2312083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320505" id="2320505" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324886" id="2324886" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-10939.html" id="ALSA-2024:10939" type="self" title="ALSA-2024:10939"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_5_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_5_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-5.14.0-503.16.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">06b24ed6ba709c7893aedac6096729badcc56ae6f53c427cd94ff8afc53803c0</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-503.16.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">0d4536f56675f91cc0132d13266c0ec255c362d608650caf4f09290614515d03</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-503.16.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">1c366f9969e015aacc4e826acd2bebaace9cfa45f4cf1b348a85fae9876af6c9</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-503.16.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">628fb1b5b5adfc64ea58d7b39ab2e0f44c1cd618280d037660ab6248dc29e58f</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-503.16.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">633436808beab986007a0cc9a36f12c70b98f3bb1b0e9a94ff2700afc483a94d</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-503.16.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">6e2e1a39fbed290548976d4dc8403f2c0cc8523ab57d261cdc09d9c6230bc356</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-rt-5.14.0-503.16.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">6f6fab4634d8fab90d7084b962e405608a0c8f7bec8bb54bffe92b0946f54a67</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-503.16.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">724d9b2372e05fe224d4ed9785ea8fbdb90eb1d4f3fe165eb07ae1ce0671334f</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-5.14.0-503.16.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">8a1cca8355bdd2740a7e5872b24e5517e2ad820b24a3ef449d55d508fda4bc07</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-503.16.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">91386780259857e916b41cd862573f48bf21cf382eb916f9a1aacfe7910118a1</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-rt-core-5.14.0-503.16.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">d860e61913fbcb0bb214a11193ada27027440ecbe6cae986fa86a6a8d9911ec0</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="503.16.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.16.1.el9_5.src.rpm">
          <filename>kernel-rt-devel-5.14.0-503.16.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">f9b6504558aab42eb3db35ea037ff68acb6d545738fb72a78f91bfa927c94805</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11486</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-12-19 00:00:00"/>
    <updated date="2025-01-13 20:04:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399)
  * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564)
  * kernel: bpf: Fix a kernel verifier crash in stacksafe() (CVE-2024-45020)
  * kernel: nfsd: ensure that nfsd4_fattr_args.context is zeroed out (CVE-2024-46697)
  * kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CVE-2024-47675)
  * kernel: bpf: Fix a sdiv overflow issue (CVE-2024-49888)
  * kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099)
  * kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110)
  * kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125)
  * kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout (CVE-2024-50124)
  * kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (CVE-2024-50115)
  * kernel: xfrm: validate new SA&amp;#39;s prefixlen using SA family when sel.family is unset (CVE-2024-50142)
  * kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister (CVE-2024-50148)
  * kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192)
  * kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CVE-2024-50255)
  * kernel: sched/numa: Fix the potential null pointer dereference in task_numa_work() (CVE-2024-50223)
  * kernel: bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11486" id="RHSA-2024:11486" type="rhsa" title="RHSA-2024:11486"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27399" id="CVE-2024-27399" type="cve" title="CVE-2024-27399"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38564" id="CVE-2024-38564" type="cve" title="CVE-2024-38564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45020" id="CVE-2024-45020" type="cve" title="CVE-2024-45020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46697" id="CVE-2024-46697" type="cve" title="CVE-2024-46697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47675" id="CVE-2024-47675" type="cve" title="CVE-2024-47675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49888" id="CVE-2024-49888" type="cve" title="CVE-2024-49888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50099" id="CVE-2024-50099" type="cve" title="CVE-2024-50099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50110" id="CVE-2024-50110" type="cve" title="CVE-2024-50110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50115" id="CVE-2024-50115" type="cve" title="CVE-2024-50115"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50124" id="CVE-2024-50124" type="cve" title="CVE-2024-50124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50125" id="CVE-2024-50125" type="cve" title="CVE-2024-50125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50142" id="CVE-2024-50142" type="cve" title="CVE-2024-50142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50148" id="CVE-2024-50148" type="cve" title="CVE-2024-50148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50192" id="CVE-2024-50192" type="cve" title="CVE-2024-50192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50223" id="CVE-2024-50223" type="cve" title="CVE-2024-50223"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50255" id="CVE-2024-50255" type="cve" title="CVE-2024-50255"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50262" id="CVE-2024-50262" type="cve" title="CVE-2024-50262"/>
      <reference href="https://bugzilla.redhat.com/2280462" id="2280462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293429" id="2293429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311717" id="2311717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312085" id="2312085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320254" id="2320254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320517" id="2320517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323904" id="2323904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323930" id="2323930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323937" id="2323937" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323944" id="2323944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323955" id="2323955" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324315" id="2324315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324332" id="2324332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324612" id="2324612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324867" id="2324867" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324868" id="2324868" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324892" id="2324892" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-11486.html" id="ALSA-2024:11486" type="self" title="ALSA-2024:11486"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_5_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_5_default</name>
        <package name="kernel-rt-core" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-rt-core-5.14.0-503.19.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">4f9fbbbc5ae39e198ad05ceea6813b1480b7c00b27c04d9a4da0ad30b99aa148</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-503.19.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">58cab3faad132a2b94921aff5faade01511d0d8283960476e70a8c405aeeb182</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-rt-5.14.0-503.19.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">6847051197ccd1eae01a22c972a9d4714b44f982624d248014f4ee11f1018b39</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-503.19.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">68d91f65a471a99fe6469da0658b18117ff4d03c102f1605e0e4056a8fb22ac5</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-503.19.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">6b3f31327c3f821d9bf3e76174de296590cc84a976118f1f115822ffef0de69d</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-5.14.0-503.19.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">83cf185c5e2b020d56f2b26c1c7055d2e2cf5ed86c2647e2cbb3c2c6860e58d2</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-503.19.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">9d8e97272fd4419d39324c5a49d5b883a53b2af5f40271e3341d653092af0d44</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-503.19.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">9dede13c735ae8ef158ea9f190fd6c8ff6b3ac7d23623005ef1541d8beb4580f</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-503.19.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">a597bf9118cf3a04d07052e773200a87a39e85fbb48d0ec2e0bdcfbc94dccf55</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-rt-devel-5.14.0-503.19.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">bb546b2717ee9536ca3c12eb6a01d83480076cd9e2cdf9bb5dc6a17b85f5c6d1</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-503.19.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">d748c2e4f61dec7c44470472da46d99ca93499a7a56040b136045d6daafde084</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="503.19.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.19.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-5.14.0-503.19.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">f94917e62737788d67914c1342b6bdee71f866a3510bf9763529313467322523</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2394</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2024-04-30 00:00:00"/>
    <updated date="2024-11-03 22:05:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546)
  * kernel: multiple use-after-free vulnerabilities (CVE-2024-1086, CVE-2023-3567, CVE-2023-4133, CVE-2023-6932, CVE-2023-39198, CVE-2023-51043, CVE-2023-51779, CVE-2023-51780, CVE-2024-1085, CVE-2024-26582)
  * kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
  * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480)
  * kernel: multiple NULL pointer dereference vulnerabilities (CVE-2022-38096, CVE-2023-6622, CVE-2023-6915, CVE-2023-42754, CVE-2023-46862, CVE-2023-52574, CVE-2024-0841, CVE-2023-52448)
  * kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c (CVE-2022-45934)
  * kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() (CVE-2023-6040)
  * kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF (CVE-2023-6531)
  * kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (CVE-2023-6931)
  * kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses (CVE-2023-24023)
  * kernel: irdma: Improper access control (CVE-2023-25775)
  * Kernel: double free in hci_conn_cleanup of the bluetooth subsystem (CVE-2023-28464)
  * kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (CVE-2023-28866)
  * kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl (CVE-2023-31083)
  * kernel: multiple out-of-bounds read vulnerabilities (CVE-2023-37453, CVE-2023-39189, CVE-2023-39193, CVE-2023-6121, CVE-2023-39194)
  * kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP (CVE-2023-42756)
  * kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write (CVE-2023-45863)
  * kernel: smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434)
  * kernel: mm/sparsemem: fix race in accessing memory_section-&gt;usage (CVE-2023-52489)
  * kernel: net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522)
  * kernel: multiple memory leak vulnerabilities (CVE-2023-52529, CVE-2023-52581)
  * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
  * kernel: net/core: kernel crash in ETH_P_1588 flow dissector (CVE-2023-52580)
  * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
  * kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (CVE-2024-0565)
  * kernel: tls: race between async notify and socket close (CVE-2024-26583)
  * kernel: tls: handle backlogging of crypto requests (CVE-2024-26584)
  * kernel: tls: race between tx work scheduling and socket close (CVE-2024-26585)
  * kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586)
  * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
  * kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602)
  * kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-26609)
  * kernel: local dos vulnerability in scatterwalk_copychunks (CVE-2023-6176)
  * kernel: perf/x86/lbr: Filter vsyscall addresses (CVE-2023-52476)
  * kernel: netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620)
  * kernel: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVE-2024-26633)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2394" id="RHSA-2024:2394" type="rhsa" title="RHSA-2024:2394"/>
      <reference href="https://bugzilla.redhat.com/1918601" id="1918601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2049700" id="2049700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133452" id="2133452" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151959" id="2151959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2177759" id="2177759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2185519" id="2185519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188102" id="2188102" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210024" id="2210024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213132" id="2213132" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218332" id="2218332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219359" id="2219359" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221039" id="2221039" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221463" id="2221463" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221702" id="2221702" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226777" id="2226777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226787" id="2226787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226788" id="2226788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231410" id="2231410" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2239845" id="2239845" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2239848" id="2239848" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244720" id="2244720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2246980" id="2246980" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250043" id="2250043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2252731" id="2252731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253034" id="2253034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253632" id="2253632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254961" id="2254961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254982" id="2254982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255283" id="2255283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255498" id="2255498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256490" id="2256490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256822" id="2256822" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257682" id="2257682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258013" id="2258013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258518" id="2258518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2260005" id="2260005" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2262126" id="2262126" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2262127" id="2262127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265285" id="2265285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265517" id="2265517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265518" id="2265518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265519" id="2265519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265520" id="2265520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265645" id="2265645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265646" id="2265646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265653" id="2265653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267041" id="2267041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267695" id="2267695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267750" id="2267750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267758" id="2267758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267760" id="2267760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267761" id="2267761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267788" id="2267788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267795" id="2267795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269189" id="2269189" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269217" id="2269217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270080" id="2270080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270118" id="2270118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270883" id="2270883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2394.html" id="ALSA-2024:2394" type="self" title="ALSA-2024:2394"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2020-26555.html" id="CVE-2020-26555" type="cve" title="CVE-2020-26555"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-0480.html" id="CVE-2022-0480" type="cve" title="CVE-2022-0480"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-38096.html" id="CVE-2022-38096" type="cve" title="CVE-2022-38096"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-45934.html" id="CVE-2022-45934" type="cve" title="CVE-2022-45934"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-24023.html" id="CVE-2023-24023" type="cve" title="CVE-2023-24023"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-25775.html" id="CVE-2023-25775" type="cve" title="CVE-2023-25775"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-28464.html" id="CVE-2023-28464" type="cve" title="CVE-2023-28464"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-28866.html" id="CVE-2023-28866" type="cve" title="CVE-2023-28866"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-31083.html" id="CVE-2023-31083" type="cve" title="CVE-2023-31083"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-3567.html" id="CVE-2023-3567" type="cve" title="CVE-2023-3567"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-37453.html" id="CVE-2023-37453" type="cve" title="CVE-2023-37453"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39189.html" id="CVE-2023-39189" type="cve" title="CVE-2023-39189"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39193.html" id="CVE-2023-39193" type="cve" title="CVE-2023-39193"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39194.html" id="CVE-2023-39194" type="cve" title="CVE-2023-39194"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-39198.html" id="CVE-2023-39198" type="cve" title="CVE-2023-39198"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-4133.html" id="CVE-2023-4133" type="cve" title="CVE-2023-4133"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-42754.html" id="CVE-2023-42754" type="cve" title="CVE-2023-42754"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-42756.html" id="CVE-2023-42756" type="cve" title="CVE-2023-42756"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-45863.html" id="CVE-2023-45863" type="cve" title="CVE-2023-45863"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-46862.html" id="CVE-2023-46862" type="cve" title="CVE-2023-46862"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-51043.html" id="CVE-2023-51043" type="cve" title="CVE-2023-51043"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-51779.html" id="CVE-2023-51779" type="cve" title="CVE-2023-51779"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-51780.html" id="CVE-2023-51780" type="cve" title="CVE-2023-51780"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52434.html" id="CVE-2023-52434" type="cve" title="CVE-2023-52434"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52448.html" id="CVE-2023-52448" type="cve" title="CVE-2023-52448"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52450.html" id="CVE-2023-52450" type="cve" title="CVE-2023-52450"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52476.html" id="CVE-2023-52476" type="cve" title="CVE-2023-52476"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52489.html" id="CVE-2023-52489" type="cve" title="CVE-2023-52489"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52522.html" id="CVE-2023-52522" type="cve" title="CVE-2023-52522"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52529.html" id="CVE-2023-52529" type="cve" title="CVE-2023-52529"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52574.html" id="CVE-2023-52574" type="cve" title="CVE-2023-52574"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52578.html" id="CVE-2023-52578" type="cve" title="CVE-2023-52578"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52580.html" id="CVE-2023-52580" type="cve" title="CVE-2023-52580"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52581.html" id="CVE-2023-52581" type="cve" title="CVE-2023-52581"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52597.html" id="CVE-2023-52597" type="cve" title="CVE-2023-52597"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52610.html" id="CVE-2023-52610" type="cve" title="CVE-2023-52610"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-52620.html" id="CVE-2023-52620" type="cve" title="CVE-2023-52620"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6040.html" id="CVE-2023-6040" type="cve" title="CVE-2023-6040"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6121.html" id="CVE-2023-6121" type="cve" title="CVE-2023-6121"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6176.html" id="CVE-2023-6176" type="cve" title="CVE-2023-6176"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6531.html" id="CVE-2023-6531" type="cve" title="CVE-2023-6531"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6546.html" id="CVE-2023-6546" type="cve" title="CVE-2023-6546"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6622.html" id="CVE-2023-6622" type="cve" title="CVE-2023-6622"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6915.html" id="CVE-2023-6915" type="cve" title="CVE-2023-6915"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6931.html" id="CVE-2023-6931" type="cve" title="CVE-2023-6931"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6932.html" id="CVE-2023-6932" type="cve" title="CVE-2023-6932"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-0565.html" id="CVE-2024-0565" type="cve" title="CVE-2024-0565"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-0841.html" id="CVE-2024-0841" type="cve" title="CVE-2024-0841"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-1085.html" id="CVE-2024-1085" type="cve" title="CVE-2024-1085"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-1086.html" id="CVE-2024-1086" type="cve" title="CVE-2024-1086"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-25744.html" id="CVE-2024-25744" type="cve" title="CVE-2024-25744"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26582.html" id="CVE-2024-26582" type="cve" title="CVE-2024-26582"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26583.html" id="CVE-2024-26583" type="cve" title="CVE-2024-26583"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26584.html" id="CVE-2024-26584" type="cve" title="CVE-2024-26584"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26585.html" id="CVE-2024-26585" type="cve" title="CVE-2024-26585"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26586.html" id="CVE-2024-26586" type="cve" title="CVE-2024-26586"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26593.html" id="CVE-2024-26593" type="cve" title="CVE-2024-26593"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26602.html" id="CVE-2024-26602" type="cve" title="CVE-2024-26602"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26609.html" id="CVE-2024-26609" type="cve" title="CVE-2024-26609"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26633.html" id="CVE-2024-26633" type="cve" title="CVE-2024-26633"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26671.html" id="CVE-2024-26671" type="cve" title="CVE-2024-26671"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.13.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">0574e34786bbb30924da294748c37f082494726f212750e13bc4ba3e4a3ce622</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.13.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">39c8d9f081f2fceaed2c3cad6541c98eb746a66163b0e5e60bb6d385b9b36d65</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.13.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">7544d5760c1098484ed469724292dda66711508f72d83b33f1a6933e1ef61194</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.13.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">86befdc43a3ae2e344f57a26f0e5214bc29b0ad61010d635853722ff0b6e9d31</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.13.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">8f8e8620d425cb3aae2a03d77944ec0d4f3a6e5785726fe3741368b703cc0723</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.13.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">980304318c9da859c1f2b3f010f7cd9e3abe5e78724259f133ef592bcb03f800</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.13.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">a854f7a188c733cfa2473c36a9f86d5846b3f349043f597e2092bf491e0e06b5</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.13.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">cc250b8ce941aa7fac085df5637a6bd8044b9576c8b17056629ed3ab1ec800a3</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.13.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">df0e66a4c9aae650a4fe5725725d4e21738bb8086f85993a1ae7e346612262a4</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.13.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">e228632bf3103ca70f48470b0deb32770aba0cd2907f33fe86e1d1d9632ca529</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.13.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">e30c138ba2961b31fcb20724565192c1d9bf423cba51807d238b6e48c8a010dd</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.13.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.13.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.13.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">e9174bb3a42f0287f6764758d40b3a10d66ebc6b8d4717653b9a283edf109217</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2758</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-05-08 00:00:00"/>
    <updated date="2024-11-03 22:08:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
  * CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit (AMD-SN-3008,CVE-2024-25742,CVE-2024-25743)


Bug Fix(es):  

  * ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests (JIRA:AlmaLinux-27009)
  * mm/mglru: fix underprotected page cache (JIRA:AlmaLinux-29235)
  * [EMR] [TBOOT OS] SUT could not go to S3 state with AlmaLinux 9.2 Tboot OS One CPU return -16 running BUSY (JIRA:AlmaLinux-29673)
  * system hangs completely - NMI not possible (JIRA:AlmaLinux-30678)
  * ice 0000:6f:00.0: PTP failed to get time (JIRA:AlmaLinux-30110)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2758" id="RHSA-2024:2758" type="rhsa" title="RHSA-2024:2758"/>
      <reference href="https://bugzilla.redhat.com/2250843" id="2250843" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270836" id="2270836" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-2758.html" id="ALSA-2024:2758" type="self" title="ALSA-2024:2758"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-5090.html" id="CVE-2023-5090" type="cve" title="CVE-2023-5090"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2023-6240.html" id="CVE-2023-6240" type="cve" title="CVE-2023-6240"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-25742.html" id="CVE-2024-25742" type="cve" title="CVE-2024-25742"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-25743.html" id="CVE-2024-25743" type="cve" title="CVE-2024-25743"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.16.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">0ca7137938f847d3abbdf53e66f0404da77d041316e7d402e0e14cfcf1aa9e1b</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.16.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">185a4b7f4096b55a678a8e2a72b621c77e53124c5bcb30647e1b1738d044020e</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.16.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">31a0c58bc6c2d69d074774c5f30259ebd1c03adff6ab25dfc834c606c47df790</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.16.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">39b35cb5404df79535ca49f149593a3a5f5db915fd9f6e6a5010beccbe59d73d</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.16.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">59423d77b342c445eb748b3dd917b8bcaf9a0413ef4bae8c0ccc1444f034de9b</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.16.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">63d350fbbd57bcad5b2564999af3ab3208bcc07efacd013eeb997f8d5c6e0ef5</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.16.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">836aae52ecaea7c10f88bd3c619eb19aaf8f53ac883c2a0b1f622f2a4d071a7a</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.16.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">97ed41a18d77d0364cfb6a4aa88f6f56a754c165984b5a7dfcf8b96d66a904dd</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.16.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">ac70bb96a3c2a9c661976ebf81cdf5244f9fe96a3b2fa9b4a2c6d207a7aa3b88</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.16.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">bdf0b6c8ff822f9a334b020d9b4c44f67b009c182722b5288b6445a6aec16f68</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.16.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">d4ea228991bb1ea15c53793b5b643a59c8b2cac0024b3ada122bf9d4d7dd7e3d</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.16.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.16.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.16.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">eef3443bbc6b1f60a0b2c67cd4006efe50ccab193d0f1c6e140fdd59476a4e3b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3306</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-11-03 22:11:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
  * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
  * kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673)
  * kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3306" id="RHSA-2024:3306" type="rhsa" title="RHSA-2024:3306"/>
      <reference href="https://bugzilla.redhat.com/2270879" id="2270879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270881" id="2270881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272816" id="2272816" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273423" id="2273423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3306.html" id="ALSA-2024:3306" type="self" title="ALSA-2024:3306"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26642.html" id="CVE-2024-26642" type="cve" title="CVE-2024-26642"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26643.html" id="CVE-2024-26643" type="cve" title="CVE-2024-26643"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26673.html" id="CVE-2024-26673" type="cve" title="CVE-2024-26673"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-26804.html" id="CVE-2024-26804" type="cve" title="CVE-2024-26804"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-35890.html" id="CVE-2024-35890" type="cve" title="CVE-2024-35890"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-core" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.18.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">07fcc35c11abd31fa973fc47eb054f3e1bef4fdede8bdb80dfff5f96ac43ecec</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.18.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">349a12cdbf9dd5374bdc378d68562e395423f3752883972baa2220cf676efff4</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.18.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">50e344691c8e0bc769c9453310efb952b8c30ca9012cb8e30d26c0e92cf8cc6a</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.18.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">68e960b7125c09588fe6e6503fe30acb2581f0f4a14f3c25212d286d6f42b6a6</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.18.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">97cb13b0896927e8fbf1e16d2457e7aab579b47df3e13c008ab9ac85977fdfe4</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.18.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">aef47e4465db044e1a366dff9e044efd4574347f7bd3ed771f1a0e7dd6a4aab2</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.18.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">ccbd37e033d030d10b4c9f5468321142fdefc8364a04660ec56d6d01dcccaf94</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.18.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">ce4afd6618942a49c7c9202e0a471ff8f58ac223bcdb2d33e418490295def0d8</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.18.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">dff6c896995432abf5861cdc2d39e9863a0c289f5a01a39b82520a220e6afccc</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.18.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">e2f7a44408ba8c26494e564d47d49c0a326c92d6892f308d42c37b9705e654a1</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.18.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">e470cc541259d14ea599d6c41315698cf55e20852bb480ff38b424778395fedf</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.18.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.18.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.18.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">efbe9f0d01fdc6318deb9beabd76b780d8ce3c9641bbe0c737a5298e1b75a166</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3619</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-06-05 00:00:00"/>
    <updated date="2024-11-03 22:14:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
  * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3619" id="RHSA-2024:3619" type="rhsa" title="RHSA-2024:3619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26735" id="CVE-2024-26735" type="cve" title="CVE-2024-26735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26993" id="CVE-2024-26993" type="cve" title="CVE-2024-26993"/>
      <reference href="https://bugzilla.redhat.com/2273278" id="2273278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278314" id="2278314" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-3619.html" id="ALSA-2024:3619" type="self" title="ALSA-2024:3619"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.20.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">0f508e2bf3c5c01b29d3f6d8b04121fedc652f3e049fe1f0a877aca07a72d483</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.20.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">14a48bae3fdcc84a261fa3fda77c4d6d3c56d81f54ad02818033f544efc2bc0f</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.20.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">210ecb6f263838b8097130af892315322166873e528df05bc0cdad22e9d98c66</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.20.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">385cfaa0e11a1758c782557d9bb0d73209c02931e11cd379e9ef43fcabfc604e</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.20.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">67207a352e47654f7c84f297ebc261dc088a09030a76667253f1b9267b3ff035</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.20.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">7988a48fd375d9c64c7e11f94e6e2bfd1c6cd377c45387be2b37a5a86fb8d4f2</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.20.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">8f8f30d58fec20e96702de8fb689d6795e6d580a5ef6cec92b9f80e69d8dcf25</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.20.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">9495151ae0190818253645da94553960db6237bb424bed6a8d997cd01817c824</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.20.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">aff50c8b7bbe00ffe8d29e7cee83eadd75affa75b273766d3cda8039dca17db5</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.20.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">c3fed4a99fb6ebb65b49af51015f2fdc9edf227c171e814fa777215320a98268</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.20.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">c6ea9eb7abcfaf1306f9fdc6732fa953c9ef970788c49e63ae80751f8e456b5a</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.20.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.20.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.20.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">f74efac50969925670506b83128bf2853d9f20f2ee2d4fb6f9aead6f6539d16e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4349</id>
    <title>Moderate: kernel security and bug fix update</title>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-11-03 22:17:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (CVE-2023-52626)
  * kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset (CVE-2024-26801)
  * kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974)
  * kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393)
  * kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
  * kernel: smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870)
  * kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960)
  * kernel: net: hns3: do not allow call hns3_nic_net_open repeatedly (CVE-2021-47400)


Bug Fix(es):  

  * cifs - kernel panic with cifs_put_smb_ses (JIRA:AlmaLinux-28943)
  * BUG: unable to handle page fault for address: ff16bf752f593ff8 [almalinux-9.4.z] (JIRA:AlmaLinux-35672)
  * [HPE 9.4 Bug] Request merge of AMD address translation library patch series [almalinux-9.4.z] (JIRA:AlmaLinux-36220)
  * [AlmaLinux9] kernel BUG at lib/list_debug.c:51! [almalinux-9.4.z] (JIRA:AlmaLinux-36687)
  * ice: DPLL-related fixes [almalinux-9.4.z] (JIRA:AlmaLinux-36716)
  * CNB95: net/sched: update TC core to upstream v6.8 [almalinux-9.4.z] (JIRA:AlmaLinux-37641)
  * IPv6: SR: backport fixes from upstream [almalinux-9.4.z] (JIRA:AlmaLinux-37669)
  * [RFE] Backport tmpfs noswap mount option [almalinux-9.4.z] (JIRA:AlmaLinux-38252)
  * Isolated cores causing issues on latest AlmaLinux9.4 kernel and not functioning as desired. [almalinux-9.4.z] (JIRA:AlmaLinux-38595)
  * [ice] Add automatic VF reset on Tx MDD events [almalinux-9.4.z] (JIRA:AlmaLinux-39083)
  * [HPEMC AlmaLinux 9.4 REGRESSION] turbostat: turbostat broken on 10+ sockets. [almalinux-9.4.z] (JIRA:AlmaLinux-34953)
  * bnx2x: fix crashes in PCI error handling, resource leaks [almalinux-9.4.z] (JIRA:AlmaLinux-43272)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4349" id="RHSA-2024:4349" type="rhsa" title="RHSA-2024:4349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47400" id="CVE-2021-47400" type="cve" title="CVE-2021-47400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52626" id="CVE-2023-52626" type="cve" title="CVE-2023-52626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52667" id="CVE-2023-52667" type="cve" title="CVE-2023-52667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26801" id="CVE-2024-26801" type="cve" title="CVE-2024-26801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26974" id="CVE-2024-26974" type="cve" title="CVE-2024-26974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27393" id="CVE-2024-27393" type="cve" title="CVE-2024-27393"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35870" id="CVE-2024-35870" type="cve" title="CVE-2024-35870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35960" id="CVE-2024-35960" type="cve" title="CVE-2024-35960"/>
      <reference href="https://bugzilla.redhat.com/2271680" id="2271680" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273429" id="2273429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278354" id="2278354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280745" id="2280745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281350" id="2281350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281740" id="2281740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281920" id="2281920" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282336" id="2282336" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4349.html" id="ALSA-2024:4349" type="self" title="ALSA-2024:4349"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.24.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">049afbe43594a3a2a8485d586f1f54cb79fa05db1911151f7d065351733f608e</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.24.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">1edeeed4940358db12e56491b7f0075c13126271c89bfb074883a0495d3ed01b</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.24.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">3d94d4cd922d8348ef2aae803c7b185f6ef6c6f0f184b1f0c88467a027471c86</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.24.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">6b507b326f5dbb4934260e1478431a7afaae7c24863d16aa85933c029f04c914</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.24.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">779a0a86b1436aab553ce577eff94096912bf5de6114c9e25b9be517fe1126aa</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.24.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">91255d315ccb42d07a48f0978df599e704c0ffae030a9c6822a216aa43c1d52e</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.24.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">a542332805131de0dac3187ac04804e6b3ac9afa1e1b71f3f386cce2df926bbb</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.24.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">c1ebd8814dbf6a92350995261312943675b6696ffef06c158e0c1845a4c06d1d</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.24.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">c2f7a8a30345657018c61c9cde95aac67230f6d70e6ab185d6a9bbd0808848a9</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.24.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">d15696ea8ee40c8c271f5cbe061c1a3b2a7e736833e54eab603d4a96856c13b5</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.24.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">e0bd661252228e81bebeefcb5332182f44210281bd1d01b1f0e44a584b40a70e</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.24.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.24.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.24.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">efcc1468d5717e93d3f8d883a996162a7ff3cf37c1c9c66df87667b55036a2c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4583</id>
    <title>Important: kernel security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-11-03 22:20:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
  * kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (CVE-2021-47548)
  * kernel: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (CVE-2021-47596)
  * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
  * kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (CVE-2023-52638)
  * kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (CVE-2024-26783)
  * kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (CVE-2024-26858)
  * kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)
  * kernel: nvme: fix reconnection fail due to reserved tag allocation (CVE-2024-27435)
  * kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958)
  * kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (CVE-2024-36904)
  * kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (CVE-2024-38543)
  * kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586)
  * kernel: net: micrel: Fix receiving the timestamp in the frame for lan8841 (CVE-2024-38593)
  * kernel: netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270)
  * kernel: octeontx2-af: avoid off-by-one read from userspace (CVE-2024-36957)
  * kernel: blk-cgroup: fix list corruption from resetting io stat (CVE-2024-38663)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4583" id="RHSA-2024:4583" type="rhsa" title="RHSA-2024:4583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47548" id="CVE-2021-47548" type="cve" title="CVE-2021-47548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47596" id="CVE-2021-47596" type="cve" title="CVE-2021-47596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48627" id="CVE-2022-48627" type="cve" title="CVE-2022-48627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52638" id="CVE-2023-52638" type="cve" title="CVE-2023-52638"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26783" id="CVE-2024-26783" type="cve" title="CVE-2024-26783"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26858" id="CVE-2024-26858" type="cve" title="CVE-2024-26858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27397" id="CVE-2024-27397" type="cve" title="CVE-2024-27397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27435" id="CVE-2024-27435" type="cve" title="CVE-2024-27435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35958" id="CVE-2024-35958" type="cve" title="CVE-2024-35958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36270" id="CVE-2024-36270" type="cve" title="CVE-2024-36270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36886" id="CVE-2024-36886" type="cve" title="CVE-2024-36886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36904" id="CVE-2024-36904" type="cve" title="CVE-2024-36904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36957" id="CVE-2024-36957" type="cve" title="CVE-2024-36957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38543" id="CVE-2024-38543" type="cve" title="CVE-2024-38543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38586" id="CVE-2024-38586" type="cve" title="CVE-2024-38586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38593" id="CVE-2024-38593" type="cve" title="CVE-2024-38593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38663" id="CVE-2024-38663" type="cve" title="CVE-2024-38663"/>
      <reference href="https://bugzilla.redhat.com/2267509" id="2267509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273082" id="2273082" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273466" id="2273466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275735" id="2275735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277238" id="2277238" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280434" id="2280434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281131" id="2281131" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281925" id="2281925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283401" id="2283401" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284541" id="2284541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284581" id="2284581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293230" id="2293230" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293380" id="2293380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293402" id="2293402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293456" id="2293456" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293653" id="2293653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294225" id="2294225" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4583.html" id="ALSA-2024:4583" type="self" title="ALSA-2024:4583"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.26.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">365a862ca7d9b5d244cddb59f7325e46adae401ec953592dd7b7fb4a3f98f749</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.26.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">4799f696eb697a7bd1dd7992e2b5eacaa6b4f1df9b986fd0efcd10a9bffd2eb2</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.26.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">4d3472677dd06b5d4ac196ae5d71777fdf47d986512b68215123e12b6ec06a39</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.26.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">5f676f61d4d7f581da5feb84ff5a816d817cbe290229e678d8191748502b298d</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.26.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">6f0157390ace881f13800058e29e48395bf4f4cc488c0a6c79f39d3f8d95bd4a</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.26.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">70ed4f95c722af29c0d7562f14939c9d209ad7a7321220174697ec460022eb13</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.26.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">831e450d8e08076d00a1ebc3af1860044a5b2286d94ddca99aa3dcb47bc3e697</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.26.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">b3880e67d2bbba2dfaf8900e2de60de1f857bb105cc39094278b73a8ce8ea86b</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.26.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">b48aad31b790a5275d1dd3b1679f7deada9fe5c7fcc8555c3698e1cf74b2491e</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.26.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">bc9adcd5ad25f96249042ce284e6b9b30fc1849bebbc938dddd90a07d2d6c5f5</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.26.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">cac15c8929170fcfc653af1d96e83df29a7a50b4574761a21e450758719b77ab</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="427.26.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.26.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.26.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">f6654dcb787453d55339069e077e3eed48a4c74176b7df29e995748e28ebc7b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4928</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-07-31 00:00:00"/>
    <updated date="2024-11-03 22:23:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned (CVE-2023-52458)
  * kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (CVE-2024-26773)
  * kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (CVE-2024-26737)
  * kernel: dm: call the resume method on internal suspend (CVE-2024-26880)
  * kernel: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (CVE-2024-26852)
  * kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
  * kernel: nfp: flower: handle acti_netdevs allocation failure (CVE-2024-27046)
  * kernel: octeontx2-af: Use separate handlers for interrupts (CVE-2024-27030)
  * kernel: icmp: prevent possible NULL dereferences from icmp_build_probe() (CVE-2024-35857)
  * kernel: mlxbf_gige: call request_irq() after NAPI initialized (CVE-2024-35907)
  * kernel: mlxbf_gige: stop interface during shutdown (CVE-2024-35885)
  * kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (CVE-2023-52809)
  * kernel: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (CVE-2021-47459)
  * kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (CVE-2024-36924)
  * kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (CVE-2024-36952)
  * kernel: net: amd-xgbe: Fix skb data length underflow (CVE-2022-48743)
  * kernel: epoll: be better about file lifetimes (CVE-2024-38580)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4928" id="RHSA-2024:4928" type="rhsa" title="RHSA-2024:4928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47459" id="CVE-2021-47459" type="cve" title="CVE-2021-47459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48743" id="CVE-2022-48743" type="cve" title="CVE-2022-48743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52458" id="CVE-2023-52458" type="cve" title="CVE-2023-52458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52809" id="CVE-2023-52809" type="cve" title="CVE-2023-52809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26737" id="CVE-2024-26737" type="cve" title="CVE-2024-26737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26773" id="CVE-2024-26773" type="cve" title="CVE-2024-26773"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26852" id="CVE-2024-26852" type="cve" title="CVE-2024-26852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26880" id="CVE-2024-26880" type="cve" title="CVE-2024-26880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26982" id="CVE-2024-26982" type="cve" title="CVE-2024-26982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27030" id="CVE-2024-27030" type="cve" title="CVE-2024-27030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27046" id="CVE-2024-27046" type="cve" title="CVE-2024-27046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35857" id="CVE-2024-35857" type="cve" title="CVE-2024-35857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35885" id="CVE-2024-35885" type="cve" title="CVE-2024-35885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35907" id="CVE-2024-35907" type="cve" title="CVE-2024-35907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36924" id="CVE-2024-36924" type="cve" title="CVE-2024-36924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36952" id="CVE-2024-36952" type="cve" title="CVE-2024-36952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38580" id="CVE-2024-38580" type="cve" title="CVE-2024-38580"/>
      <reference href="https://bugzilla.redhat.com/2265794" id="2265794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273236" id="2273236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273274" id="2273274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275690" id="2275690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275761" id="2275761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278337" id="2278337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278435" id="2278435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278473" id="2278473" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281247" id="2281247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281647" id="2281647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281700" id="2281700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282669" id="2282669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282898" id="2282898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284506" id="2284506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284598" id="2284598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293316" id="2293316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293412" id="2293412" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-4928.html" id="ALSA-2024:4928" type="self" title="ALSA-2024:4928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.28.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">0ac92ce4e6e93d5046a6634b2cdc716a1c278133e75d415a21a030fbbaf45924</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.28.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">13ecfe29c6d60f94b68aba09e9cc15688c410fe3eb54e6b7b56fb8713d93cd7f</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.28.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">1b6857bd723516014891acbc20efb54a07c66f28c2d83f50e9443a3d04f92037</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.28.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">1bde4711d42af5316fb86db533b6c7162dc0f416c7483cc1880a5fe0b2667320</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.28.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">383bff16021306e19d10bd3cb65396057774aefa01b495312d46c8606217b10e</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.28.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">744ab72880ae24a8bd589b01fb6323a2192e38b386f4ee3dd6525a00c01b319d</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.28.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">987ae0c3eaa583d32a0c4374970a23eea18e6903c48b45865f2e9e7d46fb68f4</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.28.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">9ab67dc8fe15186c3a45e63ed4d94d5ed83f0839ddf1fdd1801f5fc3db82a5bd</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.28.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">b65d9a963866219f0eca45f1a1d2a3b0afd4ea3f589ab488c366ef9b4a14d231</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.28.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">ccefab87f736e4dcaa9eb2782bb1c6bdb216388ce992421d2c58068fb2d3991d</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.28.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">fbdf038b409eff5aab108de09c035318d7ceb049b274eee6aa56ce131d2205d9</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="427.28.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.28.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.28.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">fd1a02ae5267bf87538113385320d6eb2ef7e5d9f7f2deb936a383a7930aa790</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5363</id>
    <title>Important: kernel security update</title>
    <issued date="2024-08-14 00:00:00"/>
    <updated date="2024-11-03 22:26:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  
Security Fix(es):  

  * kernel: phy: (CVE-2024-26600)
  * kernel: netfilter: multiple flaws (CVE-2024-26808, CVE-2024-27065, CVE-2024-35899, CVE-2024-36005)
  * kernel: cifs: (CVE-2024-26828)
  * kernel: wifi: multiple flaws (CVE-2024-26897, CVE-2024-27052, CVE-2024-27049, CVE-2023-52651, CVE-2024-35789, CVE-2024-27434, CVE-2024-35845, CVE-2024-35937, CVE-2024-36941, CVE-2024-36922, CVE-2024-36921, CVE-2024-38575)
  * kernel: nfs: (CVE-2024-26868)
  * kernel: igc: (CVE-2024-26853)
  * kernel: dmaengine/idxd: (CVE-2024-21823)
  * kernel: ipv6: multiple flaws (CVE-2024-27417, CVE-2024-35969, CVE-2024-36903, CVE-2024-40961)
  * kernel: vt: (CVE-2024-35823)
  * kernel: efi: (CVE-2024-35800)
  * kernel: mlxsw: (CVE-2024-35852)
  * kernel: eeprom: (CVE-2024-35848)
  * kernel: ice: (CVE-2024-35911)
  * kernel: platform/x86: (CVE-2023-52864)
  * kernel: i40e: (CVE-2024-36020)
  * kernel: rtnetlink: (CVE-2024-36017)
  * kernel: net: multiple flaws (CVE-2024-36929, CVE-2024-36971, CVE-2021-47606, CVE-2024-38558, CVE-2024-40928, CVE-2024-40954)
  * kernel: ipvlan: (CVE-2024-33621)
  * kernel: tcp: (CVE-2024-37356)
  * kernel: virtio: (CVE-2024-37353)
  * kernel: tls: (CVE-2024-36489)
  * kernel: cxl/region: (CVE-2024-38391)
  * kernel: bonding: (CVE-2024-39487)
  * kernel: netns: (CVE-2024-40958)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5363" id="RHSA-2024:5363" type="rhsa" title="RHSA-2024:5363"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47606" id="CVE-2021-47606" type="cve" title="CVE-2021-47606"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52651" id="CVE-2023-52651" type="cve" title="CVE-2023-52651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52864" id="CVE-2023-52864" type="cve" title="CVE-2023-52864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21823" id="CVE-2024-21823" type="cve" title="CVE-2024-21823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26600" id="CVE-2024-26600" type="cve" title="CVE-2024-26600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26808" id="CVE-2024-26808" type="cve" title="CVE-2024-26808"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26828" id="CVE-2024-26828" type="cve" title="CVE-2024-26828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26853" id="CVE-2024-26853" type="cve" title="CVE-2024-26853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26868" id="CVE-2024-26868" type="cve" title="CVE-2024-26868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26897" id="CVE-2024-26897" type="cve" title="CVE-2024-26897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27049" id="CVE-2024-27049" type="cve" title="CVE-2024-27049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27052" id="CVE-2024-27052" type="cve" title="CVE-2024-27052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27065" id="CVE-2024-27065" type="cve" title="CVE-2024-27065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27417" id="CVE-2024-27417" type="cve" title="CVE-2024-27417"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27434" id="CVE-2024-27434" type="cve" title="CVE-2024-27434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33621" id="CVE-2024-33621" type="cve" title="CVE-2024-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35789" id="CVE-2024-35789" type="cve" title="CVE-2024-35789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35800" id="CVE-2024-35800" type="cve" title="CVE-2024-35800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35823" id="CVE-2024-35823" type="cve" title="CVE-2024-35823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35845" id="CVE-2024-35845" type="cve" title="CVE-2024-35845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35848" id="CVE-2024-35848" type="cve" title="CVE-2024-35848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35852" id="CVE-2024-35852" type="cve" title="CVE-2024-35852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35899" id="CVE-2024-35899" type="cve" title="CVE-2024-35899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35911" id="CVE-2024-35911" type="cve" title="CVE-2024-35911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35937" id="CVE-2024-35937" type="cve" title="CVE-2024-35937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35969" id="CVE-2024-35969" type="cve" title="CVE-2024-35969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36005" id="CVE-2024-36005" type="cve" title="CVE-2024-36005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36017" id="CVE-2024-36017" type="cve" title="CVE-2024-36017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36020" id="CVE-2024-36020" type="cve" title="CVE-2024-36020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36489" id="CVE-2024-36489" type="cve" title="CVE-2024-36489"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36903" id="CVE-2024-36903" type="cve" title="CVE-2024-36903"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36921" id="CVE-2024-36921" type="cve" title="CVE-2024-36921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36922" id="CVE-2024-36922" type="cve" title="CVE-2024-36922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36929" id="CVE-2024-36929" type="cve" title="CVE-2024-36929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36941" id="CVE-2024-36941" type="cve" title="CVE-2024-36941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36971" id="CVE-2024-36971" type="cve" title="CVE-2024-36971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37353" id="CVE-2024-37353" type="cve" title="CVE-2024-37353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37356" id="CVE-2024-37356" type="cve" title="CVE-2024-37356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38391" id="CVE-2024-38391" type="cve" title="CVE-2024-38391"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38558" id="CVE-2024-38558" type="cve" title="CVE-2024-38558"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38575" id="CVE-2024-38575" type="cve" title="CVE-2024-38575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39487" id="CVE-2024-39487" type="cve" title="CVE-2024-39487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40928" id="CVE-2024-40928" type="cve" title="CVE-2024-40928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40954" id="CVE-2024-40954" type="cve" title="CVE-2024-40954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40958" id="CVE-2024-40958" type="cve" title="CVE-2024-40958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40961" id="CVE-2024-40961" type="cve" title="CVE-2024-40961"/>
      <reference href="https://bugzilla.redhat.com/2265838" id="2265838" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273405" id="2273405" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275600" id="2275600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275655" id="2275655" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275715" id="2275715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275748" id="2275748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278380" id="2278380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278417" id="2278417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278429" id="2278429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278519" id="2278519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278989" id="2278989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281057" id="2281057" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281097" id="2281097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281133" id="2281133" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281190" id="2281190" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281237" id="2281237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281257" id="2281257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281265" id="2281265" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281272" id="2281272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281639" id="2281639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281667" id="2281667" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281821" id="2281821" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281900" id="2281900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281949" id="2281949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282719" id="2282719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284400" id="2284400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284417" id="2284417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284474" id="2284474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284496" id="2284496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284511" id="2284511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284513" id="2284513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284543" id="2284543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292331" id="2292331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293208" id="2293208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293418" id="2293418" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293441" id="2293441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293657" id="2293657" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293658" id="2293658" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293686" id="2293686" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293687" id="2293687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293688" id="2293688" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297056" id="2297056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297512" id="2297512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297538" id="2297538" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297542" id="2297542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297545" id="2297545" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5363.html" id="ALSA-2024:5363" type="self" title="ALSA-2024:5363"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.31.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">043eb77edf0322629e38f4f675dbb4fc4e809a6bf0570ec66ffdc4c038f3e94f</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.31.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">08d4396fe83a39c63d3ce125e920978c2d03125e2ef00d6870efdde7d82abb5d</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.31.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">10708fbc545e2a5c13ffdda81940777e327b4846085b964101c2fb5b8b40794c</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.31.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">1f3cb4f4ace303fff5c222793f2a355701383815b78f51d90a1782ea9cb1c4bf</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.31.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">3654903eef227d55f4e33dccd68f969bb18cf059d4324d16c7df9e7f5ee799a8</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.31.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">51de7cd2519df91305e6a2e2cf109721c9dff8f0c5fca3665383d477a57ee853</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.31.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">6633c16deb3503fb1f68036cf4e298ece3b591d881d94a6876601fba20e948c1</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.31.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">6a169ccd5cbb629d91cc6dbbb03ffcb65e85c622014f2af66ad2f17b60687213</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.31.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">6cb3b8f1475500005db8484a9d53fa60a4da3083870c866d73e92614b672c339</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.31.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">be95f992b53e44020a2d08d5e82d116b6cbe7e55a46a9a691a31769c6abbf90d</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.31.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">fc918080204b19f9be65cb7bec86a2e1a03f20036f9ee2d454ce516e2e052688</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.31.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.31.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.31.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">fe52309ee1fe7135841369c31a1c1028f1f354c3a28361bca13c87f2855980f3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5928</id>
    <title>Important: kernel security update</title>
    <issued date="2024-08-28 00:00:00"/>
    <updated date="2024-11-03 22:28:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nftables: nft_set_rbtree skip end interval element from gc (CVE-2024-26581)
  * kernel: netfilter: nft_limit: reject configurations that cause integer overflow (CVE-2024-26668)
  * kernel: vfio/pci: Lock external INTx masking ops (CVE-2024-26810)
  * kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CVE-2024-26855)
  * kernel: x86/xen: Add some null pointer checking to smp.c (CVE-2024-26908)
  * kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019)
  * kernel: netfilter: flowtable: validate pppoe header (CVE-2024-27016)
  * kernel: netfilter: bridge: confirm multicast packets before passing them up the stack (CVE-2024-27415)
  * kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info (CVE-2024-35839)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898)
  * kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion (CVE-2024-35897)
  * kernel: netfilter: validate user input for expected length (CVE-2024-35896)
  * kernel: netfilter: complete validation of user input (CVE-2024-35962)
  * kernel: ice: fix LAG and VF lock dependency in ice_reset_vf() (CVE-2024-36003)
  * kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race (CVE-2023-52771)
  * kernel: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (CVE-2023-52880)
  * kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (CVE-2024-36025)
  * kernel: net/mlx5e: Fix netif state handling (CVE-2024-38608)
  * kernel: crypto: bcm - Fix pointer arithmetic (CVE-2024-38579)
  * kernel: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (CVE-2024-38544)
  * kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (CVE-2024-38540)
  * kernel: net: bridge: xmit: make sure we have at least eth header len bytes (CVE-2024-38538)
  * kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (CVE-2024-39476)
  * kernel: ipv6: fix possible race in __fib6_drop_pcpu_from() (CVE-2024-40905)
  * kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station (CVE-2024-40911)
  * kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CVE-2024-40912)
  * kernel: mm/huge_memory: don&amp;#39;t unpoison huge_zero_folio (CVE-2024-40914)
  * kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CVE-2024-40929)
  * kernel: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (CVE-2024-40939)
  * kernel: wifi: iwlwifi: mvm: don&amp;#39;t read past the mfuart notifcation (CVE-2024-40941)
  * kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (CVE-2024-40957)
  * kernel: scsi: qedi: Fix crash while reading debugfs attribute (CVE-2024-40978)
  * kernel: tipc: force a dst refcount before doing decryption (CVE-2024-40983)
  * kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090)
  * kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091)
  * kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (CVE-2024-41041)
  * kernel: NFSv4: Fix memory leak in nfs4_set_security_label (CVE-2024-41076)
  * kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CVE-2024-42110)
  * kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment (CVE-2024-42152)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5928" id="RHSA-2024:5928" type="rhsa" title="RHSA-2024:5928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52771" id="CVE-2023-52771" type="cve" title="CVE-2023-52771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52880" id="CVE-2023-52880" type="cve" title="CVE-2023-52880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26581" id="CVE-2024-26581" type="cve" title="CVE-2024-26581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26668" id="CVE-2024-26668" type="cve" title="CVE-2024-26668"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26810" id="CVE-2024-26810" type="cve" title="CVE-2024-26810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26855" id="CVE-2024-26855" type="cve" title="CVE-2024-26855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26908" id="CVE-2024-26908" type="cve" title="CVE-2024-26908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26925" id="CVE-2024-26925" type="cve" title="CVE-2024-26925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27016" id="CVE-2024-27016" type="cve" title="CVE-2024-27016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27019" id="CVE-2024-27019" type="cve" title="CVE-2024-27019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27020" id="CVE-2024-27020" type="cve" title="CVE-2024-27020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27415" id="CVE-2024-27415" type="cve" title="CVE-2024-27415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35839" id="CVE-2024-35839" type="cve" title="CVE-2024-35839"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35896" id="CVE-2024-35896" type="cve" title="CVE-2024-35896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35897" id="CVE-2024-35897" type="cve" title="CVE-2024-35897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35898" id="CVE-2024-35898" type="cve" title="CVE-2024-35898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35962" id="CVE-2024-35962" type="cve" title="CVE-2024-35962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36003" id="CVE-2024-36003" type="cve" title="CVE-2024-36003"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36025" id="CVE-2024-36025" type="cve" title="CVE-2024-36025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38538" id="CVE-2024-38538" type="cve" title="CVE-2024-38538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38540" id="CVE-2024-38540" type="cve" title="CVE-2024-38540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38544" id="CVE-2024-38544" type="cve" title="CVE-2024-38544"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38579" id="CVE-2024-38579" type="cve" title="CVE-2024-38579"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38608" id="CVE-2024-38608" type="cve" title="CVE-2024-38608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39476" id="CVE-2024-39476" type="cve" title="CVE-2024-39476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40905" id="CVE-2024-40905" type="cve" title="CVE-2024-40905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40911" id="CVE-2024-40911" type="cve" title="CVE-2024-40911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40912" id="CVE-2024-40912" type="cve" title="CVE-2024-40912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40914" id="CVE-2024-40914" type="cve" title="CVE-2024-40914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40929" id="CVE-2024-40929" type="cve" title="CVE-2024-40929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40939" id="CVE-2024-40939" type="cve" title="CVE-2024-40939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40941" id="CVE-2024-40941" type="cve" title="CVE-2024-40941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40957" id="CVE-2024-40957" type="cve" title="CVE-2024-40957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40978" id="CVE-2024-40978" type="cve" title="CVE-2024-40978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40983" id="CVE-2024-40983" type="cve" title="CVE-2024-40983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41041" id="CVE-2024-41041" type="cve" title="CVE-2024-41041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41076" id="CVE-2024-41076" type="cve" title="CVE-2024-41076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41090" id="CVE-2024-41090" type="cve" title="CVE-2024-41090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41091" id="CVE-2024-41091" type="cve" title="CVE-2024-41091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42110" id="CVE-2024-42110" type="cve" title="CVE-2024-42110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42152" id="CVE-2024-42152" type="cve" title="CVE-2024-42152"/>
      <reference href="https://bugzilla.redhat.com/2265185" id="2265185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272797" id="2272797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273654" id="2273654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275742" id="2275742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275744" id="2275744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277166" id="2277166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278256" id="2278256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278258" id="2278258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278264" id="2278264" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281101" id="2281101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281284" id="2281284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281669" id="2281669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281672" id="2281672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281675" id="2281675" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281916" id="2281916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281958" id="2281958" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282720" id="2282720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283468" id="2283468" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284421" id="2284421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293356" id="2293356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293414" id="2293414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293455" id="2293455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293459" id="2293459" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293461" id="2293461" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295914" id="2295914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297489" id="2297489" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297495" id="2297495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297496" id="2297496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297498" id="2297498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297513" id="2297513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297523" id="2297523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297525" id="2297525" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297541" id="2297541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297562" id="2297562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297567" id="2297567" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299240" id="2299240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299336" id="2299336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300410" id="2300410" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300453" id="2300453" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301473" id="2301473" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301519" id="2301519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-5928.html" id="ALSA-2024:5928" type="self" title="ALSA-2024:5928"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-devel" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.33.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">014438060816fd690c767b8fbf9da3f56bd2518175938816580b8dc89e0748d8</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.33.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">028d39c0575d46cd8f9b1e5939f18e16d85159ea8576793a0cd89c99c822e2c4</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.33.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">5ed7282f9ea832c901daba67fe283e0401b003772ac4613035b0ccc134043cd6</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.33.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">6f19d9d1f0ccbd2b14b821dc68e8bc54776546f793b4b700266d5372df78ee45</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.33.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">73700915c37499e39f726178eaf0ba99ee44087b888d366a99f84936ef26899f</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.33.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">76f4ef1f067c400bbf8a6c409ad687440de1e5d10aacee74a290dadf77bde5b4</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.33.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">868b5e35cf9ff4229774c2b862872a56b0abe8fbbb576f45680af7542fa9adfa</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.33.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">9cfea6793328a65a60ad02938462e320e13504403e725b0c21a4669db2f93195</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.33.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">b2e8032390ac813edeb2c6a1bc8c79d8ac10f26966d3566995ef3c8b8155ff64</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.33.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">bb7af90bfe740b5ebbc6f5f169708b451b2488092cdff9fd5e8d834137f34612</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.33.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">c69a427de47d1ea8f5359d55ad103839702f130722c8ac3f6003eadbc866bbb1</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="427.33.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.33.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.33.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">e4f4322715c8240a20f9815bfd4301fec81d425fa0e9eab4655e9709034c02f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6567</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-09-11 00:00:00"/>
    <updated date="2024-11-03 22:31:49"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
  * kernel: nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629)
  * kernel: mm: cachestat: fix folio read-after-free in cache walk (CVE-2024-26630)
  * kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (CVE-2024-26720)
  * kernel: Bluetooth: af_bluetooth: Fix deadlock (CVE-2024-26886)
  * kernel: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (CVE-2024-26946)
  * kernel: KVM: SVM: Flush pages under kvm-&amp;gt;lock to fix UAF in svm_register_enc_region() (CVE-2024-35791)
  * kernel: mm: cachestat: fix two shmem bugs (CVE-2024-35797)
  * kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems (CVE-2024-35875)
  * kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
  * kernel: iommufd: Fix missing update of domains_itree after splitting iopt_area (CVE-2023-52801)
  * kernel: net: fix out-of-bounds access in ops_init (CVE-2024-36883)
  * kernel: regmap: maple: Fix cache corruption in regcache_maple_drop() (CVE-2024-36019)
  * kernel: usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619)
  * kernel: net: bridge: mst: fix vlan use-after-free (CVE-2024-36979)
  * kernel: scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559)
  * kernel: xhci: Handle TD clearing for multiple streams case (CVE-2024-40927)
  * kernel: cxl/region: Fix memregion leaks in devm_cxl_add_region() (CVE-2024-40936)
  * kernel: net/sched: Fix UAF when resolving a clash (CVE-2024-41040)
  * kernel: ppp: reject claimed-as-LCP but actually malformed packets (CVE-2024-41044)
  * kernel: mm: prevent derefencing NULL ptr in pfn_section_valid() (CVE-2024-41055)
  * kernel: PCI/MSI: Fix UAF in msi_capability_init (CVE-2024-41096)
  * kernel: xdp: Remove WARN() from __xdp_reg_mem_model() (CVE-2024-42082)
  * kernel: x86: stop playing stack games in profile_pc() (CVE-2024-42096)
  * kernel: Revert &amp;#34;mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again&amp;#34; (CVE-2024-42102)
  * kernel: mm: avoid overflows in dirty throttling logic (CVE-2024-42131)
  * kernel: nvme: avoid double free special payload (CVE-2024-41073)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6567" id="RHSA-2024:6567" type="rhsa" title="RHSA-2024:6567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52463" id="CVE-2023-52463" type="cve" title="CVE-2023-52463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52801" id="CVE-2023-52801" type="cve" title="CVE-2023-52801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26629" id="CVE-2024-26629" type="cve" title="CVE-2024-26629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26630" id="CVE-2024-26630" type="cve" title="CVE-2024-26630"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26720" id="CVE-2024-26720" type="cve" title="CVE-2024-26720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26886" id="CVE-2024-26886" type="cve" title="CVE-2024-26886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26946" id="CVE-2024-26946" type="cve" title="CVE-2024-26946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35791" id="CVE-2024-35791" type="cve" title="CVE-2024-35791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35797" id="CVE-2024-35797" type="cve" title="CVE-2024-35797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35875" id="CVE-2024-35875" type="cve" title="CVE-2024-35875"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36000" id="CVE-2024-36000" type="cve" title="CVE-2024-36000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36019" id="CVE-2024-36019" type="cve" title="CVE-2024-36019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36883" id="CVE-2024-36883" type="cve" title="CVE-2024-36883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36979" id="CVE-2024-36979" type="cve" title="CVE-2024-36979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38559" id="CVE-2024-38559" type="cve" title="CVE-2024-38559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38619" id="CVE-2024-38619" type="cve" title="CVE-2024-38619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40927" id="CVE-2024-40927" type="cve" title="CVE-2024-40927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40936" id="CVE-2024-40936" type="cve" title="CVE-2024-40936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41040" id="CVE-2024-41040" type="cve" title="CVE-2024-41040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41044" id="CVE-2024-41044" type="cve" title="CVE-2024-41044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41055" id="CVE-2024-41055" type="cve" title="CVE-2024-41055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41073" id="CVE-2024-41073" type="cve" title="CVE-2024-41073"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41096" id="CVE-2024-41096" type="cve" title="CVE-2024-41096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42082" id="CVE-2024-42082" type="cve" title="CVE-2024-42082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42096" id="CVE-2024-42096" type="cve" title="CVE-2024-42096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42102" id="CVE-2024-42102" type="cve" title="CVE-2024-42102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42131" id="CVE-2024-42131" type="cve" title="CVE-2024-42131"/>
      <reference href="https://bugzilla.redhat.com/2265797" id="2265797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269434" id="2269434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269436" id="2269436" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273141" id="2273141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275678" id="2275678" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278206" id="2278206" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281052" id="2281052" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281151" id="2281151" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281727" id="2281727" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281968" id="2281968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282709" id="2282709" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284271" id="2284271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284402" id="2284402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293273" id="2293273" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293276" id="2293276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293440" id="2293440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297511" id="2297511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297520" id="2297520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300409" id="2300409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300414" id="2300414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300429" id="2300429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300491" id="2300491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300520" id="2300520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300713" id="2300713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301465" id="2301465" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301496" id="2301496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301637" id="2301637" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6567.html" id="ALSA-2024:6567" type="self" title="ALSA-2024:6567"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.35.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">09974c9271b9177dbcc1c063416b82771cceb366de825677a33f833746ef567c</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.35.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">27728f700651eb663f96fbc6c97e6447a391dba876256510ade51d8e55316a46</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.35.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">2a2ab29f3deb7b77990d02e948de1b7485deb21ed8f186c4f6317d84c54ddceb</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.35.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">31987ae5696de0f99638894eb64ad58164a16734a33d8257f33f813fec3bb5b8</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.35.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">6358badd937067f018a69e0759417e76a97462bec45bb7fd26750bafb21b3656</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.35.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">6a241f76e58cd00eeeb2b721cc3cc80b4d4efe2abde252583050352949f7bc12</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.35.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">9f2cd6a8d8b6b90f18d0176920a3fe5efe0593a0c9288df00a69dd5949587c89</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.35.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">a361d4e6579c28521eb723e4a98d807a047824f6d8a425f7d2b05eca19fa0648</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.35.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">e13b806da1ece33728ed72c8ad5de5cdb0f89fb930f5a453a74099695f5d33d1</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.35.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">e88b0b98fabce264cca3b69c95721173285735f0cb3ad914753e5ea2f62d69a4</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.35.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">e8a88db45fde58ea4cac9a706a945411b8f29dca50e70d00c2e4500c2434d0d1</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.35.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.35.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.35.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">f2cc5db518156a39f88005a0c409c730bfa4eb2d07fbe4e98176e3ca332754a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6997</id>
    <title>Important: kernel security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-11-03 22:34:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
  * kernel: net/sched: act_mirred: don't override retval if we already lost the skb (CVE-2024-26739)
  * kernel: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CVE-2024-26947)
  * kernel: scsi: qla2xxx: Fix command flush on cable pull (CVE-2024-26931)
  * kernel: scsi: qla2xxx: Fix double free of the ha-&amp;gt;vp_map pointer (CVE-2024-26930)
  * kernel: scsi: qla2xxx: Fix double free of fcport (CVE-2024-26929)
  * kernel: fork: defer linking file vma until vma is fully initialized (CVE-2024-27022)
  * kernel: KVM: x86/mmu: x86: Don&amp;#39;t overflow lpage_info when checking attributes (CVE-2024-26991)
  * kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem (CVE-2024-35895)
  * kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016)
  * kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)
  * kernel: cpufreq: exit() callback is optional (CVE-2024-38615)
  * kernel: ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601)
  * kernel: cppc_cpufreq: Fix possible null pointer dereference (CVE-2024-38573)
  * kernel: gfs2: Fix potential glock use-after-free on unmount (CVE-2024-38570)
  * kernel: wifi: nl80211: Avoid address calculations via out of bounds array indexing (CVE-2024-38562)
  * kernel: Input: cyapa - add missing input core locking to suspend/resume functions (CVE-2023-52884)
  * kernel: ACPICA: Revert &amp;#34;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&amp;#34; (CVE-2024-40984)
  * kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071)
  * kernel: wifi: mt76: replace skb_put with skb_put_zero (CVE-2024-42225)
  * kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CVE-2024-42246)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6997" id="RHSA-2024:6997" type="rhsa" title="RHSA-2024:6997"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52439" id="CVE-2023-52439" type="cve" title="CVE-2023-52439"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52884" id="CVE-2023-52884" type="cve" title="CVE-2023-52884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26739" id="CVE-2024-26739" type="cve" title="CVE-2024-26739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26929" id="CVE-2024-26929" type="cve" title="CVE-2024-26929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26930" id="CVE-2024-26930" type="cve" title="CVE-2024-26930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26931" id="CVE-2024-26931" type="cve" title="CVE-2024-26931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26947" id="CVE-2024-26947" type="cve" title="CVE-2024-26947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26991" id="CVE-2024-26991" type="cve" title="CVE-2024-26991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27022" id="CVE-2024-27022" type="cve" title="CVE-2024-27022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35895" id="CVE-2024-35895" type="cve" title="CVE-2024-35895"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36016" id="CVE-2024-36016" type="cve" title="CVE-2024-36016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36899" id="CVE-2024-36899" type="cve" title="CVE-2024-36899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38562" id="CVE-2024-38562" type="cve" title="CVE-2024-38562"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38570" id="CVE-2024-38570" type="cve" title="CVE-2024-38570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38573" id="CVE-2024-38573" type="cve" title="CVE-2024-38573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38601" id="CVE-2024-38601" type="cve" title="CVE-2024-38601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38615" id="CVE-2024-38615" type="cve" title="CVE-2024-38615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40984" id="CVE-2024-40984" type="cve" title="CVE-2024-40984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41071" id="CVE-2024-41071" type="cve" title="CVE-2024-41071"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42225" id="CVE-2024-42225" type="cve" title="CVE-2024-42225"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42246" id="CVE-2024-42246" type="cve" title="CVE-2024-42246"/>
      <reference href="https://bugzilla.redhat.com/2265271" id="2265271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273270" id="2273270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278167" id="2278167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278245" id="2278245" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278248" id="2278248" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278250" id="2278250" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278252" id="2278252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278318" id="2278318" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281677" id="2281677" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283894" id="2283894" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284549" id="2284549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293348" id="2293348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293364" id="2293364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293420" id="2293420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293423" id="2293423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293431" id="2293431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293685" id="2293685" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297568" id="2297568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300448" id="2300448" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301543" id="2301543" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-6997.html" id="ALSA-2024:6997" type="self" title="ALSA-2024:6997"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-core" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.37.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">01bfa3b8ad63aa70f727417911a5c97794dad70497d261372de49f514d6c49da</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.37.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">043ab250efa58865e55f74693c93f78294471f349ef1c563037a8524d2968b26</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.37.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">07091f094a17f81d82dc58a476f5f34f7e44947ce5a1559d0b72213da7cbfe8e</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.37.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">35331aed5b4bafb45a14b4a8aa11471a6e77167788a5f8984b383a5aa282b16c</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.37.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">4bd8ff043e59b5dcebaee980f75493226af90b2216ac99a58d787f91702d3d31</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.37.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">653a8c0862ee466c02cdfcdcef64c4b36cbdc7e6d59f3f05dacfda83ed534b20</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.37.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">70e9a95206f19ae115b96f5ea337b562359198b13fb3c8fc450d761344817908</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.37.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">995ec3f6dac756948c6f3b6bd30d7abd9e1d6d06a8d934223c3d3069bd5b91b3</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.37.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">a77902bf0b15afca520c10ad869d476f619fe4d84c7c229d27c07b9c19922fd5</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.37.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">b14e1d75b14c65005e0c2b77926f8d53282a6bcad157090fb0e594ebb463f3a6</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.37.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">df901053accfeeb26e6d8e3e92c21a55b9ab8f96b1340cd72a89c6e30945cef1</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.37.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.37.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.37.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">e1af73493f6b523d0821dc776dbcb0a2023ab850d4fb359bad35773a6a38ee39</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8162</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-25 06:30:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)
  * kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403)
  * kernel: Revert &amp;#34;net/mlx5: Block entering switchdev mode with ns inconsistency&amp;#34; (CVE-2023-52658)
  * kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CVE-2024-35989)
  * kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (CVE-2021-47385)
  * kernel: mptcp: ensure snd_nxt is properly initialized on connect (CVE-2024-36889)
  * kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978)
  * kernel: net/mlx5: Add a timeout to acquire the command queue semaphore (CVE-2024-38556)
  * kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CVE-2024-39483)
  * kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502)
  * kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CVE-2024-40959)
  * kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush (CVE-2024-42079)
  * kernel: sched: act_ct: take care of padding in struct zones_ht_key (CVE-2024-42272)
  * kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error (CVE-2024-42284)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8162" id="RHSA-2024:8162" type="rhsa" title="RHSA-2024:8162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47385" id="CVE-2021-47385" type="cve" title="CVE-2021-47385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28746" id="CVE-2023-28746" type="cve" title="CVE-2023-28746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52658" id="CVE-2023-52658" type="cve" title="CVE-2023-52658"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27403" id="CVE-2024-27403" type="cve" title="CVE-2024-27403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35989" id="CVE-2024-35989" type="cve" title="CVE-2024-35989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36889" id="CVE-2024-36889" type="cve" title="CVE-2024-36889"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36978" id="CVE-2024-36978" type="cve" title="CVE-2024-36978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38556" id="CVE-2024-38556" type="cve" title="CVE-2024-38556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39483" id="CVE-2024-39483" type="cve" title="CVE-2024-39483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39502" id="CVE-2024-39502" type="cve" title="CVE-2024-39502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40959" id="CVE-2024-40959" type="cve" title="CVE-2024-40959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42079" id="CVE-2024-42079" type="cve" title="CVE-2024-42079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42272" id="CVE-2024-42272" type="cve" title="CVE-2024-42272"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42284" id="CVE-2024-42284" type="cve" title="CVE-2024-42284"/>
      <reference href="https://bugzilla.redhat.com/2270700" id="2270700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281127" id="2281127" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281149" id="2281149" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281847" id="2281847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282355" id="2282355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284571" id="2284571" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293078" id="2293078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293443" id="2293443" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295921" id="2295921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297474" id="2297474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297543" id="2297543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300517" id="2300517" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8162.html" id="ALSA-2024:8162" type="self" title="ALSA-2024:8162"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.40.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">0873b14b373700b2ad7719ab7dd59e741ce73904fcca3f4b9bf2c019f68eccc1</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.40.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">1f73cfceee582cc71560e0f9de14f5b5588a84b9b3ea567668b272c05ad1900e</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.40.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">26a6cf88548c3154a158c0667b56f6cba11f88341ff8bf9b03d4def600ee353d</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.40.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">385ee5d296a64dee8340b67982509c20a0afa8cc3c1628934d19849218dede84</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.40.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">6ec8905e1d4307bba0517fa57e9890b5e25852fd5e86403b330359df73275785</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.40.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">859c8f699e0e704a91aed55e4bcea5da4470a8964da8295a590abab928046304</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.40.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">9acfb942a74556779351c81311f6cad03ad447a71efdf533b71c20b53eb86df5</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.40.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">a05cadd6f6c3e072b5c42fed8394978b9cfbeb30014983a995df436329b211af</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.40.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">b2cbcc20c8b58226beb9edfe0b20bb11e3c350771d8f0ac977bdd0fe0ca22e81</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.40.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">b30b9736b329b95f77d5e175ca5a370ff8358ccb1a1441a235c9ea01e8dd23e4</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.40.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">c267dc718ba0a6ec0fc390436075d73f79bcfd2205d6aaa0c39a64648b661b94</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.40.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.40.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.40.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">f1351dd5f3d511c9c548206def98c6a6e93507213371b41cd2b47e821f6a189d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8617</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-10-30 00:00:00"/>
    <updated date="2024-11-03 19:17:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201)
  * kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
  * kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
  * kernel: af_unix: Fix garbage collector racing against connect() (CVE-2024-26923)
  * kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del (CVE-2024-26961)
  * kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935)
  * kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383)
  * kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too (CVE-2024-36244)
  * kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472)
  * kernel: netfilter: nft_inner: validate mandatory meta and payload (CVE-2024-39504)
  * kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CVE-2024-40904)
  * kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931)
  * kernel: ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960)
  * kernel: ext4: do not create EA inode under buffer lock (CVE-2024-40972)
  * kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CVE-2024-40977)
  * kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (CVE-2024-40995)
  * kernel: ext4: fix uninitialized ratelimit_state-&amp;gt;lock access in __ext4_fill_super() (CVE-2024-40998)
  * kernel: netpoll: Fix race condition in netpoll_owner_active (CVE-2024-41005)
  * kernel: xfs: don&amp;#39;t walk off the end of a directory data block (CVE-2024-41013)
  * kernel: xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014)
  * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)
  * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8617" id="RHSA-2024:8617" type="rhsa" title="RHSA-2024:8617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47383" id="CVE-2021-47383" type="cve" title="CVE-2021-47383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2201" id="CVE-2024-2201" type="cve" title="CVE-2024-2201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26640" id="CVE-2024-26640" type="cve" title="CVE-2024-26640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26826" id="CVE-2024-26826" type="cve" title="CVE-2024-26826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26923" id="CVE-2024-26923" type="cve" title="CVE-2024-26923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26935" id="CVE-2024-26935" type="cve" title="CVE-2024-26935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26961" id="CVE-2024-26961" type="cve" title="CVE-2024-26961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36244" id="CVE-2024-36244" type="cve" title="CVE-2024-36244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39472" id="CVE-2024-39472" type="cve" title="CVE-2024-39472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39504" id="CVE-2024-39504" type="cve" title="CVE-2024-39504"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40904" id="CVE-2024-40904" type="cve" title="CVE-2024-40904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40931" id="CVE-2024-40931" type="cve" title="CVE-2024-40931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40960" id="CVE-2024-40960" type="cve" title="CVE-2024-40960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40972" id="CVE-2024-40972" type="cve" title="CVE-2024-40972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40977" id="CVE-2024-40977" type="cve" title="CVE-2024-40977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40995" id="CVE-2024-40995" type="cve" title="CVE-2024-40995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40998" id="CVE-2024-40998" type="cve" title="CVE-2024-40998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41005" id="CVE-2024-41005" type="cve" title="CVE-2024-41005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41013" id="CVE-2024-41013" type="cve" title="CVE-2024-41013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41014" id="CVE-2024-41014" type="cve" title="CVE-2024-41014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43854" id="CVE-2024-43854" type="cve" title="CVE-2024-43854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45018" id="CVE-2024-45018" type="cve" title="CVE-2024-45018"/>
      <reference href="https://bugzilla.redhat.com/2268118" id="2268118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270100" id="2270100" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275604" id="2275604" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277171" id="2277171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278176" id="2278176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278235" id="2278235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282357" id="2282357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293654" id="2293654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296067" id="2296067" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297476" id="2297476" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297488" id="2297488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297515" id="2297515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297544" id="2297544" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297556" id="2297556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297561" id="2297561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297579" id="2297579" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297582" id="2297582" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297589" id="2297589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300296" id="2300296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300297" id="2300297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311715" id="2311715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-8617.html" id="ALSA-2024:8617" type="self" title="ALSA-2024:8617"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-427.42.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">0846133b2b7272cecd82d950e55d74fee00b5aadda42d38032aaa29f83aa0b68</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-rt-core-5.14.0-427.42.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">20dd61a0ce86b3673e41630b45d0698d82232dddbebd685f902c9a06a7f0c9ca</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-427.42.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">2576c3c81d40dd34162be0bb9c32a78c4305f45f495b567aff415993138fd1b2</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-427.42.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">59796260a746d8c0c5fbb03f7f15ddded7c24856105c9ad0abde491daec55bf8</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-5.14.0-427.42.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">71fbbdb8553037578d65e253e5337d59884a2c4433519e1dc97ab0a1819d73ca</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-427.42.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">a5032b59f57dd30de42c1e90eb3b318f6ad50f51cf70aad85936f60bc3c3d801</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-rt-devel-5.14.0-427.42.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">aa768c4b2714f973035403520c04f479f64a484013e937bd9170138e7e3d233f</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-427.42.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">ce9e2bd8f50b4f66dedf276641ffd0984f4aee3d25915a5e4203fdcd9ce5bfb8</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-rt-modules-5.14.0-427.42.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">e3bb584c636b197d8d92f42df40cc0cb4f5becf6d7023262d7b0eb550d48f590</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-rt-5.14.0-427.42.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">f832f6f1e70cd95e0c8244d7f22ac7aa7fba154bb1687116ec4289ed9d9d14e9</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-427.42.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">f93b32de14b7a50540e7b38bc3517dd58938fc08e921b6191124728d456c9165</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="427.42.1.el9_4" epoch="0" arch="x86_64" src="kernel-5.14.0-427.42.1.el9_4.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-427.42.1.el9_4.x86_64.rpm</filename>
          <sum type="sha256">feb16c31afd639dc7b5aa22d5ebca056c02d2844055edaaf9a38acc0641c3af7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:9605</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-11-14 00:00:00"/>
    <updated date="2024-11-20 15:31:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: nexthop: Initialize all fields in dumped nexthops (CVE-2024-42283)
  * kernel: iommufd: Require drivers to supply the cache_invalidate_user ops (CVE-2024-46824)
  * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:9605" id="RHSA-2024:9605" type="rhsa" title="RHSA-2024:9605"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42283" id="CVE-2024-42283" type="cve" title="CVE-2024-42283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46824" id="CVE-2024-46824" type="cve" title="CVE-2024-46824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46858" id="CVE-2024-46858" type="cve" title="CVE-2024-46858"/>
      <reference href="https://bugzilla.redhat.com/2315176" id="2315176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315210" id="2315210" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2024-9605.html" id="ALSA-2024:9605" type="self" title="ALSA-2024:9605"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_4_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_4_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-5.14.0-503.14.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">132bf2b36bbbbc07e4d2f55f3c1ae36e811f3e62a6d027d6c2d43e37986e1561</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-rt-core-5.14.0-503.14.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">151be011c93212f6a981fdd7d0e0b4c49d9d08831df154e47579eeb884792f54</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-rt-devel-5.14.0-503.14.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">503645e20fa1db53799712cc133fabc864020d00a4be731350010e2e61febfd9</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-503.14.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">5146fc88cd3f6e2e7f0785c5ce61bf83e7add34f59e16e978faf4829ee742100</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-503.14.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">7163005de3ac9968744bcf0da022e63bcd53d6a106c60d33510eed5fb7e2bf0c</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-5.14.0-503.14.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">9098b0c57ae32948a54a9bac162bb5a92867825d76f1537aeec3b8d6bcc50043</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-503.14.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">9874194932e58dc28ba292751e16aa2ada9dea1e223447dbee3c51778c95f2c5</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-503.14.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">a0e80615bfa28c9bc53161fec694d9e0eee8c516f7a5443607ed8d676289b276</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-rt-5.14.0-503.14.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">b0abc2731806bfcf4db883098239e753a9d147596d0edaa2e47bfecf310d240c</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-503.14.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">b0e14d98605d345e88b0144406e70639adc68407f99bb37dda6817c22e5f5020</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-503.14.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">b55e62805a8d56a58cdc76e7a666d3a3a495b7297933143cf17f65891097ced3</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="503.14.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.14.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-503.14.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">bafc36530cbcc3a3c746252549cf366c2ac63c4322347bd90254463e75bb6f0a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0059</id>
    <title>Important: kernel security update</title>
    <issued date="2025-01-08 00:00:00"/>
    <updated date="2025-01-13 20:08:26"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: perf/aux: Fix AUX buffer serialization (CVE-2024-46713)
  * kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (CVE-2024-50208)
  * kernel: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CVE-2024-50252)
  * kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0059" id="RHSA-2025:0059" type="rhsa" title="RHSA-2025:0059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46713" id="CVE-2024-46713" type="cve" title="CVE-2024-46713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50208" id="CVE-2024-50208" type="cve" title="CVE-2024-50208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50252" id="CVE-2024-50252" type="cve" title="CVE-2024-50252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53122" id="CVE-2024-53122" type="cve" title="CVE-2024-53122"/>
      <reference href="https://bugzilla.redhat.com/2312221" id="2312221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324611" id="2324611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324898" id="2324898" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329932" id="2329932" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0059.html" id="ALSA-2025:0059" type="self" title="ALSA-2025:0059"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_5_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_5_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-503.21.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">002ffb01c917a8ce5cde60d15535061c8a82070dd3cda6121944eb2d3ed4bfb5</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-503.21.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">11f58228a1331d32cbfc35e30d99ed88e65e6cc61891a32fbd4900557090abe8</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-rt-devel-5.14.0-503.21.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">22d1a3a37f5c22cab5ede8e1ae2d25f120382dbea054aeb71d341f90652137a3</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-rt-core-5.14.0-503.21.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">29483141971d147e553d58a3fc43e81ed43f5b48544e9d47be3a4016cfb4e94e</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-rt-5.14.0-503.21.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">4adf3b43ef60d6f92ce38592fd96c6763f408d9f9db85e46515ab06317dca82f</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-5.14.0-503.21.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">5303b98c055210474ba26c4dde966a89ddb2a40a37e3f5e9bcd5f44275a2db75</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-503.21.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">690d96ceda46977412bd346f63103df75f98630ed830978573fb03fff95c8d66</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-5.14.0-503.21.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">7be43b1de272238994b00ebdd3f9e6a8829820244eeaaaf40228e3f515809a8c</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-503.21.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">9b1f13c2e93897d67aba4db77fa3104be2ca53f409b48f5faa83f8b551ce2e3e</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-503.21.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">dbe214ce25ca5323fec97756682c27f2bf4fd4583ce5a5db05578f8623046a12</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-503.21.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">ed83b67169827b5baf317c5715c61d5f079fd099d073b87f80bfc9de3afb426f</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="503.21.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.21.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-503.21.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">f2e345e2d6b35ce8a9912c46c46a3eda3d0a7889b4fa151359e9c779bc280913</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0578</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-25 20:33:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: tcp/dccp: Don&amp;#39;t use timer_pending() in reqsk_queue_unlink(). (CVE-2024-50154)
  * kernel: arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275)
  * kernel: i40e: fix race condition by adding filter's intermediate sync state (CVE-2024-53088)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0578" id="RHSA-2025:0578" type="rhsa" title="RHSA-2025:0578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50154" id="CVE-2024-50154" type="cve" title="CVE-2024-50154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50275" id="CVE-2024-50275" type="cve" title="CVE-2024-50275"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53088" id="CVE-2024-53088" type="cve" title="CVE-2024-53088"/>
      <reference href="https://bugzilla.redhat.com/2324313" id="2324313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327198" id="2327198" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327328" id="2327328" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-0578.html" id="ALSA-2025:0578" type="self" title="ALSA-2025:0578"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_5_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_5_default</name>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-503.22.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">44d82814a39fe2ae0189108fdcbbaf18155d27d434d18e63ed0374a7c533a0a3</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-rt-devel-5.14.0-503.22.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">5712c06873784d8bb2527105f475b2de5e206f340b33d7b50e3b98249c8454f9</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-rt-core-5.14.0-503.22.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">7353f99e6932a90bfedab7dea799c9ba68c09fc7670d21ef18d782e3258db1ad</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-503.22.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">7e5beecaed3aff7b564a2247e00b1bbe6ac2eb62d468000368fcb68328f45477</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-5.14.0-503.22.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">868b914057f766481349424631c8a2f00860517da8d396eab1d73e0d7a5d4840</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-5.14.0-503.22.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">aa7d28dc2698d225ff8c7d83e6664228b42163964eee54ee5c5a7ad2f4015f79</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-503.22.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">bc6ee56499e535b9aaf8cade0c70d0d4c3e9d0cf0eb28105a7d55460fa191d01</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-503.22.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">d49f118d682c70537e79bc55b58c2204ad080be219360b5a9a5ceaafeceee2bb</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-503.22.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">e1d1a85475445ec118fe465cb6be41dc4f452442b94eb538554d1db3e0fcb721</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-503.22.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">f10e24595a2f5edb0745cb87b94e7ab862443f554ef3ad401bcc3dcd9d511000</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-503.22.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">f5a9bf6c1abf2a5ac48a7a1f2d0e3eee17414c73fbd9aed865908cffd8acacde</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="503.22.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.22.1.el9_5.src.rpm">
          <filename>kernel-rt-5.14.0-503.22.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">fc426ed8be41c6242b8c4a571a83be6945cefe1f16d7dd930366898530a15d44</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10379</id>
    <title>Important: kernel security update</title>
    <issued date="2025-07-07 00:00:00"/>
    <updated date="2025-07-10 13:35:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)
  * kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CVE-2025-21887)
  * kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004)
  * kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CVE-2022-49846)
  * kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CVE-2025-37799)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10379" id="RHSA-2025:10379" type="rhsa" title="RHSA-2025:10379"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49846" id="CVE-2022-49846" type="cve" title="CVE-2022-49846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21759" id="CVE-2025-21759" type="cve" title="CVE-2025-21759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21887" id="CVE-2025-21887" type="cve" title="CVE-2025-21887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22004" id="CVE-2025-22004" type="cve" title="CVE-2025-22004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37799" id="CVE-2025-37799" type="cve" title="CVE-2025-37799"/>
      <reference href="https://bugzilla.redhat.com/2348596" id="2348596" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2355405" id="2355405" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357142" id="2357142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363432" id="2363432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363876" id="2363876" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10379.html" id="ALSA-2025:10379" type="self" title="ALSA-2025:10379"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-modules" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.25.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">197b6b3d4ab092501f856d5244f12d225824b2b194e1cd5ebaa29884ea57a758</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.25.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">2e59681241ba7d0cb5a391adc8b31ca3de081c2bf65ab424dddfc667f3bdb056</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.25.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6034383b4e321762148b6a5f12dfaed5a1b197e06a598f4e79c287cfe0a7df8c</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.25.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">69d1f96c4145c36b045aa2726e6d22738b5c4f5a1397c6cf8526f49214ee7e7c</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.25.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">83ae6a0860daddc08d018f71ec22f4d92fd2853be4581eda9d5a2b9cec079061</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.25.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">901505b411d22bffa3e1e64eeff680f0a11ca24b4abd922086d177c1fb144799</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.25.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">9f5336d088def33c6a56951cd6d9aeb6258990915978bab45ed342eb09467edb</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.25.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a5109a0f5b25b1c64930ef610a68ac9f49203ed42af922d0d1e8885895dc8878</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.25.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b28a2129b066790127b9bde92ff6f7063d739190de402f77b5eb6240595c92c4</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.25.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c28ad7403932e4ee5de6117bccac6806d0fc18992c2c1da0c9fcc0c8f7ae0b4c</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.25.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">cb3128199d54a37542ae3320c007b1286d76eabadd780b10bf58959c9fa34075</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.25.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.25.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.25.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">d15b8d57f2143f695e041ee4803856a16d472ea3e618dec7c28309ef6d334f1c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10837</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-07-14 00:00:00"/>
    <updated date="2025-07-17 08:21:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10837" id="RHSA-2025:10837" type="rhsa" title="RHSA-2025:10837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21991" id="CVE-2025-21991" type="cve" title="CVE-2025-21991"/>
      <reference href="https://bugzilla.redhat.com/2356917" id="2356917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-10837.html" id="ALSA-2025:10837" type="self" title="ALSA-2025:10837"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.26.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">05312eb0cdcaaee921257ce80fff036c15e484cd8c79b64e3bc507020d02ba73</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.26.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">105ba4ed224bbe3f8837a87b67e6f6faa2348263343d4a0c667c2ca0dfe9f8fa</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.26.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">19a5c388484ec8d40390eb852ef6ecb35cbba98604cc95edd5192db59bdfdcb1</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.26.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">24f61a0d7c229c1ace51d717f753c4b63bfe7990f7d99befc7f73d0168262a14</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.26.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">25ec768086a6b8ebcdd3e575e50454e691ed0d835a5f3a06e9e3cbc6877dfcf3</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.26.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">265bbee838662dc83c3991084e6f0cd37544887a44543d594f6396c69922684e</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.26.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8198b12725ea5079c1364ea32ec725af4f6e674463537b2032200b3a995c3b8e</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.26.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">82ad0942b640901da34326a160e653c4c636b2ff18887776154f2c352a35557b</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.26.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">94b3624acadb69feeb44e4e6be1117791446c0a4aeaacd4f3b4833d2299b839a</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.26.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c4489664a3f465daca3fff656b661b364af68f47830333a79ec01fc98e0f6a64</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.26.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c6edbe5209eabd64b871d453ecbcb4533c33f9a1768ab83410c089617b2f9be8</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.26.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.26.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.26.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">cf8bb9b44930a6dc7e2c3330975ddae3e3a65e5264f100609cfe64cc138a1bf3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11411</id>
    <title>Important: kernel security update</title>
    <issued date="2025-07-21 00:00:00"/>
    <updated date="2025-07-23 07:42:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002)
  * kernel: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (CVE-2025-38089)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11411" id="RHSA-2025:11411" type="rhsa" title="RHSA-2025:11411"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58002" id="CVE-2024-58002" type="cve" title="CVE-2024-58002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38089" id="CVE-2025-38089" type="cve" title="CVE-2025-38089"/>
      <reference href="https://bugzilla.redhat.com/2348513" id="2348513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375529" id="2375529" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11411.html" id="ALSA-2025:11411" type="self" title="ALSA-2025:11411"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-devel" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.28.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">37b046eec7901df4f68d932cd4d13beb8a3dd3140b38d73e0b6918c053960f1b</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.28.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">4f8b45a80c9b1e35275da28759f2799a7cf33a8cbe951fef533619ffd600a3d1</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.28.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">5ec615c1793383a0d62cdaf012b942a2ee76a6ff11fc9cdf3c5614436c48e915</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.28.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">645038edad40a84c0b99fddb99f4ffec2026646dd2f36fd2c40ff92458db9aa7</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.28.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6b2bc2aca5926efd575e28dce8df0b56bee820c596de7a1291056dc9c2b61563</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.28.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8608909f9a08870d954c06f623132d382aa7ede932096b462222b1fb7381f2f9</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.28.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8614e856109fb4e30332198626d99c354189703813c62d637eec4b67df57a729</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.28.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">aac48f7724093fe50b515c36e4027ca9d3d085efbce9cfaa1d452b62e98c3187</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.28.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">af4f1e64300a2ada06a54bd0ae3905be6a0c2519778e55bad2759155b7eeb1ea</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.28.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">dcfa63adb8444bdda091816c9ab1f997c4fad90a50aaf164e52968312ffaf4d8</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.28.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">ddd0eaef2a776c32631eecbb5be6e7bfb1f3d7bf8259e6e308b1df1e445b5bd3</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.28.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.28.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.28.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">fd90b65568a2ba32c53b42cd69864b1f6e824b8b55a44e2e80df59eb9339100d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11861</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-07-31 22:26:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)
  * kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905)
  * kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)
  * kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)
  * kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113)
  * kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085)
  * kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)
  * kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958)
  * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086)
  * kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11861" id="RHSA-2025:11861" type="rhsa" title="RHSA-2025:11861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57980" id="CVE-2024-57980" type="cve" title="CVE-2024-57980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21905" id="CVE-2025-21905" type="cve" title="CVE-2025-21905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22085" id="CVE-2025-22085" type="cve" title="CVE-2025-22085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22091" id="CVE-2025-22091" type="cve" title="CVE-2025-22091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22113" id="CVE-2025-22113" type="cve" title="CVE-2025-22113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22121" id="CVE-2025-22121" type="cve" title="CVE-2025-22121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37797" id="CVE-2025-37797" type="cve" title="CVE-2025-37797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37958" id="CVE-2025-37958" type="cve" title="CVE-2025-37958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38086" id="CVE-2025-38086" type="cve" title="CVE-2025-38086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38110" id="CVE-2025-38110" type="cve" title="CVE-2025-38110"/>
      <reference href="https://bugzilla.redhat.com/2348599" id="2348599" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356613" id="2356613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360186" id="2360186" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360199" id="2360199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360212" id="2360212" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360219" id="2360219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363672" id="2363672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367572" id="2367572" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375305" id="2375305" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376035" id="2376035" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-11861.html" id="ALSA-2025:11861" type="self" title="ALSA-2025:11861"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.30.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3329d2dc532c8422c4c30a458b6eb4e3705113686cb956434651f97b8dff8a75</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.30.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3b0e7f4a8ee10f9b804143fbf39275bd9ffb083c8bfaaec4c29df0225dcb9e67</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.30.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3e424f7a466863813208046079d291328608f43c6a84f31738df63cc8c8ed30a</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.30.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">41817de5423fcf2dbc71c411f6f0213d4a68503d8a884ed8fb43774ea4e54e4c</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.30.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">44e29b9d98db3f23c717c0acf1a43c0acdac613442e7ebaec8625bd438e40e92</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.30.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">63ae0e0469e663557d67f4e8689d16e98b48f22d9b7e7c8e7942ac49e5c7b69d</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.30.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8564f17a64aad24666ea1c378fd682c5215e1d60ce575990d22cb225c2f2856c</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.30.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8a10dafdf9442634b235a7b36887cf7298370ff3fd9f842c1c41d76e3e1f9540</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.30.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">99bac70ecc587e859104206062bff130509f39609c20ea2f1af51aadc9980951</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.30.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">9d973f61127a25c504fd2c65286e4354cf6d46100b806ffff69dbc55810b97cd</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.30.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c3264eae4a0fb559a4bf41a45b1bbf7aa5b03b3b957e2ae7c54fe7748c9c7764</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.30.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.30.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.30.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">f683d6d08b021e04792a9f4a752108cea78c173e345a7f5d82846e67bdc569b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1262</id>
    <title>Important: kernel security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-13 16:31:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1262" id="RHSA-2025:1262" type="rhsa" title="RHSA-2025:1262"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53104" id="CVE-2024-53104" type="cve" title="CVE-2024-53104"/>
      <reference href="https://bugzilla.redhat.com/2329817" id="2329817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1262.html" id="ALSA-2025:1262" type="self" title="ALSA-2025:1262"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_5_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_5_default</name>
        <package name="kernel-rt-core" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-rt-core-5.14.0-503.23.2.el9_5.x86_64.rpm</filename>
          <sum type="sha256">08b45b503e810cbb22474ff86b65f5204340a0345b722d4e2c8a7d79491daece</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-rt-devel-5.14.0-503.23.2.el9_5.x86_64.rpm</filename>
          <sum type="sha256">2ea9f20a883bbbce6da094e94af8f78218638b7b8c42081f2dfaf526676a921f</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-503.23.2.el9_5.x86_64.rpm</filename>
          <sum type="sha256">351141dce0fec90843e2bc559a21928b6b8b950c48b6ffc7feebe7d614acef78</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-rt-5.14.0-503.23.2.el9_5.x86_64.rpm</filename>
          <sum type="sha256">3ab9a75d974e25e06ff0291e68f3a3f9b08b53514f496367b78142d569eefa63</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-rt-modules-5.14.0-503.23.2.el9_5.x86_64.rpm</filename>
          <sum type="sha256">47e7cc60cf3e980a15e8a2590e5b890ad887ebe8ce873be3e4e0f707ed4c79fc</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-503.23.2.el9_5.x86_64.rpm</filename>
          <sum type="sha256">5b43cb01ba0bbbfb9bae45763cfc85aea16b08c274577f59e469181876b5ae18</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-rt-debug-5.14.0-503.23.2.el9_5.x86_64.rpm</filename>
          <sum type="sha256">7d82487baca45c60af0db446b862e9ad04a18410fb8ff9093c93bdf59dc5a4a3</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-503.23.2.el9_5.x86_64.rpm</filename>
          <sum type="sha256">86a87699f26d6840b955cf70da9114e54d92f1038b36241c33869e6d88eac4fc</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-503.23.2.el9_5.x86_64.rpm</filename>
          <sum type="sha256">8cce7b50718cb426c46d5f3498ffef5ce61b3b794ff202a09ff7329951efe894</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-503.23.2.el9_5.x86_64.rpm</filename>
          <sum type="sha256">ab07d8c799c4d482528f324dabb9f4064d0edcf4b3e251bc266eaee1ff8b4ec8</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-503.23.2.el9_5.x86_64.rpm</filename>
          <sum type="sha256">b7d4bbae1c0a5787c5b368633ef89b204cc320fd0d853ea0d4f9b32a2ff4c57d</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="503.23.2.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.23.2.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-503.23.2.el9_5.x86_64.rpm</filename>
          <sum type="sha256">ff455744e8227afb9f94b1b26843e3046b05c6466cec2f886ba02ceb889e3b47</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12746</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-04 00:00:00"/>
    <updated date="2025-08-07 11:25:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
  * kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)
  * kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CVE-2025-21929)
  * kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962)
  * kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020)
  * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788)
  * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)
  * kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052)
  * kernel: net/sched: fix use-after-free in taprio_dev_notifier (CVE-2025-38087)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12746" id="RHSA-2025:12746" type="rhsa" title="RHSA-2025:12746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49788" id="CVE-2022-49788" type="cve" title="CVE-2022-49788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21727" id="CVE-2025-21727" type="cve" title="CVE-2025-21727"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21928" id="CVE-2025-21928" type="cve" title="CVE-2025-21928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21929" id="CVE-2025-21929" type="cve" title="CVE-2025-21929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21962" id="CVE-2025-21962" type="cve" title="CVE-2025-21962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22020" id="CVE-2025-22020" type="cve" title="CVE-2025-22020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37890" id="CVE-2025-37890" type="cve" title="CVE-2025-37890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38052" id="CVE-2025-38052" type="cve" title="CVE-2025-38052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38087" id="CVE-2025-38087" type="cve" title="CVE-2025-38087"/>
      <reference href="https://bugzilla.redhat.com/2348516" id="2348516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356592" id="2356592" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356594" id="2356594" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356624" id="2356624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360099" id="2360099" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363378" id="2363378" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366848" id="2366848" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373380" id="2373380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375531" id="2375531" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-12746.html" id="ALSA-2025:12746" type="self" title="ALSA-2025:12746"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.32.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">309e68e4d153bd93624ee40d050cb52e559993db5fccbb4b316c8498e7561859</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.32.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">461f6a1ed07d8b38eaa53403f171f51411e75cca98cbc851734eb4cb53215b00</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.32.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">53e6686e3de5d8a4cf51f8e0b5758ce9d8a834b3abf4b361177a39843776a21a</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.32.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">715389dd6c390de4ffede4b8d451cae42b4b9bcdfcf2c36811231386ca3db6df</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.32.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">72a4bbd3299bf880d29e55795c467e806acca56807791a66901952edc9698771</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.32.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a86e623eba1ff8e7b920b989809d3c238bd89d8192815726b65d6f2661819f1e</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.32.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">ba607f1f09a386b307865432a538abf4e90e5e58b906b604a68f7b7c944a3c7c</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.32.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">bf3b4d306444121f733fa879be29440ff00a61bd7f74c4a57d74d7059fce88a6</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.32.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c68f8768b11dd430474c2e3b0c9cd7b81b87dfcd9a85d46473c6630e5709b297</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.32.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">cc510a4d016f8dc2b024d2801ebd7301a1d348b1abd7eb51adffa1f2983a22ef</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.32.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">cfd4bd8aeef55e63d412c2f43cdd8cd448897fc244fc029a7a15c00b9ea9b2bc</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.32.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.32.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.32.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">d7b7f2353e22b270c7ecb493b96e9dd23b24a6b0166d8ecd978d379116ecf422</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13602</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-08-11 00:00:00"/>
    <updated date="2025-08-15 10:34:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)


The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)
  * kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13602" id="RHSA-2025:13602" type="rhsa" title="RHSA-2025:13602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38079" id="CVE-2025-38079" type="cve" title="CVE-2025-38079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38292" id="CVE-2025-38292" type="cve" title="CVE-2025-38292"/>
      <reference href="https://bugzilla.redhat.com/2373383" id="2373383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379219" id="2379219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13602.html" id="ALSA-2025:13602" type="self" title="ALSA-2025:13602"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.33.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">1a50f43aa4987f1a3fcc10d475fb2c1b0d9cf074509e068598006652498380fe</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.33.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">22ca8c3c4e0ea99a2d7d5c21bfa33815786f9d8611bd682bf4dc269374116a81</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.33.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">305c8d6aec62131f402cdb7d78bf48bb501e03a8f3b709b0e58602d19db6b949</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.33.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3850638a40218c72e4c3a478edc9e3d7f1d5281e4e29eaa359f7a159ff47ec7a</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.33.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3e4058fd3c07555542c709d23d615e0a099e6c115a28ced087763361c363114b</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.33.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">46a6ddaddb454255b35b508a6f9b5bcb3591fc1eabf603b623b064dc8ccc6501</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.33.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">672921e3f651eca4808a54280ad7f6fba54bd4ea4cd33b1d85079548fe8cabfd</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.33.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8c6a6a3a37e1bbcbc011027c119f43760b1947b916647064de360a6a9381ef76</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.33.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">9a0af2adea2a9f1b875f06aab7e2a9e9958bb90012e8319c2b072257d13c4b42</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.33.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b0ca62537a605e3cadd01771821ce9f898efba28b7eb0f914830bcdfc54c8d64</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.33.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">ecfe95d04f82e78385e9c8f1fbf8ff8a3a57cf36de89461c8a27bde2fa0354ad</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.33.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.33.2.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.33.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">f3929e87bc04d2eae53cff7652fa91eb1410f6ede11e69aa728b0792881a105e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13962</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-18 00:00:00"/>
    <updated date="2025-08-22 07:58:16"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (CVE-2025-21867)
  * microcode_ctl: From CVEorg collector (CVE-2024-28956)
  * kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084)
  * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)
  * kernel: net: fix udp gso skb_segment after pull from frag_list (CVE-2025-38124)
  * kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)
  * kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250)
  * kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380)
  * kernel: tls: always refresh the queue when reading sock (CVE-2025-38471)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13962" id="RHSA-2025:13962" type="rhsa" title="RHSA-2025:13962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28956" id="CVE-2024-28956" type="cve" title="CVE-2024-28956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21867" id="CVE-2025-21867" type="cve" title="CVE-2025-21867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38084" id="CVE-2025-38084" type="cve" title="CVE-2025-38084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38085" id="CVE-2025-38085" type="cve" title="CVE-2025-38085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38124" id="CVE-2025-38124" type="cve" title="CVE-2025-38124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38159" id="CVE-2025-38159" type="cve" title="CVE-2025-38159"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38250" id="CVE-2025-38250" type="cve" title="CVE-2025-38250"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38380" id="CVE-2025-38380" type="cve" title="CVE-2025-38380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38471" id="CVE-2025-38471" type="cve" title="CVE-2025-38471"/>
      <reference href="https://bugzilla.redhat.com/2355334" id="2355334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366125" id="2366125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375303" id="2375303" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375304" id="2375304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376041" id="2376041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376064" id="2376064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378982" id="2378982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383381" id="2383381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383893" id="2383893" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-13962.html" id="ALSA-2025:13962" type="self" title="ALSA-2025:13962"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.35.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">1e3bc78627ca4d92219bd2ad9fc9ff88a9bfe875e26293ea45f049f504f7cccb</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.35.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">39c44ae4c8680664fa3b2197b6f655e11309176bfff2ff08adc25d89d1ca70d8</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.35.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3e1e9c603e1549c30932b82c87a2cdff53ee94fec893b8cf76374f92fe38fcd5</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.35.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">7aad58e0181aacfcb57f762805e03d684559d5c278e0684251ec8e2068ba5700</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.35.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">806fc519b947c55dc8165c3b11a5c718d51fa2f0d11a0a22b477c197386293d1</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.35.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">88fd480abda8a0e4a777fd10bafdad2c1b634e2277b0e29c3f3deead9fdc68a4</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.35.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a2be8c3dce18063fddb5b573d0a2f9f34c8ae7711a3eb7c5bc15d1681815d168</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.35.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a51dc408333ae9b28dfd13aef39b6a0c7b9b4bff04bc2d10735c523000b831d0</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.35.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b5222ad44179686649f66bf730809cc11fb46d903d1e78bc92fd9c507c0b9d8b</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.35.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">bbb9acbc194af4faf4efb2dc493d5b76d9ea2adfd0d9af7376cfb52e1c2826c4</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.35.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">cdc91a068ca9335b6004459bcc8fb031e5cf933f71b9c27633aec2b378ba78c4</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.35.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.35.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.35.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e41969958193e41582976791a95232aedf0bbf05f3674c4ec0fd0b6fc57a96e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14420</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-25 00:00:00"/>
    <updated date="2025-08-27 12:00:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: udp: Fix memory accounting leak. (CVE-2025-22058)
  * kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914)
  * kernel: ice: fix eswitch code memory leak in reset scenario (CVE-2025-38417)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14420" id="RHSA-2025:14420" type="rhsa" title="RHSA-2025:14420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22058" id="CVE-2025-22058" type="cve" title="CVE-2025-22058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37914" id="CVE-2025-37914" type="cve" title="CVE-2025-37914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38417" id="CVE-2025-38417" type="cve" title="CVE-2025-38417"/>
      <reference href="https://bugzilla.redhat.com/2360276" id="2360276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367500" id="2367500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383463" id="2383463" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-14420.html" id="ALSA-2025:14420" type="self" title="ALSA-2025:14420"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.37.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">008fb7789452c96062667ea7ac6aadc4f70ac2e25d9f59a989ec7516982759c4</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.37.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">61c7d737b896473b640b86bf357fa6882165c77adaadcd21a74040fbc839c274</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.37.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">63f8f123159ef3aa267994d1d9e05c1e90e1d2bd812edbffcae5695265288ba2</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.37.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6a22f3eac058596cbb595cf96c680252ecd65685e11acc2acfcf2048468f7958</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.37.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">75cf30c2318b14d7bcd14a6e763ca8f4b9ac711b0c8368c5901e5ad6856ef399</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.37.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8ea71ec65b39cb701e1b341539bef0ca6b7475ba13983fba2de396eb16db0dbc</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.37.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a273fb6835b10e99b1d0e0195160a1663d8dfbabd6e404e9cda75af3be971f90</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.37.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">aa14dc0733931884afd168e3b6b7369b9513b2d71dbd6823f7163aaa1fca7e81</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.37.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b3d90b07d838c90d618857b54bf5fa45b4568625c8be10a637918b3a1a4e75e0</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.37.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">bac1f9fc621419d30b9a96650fd04bb38c02050c6474205a1655175ac0331343</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.37.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c01de4ba596622c653359d68e46836e51e9e931154fc6373f96ebeca381030cc</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.37.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.37.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.37.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">d86e42f72817cf00bd8e4611ec6648026c87bab4a8047723f40c176514600c50</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15011</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:19:37"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823)
  * kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200)
  * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)
  * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)
  * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464)
  * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461)
  * kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15011" id="RHSA-2025:15011" type="rhsa" title="RHSA-2025:15011"/>
      <reference href="https://bugzilla.redhat.com/2365024" id="2365024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376392" id="2376392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376406" id="2376406" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382054" id="2382054" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383509" id="2383509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383513" id="2383513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2387866" id="2387866" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15011.html" id="ALSA-2025:15011" type="self" title="ALSA-2025:15011"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-37823.html" id="CVE-2025-37823" type="cve" title="CVE-2025-37823"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38200.html" id="CVE-2025-38200" type="cve" title="CVE-2025-38200"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38211.html" id="CVE-2025-38211" type="cve" title="CVE-2025-38211"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38350.html" id="CVE-2025-38350" type="cve" title="CVE-2025-38350"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38461.html" id="CVE-2025-38461" type="cve" title="CVE-2025-38461"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38464.html" id="CVE-2025-38464" type="cve" title="CVE-2025-38464"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38500.html" id="CVE-2025-38500" type="cve" title="CVE-2025-38500"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38684.html" id="CVE-2025-38684" type="cve" title="CVE-2025-38684"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.39.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">061b0000cdc8721323627350d8d3451a914c048c1a03ffe2a9d3d330ddf3baa7</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.39.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">1e37c8615261b32a57f6dfe7fa89000c5b98f0c22bb285991019a77ae4ad4ff9</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.39.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">1fbc14c464624e6d6ee2e872edcf38a7795409d36fb3191267660e865da272da</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.39.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">56ee2fbb6c1f9a98f6819f7539d7262d88a43b27f6773a327475ad4f48482131</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.39.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">94745e1390fd50c4e985a21264192f0639d13cbe817e8caacf7b213da42a39a4</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.39.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">98f7bb915aaa6c7e2dd61486310426440ac954a1e91afb6f959e1c07abe90c6e</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.39.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a22466838a424301ee3f036a4891b221d517ece07cfb83ea0684ee0b8be09caf</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.39.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">cec9d8e23467a9f5eee4f5ee85bfb0bc7495eb8a051e6ca0e44be397a709dce6</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.39.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">d17d95e2b293e56155fe31b3fdf865fbdf54d083055797e03bf99bc51b2bfc0d</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.39.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e6406495ec0a1f832d6cc00864da79f93cf9faf468eff7edcc379a328b8d4642</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.39.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">f4330b3e30d14270137c2851afd0ae8c7aa8a498bf0ba830fcd16d0703800f84</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.39.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.39.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.39.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">fdad17dbe13632409dcabd1d92777f72fb4f8b3db0c265f32c968b885f7a2766</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15429</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-08 00:00:00"/>
    <updated date="2025-09-15 09:02:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: udmabuf: fix a buf size overflow issue during udmabuf creation (CVE-2025-37803)
  * kernel: idpf: convert control queue mutex to a spinlock (CVE-2025-38392)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15429" id="RHSA-2025:15429" type="rhsa" title="RHSA-2025:15429"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37803" id="CVE-2025-37803" type="cve" title="CVE-2025-37803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38392" id="CVE-2025-38392" type="cve" title="CVE-2025-38392"/>
      <reference href="https://bugzilla.redhat.com/2365013" id="2365013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383407" id="2383407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15429.html" id="ALSA-2025:15429" type="self" title="ALSA-2025:15429"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.41.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3f8aa0cd6588241c24195e00cef7a478decd44051a0466b7dcef38fceae91504</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.41.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">57938b5d7627b84070c1150de9b2091b35c2163dd3ddbdd44b2b2313578a8099</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.41.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6d70a9c9ae604226879b416b0aacc144e13c4ff11f237d338c061647ee1ebb1e</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.41.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">722ee877c6a7e983996a9205fbb46dbfd319a93fcb6b6f72c4c6dce55ac146b1</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.41.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">74177862d1b5e08fa24fe7a1cab721f557d4f56e5e049087b3011f4a063bb739</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.41.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">7eed68ea7266cf5ba6f95080e798d97892f1e6ad87e2f13b9d1b34969998d5eb</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.41.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">96eef3d0c26b6e0261ef1d06a9083491ee20691068d09ba8501fa0600c9316c9</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.41.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">aceaafa6df03d68a7453cc9644eebdd6b97ffcd69ab71f73f687432bcaeeac6d</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.41.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b95ad9507d3c3bb4e1d43354e71855dac29072a576ca5ef05eb729be2c7c36c4</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.41.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">d500d996c671632c0c82484f2eb7c30ee774774e850962db57ae1e1bfdfc190f</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.41.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e4f2c8bb60672b26e2dc2244e7f31bf8ee1f2496cfe17363fa5873830bfffd7e</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.41.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.41.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.41.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">fa631d53fc9c4021cd9e86b25875af6668a3c19de8e78709e62de25c73275d7f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15661</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-11 00:00:00"/>
    <updated date="2025-09-16 09:35:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097)
  * kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332)
  * kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352)
  * kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15661" id="RHSA-2025:15661" type="rhsa" title="RHSA-2025:15661"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22097" id="CVE-2025-22097" type="cve" title="CVE-2025-22097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38332" id="CVE-2025-38332" type="cve" title="CVE-2025-38332"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38352" id="CVE-2025-38352" type="cve" title="CVE-2025-38352"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38449" id="CVE-2025-38449" type="cve" title="CVE-2025-38449"/>
      <reference href="https://bugzilla.redhat.com/2360223" id="2360223" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379246" id="2379246" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382581" id="2382581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383519" id="2383519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15661.html" id="ALSA-2025:15661" type="self" title="ALSA-2025:15661"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.42.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">30e53a4749bff41e6140fd3b64b13e98ee1b7ee25bdc29fe6ff4ff20efdd5123</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.42.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">30f6dc1c625ba02d56c867b626acd8c1bea54df1c5a890cb97127a83e70711db</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.42.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">41d606ff9e6385a5ee693fa07581efa9db31073a4dde351e303e3e1aab8137f6</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.42.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">450965bf84812f2559c127d50b67467953ddff6703eb8d70e277fd396df8c3ee</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.42.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">545bef76e49bbdf61d5f1a5afa1510e6735d910997f97fd695aa0b0b36b2c871</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.42.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">698b2cf2256da9fb4ab8a058eba359774bb94d78928a5994d5bba9fe78421d78</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.42.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6d1929c5a03362e6355e1b47404ad32aeb90832eadc426ab1253bd523b711404</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.42.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8eac215338bac5d91ff21a39a59d6e68101e7cb58a50c7d15c3b0a7f2cd491ec</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.42.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">bed5934f7b5d4a87b07310c44630f13229c9a85a78f801274d01ec4ef19412e9</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.42.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c5b6b281938681a7accad4214bdc9baec217333695195efc8a8d01e5fcc84ac2</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.42.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">da7359af50cb2661dda5f66f607b080f49d0fc9965bde067d5651e4b2107e0b5</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.42.2.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.42.2.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.42.2.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e509091d9a518bb9fd8104872c266dfbd0a2ee484640938883f1c9a6d7ccf176</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15740</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-15 00:00:00"/>
    <updated date="2025-09-25 08:48:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: mcast: Delay put pmc-&gt;idev in mld_del_delrec() (CVE-2025-38550)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15740" id="RHSA-2025:15740" type="rhsa" title="RHSA-2025:15740"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38550" id="CVE-2025-38550" type="cve" title="CVE-2025-38550"/>
      <reference href="https://bugzilla.redhat.com/2388941" id="2388941" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-15740.html" id="ALSA-2025:15740" type="self" title="ALSA-2025:15740"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.44.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">0ef6400233e39173cb9c0f9d23b0c499f3acefed760aa0f1054ae4fd2eec622d</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.44.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">37972416ac22cb84886428c2f3bd26a89892b7067a8a159e220c0bffc5e40f4b</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.44.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">57f6d66081139f7bef8f512887ae3766be2c4fc6c79e094241017ef28ab4d9f4</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.44.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6d5bcfdafc45b6a608c62312a787c888f334450d0279362ac751d23a08c8ec55</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.44.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">7558f579fef3b9bc6b603c6b2c6e0d9d9b3356332cadfb6c04668ffb7a314a7d</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.44.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8c3c37cdbb7a019efaec186961c229c1fc5d1ee48f425819f1213ecf056dd1a0</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.44.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">94780de8368a6b2074e3be3bffa89dc6ec7e8940fc81f8bc7b8ba50072ad64a4</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.44.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b3bfb28a61fa8322395f06e4ad81c0b41fa137a1e3d0f8a2c56efc755cc45cda</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.44.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c0c0dee02e496de8acfcc646773544451b365b712656417b4b30854c0ce302e5</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.44.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c82d3ca24fad6e021464bff66ba164a05523eb8eb9460be083250baf672def5e</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.44.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">d5197655ba6606e86ca10c1c59b9ab65756f372f97d45dd4534f1b9ac1f9ec6a</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.44.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.44.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.44.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e776e6b5c9a161fee699a5ad5e07d90cff980f2b4ba4f2b24396884f71d557b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16398</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-22 00:00:00"/>
    <updated date="2025-09-29 08:44:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: usb: smsc75xx: Limit packet length to skb-&gt;len (CVE-2023-53125)
  * kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length (CVE-2025-37810)
  * kernel: do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498)
  * kernel: s390/sclp: Fix SCCB present check (CVE-2025-39694)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16398" id="RHSA-2025:16398" type="rhsa" title="RHSA-2025:16398"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53125" id="CVE-2023-53125" type="cve" title="CVE-2023-53125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37810" id="CVE-2025-37810" type="cve" title="CVE-2025-37810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38498" id="CVE-2025-38498" type="cve" title="CVE-2025-38498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39694" id="CVE-2025-39694" type="cve" title="CVE-2025-39694"/>
      <reference href="https://bugzilla.redhat.com/2363686" id="2363686" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2365028" id="2365028" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2384422" id="2384422" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393534" id="2393534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16398.html" id="ALSA-2025:16398" type="self" title="ALSA-2025:16398"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.46.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">04ff55e4377864999dc618186d831ee37cbf9c44eb14dd1e9f210101574d546c</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.46.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">14a8eca4a655d8958c49222d634284f35acbbae6070e440cc9152564137c67ad</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.46.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">34981258f10d1e37d28177497d2c914681226ab61c65a87fe4c91191560edcee</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.46.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">44c96e8ee2abb8163ea0711818dfce1fe7c30897f38a92d4a23e5e20d6f1a9e2</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.46.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">74208d53e8f068ec473ee1d965c839bc4be47d6a85eb82f25da6dfff0f3c0628</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.46.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">781c9c50b7f894bef4bd1285830632d3a48a730bf715aca39002c33d5b1259fc</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.46.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8675dfd6f53f6fdd0c0678e0b8f20af66e0a5d2a105fc26a69ecbc7f34f6a341</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.46.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8a64744b480780720d6b98ef1915502b7f5b717331b00df9b6e30030355c4353</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.46.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8c85da765f929e01a5dbe0149f786fd3667ce5f2ab0772fb266c367cb9466164</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.46.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">97283da75126ddc16daa8dd0277c9c3fc74853555f96a7650e0cf8e1be29970f</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.46.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">bb830b274050f19e97008868ec0fd6f5d48724ece41b40fb4d20264b7f19b758</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.46.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.46.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.46.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e5b87ab7eda6a060078327d6bcca6036c3712a6df18bc5633919a743b5d10c79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1659</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-03-04 08:50:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: mm: migrate: fix getting incorrect page mapping during page migration (CVE-2023-52490)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1659" id="RHSA-2025:1659" type="rhsa" title="RHSA-2025:1659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52490" id="CVE-2023-52490" type="cve" title="CVE-2023-52490"/>
      <reference href="https://bugzilla.redhat.com/2269187" id="2269187" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-1659.html" id="ALSA-2025:1659" type="self" title="ALSA-2025:1659"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_5_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_5_default</name>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">1f610af60075b53f3c86b5343a072d373819a742f1cccb02061a2a11f6f90ad0</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-rt-core-5.14.0-503.26.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">42a563d8df825838f946fd465d074e73d9a01c3970e13a858e4808523da0e4ae</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-rt-5.14.0-503.26.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">5b21746762264bef65f00f06fc559d43639c34e93524d34b17dd576d8516c1e8</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-rt-devel-5.14.0-503.26.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">73d93bf4aa02e40d0bae19f93e731f52250f7249de74419dbeb128484bfa505d</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">7960f9fe8f9972971e4cff4fe0144b2ddd44d4f87e4eda5a481744fe29b75124</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-503.26.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">7c69b32038544f2cffb490151f729f176b6643cde80b3697a5f45cfb0a1b0005</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-503.26.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">8a4d0b2dfa8c1066f45865d09396eed7fd3d521105e26eeb6fbe28c638af2595</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-503.26.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">b0a40e4fb5f0153dc22714510cb54e37d502d9b4e1c5709122ac4fdeb57bb39a</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-503.26.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">b57c83f7ba9932b8fefd3519e1bd8f4322ca4c42a6bc532997dc84eefea4be41</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-5.14.0-503.26.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">e66f7072ddff0c22eab031a1b365b989e9b7b1e648040104bdf7335101eb8ee7</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-503.26.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">e9b3982a6e847cb52a41f4345ff6d2fc6205c93387c72ffccaa461ea4a92a96b</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="503.26.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.26.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-5.14.0-503.26.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">ef4c095d160974f08d570140ef9c38c1f49497d805f15cd43902c00f78ab04ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16880</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-29 00:00:00"/>
    <updated date="2025-10-01 09:18:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472)
  * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527)
  * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)
  * kernel: tls: fix handling of zero-length records on the rx_list (CVE-2025-39682)
  * kernel: io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CVE-2025-39698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16880" id="RHSA-2025:16880" type="rhsa" title="RHSA-2025:16880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38472" id="CVE-2025-38472" type="cve" title="CVE-2025-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38527" id="CVE-2025-38527" type="cve" title="CVE-2025-38527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38718" id="CVE-2025-38718" type="cve" title="CVE-2025-38718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39682" id="CVE-2025-39682" type="cve" title="CVE-2025-39682"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39698" id="CVE-2025-39698" type="cve" title="CVE-2025-39698"/>
      <reference href="https://bugzilla.redhat.com/2383916" id="2383916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2388928" id="2388928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393166" id="2393166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393511" id="2393511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393519" id="2393519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-16880.html" id="ALSA-2025:16880" type="self" title="ALSA-2025:16880"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.49.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">2e618f9405e0b98b70d8fa2e2d24b7c3f7f59aae39cf0f14ffab29dcd2baeab2</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.49.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">633f56e4f5ea6f1ee1eda1a234a362531eb29a7b9c11845810166aeedaa63235</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.49.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6ba78e60ee8b164db3ca819281723efd607200f15673093dbf04ee31f7d31f66</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.49.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6c373bd40b2800cc0980efcf20f7f6833119b9f720ed580c52a8beeffe928112</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.49.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">750a2487130398794b79f90d38a58c57b9b2c951fdd23f0efdf9b4174eadf6a9</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.49.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8f1ee12bfe7871a618c2c4de392f549d3690bd71d7d6fe0439bd00327f3006dd</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.49.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a64e4feb8429662da7c527fea5bf3b5904cb5f822d98c1d71069b544a334bc91</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.49.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b237fd24ba43905e07ff117cc423fb9f45a8af8273b4eb306ebf5a90311b46da</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.49.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">baf84cc554278199682b9360e7bc0d9e2296513afe55361c3a334136194678c0</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.49.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c06b4e537ba121cec201187866b0a06e371b74b5b6e2451c252f9bdeb70aa7fc</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.49.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">de0684de80d02af3a878f4272b9d1741a50bd0b018e17a80f125b2131196d911</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.49.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.49.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.49.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">f6ecdaaa37646b1a7db32b5fe9a69c2eb82595c38c81afeae41c23f99fe8b519</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17377</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-06 00:00:00"/>
    <updated date="2025-10-09 07:42:16"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301)
  * kernel: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CVE-2025-38351)
  * kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling (CVE-2025-39761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17377" id="RHSA-2025:17377" type="rhsa" title="RHSA-2025:17377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50301" id="CVE-2024-50301" type="cve" title="CVE-2024-50301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38351" id="CVE-2025-38351" type="cve" title="CVE-2025-38351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39761" id="CVE-2025-39761" type="cve" title="CVE-2025-39761"/>
      <reference href="https://bugzilla.redhat.com/2327188" id="2327188" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382059" id="2382059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394606" id="2394606" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17377.html" id="ALSA-2025:17377" type="self" title="ALSA-2025:17377"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-core" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.51.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">0093fe339302f06cd6f4f92acd6ce9247267a3cef28bbe3c32e0efe5009213da</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.51.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3cd2e9748bf2c61e039a9f31f9378275f7f6f3cfdaf03ed5792d64b57125bd87</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.51.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3f24724d0bb287cdf2eaea79f640035c0984f146d23962ddbcbb67a853f4b200</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.51.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">4136c8c12575c70bb337f14d914cb0f9836e55010b7029ae078b976c9634998b</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.51.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">4cb7d1f47d43434296b6f93c00feaf8769a2edd354c3b1fd76ece27bf2861fc7</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.51.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">4e568d48c04e74c09d4dce9bbc511c6893d049d27dc63649967e6a9603158d1a</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.51.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6c088cefcdd6d37aa93630a322e8fc399cc8e174f029c215caa359405cdce73d</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.51.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">ae35445bbfc373e8ada50015eddc265e18806846849f6ef42ab80f79d7e86b16</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.51.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c16e7493c09b0985013a34f1111e3f843f69c051c494f7f31c7e7c20e3d40114</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.51.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e81c915e3aac64ef4e17fa23eb8fb36f9fa2428177376dcfc6ebbcd6bf272b79</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.51.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">f4aa18d1a31e94dd0222b9057ea4d59f4230f092e9746cf80bad140655c886d7</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.51.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.51.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.51.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">fa2a55391a7f402341f5bdd3167fa39faec54757481f6bba002037b2f2a62ab9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17760</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-13 00:00:00"/>
    <updated date="2025-10-16 07:33:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556)
  * kernel: eventpoll: Fix semi-unbounded recursion (CVE-2025-38614)
  * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757)
  * kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17760" id="RHSA-2025:17760" type="rhsa" title="RHSA-2025:17760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53373" id="CVE-2023-53373" type="cve" title="CVE-2023-53373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38556" id="CVE-2025-38556" type="cve" title="CVE-2025-38556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38614" id="CVE-2025-38614" type="cve" title="CVE-2025-38614"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39757" id="CVE-2025-39757" type="cve" title="CVE-2025-39757"/>
      <reference href="https://bugzilla.redhat.com/2389456" id="2389456" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389491" id="2389491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394615" id="2394615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396379" id="2396379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-17760.html" id="ALSA-2025:17760" type="self" title="ALSA-2025:17760"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-modules" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.52.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">23cf1e6d6e1069cd6fc2ff5e2b778e17d30262c081fdf0248c731792c45f7dc6</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.52.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">4a9e0e110a3cbee212df9dd75bb1ec908b84d8307e606f99a729747f1bda9f8c</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.52.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">50398198c9c26a6ba93a8bc730c02c62bf9b9f38a048df1ec069716d42b9df23</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.52.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">67fe4f9bc4e3f28b5bc3b7e0a6f55719eda995f2762e3161cf1c8793710b2efa</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.52.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">768c3b15ad89fdee543fc1f2f0e23e7cf9326f9a251022282673351650daf9ed</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.52.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">919b22317dea46e79c6ce140471c2d45709cec6e54fb190c94c1bcc0c4861b59</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.52.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b0d5b1ab3f1063dbf22ceb62a92cc8b994325a51d06967be6ca6ba0343024680</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.52.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b8260c5e93cec7a280dd346014b0746522fd2d68a0244c2e2860b3312daa92c5</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.52.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">bf795d1db725f58cd0748b36027b73fcba789c06352ce99ba9c985638bd18107</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.52.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">d3a6679adc442bddcb5bfdfd071b6d56aa2bdccbf85e9d86a6a0b2ccab22856c</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.52.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e84148a2f2b8b5314e521c9c6eedafdf451d2a4556a54238c5ff7a4747d1b622</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.52.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.52.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.52.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">fe373df327c03c13c9f691ea71fc9711c59a4f6b95005fdebc703d909682014e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18281</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-20 00:00:00"/>
    <updated date="2025-10-22 10:16:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)
  * kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087)
  * kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571)
  * kernel: sunrpc: fix handling of server side tls alerts (CVE-2025-38566)
  * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)
  * kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849)
  * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18281" id="RHSA-2025:18281" type="rhsa" title="RHSA-2025:18281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50087" id="CVE-2022-50087" type="cve" title="CVE-2022-50087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22026" id="CVE-2025-22026" type="cve" title="CVE-2025-22026"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38566" id="CVE-2025-38566" type="cve" title="CVE-2025-38566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38571" id="CVE-2025-38571" type="cve" title="CVE-2025-38571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39817" id="CVE-2025-39817" type="cve" title="CVE-2025-39817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39841" id="CVE-2025-39841" type="cve" title="CVE-2025-39841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39849" id="CVE-2025-39849" type="cve" title="CVE-2025-39849"/>
      <reference href="https://bugzilla.redhat.com/2360224" id="2360224" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373539" id="2373539" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389480" id="2389480" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389487" id="2389487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395805" id="2395805" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396928" id="2396928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396944" id="2396944" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-18281.html" id="ALSA-2025:18281" type="self" title="ALSA-2025:18281"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.55.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">10ce26b927065e585f113661ce26f8f3d8a511315f9ed92225ca6a5d547159db</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.55.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">18a8d9e120e7ed9a39938f374df1fb2254a6e15c0e65e9b72f47202fc80904c0</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.55.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">25f23cc9702aa77b31b0fc91b66138df070abb050388508083f79c9ff7ee7de3</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.55.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3d20150dbada1f230572a26f363a7ac60ad6438dfc95c90a0c5f34714b998ade</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.55.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">57489a3ba92185a22d23b62375decb0f8800296c1f8637192ab5e24787200542</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.55.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">5da45550c4cbc91dda944463ab64fde674dae4881c8120b36b905427cfb22e4a</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.55.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a5f4623310456bfae5c05854e8c10a8ce92e8caef0dc8bc7463977188a52d18b</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.55.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a5fce6b4164a528db7acd93d75bd8fb880a7de9ca4be65ee69519e662b7014b9</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.55.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b1777bfb4cdd4189aa748eabe8113be2cca7321f958a378fe7f4d585c8213b9d</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.55.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b8969b58a96bf3293f8b5f0347dfb438ebb105d9a205deb4dd6d6ac1bd92f7d3</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.55.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">ea7493564d5e5af1cf530b0b8b9d0ff1ddd04d58c559ac42be31ec11e1141694</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.55.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.55.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.55.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">eec46556f81eae0e0fb9a5ba408137e70e9d963227595bae194314745fede562</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19409</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-03 00:00:00"/>
    <updated date="2025-11-07 11:55:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702)
  * kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367)
  * kernel: crypto: xts - Handle EBUSY correctly (CVE-2023-53494)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19409" id="RHSA-2025:19409" type="rhsa" title="RHSA-2025:19409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50367" id="CVE-2022-50367" type="cve" title="CVE-2022-50367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53494" id="CVE-2023-53494" type="cve" title="CVE-2023-53494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39702" id="CVE-2025-39702" type="cve" title="CVE-2025-39702"/>
      <reference href="https://bugzilla.redhat.com/2393533" id="2393533" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396114" id="2396114" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400777" id="2400777" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19409.html" id="ALSA-2025:19409" type="self" title="ALSA-2025:19409"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-devel" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.60.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">1b6e05a78443c19e07e655c14a53b3dd76e85624d7394c69c8e27c3b03b6e430</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.60.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3c04b1bad9cb7ea82c513192504a6a0faa416efa9f309dd1c06f2c9675bffc85</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.60.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">41bf573a114ed4f4f0c5765fba55f2f2722acec54bea5ea5694186f6392c76b7</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.60.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">4982d125dd64b601c1da3a22701f0590f6eeb3f4884733c0735e2b162275a612</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.60.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">5c013168fe019c2c8454f9c3f2be35ab5209694ef56e85ec33751c9aecfba1a5</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.60.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">622c33710bd30b080c96c0059683326fefcedfad87436018072a88f2dc6ce0f9</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.60.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">94025f42aaca954b9155eb9393220f41172e04dfc8e25951320097b6fd055761</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.60.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c6a2c25721abbb5d41bb2b6a65f633fdaf42bb682eaef6d8691baa16f68d4e16</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.60.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e1bf8ee74556af80256a17111a30c41905f04520e114f565456472c624b66fd8</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.60.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e2dbe503c1006f43297f8bbe715f1f25afa01ac86c0b21fa33ce5bcd385c3785</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.60.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e4349e2f9ca10ab9de8e356897f33495c5f8ac030dd94a425ff918d7f9b79e81</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.60.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.60.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.60.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">f9719ab04ad108aac6593fb6657b25cd2d874acb5364a8b6abe697d4fe056d67</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19930</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-10 00:00:00"/>
    <updated date="2025-11-12 09:59:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)
  * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)
  * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19930" id="RHSA-2025:19930" type="rhsa" title="RHSA-2025:19930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36350" id="CVE-2024-36350" type="cve" title="CVE-2024-36350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36357" id="CVE-2024-36357" type="cve" title="CVE-2024-36357"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40300" id="CVE-2025-40300" type="cve" title="CVE-2025-40300"/>
      <reference href="https://bugzilla.redhat.com/2350725" id="2350725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350726" id="2350726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394627" id="2394627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-19930.html" id="ALSA-2025:19930" type="self" title="ALSA-2025:19930"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-devel" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.62.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">0e0f0179b75fc0cd6820f25be5adcdf58c7e1ce10ba68761391cd6274f2583bc</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.62.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">4f27e0b1c89faa9177dfe211a395433c5c34640fa17cef5b6b15b4ec99df59ac</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.62.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">54912b5c41e77c6a976f955a343780388763b5d687eb6e1cfd4e5598af212498</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.62.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">5e619455f1da2bc622588733f6e5dc7f61ba0c1d10dcb79e96cf227a023f94a5</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.62.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6072964ff7617adb24c547e41fdb01ced449a72f69e499631cc368bedd52e0c5</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.62.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">617d5d184de8e4bbfd3b5aa3e0b5d89e55bbfc82c4744c95a3c1dbcd611c3e87</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.62.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">754fe32ba2b638584d06f7af524edb6452ab1383993d02877690b2fade49e0c5</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.62.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">81c8b6c1ff7647d93bd2001d44f9ff74879540759658e0d5aecf914ab8067f31</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.62.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">82b03197defe7a37e904678f29faea721f4c69021b55292ca76694a69f2850b7</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.62.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8cb119e87871e3491743dc6cd09f1d25b992aa8665c06715c5e113d1ead9faa5</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.62.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">bd4c895aaa00c446f1e26331a1039fba88c558fbc109482421536556f4ca44d9</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.62.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.62.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.62.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">ee87371bf06151c80ef940caf698ad9442535eb436a67d3f542ef3fb11ad3ee9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20518</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-19 09:15:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)
  * kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)
  * kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)
  * kernel: vfs: fix race between evice_inodes() and find_inode()&amp;#38;iput() (CVE-2024-47679)
  * kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)
  * kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)
  * kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)
  * kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)
  * kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)
  * kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)
  * kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)
  * kernel: afs: Fix lock recursion (CVE-2024-53090)
  * kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)
  * kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)
  * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  * kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)
  * kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)
  * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  * kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
  * kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)
  * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  * kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
  * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  * kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)
  * kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)
  * kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)
  * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  * kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)
  * kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)
  * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  * kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)
  * kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  * kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)
  * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  * kernel: pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0 (CVE-2025-21702)
  * kernel: usbnet: fix memory leak in error case (CVE-2022-49657)
  * kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)
  * kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)
  * kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)
  * kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)
  * kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)
  * kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)
  * kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269)
  * kernel: ima: Fix a potential integer overflow in ima_appraise_measurement (CVE-2022-49643)
  * kernel: powerpc/xive/spapr: correct bitmap allocation size (CVE-2022-49623)
  * kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs (CVE-2022-49357)
  * kernel: list: fix a data-race around ep-&gt;rdllist (CVE-2022-49443)
  * kernel: tracing/histograms: Fix memory leak problem (CVE-2022-49648)
  * kernel: Input: synaptics - fix crash when enabling pass-through port (CVE-2025-21746)
  * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  * kernel: bpf: Send signals asynchronously if !preemptible (CVE-2025-21728)
  * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  * kernel: RDMA/mlx5: Fix implicit ODP use after free (CVE-2025-21714)
  * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  * kernel: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (CVE-2024-57993)
  * kernel: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (CVE-2025-21729)
  * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  * kernel: OPP: add index check to assert to avoid buffer overflow in _read_freq() (CVE-2024-57998)
  * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  * kernel: scsi: ufs: core: Fix use-after free in init error and remove paths (CVE-2025-21739)
  * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  * kernel: team: better TEAM_OPTION_TYPE_STRING validation (CVE-2025-21787)
  * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981)
  * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790)
  * kernel: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (CVE-2024-57990)
  * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765)
  * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012)
  * kernel: blk-cgroup: Fix class @block_class's subsystem refcount leakage (CVE-2025-21745)
  * kernel: net: let net.core.dev_weight always be non-zero (CVE-2025-21806)
  * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072)
  * kernel: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (CVE-2024-58068)
  * kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference (CVE-2024-58062)
  * kernel: idpf: convert workqueues to unbound (CVE-2024-58057)
  * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828)
  * kernel: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083)
  * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826)
  * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077)
  * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075)
  * kernel: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (CVE-2025-21829)
  * kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839)
  * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837)
  * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)
  * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)
  * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851)
  * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855)
  * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844)
  * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853)
  * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847)
  * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864)
  * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088)
  * kernel: acct: perform last write from workqueue (CVE-2025-21846)
  * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861)
  * kernel: io_uring: prevent opcode speculation (CVE-2025-21863)
  * kernel: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (CVE-2025-21848)
  * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056)
  * kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization (CVE-2022-49845)
  * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994)
  * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116)
  * kernel: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (CVE-2025-38396)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20518" id="RHSA-2025:20518" type="rhsa" title="RHSA-2025:20518"/>
      <reference href="https://bugzilla.redhat.com/2298169" id="2298169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2312077" id="2312077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2313092" id="2313092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320172" id="2320172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320259" id="2320259" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320455" id="2320455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320616" id="2320616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320722" id="2320722" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324549" id="2324549" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327203" id="2327203" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327374" id="2327374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327887" id="2327887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329918" id="2329918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2330341" id="2330341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2331326" id="2331326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334357" id="2334357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334396" id="2334396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334415" id="2334415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334439" id="2334439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334537" id="2334537" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334547" id="2334547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334548" id="2334548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334560" id="2334560" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334676" id="2334676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334795" id="2334795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334829" id="2334829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2336541" id="2336541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337121" id="2337121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337124" id="2337124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338814" id="2338814" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338828" id="2338828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338832" id="2338832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343172" id="2343172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343175" id="2343175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344684" id="2344684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344687" id="2344687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345240" id="2345240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346272" id="2346272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347707" id="2347707" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347753" id="2347753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347759" id="2347759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347781" id="2347781" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347807" id="2347807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347859" id="2347859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347919" id="2347919" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2347968" id="2347968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348022" id="2348022" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348071" id="2348071" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348238" id="2348238" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348240" id="2348240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348279" id="2348279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348515" id="2348515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348523" id="2348523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348528" id="2348528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348541" id="2348541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348543" id="2348543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348547" id="2348547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348550" id="2348550" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348554" id="2348554" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348556" id="2348556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348566" id="2348566" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348573" id="2348573" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348574" id="2348574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348577" id="2348577" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348578" id="2348578" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348581" id="2348581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348584" id="2348584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348585" id="2348585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348587" id="2348587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348595" id="2348595" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348597" id="2348597" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348600" id="2348600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348601" id="2348601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348615" id="2348615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348620" id="2348620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348625" id="2348625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348634" id="2348634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348645" id="2348645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348650" id="2348650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348654" id="2348654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348901" id="2348901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350363" id="2350363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350367" id="2350367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350374" id="2350374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350375" id="2350375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350386" id="2350386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350388" id="2350388" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350392" id="2350392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350396" id="2350396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350397" id="2350397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350400" id="2350400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350585" id="2350585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350589" id="2350589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350725" id="2350725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350726" id="2350726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351606" id="2351606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351608" id="2351608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351612" id="2351612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351613" id="2351613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351616" id="2351616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351618" id="2351618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351620" id="2351620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351624" id="2351624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351625" id="2351625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351629" id="2351629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351633" id="2351633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360215" id="2360215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363380" id="2363380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369184" id="2369184" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376076" id="2376076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383441" id="2383441" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-20518.html" id="ALSA-2025:20518" type="self" title="ALSA-2025:20518"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-48830.html" id="CVE-2022-48830" type="cve" title="CVE-2022-48830"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49024.html" id="CVE-2022-49024" type="cve" title="CVE-2022-49024"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49269.html" id="CVE-2022-49269" type="cve" title="CVE-2022-49269"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49353.html" id="CVE-2022-49353" type="cve" title="CVE-2022-49353"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49357.html" id="CVE-2022-49357" type="cve" title="CVE-2022-49357"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49432.html" id="CVE-2022-49432" type="cve" title="CVE-2022-49432"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49437.html" id="CVE-2022-49437" type="cve" title="CVE-2022-49437"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49443.html" id="CVE-2022-49443" type="cve" title="CVE-2022-49443"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49623.html" id="CVE-2022-49623" type="cve" title="CVE-2022-49623"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49627.html" id="CVE-2022-49627" type="cve" title="CVE-2022-49627"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49643.html" id="CVE-2022-49643" type="cve" title="CVE-2022-49643"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49648.html" id="CVE-2022-49648" type="cve" title="CVE-2022-49648"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49657.html" id="CVE-2022-49657" type="cve" title="CVE-2022-49657"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49670.html" id="CVE-2022-49670" type="cve" title="CVE-2022-49670"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49672.html" id="CVE-2022-49672" type="cve" title="CVE-2022-49672"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2022-49845.html" id="CVE-2022-49845" type="cve" title="CVE-2022-49845"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-36350.html" id="CVE-2024-36350" type="cve" title="CVE-2024-36350"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-36357.html" id="CVE-2024-36357" type="cve" title="CVE-2024-36357"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-46689.html" id="CVE-2024-46689" type="cve" title="CVE-2024-46689"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-46744.html" id="CVE-2024-46744" type="cve" title="CVE-2024-46744"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-47679.html" id="CVE-2024-47679" type="cve" title="CVE-2024-47679"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-47727.html" id="CVE-2024-47727" type="cve" title="CVE-2024-47727"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-49570.html" id="CVE-2024-49570" type="cve" title="CVE-2024-49570"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-49864.html" id="CVE-2024-49864" type="cve" title="CVE-2024-49864"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-50060.html" id="CVE-2024-50060" type="cve" title="CVE-2024-50060"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-50195.html" id="CVE-2024-50195" type="cve" title="CVE-2024-50195"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-50294.html" id="CVE-2024-50294" type="cve" title="CVE-2024-50294"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-52332.html" id="CVE-2024-52332" type="cve" title="CVE-2024-52332"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53052.html" id="CVE-2024-53052" type="cve" title="CVE-2024-53052"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53090.html" id="CVE-2024-53090" type="cve" title="CVE-2024-53090"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53119.html" id="CVE-2024-53119" type="cve" title="CVE-2024-53119"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53135.html" id="CVE-2024-53135" type="cve" title="CVE-2024-53135"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53170.html" id="CVE-2024-53170" type="cve" title="CVE-2024-53170"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53216.html" id="CVE-2024-53216" type="cve" title="CVE-2024-53216"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53229.html" id="CVE-2024-53229" type="cve" title="CVE-2024-53229"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53241.html" id="CVE-2024-53241" type="cve" title="CVE-2024-53241"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-53680.html" id="CVE-2024-53680" type="cve" title="CVE-2024-53680"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-54456.html" id="CVE-2024-54456" type="cve" title="CVE-2024-54456"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56603.html" id="CVE-2024-56603" type="cve" title="CVE-2024-56603"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56645.html" id="CVE-2024-56645" type="cve" title="CVE-2024-56645"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56662.html" id="CVE-2024-56662" type="cve" title="CVE-2024-56662"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56672.html" id="CVE-2024-56672" type="cve" title="CVE-2024-56672"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56675.html" id="CVE-2024-56675" type="cve" title="CVE-2024-56675"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56690.html" id="CVE-2024-56690" type="cve" title="CVE-2024-56690"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56709.html" id="CVE-2024-56709" type="cve" title="CVE-2024-56709"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56739.html" id="CVE-2024-56739" type="cve" title="CVE-2024-56739"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-56786.html" id="CVE-2024-56786" type="cve" title="CVE-2024-56786"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57981.html" id="CVE-2024-57981" type="cve" title="CVE-2024-57981"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57986.html" id="CVE-2024-57986" type="cve" title="CVE-2024-57986"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57987.html" id="CVE-2024-57987" type="cve" title="CVE-2024-57987"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57988.html" id="CVE-2024-57988" type="cve" title="CVE-2024-57988"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57989.html" id="CVE-2024-57989" type="cve" title="CVE-2024-57989"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57990.html" id="CVE-2024-57990" type="cve" title="CVE-2024-57990"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57993.html" id="CVE-2024-57993" type="cve" title="CVE-2024-57993"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57995.html" id="CVE-2024-57995" type="cve" title="CVE-2024-57995"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-57998.html" id="CVE-2024-57998" type="cve" title="CVE-2024-57998"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58012.html" id="CVE-2024-58012" type="cve" title="CVE-2024-58012"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58014.html" id="CVE-2024-58014" type="cve" title="CVE-2024-58014"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58015.html" id="CVE-2024-58015" type="cve" title="CVE-2024-58015"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58057.html" id="CVE-2024-58057" type="cve" title="CVE-2024-58057"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58062.html" id="CVE-2024-58062" type="cve" title="CVE-2024-58062"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58068.html" id="CVE-2024-58068" type="cve" title="CVE-2024-58068"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58072.html" id="CVE-2024-58072" type="cve" title="CVE-2024-58072"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58075.html" id="CVE-2024-58075" type="cve" title="CVE-2024-58075"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58077.html" id="CVE-2024-58077" type="cve" title="CVE-2024-58077"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58083.html" id="CVE-2024-58083" type="cve" title="CVE-2024-58083"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2024-58088.html" id="CVE-2024-58088" type="cve" title="CVE-2024-58088"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21631.html" id="CVE-2025-21631" type="cve" title="CVE-2025-21631"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21647.html" id="CVE-2025-21647" type="cve" title="CVE-2025-21647"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21648.html" id="CVE-2025-21648" type="cve" title="CVE-2025-21648"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21671.html" id="CVE-2025-21671" type="cve" title="CVE-2025-21671"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21672.html" id="CVE-2025-21672" type="cve" title="CVE-2025-21672"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21691.html" id="CVE-2025-21691" type="cve" title="CVE-2025-21691"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21693.html" id="CVE-2025-21693" type="cve" title="CVE-2025-21693"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21696.html" id="CVE-2025-21696" type="cve" title="CVE-2025-21696"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21702.html" id="CVE-2025-21702" type="cve" title="CVE-2025-21702"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21714.html" id="CVE-2025-21714" type="cve" title="CVE-2025-21714"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21726.html" id="CVE-2025-21726" type="cve" title="CVE-2025-21726"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21728.html" id="CVE-2025-21728" type="cve" title="CVE-2025-21728"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21729.html" id="CVE-2025-21729" type="cve" title="CVE-2025-21729"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21738.html" id="CVE-2025-21738" type="cve" title="CVE-2025-21738"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21739.html" id="CVE-2025-21739" type="cve" title="CVE-2025-21739"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21745.html" id="CVE-2025-21745" type="cve" title="CVE-2025-21745"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21746.html" id="CVE-2025-21746" type="cve" title="CVE-2025-21746"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21765.html" id="CVE-2025-21765" type="cve" title="CVE-2025-21765"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21786.html" id="CVE-2025-21786" type="cve" title="CVE-2025-21786"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21787.html" id="CVE-2025-21787" type="cve" title="CVE-2025-21787"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21790.html" id="CVE-2025-21790" type="cve" title="CVE-2025-21790"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21791.html" id="CVE-2025-21791" type="cve" title="CVE-2025-21791"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21795.html" id="CVE-2025-21795" type="cve" title="CVE-2025-21795"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21796.html" id="CVE-2025-21796" type="cve" title="CVE-2025-21796"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21806.html" id="CVE-2025-21806" type="cve" title="CVE-2025-21806"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21826.html" id="CVE-2025-21826" type="cve" title="CVE-2025-21826"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21828.html" id="CVE-2025-21828" type="cve" title="CVE-2025-21828"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21829.html" id="CVE-2025-21829" type="cve" title="CVE-2025-21829"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21837.html" id="CVE-2025-21837" type="cve" title="CVE-2025-21837"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21839.html" id="CVE-2025-21839" type="cve" title="CVE-2025-21839"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21844.html" id="CVE-2025-21844" type="cve" title="CVE-2025-21844"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21846.html" id="CVE-2025-21846" type="cve" title="CVE-2025-21846"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21847.html" id="CVE-2025-21847" type="cve" title="CVE-2025-21847"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21848.html" id="CVE-2025-21848" type="cve" title="CVE-2025-21848"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21851.html" id="CVE-2025-21851" type="cve" title="CVE-2025-21851"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21853.html" id="CVE-2025-21853" type="cve" title="CVE-2025-21853"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21855.html" id="CVE-2025-21855" type="cve" title="CVE-2025-21855"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21861.html" id="CVE-2025-21861" type="cve" title="CVE-2025-21861"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21863.html" id="CVE-2025-21863" type="cve" title="CVE-2025-21863"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-21864.html" id="CVE-2025-21864" type="cve" title="CVE-2025-21864"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-22056.html" id="CVE-2025-22056" type="cve" title="CVE-2025-22056"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-22097.html" id="CVE-2025-22097" type="cve" title="CVE-2025-22097"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-37994.html" id="CVE-2025-37994" type="cve" title="CVE-2025-37994"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38116.html" id="CVE-2025-38116" type="cve" title="CVE-2025-38116"/>
      <reference href="https://www.redhat.com/security/data/cve/CVE-2025-38396.html" id="CVE-2025-38396" type="cve" title="CVE-2025-38396"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.5.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">3860457a9acd00dc323581d3e8aa4d00221d1f7e742de27d491b6a6c8205a7d6</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.5.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">39bd8c6df96272662e9ea4878797c21cc110a79e6e4662aeff5b1b35a49635ae</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.5.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">43ebee4a604e087e156c9a203114182c14aa4f8029a598a0e1993e2e184b98ce</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.5.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4bfda07483c1ff3f6fe497810fd02a1a992c0113bfa2ccac5b5c5ccd7815778e</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.5.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">835bc26b704bf9ed5dc5cef3f1ba30b94413b397d5f8ee28130a85260ec75ca9</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.5.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">83cb458b248ae5f2502050e29206852729af5ff86958c5e367b4ef7dcc4efe16</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.5.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">92fd73d72ba28dcab9cfff37fe8a52e1a9866c4f000813e2c06b2aeb891431eb</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.5.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">b78b6c44034e015886709aae2495ea8be8cef5ddbac1cf2f028f79b647bdb499</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.5.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">bc9792ef03ffe70ca7be908470e78eebbe495a563b1530c969e3f74daf68aa45</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.5.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e1a7ab971fa529ffda1c2a52c911195ff71529cc427388a3dba0df8c06f04908</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.5.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">f1e4b175074115c61663619a0445a0f061b7e54cdcb3ab0ab23a0ec12f773e56</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.5.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.5.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.5.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">f9c6b25e7739372584c62a7cce07b6f4ebc5297453d9735f4159ca08a9174d70</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22405</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-08 12:22:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
  * kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864)
  * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
  * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918)
  * kernel: tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect() (CVE-2025-39955)
  * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
  * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22405" id="RHSA-2025:22405" type="rhsa" title="RHSA-2025:22405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38724" id="CVE-2025-38724" type="cve" title="CVE-2025-38724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39864" id="CVE-2025-39864" type="cve" title="CVE-2025-39864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39898" id="CVE-2025-39898" type="cve" title="CVE-2025-39898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39918" id="CVE-2025-39918" type="cve" title="CVE-2025-39918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39955" id="CVE-2025-39955" type="cve" title="CVE-2025-39955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39981" id="CVE-2025-39981" type="cve" title="CVE-2025-39981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40058" id="CVE-2025-40058" type="cve" title="CVE-2025-40058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40185" id="CVE-2025-40185" type="cve" title="CVE-2025-40185"/>
      <reference href="https://bugzilla.redhat.com/2393172" id="2393172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396934" id="2396934" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400598" id="2400598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400628" id="2400628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402699" id="2402699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404105" id="2404105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406776" id="2406776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414741" id="2414741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22405.html" id="ALSA-2025:22405" type="self" title="ALSA-2025:22405"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.11.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">1fc981b600c2aff3ecef959ed23425bfa4495b497e9f3438e25ff64e64bb8b02</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.11.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">39c5005828ffb9ccbc087d37dd07d222ea7eb52153ac924b95aa164fb3120ed8</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.11.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">3ce2edf8fe16a9222d89dfe153feb779c4af96af560e62b903950117c20af6b8</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.11.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4120f9b0c2620176912a8b0c7149521e3262231aa7375b974171e2b325c0c485</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.11.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">481996b8d6e2ac285e79cdb3518ec60a2fa41bc30a2b3185a7716f2c65b7e9f5</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.11.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">60559c904c246cc26e93f2533583f9dd65b77ddc78855b6740f66d1b03869ebc</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.11.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">7431d3132197a6cc3ab25293b6bbdb7e39be8897e146fde350b03c6a7ed0cdad</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.11.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">77a5befdba29c7d68ed0d87662f42168213e5f663f093ddca86877d9dc8f1d51</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.11.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">77f6b8632fbc5c60e41c060f9189f178c183c02c19264c0b3419b3e929f1103d</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.11.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c72eacd433e78285aacf95c8d1af9a8cdfbeba7049ad111094b2aa2064ab9f8b</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.11.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">cb253fb47548c1dcbefd848bf9162281abc0e617b4466879c989d8470b1c22e5</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.11.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.11.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.11.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">cd7eb6d815ff03e760de1978d32aed3dca2cf3e1f26343368bf3eb76c39aa525</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22865</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-08 00:00:00"/>
    <updated date="2025-12-17 11:46:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925)
  * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22865" id="RHSA-2025:22865" type="rhsa" title="RHSA-2025:22865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39925" id="CVE-2025-39925" type="cve" title="CVE-2025-39925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39979" id="CVE-2025-39979" type="cve" title="CVE-2025-39979"/>
      <reference href="https://bugzilla.redhat.com/2400629" id="2400629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404109" id="2404109" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-22865.html" id="ALSA-2025:22865" type="self" title="ALSA-2025:22865"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.13.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">06728bfaeb9ac4c28ef34766f4820b4256371c23c096dba6b168d0bb4734a392</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.13.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">2d4c317a10a1802fc18ead5af55d59db495b2706d0e53e571124c591b3269421</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.13.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">5a1d14d91453f3ee520e416c883a614a2ba5e73207046ef910d528bb45f207cd</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.13.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">5f1a60b307a6ddb17e7288e3472beb49b84963a8434f4e0f6b2da6c2ce619e8d</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.13.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">5f9cc6d9ccc6633037898b8486025a75fdff092780cef9a63931e765643834f2</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.13.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">81f1cb2094d5eace4001de9765585234b5d6d60922ccae230dc90ca195384539</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.13.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">91f8a57d9db64c93d2e75127433d48a544cac2218a25e5df0598f98c511bb4e2</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.13.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">9a1d0519b39ec1facbf8545a152cd03cee926b342a58479399301140c9b543bb</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.13.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">a53fda616a8c35270a22bef903b80404874b6f59e21cdb99f724936df5bab9ee</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.13.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">b44af22d72f6d3dca899e9b78d2941723f238387e161e62adfde36debc2cb61c</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.13.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d09ead6b65c1f3128bff4afb16f56b4e852c3352e1e5d97b05a891dea3873d07</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.13.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.13.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.13.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">ebe0dea3faba8598b3b4732690575d716db604896bb81a7c4007e82413235701</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23241</id>
    <title>Important: kernel security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2026-01-05 20:29:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499)
  * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)
  * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23241" id="RHSA-2025:23241" type="rhsa" title="RHSA-2025:23241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38499" id="CVE-2025-38499" type="cve" title="CVE-2025-38499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39966" id="CVE-2025-39966" type="cve" title="CVE-2025-39966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40176" id="CVE-2025-40176" type="cve" title="CVE-2025-40176"/>
      <reference href="https://bugzilla.redhat.com/2387670" id="2387670" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404107" id="2404107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414524" id="2414524" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-23241.html" id="ALSA-2025:23241" type="self" title="ALSA-2025:23241"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-core" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.16.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">058aa396c5db87e46587b4e4e03ea13e4f4738fe2ee7b29020acfa64a27193d3</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.16.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">3d3a8bc528ba4403d192d9a793babd3b7e93b5ce7514af4fb6b1fbc09f02d3de</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.16.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">5184cfc0b050bedb4662a96b940e582c492458166a6736d9ec5b74f3a50263d6</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.16.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">591db4558c6a77cb80272aa9410c33b90bc50e93282dd33291772e4aaafe67b9</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.16.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">601944c0cf32cfa31800a0fa973df33498711a162caf6a7565d609ea9e010262</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.16.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">601e879f7a4a1ac9419531c2ea4c78af0d55b7235ba9c97c94a18f5813befc8b</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.16.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">605939307f3a9082c3bbff8179e12c6ce3c09a7184231d88fee2233d822b25f4</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.16.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">bb79ff6bde7e3e2bbac3be7e880fdb00bc84ff4d66b13894c0ce9c06b96252f1</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.16.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">beb467bc7e937772a811d2c00bd7bb2f68dbdf8329c2882b4c445bc7feb192bf</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.16.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c4f9da9b830f4a6ede63399e46362552de1ced0cefc66c873726b32357105242</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.16.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">cef2292f782a3fdcf86154ac85b8e633fdaf197cb84f98d816302f88d9adae9c</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.16.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.16.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.16.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">ebd43f19cfb399a97eac0e69777bee422b95d1f4617ee7aefdaddfb01bd165e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2627</id>
    <title>Important: kernel security update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-14 09:33:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ACPI: extlog: fix NULL pointer dereference check (CVE-2023-52605)
  * kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans (CVE-2024-50264)
  * kernel: HID: core: zero-initialize the report buffer (CVE-2024-50302)
  * kernel: can: bcm: Fix UAF in bcm_proc_show() (CVE-2023-52922)
  * kernel: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CVE-2024-53113)
  * kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (CVE-2024-53197)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2627" id="RHSA-2025:2627" type="rhsa" title="RHSA-2025:2627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52605" id="CVE-2023-52605" type="cve" title="CVE-2023-52605"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52922" id="CVE-2023-52922" type="cve" title="CVE-2023-52922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50264" id="CVE-2024-50264" type="cve" title="CVE-2024-50264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50302" id="CVE-2024-50302" type="cve" title="CVE-2024-50302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53113" id="CVE-2024-53113" type="cve" title="CVE-2024-53113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53197" id="CVE-2024-53197" type="cve" title="CVE-2024-53197"/>
      <reference href="https://bugzilla.redhat.com/2268295" id="2268295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327168" id="2327168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327169" id="2327169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329370" id="2329370" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329924" id="2329924" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334412" id="2334412" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-2627.html" id="ALSA-2025:2627" type="self" title="ALSA-2025:2627"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_5_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_5_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-503.31.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">00737e16390d41b397e5821f436e3840577c9726fda69ba2348c411a745b7099</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-rt-devel-5.14.0-503.31.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">1b4c90e1fa6aec467132f3e5afefb85a8e76ce38fe80679333261a8bbd21f522</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-503.31.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">353c566f18db32c8a13152d038e9256dc96c908b3fdbc494c192ed859f61bf7e</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-5.14.0-503.31.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">4264c6f8ecd7d9e3b6423bddf2535cc8f63d50ed8c3d7478013b1b9f833cbc0b</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-503.31.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">502b155ce3fa9da52859d870a79f38bc4bce07dbf707c9eb9c15b243c7ed53f7</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-503.31.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">51e3e1de31eea1fb23473846fdcff537a57d2020fc0168c37fcd05f93d6adadb</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-503.31.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">667df19d4197031eed58493aea6b9ff663d48953486c0dba066ebd006e112675</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-rt-core-5.14.0-503.31.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">6d10e8e02adac661c8d18888299f7cd3aec2c0a083fb761291f18b208ab23ebe</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-503.31.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">8e590bde0a9d660019e3965c4314a485eac5c2771eedefb25fff296c361877a1</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-5.14.0-503.31.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">bfc78a674ef8f3f9658938ec2deba19a66d91f010a084af6c40b1a7a786eaeb1</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-503.31.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">df593a0d02ad69d62e96421f29770652710ea86eb6dc8636b68fa8984251a9a9</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="503.31.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.31.1.el9_5.src.rpm">
          <filename>kernel-rt-5.14.0-503.31.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">f46dc1ae296f15946eb1f00f3ec5b67d2d47d21f927a67d6e37ebf95b910130a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3937</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-04-21 08:27:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (CVE-2024-53150)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3937" id="RHSA-2025:3937" type="rhsa" title="RHSA-2025:3937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53150" id="CVE-2024-53150" type="cve" title="CVE-2024-53150"/>
      <reference href="https://bugzilla.redhat.com/2333971" id="2333971" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-3937.html" id="ALSA-2025:3937" type="self" title="ALSA-2025:3937"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_5_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_5_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-503.38.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">149a5fbaf667645403121254cfca0ad1e6e301233da94a98727401df479bebad</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-rt-devel-5.14.0-503.38.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">3c181bccd4a2465f05ab1adc7b56931f2f28a4e6c3cb83266751883a9a662379</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-503.38.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">3eced389e38e7d790a4266895512a6223fad809b69ca677b582d48dcd3275f70</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-5.14.0-503.38.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">545b26a1b9fa0e9b4753d575468d9108db10d457fcbbae3f7859d377a095c825</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-rt-5.14.0-503.38.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">565bf432c08febf3dc46f6ddaaabad872e268ca05a7617f76013d62631c117ae</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-503.38.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">64f1bdddbdc228d26e688d00363c9c1244d72af9390b1662c74eeb9d097c8c18</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-503.38.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">91571771b7fd6be6ae82954a28def043e61ca947c4106442bc0a89911a62c7c5</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-503.38.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">a56014b44724481e16ef2746e8f45640a97de6877499310a2dee203da4b9edca</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-503.38.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">acebe1cb02549832fef977f2ccb9d198bf99a3f6664a051f8c356252185bec51</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-503.38.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">b7ba8ef4b6179dc4630fa9bedc82bbc13003929c01e39024335dbab47dc24800</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-rt-core-5.14.0-503.38.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">e517585595efa6cb91ae265b77b323dba70a424539287f0caeb202e27c65b7f3</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="503.38.1.el9_5" epoch="0" arch="x86_64" src="kernel-5.14.0-503.38.1.el9_5.src.rpm">
          <filename>kernel-rt-modules-5.14.0-503.38.1.el9_5.x86_64.rpm</filename>
          <sum type="sha256">f76f73d721525caf2a334c3187e100ecc374fd08894e405e680db457f87e11b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7423</id>
    <title>Important: kernel security update</title>
    <issued date="2025-05-13 00:00:00"/>
    <updated date="2025-05-24 22:29:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: io_uring/sqpoll: zero sqd-&gt;thread on tctx errors (CVE-2025-21633)
  * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007)
  * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069)
  * kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927)
  * kernel: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CVE-2025-21993)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7423" id="RHSA-2025:7423" type="rhsa" title="RHSA-2025:7423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58005" id="CVE-2024-58005" type="cve" title="CVE-2024-58005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58007" id="CVE-2024-58007" type="cve" title="CVE-2024-58007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58069" id="CVE-2024-58069" type="cve" title="CVE-2024-58069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21633" id="CVE-2025-21633" type="cve" title="CVE-2025-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21927" id="CVE-2025-21927" type="cve" title="CVE-2025-21927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21993" id="CVE-2025-21993" type="cve" title="CVE-2025-21993"/>
      <reference href="https://bugzilla.redhat.com/2338813" id="2338813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348565" id="2348565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348590" id="2348590" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350364" id="2350364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356593" id="2356593" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356908" id="2356908" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7423.html" id="ALSA-2025:7423" type="self" title="ALSA-2025:7423"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.16.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">03ee7f57046600960b41fd8fd2cae16ca2964d23ff7b79ad84897a05c6916ebf</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.16.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">0bf219c8636f24fcc16a0a7b4a4e3ac510fc1d36fde8dc7dba32ea29df42f41d</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.16.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">1c38bec3d1aceb9b441a939ce653559e0b9f1c9a5003be383b8c43eda2b16d0b</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.16.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">2ed52a03b10205a9629c5cc118e7bc7100ac91c8fc7cabd61de4794b90925eb9</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.16.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">4b493da1e048f212420f40f0814c74469e0c8e669e89330938b5ae24d81f37cf</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.16.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8479a8168f9cf6d191dad82418b0ced608550286f21554c6b9522913f67ab527</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.16.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8a8a59ed8a9f5130225a8a3b537abb7b127ae952c9d7564687f4291420f56b8a</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.16.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b0f5d9467e351cc54bd74cb110993b5b03460f5e8d1b77869627d19d3a36e58d</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.16.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b1e6bdb305a8efd96899f0587a9e51157e29c2e89b0ebde9e0fca491ea5ddcf9</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.16.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b7c9095c8896625f8fde4a1948a86e9ad364e59353e7f6a316678c75a1b4a2d4</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.16.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">caaf4531b86077928b385896c1d3c7c15f099ebd95a2c00e654876ff4c9d3c64</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.16.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.16.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.16.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">f8690f2dd6eaaf7b681bf18971df4622322b5531ae1b8382611c65d05d9663a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7903</id>
    <title>Important: kernel security update</title>
    <issued date="2025-05-19 00:00:00"/>
    <updated date="2025-05-26 08:50:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756)
  * kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (CVE-2025-21966)
  * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7903" id="RHSA-2025:7903" type="rhsa" title="RHSA-2025:7903"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21756" id="CVE-2025-21756" type="cve" title="CVE-2025-21756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21966" id="CVE-2025-21966" type="cve" title="CVE-2025-21966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37749" id="CVE-2025-37749" type="cve" title="CVE-2025-37749"/>
      <reference href="https://bugzilla.redhat.com/2348609" id="2348609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356605" id="2356605" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363332" id="2363332" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-7903.html" id="ALSA-2025:7903" type="self" title="ALSA-2025:7903"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.17.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">05f5baefc5f4c7019f1e95a2358427587dd19da5c09e1082c3fe902ea804035c</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.17.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">1fd1dabafc926206d257debfe9c62af406e4a73dc40897c4ccc007b398910521</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.17.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">26ecca64a0662e5ece5b0c3b52388ac850ee75bf5d114fa3caa82914f2ef0b54</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.17.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">4d2d57d099cd49ba4413d5fb55daee1ad579c2d5f8a4591026d67af1f4f28859</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.17.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">4e42458fa9361e07096b07d23ea32fde42cfdca7ef2ca5c4cb05fe1642bcd272</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.17.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6a4ee72a22f61e871aac0d8d839eead144b9aa53fd12b4994d7181a20076a604</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.17.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">8abfa7df145d1829142741d9584caed76666f5db94b777325c4195ee016a0191</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.17.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">99d04cc57b14b41437b93f4e6dd658fa9bea3bbe9ed81136c59005f17f3a545c</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.17.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c2179d713fa7970ecc670dda51c3de06f846d10ddfc8e2e1be4196fdc564625a</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.17.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e69029d51ee4996ca564fb015fde5a80f3268535703c432fa3c7109bbe7867e3</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.17.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">f5eee1f342f4aa01c5a5e630ca51c18d2deafac3535a1951bbdf84d13bd6a831</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.17.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.17.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.17.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">fda0c9302a373c9f3be94f01e0770592d54372b8b5c134dcd7586f83c1901320</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8142</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-05-26 00:00:00"/>
    <updated date="2025-05-28 13:39:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: cifs: Fix integer overflow while processing acregmax mount option (CVE-2025-21964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8142" id="RHSA-2025:8142" type="rhsa" title="RHSA-2025:8142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21964" id="CVE-2025-21964" type="cve" title="CVE-2025-21964"/>
      <reference href="https://bugzilla.redhat.com/2356665" id="2356665" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8142.html" id="ALSA-2025:8142" type="self" title="ALSA-2025:8142"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.18.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">00a290f2ab45fcab02a08b90a3eaa001c4afa35e79c9bf5261d7eaa76ec9226f</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.18.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">07304eed623811c46fc9479cc813c80f0016fa1f0069add94abf2d5193cf07b6</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.18.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">0a37fa493f10ffb5d7dc6b153753ac4b9e7651a65b8b707e1889aa4c0db63eac</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.18.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">2581f73ec130ba44c5dae4dd2a607a89c23946fd7c4355b0d5abf135d22af145</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.18.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">4807ba2ff1123ea224b8e476c887593c6f051e8bcb5c2d37b410bc5315174bb9</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.18.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6b246a3e2a2044374258e717247ae2937ed1f9d50b35451f2c192d98627dce79</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.18.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">81e2cfc44deeda98a53345c1a03274ee21fff6c50ad549789533311364b7fb0d</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.18.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">849bef2d5c07455c5685a15d91203ae98ff882603712012105a390c942ff879d</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.18.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a677d1c9d67730f27f153f61783d5a9456d06327662a3b97057cb4e378a9bbfc</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.18.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b2c0b3fe043863be003fa37f5dde83aed96c5e697ac09ece76a4a6377ff901af</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.18.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b817155c9b39190c2010008728645c22762d50face7b0c8791ab1ee51c4f3832</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.18.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.18.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.18.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c0dc1fdef47e8bff60adc6bbd334e233dce42faa2a42fbb0c7f3f9dde1f69c13</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8333</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-02 00:00:00"/>
    <updated date="2025-07-02 12:04:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Use after Free in gru_set_context_option leading to kernel panic (CVE-2022-3424)
  * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8333" id="RHSA-2025:8333" type="rhsa" title="RHSA-2025:8333"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3424" id="CVE-2022-3424" type="cve" title="CVE-2022-3424"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21764" id="CVE-2025-21764" type="cve" title="CVE-2025-21764"/>
      <reference href="https://bugzilla.redhat.com/2132640" id="2132640" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348575" id="2348575" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8333.html" id="ALSA-2025:8333" type="self" title="ALSA-2025:8333"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.19.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">42b10b39263bf85eb05dc93087cf95aa6281896fe311d5009cdbb192714bcb7d</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.19.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">46eb549bdee24fd002a7e30e3dddf5088f9bf2a316178684802df17805fd0c4b</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.19.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">56f1d397658fbe6cc9d66cf1a6f09cb9f2be67b63cf7a01058984d9103e1e534</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.19.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">5b7d556cb4d0cdac8e6d9e3e8723bdcfe755d5d709e117041733dc3c5070afbb</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.19.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">684553aa32519e6cb8f35875179c7ec53d37dd7664d7f1ad3068cc80fa2fa0c1</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.19.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">915c436191e3496ed8c272ee87f9dc2be335810b8fc9b8080f1fb00844a7dcac</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.19.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">96831d2a489e7e7efacec1d259b836998c4a03dcb332a73670255905afbedca1</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.19.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">9899ec72d77c976a94b2fbdcbacd03b8b2759d16b6b518c61197ef15d08310b3</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.19.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a7903011114cd5d7c5ebda4ee70bca6e5fa1acb7fb434650a35b91bfa3fb7688</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.19.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a93cbab6c31c001027d2ef8f1d7419ca8ec5fb8ed50a39391256cb43fb8a5b0b</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.19.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">be2c4328ce098e6a4e69c9ed40bccbd2f75f285cb58cca7fdbd6443013bfadfa</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.19.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.19.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.19.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">ecab4631a90ea8091c6241109a910ba8aa52fc6fff896f6c8c3c4cde72ac45a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8643</id>
    <title>Important: kernel security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-06-12 13:36:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926)
  * kernel: vlan: enforce underlying device type (CVE-2025-21920)
  * kernel: xsk: fix an integer overflow in xp_create_and_assign_umem() (CVE-2025-21997)
  * kernel: net: fix geneve_opt length integer overflow (CVE-2025-22055)
  * kernel: ext4: fix OOB read when checking dotdot dir (CVE-2025-37785)
  * kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CVE-2025-37943)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8643" id="RHSA-2025:8643" type="rhsa" title="RHSA-2025:8643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21920" id="CVE-2025-21920" type="cve" title="CVE-2025-21920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21926" id="CVE-2025-21926" type="cve" title="CVE-2025-21926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21997" id="CVE-2025-21997" type="cve" title="CVE-2025-21997"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22055" id="CVE-2025-22055" type="cve" title="CVE-2025-22055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37785" id="CVE-2025-37785" type="cve" title="CVE-2025-37785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37943" id="CVE-2025-37943" type="cve" title="CVE-2025-37943"/>
      <reference href="https://bugzilla.redhat.com/2356587" id="2356587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356639" id="2356639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357143" id="2357143" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360300" id="2360300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360921" id="2360921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367748" id="2367748" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-8643.html" id="ALSA-2025:8643" type="self" title="ALSA-2025:8643"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-core" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.21.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">22aa5c7512d6923b3b3f00d0fa490781c0a109717d9acb51cc271c72d8693295</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.21.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">327328dddcb0cdb614b27bd719a92b03e641b334d196c7fe1300a8521b35e4fe</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.21.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">32c54f04066c6c9e173b68143f538b740fb622c37e17164697e9bbab63a745c7</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.21.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">54cf99ad3170adcc443766a596eb724c38fcc18a49779b77f00ef95817d0f4b4</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.21.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">5a7a86696fcd62c663ac1d6ba4aae114b0f9e74b51b9fdfefe2d518c2d36abc6</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.21.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6cfcb3dcceeb1999802e8abe3d3993bfeecc84ffdc369e1237c53fc1c42201f4</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.21.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">916766bea019951cc216d045ecae4c14eaaa33d02e49e2e53b446cb16ea5f4af</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.21.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b2e66bf9708c49b2d77ee0cd8d692d37db7ddd3168b1abd5b9d57170532892b0</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.21.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">bd7f8ab30e9249aa392b1fa2982a573a7f8c33d3b3760e996e0ac3ab391369d9</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.21.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">c051c1455f28b1e0c01ad14a8028c6d72bfcbb91a093e739f1b6a4130ecbf30f</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.21.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">f54bb27f76df0bef332cec1693f33a57520c34b4f12fc1721182aa5a5ae710f0</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.21.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.21.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.21.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">f9607682905850232fc516226bc130142a215efb48693d0bcf9f757f59448990</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9080</id>
    <title>Important: kernel security update</title>
    <issued date="2025-06-16 00:00:00"/>
    <updated date="2025-07-02 11:21:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: eth: bnxt: fix truesize for mb-xdp-pass case (CVE-2025-21961)
  * kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CVE-2025-21969)
  * kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963)
  * kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979)
  * kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999)
  * kernel: md: fix mddev uaf while iterating all_mddevs list (CVE-2025-22126)
  * kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9080" id="RHSA-2025:9080" type="rhsa" title="RHSA-2025:9080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21961" id="CVE-2025-21961" type="cve" title="CVE-2025-21961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21963" id="CVE-2025-21963" type="cve" title="CVE-2025-21963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21969" id="CVE-2025-21969" type="cve" title="CVE-2025-21969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21979" id="CVE-2025-21979" type="cve" title="CVE-2025-21979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21999" id="CVE-2025-21999" type="cve" title="CVE-2025-21999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22126" id="CVE-2025-22126" type="cve" title="CVE-2025-22126"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37750" id="CVE-2025-37750" type="cve" title="CVE-2025-37750"/>
      <reference href="https://bugzilla.redhat.com/2356584" id="2356584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356633" id="2356633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356642" id="2356642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356652" id="2356652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357134" id="2357134" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360236" id="2360236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363341" id="2363341" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9080.html" id="ALSA-2025:9080" type="self" title="ALSA-2025:9080"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.22.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">062317f6a6776e4cdd595e98ab430a8ec9330c47fda0757394aebff408204935</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.22.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">14742f874f3e8a3621566b57b80117dd081fe3defde11eb0b9f060ee436f85a2</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.22.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">24e9c651284fd9ae59bc43f10fa2dc7f4c16aa961e55ef3189c023cf23458858</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.22.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">39a81827acd716d7bde998d88592a0b86bc3c8d9b8960878a0f84417200ea6ab</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.22.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">4a99f37e7ee494d3758202d7414784ffb55a5e67ec56c7e67ad71b114f83031a</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.22.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">76b5753938de310f239579f062f90418768ffea56ae6d58c59ddcabcf5991529</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.22.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">852c70adf3ff1b0e279c13dbb1a7af24b99aed2a114d076940d04ae6ed7b455a</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.22.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a6770fea373594d5b360acfa8eb6f07d05360134b09e6f40c23be9e150f548ba</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.22.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b1dd140df7ec7fc153f62eacf111d8a2df2549e678effb44442570756c8860e9</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.22.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">b9133a45c937147d16ff49fd20b982325ee92a61e7a116736a48615e98c7098c</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.22.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">f3ee99f933f4bda84c0ff85d1308cbbcdf33acae40997ee7d6f8cf76a412c3c2</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.22.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.22.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.22.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">fb0f5057f31029e646b44db156ca17d05d341e98d3465809d30a9fa91bfb682c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9302</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-07-03 08:46:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ice: Fix deinitializing VF in error path (CVE-2025-21883)
  * kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919)
  * kernel: ibmvnic: Use kernel helpers for hex dumps (CVE-2025-22104)
  * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)
  * kernel: ext4: ignore xattrs past end (CVE-2025-37738)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9302" id="RHSA-2025:9302" type="rhsa" title="RHSA-2025:9302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21883" id="CVE-2025-21883" type="cve" title="CVE-2025-21883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21919" id="CVE-2025-21919" type="cve" title="CVE-2025-21919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22104" id="CVE-2025-22104" type="cve" title="CVE-2025-22104"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23150" id="CVE-2025-23150" type="cve" title="CVE-2025-23150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37738" id="CVE-2025-37738" type="cve" title="CVE-2025-37738"/>
      <reference href="https://bugzilla.redhat.com/2355415" id="2355415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356618" id="2356618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360265" id="2360265" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363268" id="2363268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363305" id="2363305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9302.html" id="ALSA-2025:9302" type="self" title="ALSA-2025:9302"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.23.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">0bc259cdd3ebcaa031f9cf5a564fce465459a92c3eee3ef0b9ec85872a0ade8c</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.23.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">152f7be0cf892e578325e212d68074c2f3e40f34c6cd9ac8beaec05b6947c119</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.23.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">55b833516fdc9603d915e2dad1062903a9507bdaa7ecbe4e0f3813163fd4f082</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.23.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">97da0b79dede14f2c05dbc65e27d3ef99fb4c3240907365c898373328d3a61bf</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.23.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">9875160ebbe8f65b98836ad52dae6c50cf5e13d8aad1edda2cca6369d7cadfb6</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.23.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a636b7ac622568ba7a7dcf41d6d6bfb640c534ff9bc5f144c981391c0ef17e16</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.23.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">ce43e677cba021fedc007e7f50659490d26fe0d81b6d7a648576ad067d468929</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.23.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e016a837f48e21321ad4376c12ffb77f30e000ad55708fd0c2f5e06b858f3491</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.23.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">e66488dacc7a3a2b0402629013903e80c1d0beceb090c7247b4f4ed12e89b709</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.23.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">ec3a7697be25a2b557754b41d9f511a596b572a2c1333cb49805f90506700596</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.23.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">efa6c02f9533d459c7a58705701edf53ca2b64c6386be3fb832da0fb0dd3ba06</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.23.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.23.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.23.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">fd90bab64d9faa2a02ce339e3eeaf9de029fa436b64bffbdf8fd36936edbb4dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9880</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-30 00:00:00"/>
    <updated date="2025-07-02 07:28:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Squashfs: fix handling and sanity checking of xattr_ids count (CVE-2023-52933)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9880" id="RHSA-2025:9880" type="rhsa" title="RHSA-2025:9880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52933" id="CVE-2023-52933" type="cve" title="CVE-2023-52933"/>
      <reference href="https://bugzilla.redhat.com/2355476" id="2355476" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2025-9880.html" id="ALSA-2025:9880" type="self" title="ALSA-2025:9880"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_6_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_6_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-5.14.0-570.24.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">1af58667d9da8eab68d37625b485a7211336d69251c6a8f6851cb61cf1833481</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-rt-5.14.0-570.24.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3dd043e07b33766b9a96d901e261803f37906a8b795111025888cd1fcfca3b6b</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-570.24.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">3f53e02cc17a5bdb00b2fffc94fa0d61c10a58146a4f15c284980a9a87c6324f</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-rt-devel-5.14.0-570.24.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">454a3bfdf7caa364fad1d245f9ed271069b3118246fd797c84ba3058b1ccc9c1</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-5.14.0-570.24.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">497d6c65ab5ef36f0268ad6db2c80ad92b70a6a21d58a66db3521db46cb1b1ac</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-570.24.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6ba6888f3e630701458208faf41235927df76d9eb199836116b15a8dd7ea9519</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-570.24.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">6e10ac90d1fed6c71f0e8879fbee375d9d00f210acb89a4c6e6e1a9fc185926e</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-570.24.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">71b58da508f43700ae2f34443d3adc22ec926f25f4ae111dc7cc5a6a16006c36</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-570.24.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a1ff3156c7b1d2f25230a24725448945ffe1282229fce0cb0272392f0eb4652a</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-rt-core-5.14.0-570.24.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">a4e0b9ce61f281a813a5c8716476f6c602f2cf02a881e9edbabb6f1edeaecb75</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-570.24.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">cb3feeab3ddd513a4861baece212833621cd18d2e7d5d8f458802053e137b1d5</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="570.24.1.el9_6" epoch="0" arch="x86_64" src="kernel-5.14.0-570.24.1.el9_6.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-570.24.1.el9_6.x86_64.rpm</filename>
          <sum type="sha256">ed164173b5f47833531f3c314b4773b8c1b08d023c42931f95936d7af6ffad4c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0445</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:31:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)
  * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840)
  * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
  * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0445" id="RHSA-2026:0445" type="rhsa" title="RHSA-2026:0445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39806" id="CVE-2025-39806" type="cve" title="CVE-2025-39806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39840" id="CVE-2025-39840" type="cve" title="CVE-2025-39840"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39883" id="CVE-2025-39883" type="cve" title="CVE-2025-39883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40240" id="CVE-2025-40240" type="cve" title="CVE-2025-40240"/>
      <reference href="https://bugzilla.redhat.com/2395807" id="2395807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396936" id="2396936" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397553" id="2397553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418832" id="2418832" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0445.html" id="ALSA-2026:0445" type="self" title="ALSA-2026:0445"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.20.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">1318aefc9be3bc55389831592d0e2c23f242e5be79aff068f7ec7a8249fb06ca</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.20.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">15392dd9049eb9e133b14b5c2fc5b9006278ed33125bd373f6c0389100941be3</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.20.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">3e0a658b7500b6dc3c9ee96bbb70b1c92db75a867601f94d5c3b80bde1b38f61</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.20.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">5160faff4d8b531abd180c3f5c658207f53a94501fe2cd7b3a4013abc1ccd8fc</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.20.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">52fd0d9bfbd80275f9bee938b4fbb53e8f4df9c352c7776607d2aeb51a890eca</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.20.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">69f6cc5fd7404f4f7e0edc9070656d7dea4eeee9afe3ebb00ad1bc7f122c2bd7</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.20.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">7e7942de7663965973198541f6440baa84f79912bbda9c1e63165ee46dcaf9d5</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.20.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">84d378162d167f32961209ef873c216a142b9be8432f50a2dd518b0be6c9df7e</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.20.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">a1ababe0ceda66a84fd5731f103b05f5eb4b9131b4855d77327d9648ae2d5556</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.20.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c597a40c522a92cce8f609c075ccdb2548687236d616260c7363264d26377415</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.20.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d826c9d93ec559d13e616cd7c3afd9308ad41ecf9a298bd02fb4b0fb5bba8724</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.20.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.20.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.20.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d9e1f9f12c45192d19d589b7640abab524eeb4a49bd200b474ea369962ab2bbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0793</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-23 13:22:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/xe: Make dma-fences compliant with the safe access rules (CVE-2025-38703)
  * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933)
  * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)
  * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287)
  * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0793" id="RHSA-2026:0793" type="rhsa" title="RHSA-2026:0793"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38703" id="CVE-2025-38703" type="cve" title="CVE-2025-38703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39933" id="CVE-2025-39933" type="cve" title="CVE-2025-39933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40277" id="CVE-2025-40277" type="cve" title="CVE-2025-40277"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68285" id="CVE-2025-68285" type="cve" title="CVE-2025-68285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68287" id="CVE-2025-68287" type="cve" title="CVE-2025-68287"/>
      <reference href="https://bugzilla.redhat.com/2393157" id="2393157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401432" id="2401432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419954" id="2419954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422788" id="2422788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422801" id="2422801" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-0793.html" id="ALSA-2026:0793" type="self" title="ALSA-2026:0793"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.24.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">40a748f3c0801cdf0b5c110b376c1b340920d34970a1b1b8f75fa5520383c27a</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.24.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">5a4f53df685ef173bb2bfb15bfdbc55c20c86faa0be6d89bd063b542b54876a1</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.24.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">5e77d1771563d009f01c9666a53bc2f7f924beede24c064d80af02f424a85b6a</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.24.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">74f9a37d74c4c64dfde56b7b02e92ad88b45c5d57051b264785f07daf36ee7a2</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.24.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">8acca69a98afa733708b36aed70a9cd4be2c57e5eb2860cbba7491377635321a</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.24.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">9b19a87f2f385b14cf21bfc75181a8c24bb2c123a7b4e03d6eeb0402eaba56c4</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.24.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">a7dc382984e552056a6f6686ada877d2820109887bc497cc193535198e97aad2</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.24.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">b85318d52c90b8b313633e8f412a116bb5ef9043fff0cfb1bc784e03642e8902</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.24.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d0798cae42896f02885d55b2e4dc53389b7b3d2a6e2bdbc950ecc7dd7dcf4e54</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.24.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">dc940e43455b501b596bedbf92a299077043adb75b66b92dc047823f37aea7d5</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.24.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e2b5ec05ceb248968a9ff84f9e7709f1f9e3bfcc68af28f1eba94840e88e1aa9</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.24.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.24.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.24.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">edf38b1e37686152d061c8c93c596c85508db44a5f1bddd0e1e305bac31a1c6f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1143</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-30 09:51:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting (CVE-2025-38141)
  * kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349)
  * kernel: drm/xe: Fix vm_bind_ioctl double free bug (CVE-2025-38731)
  * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)
  * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258)
  * kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service (CVE-2025-40294)
  * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)
  * kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1143" id="RHSA-2026:1143" type="rhsa" title="RHSA-2026:1143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38141" id="CVE-2025-38141" type="cve" title="CVE-2025-38141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38349" id="CVE-2025-38349" type="cve" title="CVE-2025-38349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38731" id="CVE-2025-38731" type="cve" title="CVE-2025-38731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40248" id="CVE-2025-40248" type="cve" title="CVE-2025-40248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40258" id="CVE-2025-40258" type="cve" title="CVE-2025-40258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40294" id="CVE-2025-40294" type="cve" title="CVE-2025-40294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68301" id="CVE-2025-68301" type="cve" title="CVE-2025-68301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68305" id="CVE-2025-68305" type="cve" title="CVE-2025-68305"/>
      <reference href="https://bugzilla.redhat.com/2376052" id="2376052" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2381870" id="2381870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393488" id="2393488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418872" id="2418872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418876" id="2418876" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419891" id="2419891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422836" id="2422836" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422840" id="2422840" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1143.html" id="ALSA-2026:1143" type="self" title="ALSA-2026:1143"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.26.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">1b91b35010e1988582cc01ba5e62b9a1516c5e018f804e3a302f05c7bb309838</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.26.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">22da825f8f333f285d177767eec94fdcf4d3ccacfd5badb25ce27b462ea07fde</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.26.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">3559a7eb26d65551df064466f2993f20df27dd434a76e00ad766ed922d74fc27</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.26.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">5c39608a8d5c41ac951eee6958a1b360887be6406bf4860cf2d545b8eba51601</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.26.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">83b9a29d74053f23e86b7de621f6eddee7a7c823d7e2a1e25f9d750747b701a2</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.26.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">9ac327a6aa02a22e419c013a8d7b54205c2689bed4100099a222337a88c64787</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.26.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">a31c969f537618236b757b82657d7cc09ad0502b240ec668043978d10b60eb15</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.26.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">af4c31d24677223f46adfcec78c8210640e6ae48ea769bedc6485ece3891cf24</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.26.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c7a042ea28c417b78c96f633af11c2f83c2c4daab6175f800b7b2cb02cefd473</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.26.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">cb6a1510a5f1dec0e2a7b1ed6a7a6a739154f1d518212d740c7f08e167aa70fb</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.26.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e184717c80eb710c0e40f854eb9f814d863f35f4a7756d23674cdd0f39eb5342</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.26.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.26.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.26.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e343191a2bd786c718d83b4a454a009d9253db21740c739560db192da86e80d8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13565</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-04 00:00:00"/>
    <updated date="2026-05-07 00:12:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
  * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13565" id="RHSA-2026:13565" type="rhsa" title="RHSA-2026:13565"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23136" id="CVE-2026-23136" type="cve" title="CVE-2026-23136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23270" id="CVE-2026-23270" type="cve" title="CVE-2026-23270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31402" id="CVE-2026-31402" type="cve" title="CVE-2026-31402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/2439852" id="2439852" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448745" id="2448745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454844" id="2454844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460538" id="2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-13565.html" id="ALSA-2026:13565" type="self" title="ALSA-2026:13565"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-core" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.54.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">08cd1c5db935d37d569bd04e2b1d0e4fe8191239ba9fbd54e97317396dc43247</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.54.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">09fa8fd2e493c513e39e318fe4846194c6350f4be527e813bab95a0d450fe3a6</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.54.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">0b73886d505fe47fa48fd2a700d30cd8d53d2f871e661423b042b00f0f47ff4c</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.54.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">458f980cb0741f92935c8f965c9a458c8d249c1242ab82f97adb178b37a26aed</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.54.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">796fcbcc775e505967b37b1a7ec472ceab1c2b4ac5986c9b791b609d76127636</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.54.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">98f3106b597019cb7ccb705f07123c6ced6272bcd7eec0ac930b82efa0598e9b</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.54.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">9db9bc20e6073ded5e95137c17b4d6c0e1af7c14a99f524875b4886f2305e098</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.54.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">9ede23c2e02830528062fdf9eb8b743fce5010601853bd5f3d9bc7a8c04262fc</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.54.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">bdb631f19b7b9fd7d60a9ad288aeabf365a48cae7660866f7760701e39379cbf</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.54.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">ca2d2abdcd833c4a47e79e3a0dc9f81f47997704a15bc523de77d76fc36a9d3b</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.54.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">cc982986f1f968d073b97503d99e45fc4553acdb192b913ca3c178475d62134d</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.54.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.54.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e7bc9945db1bb5c20fa9ec07b6a37d61bc1b0fcce3f0fc1691a44359f92b48f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1617</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-06 08:24:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVE-2025-38568)
  * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)
  * kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1617" id="RHSA-2026:1617" type="rhsa" title="RHSA-2026:1617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38568" id="CVE-2025-38568" type="cve" title="CVE-2025-38568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40154" id="CVE-2025-40154" type="cve" title="CVE-2025-40154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40251" id="CVE-2025-40251" type="cve" title="CVE-2025-40251"/>
      <reference href="https://bugzilla.redhat.com/2389507" id="2389507" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414494" id="2414494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418892" id="2418892" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-1617.html" id="ALSA-2026:1617" type="self" title="ALSA-2026:1617"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-modules" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.27.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">2d8bb161d2449ab47cacf78006bf46589168f4084d7831bc3dedbc33ee7d6744</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.27.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">2fab47aea72a11421f16f49056f340b806224a9f916492a2df053fd061e42565</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.27.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">50afe19773532608d48c333c044ffc6014bddca9a66540f33608a45f7560ac84</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.27.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">6555f7d1aa499e51f33cc19f310b4d91d893163f951c332ccd4e0154668dd9d6</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.27.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">6849ff0f0b08f043730b71f2627c16f0b23100865128a332024d6d2bcbf5c311</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.27.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">959042f83f33db249e8f839ebe1ef09812e0af862fe62534ddfdf7d69e941057</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.27.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">9a6fdc09fe8a33e1fd34ae14a13c82619af29977e17b552f8c8de84507c25111</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.27.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">9fbb97e7741ebd6eb35a12172f7c252b439b1c03fd59a0bb6755119aeab15f08</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.27.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">bd5bb77813d798719903804fcdd5f45b8cd47bc17e57f00f0eec38f22aef5d41</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.27.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d606d1c6a7cf6c05d823972d0cb1e1d877b01e0cd68884bc8fd65c20ec60d0ca</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.27.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">ea5b5205086ae54d587e14c39b53507023818f6903321e58b01f552b14433695</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.27.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.27.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.27.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">f5cf1222fee0848ded410a810b1cbaa43ad5654b9fadd1c146c28b968501661b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16206</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-12 00:00:00"/>
    <updated date="2026-05-20 00:51:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16206" id="RHSA-2026:16206" type="rhsa" title="RHSA-2026:16206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/2467771" id="2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-16206.html" id="ALSA-2026:16206" type="self" title="ALSA-2026:16206"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.55.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">0a428d21c2e61faa724344e11f99bf77d275d5d6572310401e0c2281cde148a7</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.55.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">0d50e78e5af28efc0f0ec2e4f5afcb10246d35439b6965ada4e489b62fcc8d7b</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.55.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">30fb810c6eea046592eba1e9cfd8e5386298905e5e31ca5945eb5504667339d1</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.55.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">40e1b5b5b31f3b06cf9d6ba6dd4fcf185358459ee004b01d471febdd90237029</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.55.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4513b11ac10f64324471cd1da7fee56d78e0da2800385c10510dc8406e3b721b</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.55.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">884eff71d4c5103f724ace3aa7b6f39e83034006ad83606d5571aa7d5b4f95da</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.55.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">894019b3940da32c9a9aaee10a5f251e821338d83aa5b0e3c5ea48043680a712</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.55.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">9a298c8120e8b7f5fedda51fc6f92cec6ddcba19f071cff5dbcdf6b26874f3d8</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.55.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c5674d702bdba69e3b479e42199cc84ae4738be1a5492bdc7cd3aa8a5b4e6bef</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.55.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d487d7c550c10692cece066775aa8ab714c5dcd6cf51929927c64c3cd40085ba</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.55.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">db411d8d9f34a09956034f064ca1c419fe85baffad05b481171e0dee12078bb2</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.55.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.55.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.55.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">feeca76160a9fd730a1bd3a66c74fe146bceefa85956889bbde6dc07bdddfb1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:18587</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-06-07 18:33:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: bonding: check xdp prog when set bond mode (CVE-2025-22105)
  * kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980)
  * kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015)
  * kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097)
  * kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166)
  * kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279)
  * kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails (CVE-2025-38400)
  * kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405)
  * kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441)
  * kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470)
  * kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866)
  * kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134)
  * kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040)
  * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:18587" id="RHSA-2026:18587" type="rhsa" title="RHSA-2026:18587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22105" id="CVE-2025-22105" type="cve" title="CVE-2025-22105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37980" id="CVE-2025-37980" type="cve" title="CVE-2025-37980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38015" id="CVE-2025-38015" type="cve" title="CVE-2025-38015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38097" id="CVE-2025-38097" type="cve" title="CVE-2025-38097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38166" id="CVE-2025-38166" type="cve" title="CVE-2025-38166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38279" id="CVE-2025-38279" type="cve" title="CVE-2025-38279"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38400" id="CVE-2025-38400" type="cve" title="CVE-2025-38400"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38405" id="CVE-2025-38405" type="cve" title="CVE-2025-38405"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38441" id="CVE-2025-38441" type="cve" title="CVE-2025-38441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38470" id="CVE-2025-38470" type="cve" title="CVE-2025-38470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39866" id="CVE-2025-39866" type="cve" title="CVE-2025-39866"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40134" id="CVE-2025-40134" type="cve" title="CVE-2025-40134"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23040" id="CVE-2026-23040" type="cve" title="CVE-2026-23040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23243" id="CVE-2026-23243" type="cve" title="CVE-2026-23243"/>
      <reference href="https://bugzilla.redhat.com/2360247" id="2360247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367614" id="2367614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373343" id="2373343" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376060" id="2376060" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376065" id="2376065" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379178" id="2379178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383397" id="2383397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383399" id="2383399" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383478" id="2383478" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383906" id="2383906" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396940" id="2396940" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414468" id="2414468" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436806" id="2436806" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448594" id="2448594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-18587.html" id="ALSA-2026:18587" type="self" title="ALSA-2026:18587"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.5.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">137bc4d21a2ec48531e866b5bc2485c54a5f741d60ba65ad2d976a1711fb3eab</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.5.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">15e6cb870f8c0d690287937961b09e2f0add71109e3365aaee782b519c728814</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.5.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">22b9f82f945e007b4e06e8b4913c81894aadfe1bd741470e23abdb2b4594a53c</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.5.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">51471232d5cb53fd59f9b92836316b90ecf766576b8d9d5dd0cfc4f173742ce2</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.5.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">58def35018207028b4be523f385ba52d852b2bf8fd440c48767d83e74b2091d5</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.5.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">5e44109ff53e0544a4a436aa467fa4cbd9d8a38805510418943813bde71f2e71</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.5.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">6f56d634c97ea6a86bd1cf091418b89c73e3929357843c2e5e3c3dedd3978d26</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.5.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">8145d9d883b49b910a870efc23faca87154500fd3288ce420faea4a771240acc</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.5.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">84221f456bd9def9f47ddc47cb3c0ff97593c39370c1f8b2940b8ed5e05b6a8f</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.5.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">96fc65c0169906518280dfac36f1ef92d91d809211a1da7908fbcb8dfdff5b0f</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.5.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">b2887842a2b7f8cccfa4436c74779da0fd76018b082f2270f3c54e98279b84b5</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.5.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.5.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">ea2fafb984543e458b258f49c5de526d47b821a4727aa695e1ea37e9424c2718</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19225</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-19 00:00:00"/>
    <updated date="2026-05-26 12:34:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service in authencesn due to too-short AAD (CVE-2026-23060)
  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)
  * kernel: crypto: af_alg - limit RX SG extraction by receive buffer budget (CVE-2026-31677)
  * kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19225" id="RHSA-2026:19225" type="rhsa" title="RHSA-2026:19225"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23060" id="CVE-2026-23060" type="cve" title="CVE-2026-23060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31677" id="CVE-2026-31677" type="cve" title="CVE-2026-31677"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/2436779" id="2436779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460538" id="2460538" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461763" id="2461763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467771" id="2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19225.html" id="ALSA-2026:19225" type="self" title="ALSA-2026:19225"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt-core" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.5.3.el9_8.x86_64.rpm</filename>
          <sum type="sha256">127ea7e8eae6fd1229d6b2a977237273b74ae49922097602f9725563607d9762</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.5.3.el9_8.x86_64.rpm</filename>
          <sum type="sha256">358d3272bf40b815aad4cacb53f7e3ae4f67c95da8d8f68bfd390f13aa2e8867</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.5.3.el9_8.x86_64.rpm</filename>
          <sum type="sha256">3aa1773b28cc8c6e4134e1d6c1b1b3b4b0963647701667bc36795cf02b3ae182</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.5.3.el9_8.x86_64.rpm</filename>
          <sum type="sha256">695c4dce664f9b0df376ebc381307cc6280378a1fcd39231a6b7274cc980fae7</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.5.3.el9_8.x86_64.rpm</filename>
          <sum type="sha256">90b8117fa43f622fc4281adfc332cf1286c763d57da6ef2f8890fbc3ede8d8c8</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.5.3.el9_8.x86_64.rpm</filename>
          <sum type="sha256">abcc8b8544564ed7afcf80f044e3b8421a8106a4bc4b9c14d6764def1465ff11</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.5.3.el9_8.x86_64.rpm</filename>
          <sum type="sha256">c2975b444b1acbf6fd34ffa7a7386ad8e12729421c1b2e1f70e82838ad5a07bb</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.5.3.el9_8.x86_64.rpm</filename>
          <sum type="sha256">d4e09fc3c385400638d98ccf98a934282313a5e456761518d3224e18c3d53aa8</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.5.3.el9_8.x86_64.rpm</filename>
          <sum type="sha256">eb76934cfeb2542d344bf7d6168aa956826bd866b6a5eca0f6e0f419d58e794b</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.5.3.el9_8.x86_64.rpm</filename>
          <sum type="sha256">ebb8b8521e23450b9c2bdec6eb4cb49b2e8af36fc645c0b12cc2c35b3d595457</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.5.3.el9_8.x86_64.rpm</filename>
          <sum type="sha256">eeec48cf57afb69d92f6a2073caaf60bd6acda6082154dc9274a179585e460d8</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="687.5.3.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.5.3.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.5.3.el9_8.x86_64.rpm</filename>
          <sum type="sha256">fe512c128c49da4412d96c5c7ffddc7cf26e64e2956c9b1c20c2728d0ba96fea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19568</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-20 00:00:00"/>
    <updated date="2026-06-07 18:33:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
  * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)
  * kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)
  * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)
  * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
  * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
  * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)
  * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
  * kernel: can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CVE-2026-31532)
  * kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)
  * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  * kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)
  * kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)
  * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)
  * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19568" id="RHSA-2026:19568" type="rhsa" title="RHSA-2026:19568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39766" id="CVE-2025-39766" type="cve" title="CVE-2025-39766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68741" id="CVE-2025-68741" type="cve" title="CVE-2025-68741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71116" id="CVE-2025-71116" type="cve" title="CVE-2025-71116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22984" id="CVE-2026-22984" type="cve" title="CVE-2026-22984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22990" id="CVE-2026-22990" type="cve" title="CVE-2026-22990"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23136" id="CVE-2026-23136" type="cve" title="CVE-2026-23136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23204" id="CVE-2026-23204" type="cve" title="CVE-2026-23204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23270" id="CVE-2026-23270" type="cve" title="CVE-2026-23270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23401" id="CVE-2026-23401" type="cve" title="CVE-2026-23401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31402" id="CVE-2026-31402" type="cve" title="CVE-2026-31402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31532" id="CVE-2026-31532" type="cve" title="CVE-2026-31532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31607" id="CVE-2026-31607" type="cve" title="CVE-2026-31607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43128" id="CVE-2026-43128" type="cve" title="CVE-2026-43128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43163" id="CVE-2026-43163" type="cve" title="CVE-2026-43163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46300" id="CVE-2026-46300" type="cve" title="CVE-2026-46300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46333" id="CVE-2026-46333" type="cve" title="CVE-2026-46333"/>
      <reference href="https://bugzilla.redhat.com/2394648" id="2394648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425046" id="2425046" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429602" id="2429602" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432389" id="2432389" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432400" id="2432400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439852" id="2439852" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439931" id="2439931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448745" id="2448745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453803" id="2453803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454844" id="2454844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461107" id="2461107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461521" id="2461521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467059" id="2467059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467144" id="2467144" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467771" id="2467771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477015" id="2477015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2477802" id="2477802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-19568.html" id="ALSA-2026:19568" type="self" title="ALSA-2026:19568"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.10.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">1e6e26c0266cd60fb9352defbf429f3a760c93f8bcaf28a72339ded0a25bafc5</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.10.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">36b1118bb011c314cf34b98bb3cf83653b782393bd96a7e5c90f743b3a3b8aa1</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.10.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">4339f491196b4e890c7dcc82555549f290baf0cf92e44981214207de648917fe</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.10.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">8aac9278467409ce8e513afd974493087e340d0150aa856ce45f8d753c06727a</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.10.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">975811fa129f6076f6458b21ac35f92dc3078204c1b11216542d1cf6f4460e16</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.10.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">a54b306f0d1b5231ed918d48fb5660da5531f32fc37c748835379f6ce8fb21f8</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.10.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">a668baf3c37a9aa97fd7155ff5db716fb8da91b860bb72bd64acbbcfde7da46d</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.10.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">b02042a1d2770fc5c1e1729726a8e25a52f7bcebad97af4d21000d2d7233c6ab</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.10.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">b21cbd80e24611ce0a528df0574afc2468e8698bf6645baa0cc4a89817fcd0eb</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.10.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">c3f471894a28447dafb32bbb035b09bb984f829869a3525f0e8f8e4090139b3f</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.10.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">caf239b96d5312f5306749f9baf4ae4a8e8b6903c4a4eff795ded79eaef8615b</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.10.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.10.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.10.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">d1536ac08aacea35d37f9d950ca5ed81b5a2cfaff192a4f124bc2e3caf329937</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21556</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-28 00:00:00"/>
    <updated date="2026-06-07 22:24:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)
  * kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)
  * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
  * kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)
  * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)
  * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  * kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  * kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  * kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  * kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  * kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
  * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)
  * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)
  * kernel: mm/page_alloc: clear page-&gt;private in free_pages_prepare() (CVE-2026-43303)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21556" id="RHSA-2026:21556" type="rhsa" title="RHSA-2026:21556"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38653" id="CVE-2025-38653" type="cve" title="CVE-2025-38653"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68183" id="CVE-2025-68183" type="cve" title="CVE-2025-68183"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68366" id="CVE-2025-68366" type="cve" title="CVE-2025-68366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68724" id="CVE-2025-68724" type="cve" title="CVE-2025-68724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71089" id="CVE-2025-71089" type="cve" title="CVE-2025-71089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23392" id="CVE-2026-23392" type="cve" title="CVE-2026-23392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23455" id="CVE-2026-23455" type="cve" title="CVE-2026-23455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31408" id="CVE-2026-31408" type="cve" title="CVE-2026-31408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31684" id="CVE-2026-31684" type="cve" title="CVE-2026-31684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31685" id="CVE-2026-31685" type="cve" title="CVE-2026-31685"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31709" id="CVE-2026-31709" type="cve" title="CVE-2026-31709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43020" id="CVE-2026-43020" type="cve" title="CVE-2026-43020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43023" id="CVE-2026-43023" type="cve" title="CVE-2026-43023"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43027" id="CVE-2026-43027" type="cve" title="CVE-2026-43027"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43051" id="CVE-2026-43051" type="cve" title="CVE-2026-43051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43110" id="CVE-2026-43110" type="cve" title="CVE-2026-43110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43158" id="CVE-2026-43158" type="cve" title="CVE-2026-43158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43190" id="CVE-2026-43190" type="cve" title="CVE-2026-43190"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43303" id="CVE-2026-43303" type="cve" title="CVE-2026-43303"/>
      <reference href="https://bugzilla.redhat.com/2390372" id="2390372" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422699" id="2422699" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424881" id="2424881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424886" id="2424886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429104" id="2429104" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451218" id="2451218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454810" id="2454810" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2455334" id="2455334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461757" id="2461757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461759" id="2461759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464369" id="2464369" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464455" id="2464455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464462" id="2464462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464476" id="2464476" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464496" id="2464496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467014" id="2467014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467064" id="2467064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467210" id="2467210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468091" id="2468091" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-21556.html" id="ALSA-2026:21556" type="self" title="ALSA-2026:21556"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">0eb384978455355a97f829ecaf638fe7039d18e1c6ba117413255d754321fa44</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.12.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">16379e00c02d062b8611b1f11dc9ee4da951fb6b62151ef1b7e69bf5233ca24d</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">18843987dabcf05da7005d0bf2cee0efd5d166cdca3639d3263ebc7dc54a9a18</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">4a1df139f236e43603f27535bbb0e17ef0432199e0cb52c0572e59219d458e18</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">4f092a9ec70348e3c46485e620b837730a7b367eabbf449be4e8b2dcfdb245ba</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">5ebc56659fe75c6fa3820e970dc5dbbc8c6d174ee42aa76b23fe679cc7c8aa79</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">739506b854cc52e6ad9817f78064f3b99c51b26e42309fec76853f42d61f72e2</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">9081285222ee9cfd72f056b47110009ffec342fae5d3e1d84a5ac49c7937a8dd</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">a4685f05d1f5f90c9d8c612eea2811f6faf469516a17b859a7a078ee1c022c0b</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">c872c106529f4655912d9be5c726b5b3f3b074efb590ea6e89690e58e6e3f510</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">ee9ce812faa17a31bc7f0d162418436478b602c271bdd4579bfaecc7db2fcaf9</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.12.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.12.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">f491ca9b44a2b88cc495ea44ca30e852f6f2b4faf319259c27a5d57fd290bb0a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2212</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-09 00:00:00"/>
    <updated date="2026-02-12 10:34:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789)
  * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819)
  * kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022)
  * kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024)
  * kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415)
  * kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403)
  * kernel: Linux kernel: Denial of Service in ATM CLIP module via infinite recursion (CVE-2025-38459)
  * kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730)
  * kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760)
  * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)
  * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)
  * kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141)
  * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)
  * kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271)
  * kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269)
  * kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2212" id="RHSA-2026:2212" type="rhsa" title="RHSA-2026:2212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37789" id="CVE-2025-37789" type="cve" title="CVE-2025-37789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37819" id="CVE-2025-37819" type="cve" title="CVE-2025-37819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38022" id="CVE-2025-38022" type="cve" title="CVE-2025-38022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38024" id="CVE-2025-38024" type="cve" title="CVE-2025-38024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38403" id="CVE-2025-38403" type="cve" title="CVE-2025-38403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38415" id="CVE-2025-38415" type="cve" title="CVE-2025-38415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38459" id="CVE-2025-38459" type="cve" title="CVE-2025-38459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38730" id="CVE-2025-38730" type="cve" title="CVE-2025-38730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39760" id="CVE-2025-39760" type="cve" title="CVE-2025-39760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40135" id="CVE-2025-40135" type="cve" title="CVE-2025-40135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40141" id="CVE-2025-40141" type="cve" title="CVE-2025-40141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40158" id="CVE-2025-40158" type="cve" title="CVE-2025-40158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40170" id="CVE-2025-40170" type="cve" title="CVE-2025-40170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40269" id="CVE-2025-40269" type="cve" title="CVE-2025-40269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40271" id="CVE-2025-40271" type="cve" title="CVE-2025-40271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40318" id="CVE-2025-40318" type="cve" title="CVE-2025-40318"/>
      <reference href="https://bugzilla.redhat.com/2363315" id="2363315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2365032" id="2365032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373326" id="2373326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373354" id="2373354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383404" id="2383404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383421" id="2383421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383487" id="2383487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393191" id="2393191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394601" id="2394601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414506" id="2414506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414521" id="2414521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414522" id="2414522" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414523" id="2414523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419837" id="2419837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419919" id="2419919" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419920" id="2419920" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2212.html" id="ALSA-2026:2212" type="self" title="ALSA-2026:2212"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.30.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">0d318ec6433c42cfcac8d6d1e060721fc042dd3bcbe3f692f2e82a734ca81f51</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.30.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">13385c94bfb3afc49ba6623a71f215ba6c3248c3bb1914904bb3decab8762020</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.30.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">2523548536d7f4c24ce38738e4024f343b2a400d151e1d11288227858e969d5b</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.30.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4a38e44dba113f50964bd5e954edfb17adf7db6c4c9a320fa586321e1b3ef97a</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.30.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">78d0f3dadcc209ed6a3dadb0aac2f0f3ad145a6d82713b743eec52431727c399</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.30.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">92eca2a27271091643ed7de78e30e2ef8c8f34a6f12de0409e407d0ef83157d7</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.30.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">970901d28949545a767afda825e0d04963f681a61b0802bc1a0cbe05304bd5db</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.30.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">aa3d6f8020c84f07f4a51f2ca95ae9001c4ac785c9aab3ce93e057adb6991ef0</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.30.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">da94f058bef5393f49fc015415d44581a10b7f00a63f7a00d2720d36fcde570c</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.30.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">dfd2bccf6ff0f7d1762fdfebc5b9213681a5f6306b0e596616929dbd9134eee1</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.30.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">f1858d24dbd44b5460b8114b7e88f9a07d8a8b869fc479a387e0f0efb70e8dc1</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.30.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.30.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.30.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">f927b5c84181246a13537d2362a277a02e4e802b0faf5024a1ac66c1e7aab790</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24381</id>
    <title>Important: kernel security update</title>
    <issued date="2026-06-08 00:00:00"/>
    <updated date="2026-06-11 20:38:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)
  * kernel: Buffer overflow in drivers/xen/sys-hypervisor.c (CVE-2026-31786)
  * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24381" id="RHSA-2026:24381" type="rhsa" title="RHSA-2026:24381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31613" id="CVE-2026-31613" type="cve" title="CVE-2026-31613"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31786" id="CVE-2026-31786" type="cve" title="CVE-2026-31786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46243" id="CVE-2026-46243" type="cve" title="CVE-2026-46243"/>
      <reference href="https://bugzilla.redhat.com/2461480" id="2461480" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464096" id="2464096" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481486" id="2481486" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-24381.html" id="ALSA-2026:24381" type="self" title="ALSA-2026:24381"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.13.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">1da2b77f353f7e8a7063569cc33a4932ad6ae821e5dc16ed8757a25d22bf1a19</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.13.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">299d9cb27b4404e5558067e3800455308f576c44eace4f85fd1443573c1c4bb3</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.13.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">3e2d127378fcbae1ed13818be2b20d3cdf91309e756b9ea625cb3fb9a192e146</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.13.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">4c2294c212d619c137fed562a47b6676cf90387446e80dbd510a7028377b64f2</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.13.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">5d29b5d9a145236c4a1aff570604929dbead71aef23aa9577eaf85f15b2f52cd</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.13.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">685f6ac31bddff3c06662472c325a018b51063af5dad63418910f924cf3cd958</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.13.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">6d686fba76bca03949286667844ab1f477f6051fbcc51afb832af4e32bdbd558</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.13.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">950ddac5ac720b2ea052a111331d63401a77802d0786f598a3dccf1c1f887936</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.13.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">b5201be546e3466a407c09215049234139a55a920ce2146f7e5dd9a63b063ec3</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.13.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">bfbb70f9597ec8d955fbfb0b85d2ee68be162ab71a99bffd1e47840864c44ed3</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.13.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">e3044e89c53023d468d0fbee4a8f1400ddd47235a6555576a3399d588afb5798</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.13.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.13.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.13.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">e7215a401d176f6bbe420af7534beb6a1b70630e3cd1ea61b53ff689eb3f8278</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25217</id>
    <title>Important: kernel security update</title>
    <issued date="2026-06-11 00:00:00"/>
    <updated date="2026-06-11 18:23:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216)
  * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)
  * kernel: net: openvswitch: Avoid releasing netdev before teardown completes (CVE-2026-31508)
  * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)
  * kernel: ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (CVE-2026-43037)
  * kernel: net: mana: fix use-after-free in add_adev() error path (CVE-2026-43056)
  * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
  * kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)
  * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)
  * kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)
  * kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25217" id="RHSA-2026:25217" type="rhsa" title="RHSA-2026:25217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23216" id="CVE-2026-23216" type="cve" title="CVE-2026-23216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31419" id="CVE-2026-31419" type="cve" title="CVE-2026-31419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31508" id="CVE-2026-31508" type="cve" title="CVE-2026-31508"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31581" id="CVE-2026-31581" type="cve" title="CVE-2026-31581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43037" id="CVE-2026-43037" type="cve" title="CVE-2026-43037"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43056" id="CVE-2026-43056" type="cve" title="CVE-2026-43056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43116" id="CVE-2026-43116" type="cve" title="CVE-2026-43116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43125" id="CVE-2026-43125" type="cve" title="CVE-2026-43125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43501" id="CVE-2026-43501" type="cve" title="CVE-2026-43501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45852" id="CVE-2026-45852" type="cve" title="CVE-2026-45852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46181" id="CVE-2026-46181" type="cve" title="CVE-2026-46181"/>
      <reference href="https://bugzilla.redhat.com/2440630" id="2440630" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457829" id="2457829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460641" id="2460641" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461471" id="2461471" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464351" id="2464351" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464449" id="2464449" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467005" id="2467005" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467234" id="2467234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480457" id="2480457" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482166" id="2482166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482532" id="2482532" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-25217.html" id="ALSA-2026:25217" type="self" title="ALSA-2026:25217"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.15.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">1a9b0479f913aff479d9c1e67cf514890484db957e034aca204d3b1c00d0e3d4</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.15.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">29089c489199bd39262e16077da2bf14ace3a0fe5434f367896251664b9c2b8e</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.15.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">48eef8d0968d90ce52ecdaa68956929f5e97691d72adebb080de46de457b6e80</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.15.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">4b25d84dfa3f76eaef93b5b1552cbbe20620a83dd410cc1d2b2f8fa75936b71d</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.15.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">5209fde9679ebb93675439e90d1f9fbde86dd705b55d0e41217c75c40954eb8c</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.15.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">55729b8b75c847ed950619b00fd59469e6432317001a43c07064464f1d4597e7</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.15.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">5748fe6dadba160acc5d474b4ab9931c2a671e6174821127c921669d1c7fdb52</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.15.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">814c5bf0c87e1466ff50dd6c11748b806105f050f8697dfe3297820950a92b16</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.15.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">8441f3cb89c72528bfa1ab5d08cb2e8eee5140de26891d09eddf8c992dcb1ed2</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.15.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">9f2d114788f0e3a4672259a4170cb50540b38488c7c9cc57983a8243707c6872</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.15.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">b7586b2414e7564ffa76d8d1542b8dcaac10d8596131bb2a3702f48ccfa082ea</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.15.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.15.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.15.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">dc78b179d2cc21a639b9b527fc284728fb2d56d5d599e301f43f9abd9ed552f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2722</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-16 00:00:00"/>
    <updated date="2026-02-23 13:18:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034)
  * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
  * kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304)
  * kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322)
  * kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349)
  * kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811)
  * kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2722" id="RHSA-2026:2722" type="rhsa" title="RHSA-2026:2722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53034" id="CVE-2023-53034" type="cve" title="CVE-2023-53034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40064" id="CVE-2025-40064" type="cve" title="CVE-2025-40064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40304" id="CVE-2025-40304" type="cve" title="CVE-2025-40304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40322" id="CVE-2025-40322" type="cve" title="CVE-2025-40322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68349" id="CVE-2025-68349" type="cve" title="CVE-2025-68349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68811" id="CVE-2025-68811" type="cve" title="CVE-2025-68811"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22998" id="CVE-2026-22998" type="cve" title="CVE-2026-22998"/>
      <reference href="https://bugzilla.redhat.com/2360239" id="2360239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406747" id="2406747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419870" id="2419870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419902" id="2419902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424880" id="2424880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429116" id="2429116" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432671" id="2432671" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-2722.html" id="ALSA-2026:2722" type="self" title="ALSA-2026:2722"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.34.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">04d9c0ca9f5168713bfc89067b3ebbf3c311aeeeb4e939c0fb1a590a28c1cc9b</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.34.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">2267c545059a1cbc58a739e972142555fd05c9bdab974c92e34b77f673263920</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.34.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">37d8a1c3f8c2a49d959ddc04d476fccbd1aeb3a37105d38f5ed75cbfcfd9d450</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.34.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">3dd763658697263b2b0e3cd7b3c4fbf06c6fcd3c15127a360a0eec93aa863755</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.34.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4e3e237049e19bcd52c7b88799f4915a14ba670106db605f2b8f9e837cf41d03</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.34.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">aaa633dea1ad2ddc8d33f208b64d2855719e1c72f088f08b034452acbdd7ff2f</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.34.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c09b4cbb85b6b68b171cea859dbca5e4a1805fba3519e2b0673ef581eebaa821</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.34.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">cdc86a5d7b60f19cbee120cd05464015c71030e0d57fe1b3cbd1821bc0940517</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.34.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">db035269b3dc8e168d28664fef30aaa932ceb6a41d7b09d085a6d5a74afca3d3</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.34.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e21da5686c108c64bcceb122940312316c39b3918d164a46269a22cd59a3fbf2</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.34.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">f3b16042313d24d3799ee4b0d7d083aa4bdd58954ad7781cc219d5c8dbb12bb9</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.34.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.34.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.34.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">fd6c8798d3a970aaaca872e9e06ccd3ed4d088820119c9abc38b4fd1bfac71c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:27789</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-06-22 00:00:00"/>
    <updated date="2026-06-23 10:14:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)
  * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)
  * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)
  * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)
  * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)
  * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)
  * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414)
  * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)
  * kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984)
  * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)
  * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)
  * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117)
  * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145)
  * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)
  * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)
  * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)
  * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135)


Bug Fix(es) and Enhancement(s):  

  * AlmaLinux9.4 - s390/ap: Expose ap_bindings_complete_count counter via sysfs [almalinux-9.8.z] (JIRA:AlmaLinux-166048)
  * [AlmaLinux 9.8] Hung tasks during both suspend and hibernate operations on systems with Intel E810 NICs [almalinux-9.8.z] (JIRA:AlmaLinux-175699)
  * DPLL: Add support for pin operational state [almalinux-9.8.z] (JIRA:AlmaLinux-175820)
  * DPLL: Add support for fractional frequency offset between pin and device [almalinux-9.8.z] (JIRA:AlmaLinux-175823)
  * ibmveth Adapter Freeze with Small MSS [almalinux-9.8.z] (JIRA:AlmaLinux-178308)
  * AlmaLinux9.4 - s390/mm: Add missing secure storage access fixups [almalinux-9.8.z] (JIRA:AlmaLinux-183317)
  * rbd: eliminate a race in lock_dwork draining on unmap [almalinux-9.8.z] (JIRA:AlmaLinux-183130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:27789" id="RHSA-2026:27789" type="rhsa" title="RHSA-2026:27789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31474" id="CVE-2026-31474" type="cve" title="CVE-2026-31474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31669" id="CVE-2026-31669" type="cve" title="CVE-2026-31669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31772" id="CVE-2026-31772" type="cve" title="CVE-2026-31772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31787" id="CVE-2026-31787" type="cve" title="CVE-2026-31787"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43260" id="CVE-2026-43260" type="cve" title="CVE-2026-43260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43279" id="CVE-2026-43279" type="cve" title="CVE-2026-43279"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43414" id="CVE-2026-43414" type="cve" title="CVE-2026-43414"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45984" id="CVE-2026-45984" type="cve" title="CVE-2026-45984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46056" id="CVE-2026-46056" type="cve" title="CVE-2026-46056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46117" id="CVE-2026-46117" type="cve" title="CVE-2026-46117"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46125" id="CVE-2026-46125" type="cve" title="CVE-2026-46125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46135" id="CVE-2026-46135" type="cve" title="CVE-2026-46135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46145" id="CVE-2026-46145" type="cve" title="CVE-2026-46145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46152" id="CVE-2026-46152" type="cve" title="CVE-2026-46152"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46166" id="CVE-2026-46166" type="cve" title="CVE-2026-46166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46173" id="CVE-2026-46173" type="cve" title="CVE-2026-46173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46331" id="CVE-2026-46331" type="cve" title="CVE-2026-46331"/>
      <reference href="https://bugzilla.redhat.com/2460646" id="2460646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2461503" id="2461503" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464092" id="2464092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464502" id="2464502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467083" id="2467083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467215" id="2467215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468155" id="2468155" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479492" id="2479492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481922" id="2481922" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482181" id="2482181" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482563" id="2482563" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482576" id="2482576" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482581" id="2482581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482608" id="2482608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482634" id="2482634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482645" id="2482645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482654" id="2482654" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-27789.html" id="ALSA-2026:27789" type="self" title="ALSA-2026:27789"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.17.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">117dc413a91560b013688f2800c91111884696fe978ebb0a900fee980d5cce7a</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.17.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">13ef0f4ed590adfc7cbad65e4ada5afce096c7d58c369c781003da7f8c43c4c2</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.17.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">387e73348559585683c1ce909ae9a467165bfc063ac7617ebc280cbe4e367b2e</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.17.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">502347c1150dc9be4fd3c928986b4e0a290f9a7da1b8f27ded07104b5121eb30</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.17.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">52ddcada54bc22c8fd708692d4be36ebc259610be8dd0b0f2c5951a926af05cf</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.17.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">5ff0950673d40c64da807eeea338a956f745070fd9080424491de517d531d44c</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.17.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">825876627abe775d1472d378960ef79153f8327a887b7b9cf6b2283f216f8a17</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.17.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">8c1862bdb8fe09e156c2de029f529b7d63d0b68bf5dc4b1812dd0c6cbb527173</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.17.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">93d7f6ae5479e09e269df54cc5dd7f7a48d624cb67dc4c2243b132ab2925f03b</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.17.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">a9cfff10460bd5de2f6c0a1fa844a4f915e2ee853dcb9f9974c79a97ba71f67d</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.17.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">d70403e5c4cb4626d7e6b66fe640b27891a3159f93761e2dfb3980f136a369fa</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="687.17.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.17.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.17.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">e59350879ace315b238dfc98553d8654e57cc6cdcae7288e8cc612e46271e142</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3066</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-26 10:42:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129)
  * kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service (CVE-2025-38206)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3066" id="RHSA-2026:3066" type="rhsa" title="RHSA-2026:3066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38129" id="CVE-2025-38129" type="cve" title="CVE-2025-38129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38206" id="CVE-2025-38206" type="cve" title="CVE-2025-38206"/>
      <reference href="https://bugzilla.redhat.com/2376034" id="2376034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376377" id="2376377" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3066.html" id="ALSA-2026:3066" type="self" title="ALSA-2026:3066"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.35.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">065ea6bfb6f8befcab933d2130ae3a0765d9661847afab68f268c66cb1a41103</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.35.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">10eefcc6d13650a22bd7410cbe5a8d95a400ad4fe64b6894c6d0bee0bd0b8c15</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.35.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">1e2f813afc1e8c10074fb06ac76dd566a4c1492a9269350185f549914b6be6d9</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.35.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">48b5bda946e786da5b2418ab7a5c6eabf0f31286d9b358c28477a6a71dea21e9</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.35.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">655b661516ce754ddba3a7a4d4393082309921886d7bd2f47b2ebd66992255d9</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.35.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">70262e4f7ed4642c03794e8d4592bfa9e241d84ce605212105ebecc2204bab9a</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.35.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">79659e92d2cbceac1d243d771fa4dac9f10902878ee73a74cabd855523b44de2</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.35.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d1a81a787d8651616d99ed8d9d09af24553a019e154eff3db16aa26f14def123</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.35.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">daac8588eabf9835df7fb515f558e9fc9dec9f1d7a425cefe65e8edade053c9e</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.35.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">db0932af96e2c4afc22de85a432c3e0d361090dc63340df27804af802ac08fea</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.35.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">ed4a2738afedbeabd4af1818316cd7e57216db256bd49a44decdb138e45b6ca6</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.35.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.35.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.35.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">f4b6fb2e96bcd319a5a45dae1b78deacc707d3cdfe19de1c5cab246273d34f01</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:30848</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-06-29 00:00:00"/>
    <updated date="2026-06-30 09:39:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation (CVE-2026-31488)
  * kernel: ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)
  * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)
  * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090)
  * kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054)
  * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898)
  * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)
  * kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CVE-2026-46176)
  * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)

Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux-9.8.z]: Update the mlx5 drivers to v6.19 (JIRA:AlmaLinux-169057)
  * iavf: during POD churn vlan filters may not be added for a vlan interface, spoofchk drops subsequent packets [almalinux-9.8.z] (JIRA:AlmaLinux-172993)
  * nf_conntrack_sctp: vtag corruption with late INIT in ESTABLISHED state across conntrack zones [almalinux-9.8.z] (JIRA:AlmaLinux-178273)
  * sched/fair: Skip sched_balance_running cmpxchg when balance is not due [almalinux-9.8.z] (JIRA:AlmaLinux-182776)
  * [REGRESSION] ISST-Spyre: Jenkins workload causes soft lock warning to appear on screen. Workload hangs. [almalinux-9.8.z] (JIRA:AlmaLinux-183183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:30848" id="RHSA-2026:30848" type="rhsa" title="RHSA-2026:30848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31488" id="CVE-2026-31488" type="cve" title="CVE-2026-31488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43038" id="CVE-2026-43038" type="cve" title="CVE-2026-43038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43329" id="CVE-2026-43329" type="cve" title="CVE-2026-43329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45898" id="CVE-2026-45898" type="cve" title="CVE-2026-45898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46054" id="CVE-2026-46054" type="cve" title="CVE-2026-46054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46090" id="CVE-2026-46090" type="cve" title="CVE-2026-46090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46176" id="CVE-2026-46176" type="cve" title="CVE-2026-46176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46189" id="CVE-2026-46189" type="cve" title="CVE-2026-46189"/>
      <reference href="https://bugzilla.redhat.com/2460619" id="2460619" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2464397" id="2464397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2468124" id="2468124" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481980" id="2481980" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482025" id="2482025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482031" id="2482031" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482588" id="2482588" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482594" id="2482594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-30848.html" id="ALSA-2026:30848" type="self" title="ALSA-2026:30848"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.19.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">0842f05bb72b0d60d75ca97ca4898ac1f36d98a65afa7f55945ab2063da3b3d9</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.19.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">1fe6969f2dc58383b311fe96f83ffc15ac58ffcde77d61c3cf5af79167e53530</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.19.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">4058004fdc03f0170cbc895e1bb0a23a30307f468664e9b31b6b92bc51e3528b</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.19.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">432f379d11f0c3a6cfd601536efad8498e72b44b7656d1534ad1f9abc4cdc266</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.19.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">7833686a32a59d430e96c3fe1ec94c54eb11a7820cce95b9328a218ba18d76b5</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.19.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">8b52a0c585a90096c36d94fa33eac6cba0e409fb641a813c99231cac497b65f9</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.19.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">9c3a9b8c4f3cea2e490ac6c8e92b658d6d5a0768095c619657ff86b7c4b87e66</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.19.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">a799cf782aa665254fed8d9a87755199e1451566d65a1eaca355886168d677d7</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.19.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">b57e969e8f5f5c99cdbadbe80d557adf5ba3a2c3a58da6da1130c3f250309960</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.19.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">be88dc243efd394b320b197296895fd3065e8384d54771fbe3b9c4f2858962a9</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.19.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">ea9cc28ccccdac07abd476579244d2569c6b87c8757e692e8bb9ae681b4774fc</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.19.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.19.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.19.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">efa569203b1311a0cccf933ea5c19074a3be26fea9b0df239114856d93e6a09a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:33285</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-06-29 00:00:00"/>
    <updated date="2026-07-01 10:27:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411)
  * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198)


Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux 9.8 Bug] qla2xxx flash image validation failure [almalinux-9.8.z] (JIRA:AlmaLinux-181886)
  * crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode [almalinux-9.8.z] (JIRA:AlmaLinux-182540)
  * tegra-se fixes and updates [almalinux-9.8.z] (JIRA:AlmaLinux-182760)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:33285" id="RHSA-2026:33285" type="rhsa" title="RHSA-2026:33285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31411" id="CVE-2026-31411" type="cve" title="CVE-2026-31411"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43198" id="CVE-2026-43198" type="cve" title="CVE-2026-43198"/>
      <reference href="https://bugzilla.redhat.com/2456521" id="2456521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467228" id="2467228" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-33285.html" id="ALSA-2026:33285" type="self" title="ALSA-2026:33285"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt-devel" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.20.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">11421a61c6d8979a6161ba270e7748625919ab6491a5f969944b1e39b65d2b6b</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.20.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">3f2b9139adf7fdf78f3cc31eb22a7115166cf826c838175156f415dec71a6d92</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.20.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">47a8a391b2a8d1fab6a343f5e732b55c0bdf41a43df785768e2319fca586fc84</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">592ae595a31510004a74f490812b5aa61644f8fe8e1e87247c4c0f7d3c988659</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.20.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">80469e0203ebda362627721fcd771f78ef98f9fb66fe1d89b44741c00de05d02</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.20.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">8f716679cef0104644fb47bdc4acc17b47b6b6be3e9eab0d84a17645b4c16a4f</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.20.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">9e3b1456f7189382741aeaba40375d34f25960586c5efd99ff34b4e96721b46c</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.20.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">9f525733b6bf776d6a651b2a4ca79a4ae7dbb020580fabfb9600985800a22734</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.20.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">a872e5207867708d3e4dba09272250c7085cca627cfb0ba8fa9be66f730d7ad9</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.20.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">acfdf3fc51fdc49366c9ec29edecfde77358f4a4dc8d61849167c0f9740caa9b</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.20.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">ce05ecaa721eb5cf7521204322d94dead06df73fc1b135bdbbabb716e6099468</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.20.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.20.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.20.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">d8b29766fe55bbfdea36b5001972d04ccf36c8d97d16d87a05b3bbf258798f0a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3488</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-02 00:00:00"/>
    <updated date="2026-03-04 10:30:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168)
  * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085)
  * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3488" id="RHSA-2026:3488" type="rhsa" title="RHSA-2026:3488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40168" id="CVE-2025-40168" type="cve" title="CVE-2025-40168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71085" id="CVE-2025-71085" type="cve" title="CVE-2025-71085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23097" id="CVE-2026-23097" type="cve" title="CVE-2026-23097"/>
      <reference href="https://bugzilla.redhat.com/2414482" id="2414482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429026" id="2429026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436802" id="2436802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3488.html" id="ALSA-2026:3488" type="self" title="ALSA-2026:3488"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.36.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">0676d1c8304b44dc87967652471b02832e6fe7f271fae7917544cdfba90b7450</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.36.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">087c780f799433e881159aabc5659d59eab2ef3f9329817d762573d3f58826cb</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.36.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">15f91326d11e5599fe9bbd7c7a8689df3491d16e60e536c44461d43d1466ebcf</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.36.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">1967264f54ebbe51d1dae726a5661401e0e935522abb18e41672ff8de0d7791b</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.36.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4227d08c8c9daf99a3fc41a28bc43116dedf084382ad7b5adaa4b1985c4d341a</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.36.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4c2ddd9285e74566aba803d3c350e8b931fa15f9cc9fc80e395ea6f618849e28</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.36.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">7d96b32bb459e599f955294f9eaf235bf5ccd992ca890ec0ffbdd64cbe2e98ed</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.36.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">9ad12ca473d89e6883d5cc574bf497f49a53c4b16ead042d80fef009d5ab4397</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.36.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c1566f9b6fb0eb84a7ba92f3c3cf42d63bbda7e4d43a43b8c0cbb7e3337346b4</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.36.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">dd7236d4a39702badef735a4913020e595670989f80b9cfbb4654f138f586938</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.36.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e0e22f1ea2d0501230842e977b4cdce1980a354959f4b29b37dfe5fad4928723</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.36.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.36.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.36.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e6680a92bb44abeb0c51ea2750a4434b7495861f6010d6c222063ce211a9e953</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36018</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-06 00:00:00"/>
    <updated date="2026-07-08 14:10:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)
  * kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path (CVE-2026-43276)
  * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323)
  * kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (CVE-2026-46116)
  * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
  * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)
  * kernel: smb/client: fix out-of-bounds read in smb2_compound_op() (CVE-2026-46155)
  * kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync (CVE-2026-46244)
  * kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CVE-2026-46259)
  * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources (CVE-2025-10263)
  * kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CVE-2026-46316)


Bug Fix(es) and Enhancement(s):  

  * WARNING at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c:1585 r535_gsp_fini+0x2fb/0x310 [nouveau] [almalinux-9.8.z] (JIRA:AlmaLinux-160966)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36018" id="RHSA-2026:36018" type="rhsa" title="RHSA-2026:36018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10263" id="CVE-2025-10263" type="cve" title="CVE-2025-10263"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43112" id="CVE-2026-43112" type="cve" title="CVE-2026-43112"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43276" id="CVE-2026-43276" type="cve" title="CVE-2026-43276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46116" id="CVE-2026-46116" type="cve" title="CVE-2026-46116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46155" id="CVE-2026-46155" type="cve" title="CVE-2026-46155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46209" id="CVE-2026-46209" type="cve" title="CVE-2026-46209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46227" id="CVE-2026-46227" type="cve" title="CVE-2026-46227"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46244" id="CVE-2026-46244" type="cve" title="CVE-2026-46244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46259" id="CVE-2026-46259" type="cve" title="CVE-2026-46259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46316" id="CVE-2026-46316" type="cve" title="CVE-2026-46316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46323" id="CVE-2026-46323" type="cve" title="CVE-2026-46323"/>
      <reference href="https://bugzilla.redhat.com/2467015" id="2467015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2467113" id="2467113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479832" id="2479832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482523" id="2482523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482564" id="2482564" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482636" id="2482636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482660" id="2482660" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2484451" id="2484451" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2484477" id="2484477" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486958" id="2486958" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2486982" id="2486982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36018.html" id="ALSA-2026:36018" type="self" title="ALSA-2026:36018"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.22.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">4c67675dece51e8ffc3649400bd3d3cf9d927e165187695124cec7870711fd6b</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.22.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">58c40711355bf93cd17fc753bab46344e75b62738886ae47e1ba8a6b59932d47</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.22.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">80e5e887edba5de27230babbce54915dda8076fdc6fe2126295e0d0362ea8007</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.22.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">84cb12cf16602426d589ce222c28a0a4988fd44562d5b74fe47a33162dcff541</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.22.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">9fa022e545d12d3493196c60d84976f08d2598609201418a1ed532d9a6e5ca13</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.22.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">ad4d4a0b70d14a36de14db9c06268061225d3f78c71f2f625fe1d82e85d79805</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.22.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">b7e0e4619a9ca3e76f117628b6ce6efffb52c9668053d62f053c478866e522b4</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.22.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">dbc5fe4d52b2106bc25cbb43a9395ce991ca2f666b757ea8018a8cb55faf8a7c</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.22.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">dc077f689806c03d1602f63d790d6a9a1b17c21d7ab971b2affb41bb1d30e913</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.22.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">dd37c59ea02a0f6cb946ad9350a9086ae579f99842a0c90dc4571e2656fed32f</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.22.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">edb8ab8f3ee1d1cbfda719dec3b4bb6b6c5a1470b182f8829e00a0d4c0a25319</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="687.22.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.22.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.22.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">fcb87fd51512ad131f5543ea7002ae4bfeab1bcc1264d0390ca54717d364c95e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36645</id>
    <title>Important: kernel update</title>
    <issued date="2026-07-08 00:00:00"/>
    <updated date="2026-07-09 11:24:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating  
system.  

Security Fix(es):  

  * kernel: eventpoll: defer struct eventpoll free to RCU grace period


(CVE-2026-43074)  

  * kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF


(CVE-2026-46242)  

  * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite (CVE-2026-53266)


Bug Fix(es) and Enhancement(s):  

  * kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite [almalinux-9.8.z] (JIRA:AlmaLinux-182344)
  * [AlmaLinux 9] Bonding reports unknown speed/duplex for tg3 interface [almalinux-9.8.z] (JIRA:AlmaLinux-182768)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36645" id="RHSA-2026:36645" type="rhsa" title="RHSA-2026:36645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43074" id="CVE-2026-43074" type="cve" title="CVE-2026-43074"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46242" id="CVE-2026-46242" type="cve" title="CVE-2026-46242"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53266" id="CVE-2026-53266" type="cve" title="CVE-2026-53266"/>
      <reference href="https://bugzilla.redhat.com/2467019" id="2467019" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2483519" id="2483519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2485368" id="2485368" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36645.html" id="ALSA-2026:36645" type="self" title="ALSA-2026:36645"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.23.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">24b6da7ba3019931ab3f3268584443f8e81fef05e69ed90cebdd0b368869a40f</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.23.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">2b0f313b5df7f733b6733f101e383ab4d0412de9d4e0c5d7ef42122c98115f78</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.23.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">379dd2a4fbd7311d809848161e30d50e79d37042996793e65b391ecad4108ee6</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.23.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">89990bdded5f0df42d87c55f875ffa4f0bf8098e876de86439d439e77d33c180</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.23.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">90922d6f097a048c7258853d0a7c2936a0f5a40019e601598876d2769c000bd5</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.23.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">9817a0b9be57ef552d307cc4ec84b098b5fc144fe49370d69a918ba2b325670e</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.23.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">a83bc6411def0494c59ccb1c6dca8928328c4f02b08b0281d252799a165e64ef</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.23.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">a92016270d1ae296a89755091a3dd19ce8d7a707d6cc81e6e97ff2e857562f7b</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.23.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">afb6c7cef9e43178f7d49144350bb79faab4561ec8d335e6090e998ab1eac115</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.23.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">b7cb09af420d51e53a6427cda5ac5a86f2f253004d87a93ef32b436908efd919</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.23.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">cfb336cf5f2b75a9d19d2c0781fd9a2377b1121c195603951954087f3bd063fa</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.23.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.23.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.23.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">fedb71bd7563ed95495095141cf8c39f4764d17cee6b04874073d5cb43d60ff2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:36957</id>
    <title>Important: kernel security update</title>
    <issued date="2026-07-09 00:00:00"/>
    <updated date="2026-07-10 09:18:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CVE-2025-71066)
  * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CVE-2026-46113)
  * kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role (CVE-2026-53359)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:36957" id="RHSA-2026:36957" type="rhsa" title="RHSA-2026:36957"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71066" id="CVE-2025-71066" type="cve" title="CVE-2025-71066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46113" id="CVE-2026-46113" type="cve" title="CVE-2026-46113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53359" id="CVE-2026-53359" type="cve" title="CVE-2026-53359"/>
      <reference href="https://bugzilla.redhat.com/2429036" id="2429036" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482587" id="2482587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2497033" id="2497033" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-36957.html" id="ALSA-2026:36957" type="self" title="ALSA-2026:36957"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.24.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">0af806a4cf6a6fcaa534e8913e3eff7da1f4f53efe582d57a3e9689ff6c4210b</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.24.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">0c208dca35306b6eda33c86cc77b0d957d26f06bff98782a12b8acef27e5a7a1</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.24.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">0d4b05797eca2c5db9057c49b8817425b0b3b110a7b5f70b2314e0e782b5b06e</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.24.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">28b20e9b12c16368959732ca86aa0188c56345cb815407f449ce7930bfcbbcc4</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.24.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">2f62b4560e4c299fba78e35723916954f4e2dd8f5f57909be5ee00d85c09e8d0</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.24.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">366b662aef0aca1fc4059d21a70794c652e00182eecaa7135bfffa3c4e0239ca</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.24.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">59916df5c787f50fb4ee398bd81296ebb52eba7bac7de9cfc9e0e64dce9392c7</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.24.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">73625c5e01ad17c1789da3a9e59f8032a0949c1f21087d91801d5295c973c43a</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.24.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">a08051f4d981db3b9beed37ecb039111409198f8b9f58c72de3ffbfb43149dff</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.24.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">a38bd0cf917af7ce9abcadac20ffdfe8ab078479bc29363697ae858905f678cc</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.24.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">da358e05ffe5eee3357fc19374eef3ab0627d55062515e02a606c6dd811be94f</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.24.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.24.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.24.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">dd820602b119dbaacd1d6f12a0cb21951ccc1b196ea9bcf29aefb516b034e357</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:38491</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-13 00:00:00"/>
    <updated date="2026-07-13 20:54:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling (CVE-2026-22979)
  * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499)
  * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086)
  * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)
  * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CVE-2026-53166)


Bug Fix(es) and Enhancement(s):  

  * Kernel panic very early during boot while reading a tracefs file (available_filter_functions) due to invalid module name pointer [9.8.z] (JIRA:AlmaLinux-183236)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:38491" id="RHSA-2026:38491" type="rhsa" title="RHSA-2026:38491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22979" id="CVE-2026-22979" type="cve" title="CVE-2026-22979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43499" id="CVE-2026-43499" type="cve" title="CVE-2026-43499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46086" id="CVE-2026-46086" type="cve" title="CVE-2026-46086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53016" id="CVE-2026-53016" type="cve" title="CVE-2026-53016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53166" id="CVE-2026-53166" type="cve" title="CVE-2026-53166"/>
      <reference href="https://bugzilla.redhat.com/2432402" id="2432402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2480453" id="2480453" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481989" id="2481989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492269" id="2492269" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492805" id="2492805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-38491.html" id="ALSA-2026:38491" type="self" title="ALSA-2026:38491"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt-devel" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.25.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">110c25ec4082f77e0e6021e86868380044ec12542ff5f9627cdf1c2af112122b</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.25.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">43ec22b583a32b505afaa00fac0e1b8b6857fefcfb6797a689a4a114d3d02587</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.25.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">5d53675673d46a553657e76300792e49beeeaf709d37125d140c71389bd9883a</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.25.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">71c13a15b33831eabf4a229b7826cb6e5e5ec8881ffa3a24328ace476dde164a</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.25.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">9a08090b7e2f4936453a7a221901639ff16e2319402d3b45d544e1df8d539e1e</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.25.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">ac93b5bf50e997be1acd1121dc1065ee05e3dd7b63ece5e22e8192b2cd14212f</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.25.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">b7ef592dbc9c8b6abb1c65adf20024cbccb4d783d744bb14f20267d69aa60534</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.25.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">d10287ad3c02d77b99175f37314879683abb37a3f8f99b1b9048df9546c89935</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.25.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">d779287bb05e46dc20040cc6442f44d6b47d9ca9e6614e301a60dac2d0230848</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.25.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">dbcca9fcd0661af3fbd87a8b85d91ee14546357434548d5167fa6bcc4df2b05c</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.25.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">ea9171cae2c16caf8e5ed6a98a921afa5c7002ab662f69265a17e7614bd9bf4a</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.25.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.25.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.25.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">fbd7eadab905a3e3e036d3d1a0c96dda8b7a1f8f023cdd567afc7423de02efd5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3966</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-11 10:10:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free (CVE-2025-38106)
  * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3966" id="RHSA-2026:3966" type="rhsa" title="RHSA-2026:3966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38106" id="CVE-2025-38106" type="cve" title="CVE-2025-38106"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23001" id="CVE-2026-23001" type="cve" title="CVE-2026-23001"/>
      <reference href="https://bugzilla.redhat.com/2376077" id="2376077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432664" id="2432664" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-3966.html" id="ALSA-2026:3966" type="self" title="ALSA-2026:3966"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-modules" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.38.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">28e9f911db9494d749a5f89663434bf37fb9557ef920ff4e3068d3e37c7b5ea1</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.38.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">457531f04a089660270fbacfdb05ad3a95cc798abb745b03be67b8699fd2b327</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.38.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4e87a91a43255de0a080b61bd1795876a7bce8f73db35f46584e42e7edca38a5</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.38.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">6f065480c1476cd9ecc0d2e72f24174e7b567ae3529c7dcf1b967942b13ef5d8</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.38.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">79090f05838455b823694c1bd4e4535a7408903d78ab0c5b4a8aad20be6f65a6</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.38.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">7d5f60e03d9b4b1b0bf560354171ee0f0ed8e4d8b0060b793b3e2532804f6f37</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.38.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">8ab23c6090b16069edea07f6b40eacb40c6a9b3a4c7a6d5f188998e0b8d2592b</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.38.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">8bb8a728c3da76d529b406bfd73df8df5411152e472a4336c21b1061e94bfd1e</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.38.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">90c374b00c8e35d761e00977ced22b6005b2b1e8b0424af514661b55070f4533</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.38.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">b1a40df371cf5ad7f3ada9a2d38180b04339c02c59af047f32d8c3b57a531c0c</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.38.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c9ba4696f22684272d675c208455fc5e619f8fa60b317056579e72d4a9317dd9</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.38.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.38.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.38.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e446c93664c219bb2c43e41020453966eaa4fcf44e06d426e7c79ed67aaf9282</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:43307</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2026-07-22 00:00:00"/>
    <updated date="2026-07-24 10:32:04"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CVE-2025-71113)
  * kernel: scsi: core: Wake up the error handler when final completions race against each other (CVE-2026-23110)
  * kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (CVE-2026-46099)
  * kernel: fanotify: fix false positive on permission events (CVE-2026-46150)
  * kernel: drm: Set old handle to NULL before prime swap in change_handle (CVE-2026-46215)
  * kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071)


Bug Fix(es) and Enhancement(s):  

  * [AlmaLinux9] tools/lib/perf/Makefile: libperf includes appended after CFLAGS causes parallel build race, breaking kernel builds [almalinux-9.8.z] (JIRA:AlmaLinux-183980)
  * [AlmaLinux-9.8.z]: mlx5: include bug fixes (JIRA:AlmaLinux-188121)
  * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [almalinux-9.8.z] (JIRA:AlmaLinux-212061)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:43307" id="RHSA-2026:43307" type="rhsa" title="RHSA-2026:43307"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71113" id="CVE-2025-71113" type="cve" title="CVE-2025-71113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23110" id="CVE-2026-23110" type="cve" title="CVE-2026-23110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46150" id="CVE-2026-46150" type="cve" title="CVE-2026-46150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46215" id="CVE-2026-46215" type="cve" title="CVE-2026-46215"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-53071" id="CVE-2026-53071" type="cve" title="CVE-2026-53071"/>
      <reference href="https://bugzilla.redhat.com/2429611" id="2429611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436755" id="2436755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2481972" id="2481972" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482612" id="2482612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2482615" id="2482615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2492458" id="2492458" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-43307.html" id="ALSA-2026:43307" type="self" title="ALSA-2026:43307"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_8_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_8_default</name>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-687.29.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">0946ae253d978b28b9939629a4429a20af206d0f958d6c9b323ab2b5e671d741</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-rt-core-5.14.0-687.29.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">1418ad1d1b66917c6225fd6f59b70976c4535c941aa30b5d073de9886a643f1f</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-687.29.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">1823a455a363715e073851d7456f3d0009402f7b013934d1c912b8ce2ed44ab3</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-687.29.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">2512d116e7c23fbea726a6c37ed9ffb06502c3f88c20e1e3f7d79e7e4ce6cbb2</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-687.29.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">2a4bbea7ade0481351c446abbbcbe0c3ee84b5759ce8c2b0d6396f2bc04b29be</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-687.29.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">49eb0be79947cd94878d1e466009cb3f66dc07173c72d8a3026f75e88d0b2624</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-687.29.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">80face078a687003524e738e4a53fb79789dec94f038f66cde5a2fd5d55894ac</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-rt-5.14.0-687.29.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">8239cfc59f1e7934d8488961acf70287aa11e7817663001758dea5cfbe7ec5a7</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-rt-devel-5.14.0-687.29.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">83a77fdaa670aafcf8c8e734c61b57f5db3ca82b76de630b6403000014d96093</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-5.14.0-687.29.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">bf06779baf7a53a330ebb803ea787f499a990d98244c1cb2a46309514ac27ea6</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-rt-debug-5.14.0-687.29.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">c4ee9ee53633e0223d82c6a282aed6f00fab9347bf34a5c9aab858ee8c5ff06a</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="687.29.1.el9_8" epoch="0" arch="x86_64" src="kernel-5.14.0-687.29.1.el9_8.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-687.29.1.el9_8.x86_64.rpm</filename>
          <sum type="sha256">f5c5e36426e1aaeb6289e3e662f9371fac7681dad1d23c8b1f9697ef71c40bad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4759</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-20 07:32:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CVE-2025-39818)
  * kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4759" id="RHSA-2026:4759" type="rhsa" title="RHSA-2026:4759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39818" id="CVE-2025-39818" type="cve" title="CVE-2025-39818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68800" id="CVE-2025-68800" type="cve" title="CVE-2025-68800"/>
      <reference href="https://bugzilla.redhat.com/2395797" id="2395797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429065" id="2429065" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-4759.html" id="ALSA-2026:4759" type="self" title="ALSA-2026:4759"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.41.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">0958cb084aa50940a565c10af697ac6b4d14e581eb0c7fd659e858379a3b49fc</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.41.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">13b00638d8ef87e9f105bd80ae4df7a04980cc0bdd2e6b36ba2c32857525844d</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.41.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">42cf0b5f88e9d29f7341c6cb5767f9e673ad03320618a46e61db5221a24ec15b</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.41.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">b1c2950b43637f13eb20df8b16646ff9cd548cff3b61e4dad59b131b21cb86dc</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.41.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c021ddb2c7f7947000771e74856172cd0d039567840942a5e78c876614197aa5</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.41.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c2d93c5f506d7506e9ae19762bc991c8ff5c97513d3801f42451b6b0184e3d83</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.41.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c8da0b478758636b10b7ae495833a149a9b9409b765123712ac9d043b3f8989f</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.41.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c9bc8a7463821a237bd407dd1e591be8a4401b6f131ae7ba795b767c83c9f38b</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.41.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d2300c197c039c7c886c8a238ced9796750434c04d1ac441bef7d82672799867</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.41.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d3f603dfbadc0bc7033b4c8fcce7474ad46c1f3afeb003f2f222a6ebdea2d9af</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.41.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">fd063c4dcfbbb7e348fee7644373f9e152a7e7d60058221e78600e77b7438047</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.41.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.41.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.41.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">feeb81ff96b3564475f2c0353a7c0b4b2afaa42ec4bbda771a15ba503928f88b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6153</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-30 00:00:00"/>
    <updated date="2026-04-02 08:46:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem (CVE-2025-38180)
  * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096)
  * kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144)
  * kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171)
  * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
  * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209)
  * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
  * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6153" id="RHSA-2026:6153" type="rhsa" title="RHSA-2026:6153"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38180" id="CVE-2025-38180" type="cve" title="CVE-2025-38180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40096" id="CVE-2025-40096" type="cve" title="CVE-2025-40096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23144" id="CVE-2026-23144" type="cve" title="CVE-2026-23144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23171" id="CVE-2026-23171" type="cve" title="CVE-2026-23171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23191" id="CVE-2026-23191" type="cve" title="CVE-2026-23191"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23193" id="CVE-2026-23193" type="cve" title="CVE-2026-23193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23204" id="CVE-2026-23204" type="cve" title="CVE-2026-23204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23209" id="CVE-2026-23209" type="cve" title="CVE-2026-23209"/>
      <reference href="https://bugzilla.redhat.com/2376376" id="2376376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407333" id="2407333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439872" id="2439872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439886" id="2439886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439887" id="2439887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439900" id="2439900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439931" id="2439931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439947" id="2439947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6153.html" id="ALSA-2026:6153" type="self" title="ALSA-2026:6153"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.45.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">092f4641be743b43252db90046bd95f8960827cef4e4447dcb9caf931c98e080</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.45.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">29ecf25622fe5e9ab59ef53aa2778d6d5a11e3224ef1677c22c743e63c1db73d</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.45.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">368631d65184af60970792422878e0d3f9986174e1d6312452eb514875d94856</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.45.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4e26c457f36dc28922439eee96f471c207c010bd5ed10ba4c58d11eb4d8b657b</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.45.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">792d629fedcabc6d55f39a15d862c8f402a397d017e480afa1642910852bb807</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.45.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">890a0b8229b961b51e46dacea03a13d046b29032cb4991fcd6911bba59642db6</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.45.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">8a55465d2077fd120bd264714fa119a26482de56e086f2094176357def0b8a67</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.45.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">9b191407aa307be653711310cf1c35fabc4488111b58cb2550dabaa93db71e25</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.45.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">b0836b9692351d6d4f290818b82d8bc9833ce659a0d3d6f3e0904499781cc0ac</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.45.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e31382a98c9215e64e574000ac84346921d07c58be38b4b9c1c984229293283a</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.45.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">f1e8b6fc754aad5eba0066a158bc30c189b28fe5d0190e54aeb6073e9faac464</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.45.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.45.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.45.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">fd861601adcc12f81da472cf948564200bc3deee56a32c36ef2079457320fcfd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6570</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-04-06 00:00:00"/>
    <updated date="2026-04-15 08:21:57"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109)
  * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111)
  * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210)
  * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6570" id="RHSA-2026:6570" type="rhsa" title="RHSA-2026:6570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38109" id="CVE-2025-38109" type="cve" title="CVE-2025-38109"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23111" id="CVE-2026-23111" type="cve" title="CVE-2026-23111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23210" id="CVE-2026-23210" type="cve" title="CVE-2026-23210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23231" id="CVE-2026-23231" type="cve" title="CVE-2026-23231"/>
      <reference href="https://bugzilla.redhat.com/2376101" id="2376101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439687" id="2439687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439895" id="2439895" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444376" id="2444376" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-6570.html" id="ALSA-2026:6570" type="self" title="ALSA-2026:6570"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.47.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">146798584141fefe3106df73b6b53b40a552a1a8e3bfe7c110554a085af5c982</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.47.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">1f64c723ec929c257264e5ff096dcfbcebfced2c9c439072b170e31b133d1fcd</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.47.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">24c0b7acaec28ed9ea18450708f5317f470872a1dee496c08c0dddb9b0836f18</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.47.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">508211a97d45536b9ae6eb841fc735cf9243ce716d7404ace79a606900bb9426</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.47.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">6ea6355ee199c3fd0422df872512e66f0948e52489a95b6c745f830cfba1b7d5</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.47.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">6ffe5d3f4317c9de280fa80216e6a4fbe7194617a81c34ba2c9766f512bcb414</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.47.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">7f73962218753d0a46269780709d32c9c619b8728ce647ee0ddbdee20f946430</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.47.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c1924ea27af029345b73fd3111f8d0ba9191f1da7dcf0be7d16db6612628e501</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.47.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c24f018fab87c5a5120eb39e8e0649d21993c52f641a24847fbec73089c6d0b4</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.47.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">cbbfdde8c0f1df6b59604e0c3ab3f5e820ff0cc3d908636a5a01699a204c0e93</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.47.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">ce6db1866e5a162d159ba266c81dd005b2b3a3c2c1280cce65c5ee2d9fa4dbea</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.47.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.47.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.47.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e1baabe842ec06aedb6e8defff4c343eee45c8edbc7da7c151c6a364d50ee76c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8921</id>
    <title>Important: kernel security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-22 10:40:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
  * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8921" id="RHSA-2026:8921" type="rhsa" title="RHSA-2026:8921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39766" id="CVE-2025-39766" type="cve" title="CVE-2025-39766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68741" id="CVE-2025-68741" type="cve" title="CVE-2025-68741"/>
      <reference href="https://bugzilla.redhat.com/2394648" id="2394648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425046" id="2425046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-8921.html" id="ALSA-2026:8921" type="self" title="ALSA-2026:8921"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.49.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">02f7bf4ae8a75bb28174652185eae0ddd1801589f48c79492f127f805ea05504</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.49.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">0ffdad9f5a7fe8372f4832afc740d62f89150ef3863bebf1e18c5f204dbfe0d0</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.49.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4efa7579a4f717c689e0840f032fb8f5582720cf1088d3f9cd6ddd6c503eb52e</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.49.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">55bd5c563f6ad9b1e581fee338bc002fd8342fce5d8add26371c287681d53552</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.49.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">62905e1a1f2ecaedddb94f783e594deea02ac656c557de6adec9b840859a4682</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.49.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">91804548feb3f1e5bd6835dc10b12807f3c09cdb85cf21ee06a0df96746acf04</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.49.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">99405cea775f4026e974ac1ea01301e1dd56582cf400047dbddf18104048b477</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.49.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">b7b6478c2f38a8d7728f65b58643a151a7cadb84bf3995f8a0bedfa7b8513b39</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.49.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c7c95273a48ab14e6a4d25e960c4b6afc05025bbf5d9ea08b412e0acd1605a12</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.49.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d175fd4470754654415955efd0b54771f501fec43a85cd64733e1003481f8d62</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.49.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e7c778b8a6a1fa9a1d72ebabdb65b5df83046886f3a0f6f58e59d76458ea4560</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.49.1.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.1.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.49.1.el9_7.x86_64.rpm</filename>
          <sum type="sha256">f43c98e6c98dbd18d756d133bace38337a4306fabd1aef5559052b870876990b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A002</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-01 00:00:00"/>
    <updated date="2026-05-01 19:09:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2460538" id="show_bug.cgi?id=2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A002.html" id="ALSA-2026:A002" type="self" title="ALSA-2026:A002"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.49.2.el9_7.x86_64.rpm</filename>
          <sum type="sha256">1a5a9954f33cb2594fc6c9d5ecd79e759c2eb66e294d8185dfa5c59dcc35a2ce</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.49.2.el9_7.x86_64.rpm</filename>
          <sum type="sha256">20c3be5207fbebd5a4266807463a95140aad3a992dae0f5802b789b87894cd43</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.49.2.el9_7.x86_64.rpm</filename>
          <sum type="sha256">48b417bb7c2a388d69a684d36374836d24b02fbd553a614e174d1e4fce9437d8</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.49.2.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4cbcfddc523ed99b282cfa49ad94a10087f2f5c9597dd9d411b617ca9544eed7</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.49.2.el9_7.x86_64.rpm</filename>
          <sum type="sha256">55c23e761d82ed77fa4f02c2b2cc36dc2e6557d1834c318588275710c68bbc29</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.49.2.el9_7.x86_64.rpm</filename>
          <sum type="sha256">5d80a8e9b479ef7254dfbb60592a6ae991462ed0f784c7ac7fe1ac61066f917c</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.49.2.el9_7.x86_64.rpm</filename>
          <sum type="sha256">60e770527dd692ce4f6860d11e8e1a8d822a9fe5e3a99bc1f16d1b4b0abd76aa</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.49.2.el9_7.x86_64.rpm</filename>
          <sum type="sha256">808288fa89efbe49f91bd5961011d9fa9864f2919071fea9f3c95954562efda1</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.49.2.el9_7.x86_64.rpm</filename>
          <sum type="sha256">91bed03cee12532bffaee105a233f0610bea9a8e5deb75e4963ab3cb43035a68</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.49.2.el9_7.x86_64.rpm</filename>
          <sum type="sha256">975136f7fed3148e1347bc9c1670a6c0cd4c17413b74bb5ee299a65f0e296df4</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.49.2.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d2fdb202b03083ac515bab9f45959ebe373ce02c1f6aadb4dd6f316c2a524ba5</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.49.2.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.49.2.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.49.2.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d66393ba01062038a25ad45cb3a00649beb45ac5350e823ac9c87268e669af0e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A005</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-08 00:00:00"/>
    <updated date="2026-05-08 14:26:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2467771" id="show_bug.cgi?id=2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A005.html" id="ALSA-2026:A005" type="self" title="ALSA-2026:A005"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.54.3.el9_7.x86_64.rpm</filename>
          <sum type="sha256">0577672fc463d01208bd640b291ad97559a14816c4c330c7ae5485f39c9a9e04</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.54.3.el9_7.x86_64.rpm</filename>
          <sum type="sha256">10f843db5c2a2455f6c1e76114fd6ec2390c5e60cfd43369e9d566367f92596c</sum>
        </package>
        <package name="kernel-rt-core" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.54.3.el9_7.x86_64.rpm</filename>
          <sum type="sha256">15f679f1c0b539d12623d236b9d2f8104deac1e1c2282872e561a138a9f34eb0</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.54.3.el9_7.x86_64.rpm</filename>
          <sum type="sha256">1895a54fa641adcb49624ec98e139541cedf8dde540c2a222b5a99c646236fc3</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.54.3.el9_7.x86_64.rpm</filename>
          <sum type="sha256">1b620529586749a6f1e2f37cb3f116d1fd56fd312bbb8fa77cce540a31faae04</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.54.3.el9_7.x86_64.rpm</filename>
          <sum type="sha256">3753f6c4cddf2e78ea52be785fff29a68712ec6269624f3be57c307e266ab4fc</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.54.3.el9_7.x86_64.rpm</filename>
          <sum type="sha256">3e424f2a966aed0718ef5e82c9fbbd2ffda7ea06df7c9f44ba93635b8681cdcf</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.54.3.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4403cf102985bef727838a801a759cfd336a8c1355110aa0ba718f62da72fb1d</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.54.3.el9_7.x86_64.rpm</filename>
          <sum type="sha256">89e314254ae8690422b01ffeef12c6b3d0f55d7664934e3f668b50bc30a01a0b</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.54.3.el9_7.x86_64.rpm</filename>
          <sum type="sha256">935e00866d475d14d0da2c9f6936240573a7617b38ba623c0c05a0459bd6b34c</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.54.3.el9_7.x86_64.rpm</filename>
          <sum type="sha256">c203b35159152a063e434c688fe94834ed7cf21fafb475fb07f027a196aac1b2</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.54.3.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.3.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.54.3.el9_7.x86_64.rpm</filename>
          <sum type="sha256">d24d03cebdc21eadaadf13ea986de30e0e1c8697202d301748cfe46d4c9f8940</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A009</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-16 00:00:00"/>
    <updated date="2026-05-16 13:09:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):
  * kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300)
  * kernel: ptrace: require CAP_SYS_PTRACE when task has no mm (CVE-2026-46333)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46300" id="CVE-2026-46300" type="cve" title="CVE-2026-46300"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-46333" id="CVE-2026-46333" type="cve" title="CVE-2026-46333"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2477015" id="show_bug.cgi?id=2477015" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2477802" id="show_bug.cgi?id=2477802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/9/ALSA-2026-A009.html" id="ALSA-2026:A009" type="self" title="ALSA-2026:A009"/>
    </references>
    <pkglist>
      <collection short="almalinux-9-for-x86_64-rt-rpms__9_7_default">
        <name>almalinux-9-for-x86_64-rt-rpms__9_7_default</name>
        <package name="kernel-rt-core" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-rt-core-5.14.0-611.54.6.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4fc39cb5b9d6631cbea4fdc399aa69ec5757c9422ee34549464d1bafa2221a9a</sum>
        </package>
        <package name="kernel-rt-debug-modules" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-5.14.0-611.54.6.el9_7.x86_64.rpm</filename>
          <sum type="sha256">4fde86595c47c30a8e94ee7c50bbccecaf58dea0ead7fa67abec0e2ae8a75e5e</sum>
        </package>
        <package name="kernel-rt" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-rt-5.14.0-611.54.6.el9_7.x86_64.rpm</filename>
          <sum type="sha256">59e9fa3069054bff3cce831226ceaa90a9403c324e993febad07c58a2252a444</sum>
        </package>
        <package name="kernel-rt-debug-devel" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-rt-debug-devel-5.14.0-611.54.6.el9_7.x86_64.rpm</filename>
          <sum type="sha256">6525a448d4190b18ec6e3eff79b1026074d9833a4d396debb01a1257fc4f90e7</sum>
        </package>
        <package name="kernel-rt-devel" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-rt-devel-5.14.0-611.54.6.el9_7.x86_64.rpm</filename>
          <sum type="sha256">6604037aa58597266cab0552b2f5b8b9b806a9cc6ee521e3c005f150897ba503</sum>
        </package>
        <package name="kernel-rt-modules-extra" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-rt-modules-extra-5.14.0-611.54.6.el9_7.x86_64.rpm</filename>
          <sum type="sha256">839f3d4e41ed90aedf43506b392b04ed599fb4eeefc38896a253e778df2777c7</sum>
        </package>
        <package name="kernel-rt-debug-modules-core" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-core-5.14.0-611.54.6.el9_7.x86_64.rpm</filename>
          <sum type="sha256">a0c5f2df04ed479f74bc966564f29b40cc1e3735cdc622e15b17d9a715374e4f</sum>
        </package>
        <package name="kernel-rt-debug-core" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-rt-debug-core-5.14.0-611.54.6.el9_7.x86_64.rpm</filename>
          <sum type="sha256">bb9b07a05c645cb80d2396b74ab24621e94036a2fa71c3242fec5f0d6a8c8094</sum>
        </package>
        <package name="kernel-rt-debug" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-rt-debug-5.14.0-611.54.6.el9_7.x86_64.rpm</filename>
          <sum type="sha256">be391b2dc75f510b31a7661fcd0d32122fd0bd02013de61b4f047787b222e229</sum>
        </package>
        <package name="kernel-rt-debug-modules-extra" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-rt-debug-modules-extra-5.14.0-611.54.6.el9_7.x86_64.rpm</filename>
          <sum type="sha256">dc6953fe67004a4958ede076a297d8c32fab8928f400237b7ece98e48bdfb1d3</sum>
        </package>
        <package name="kernel-rt-modules" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-rt-modules-5.14.0-611.54.6.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e227684727053ae50a04d95acd7ba860d8d4f3ab9b999618abd4b24fa5bae315</sum>
        </package>
        <package name="kernel-rt-modules-core" version="5.14.0" release="611.54.6.el9_7" epoch="0" arch="x86_64" src="kernel-5.14.0-611.54.6.el9_7.src.rpm">
          <filename>kernel-rt-modules-core-5.14.0-611.54.6.el9_7.x86_64.rpm</filename>
          <sum type="sha256">e95d027caffa3fa0daa59b048b76d6d170e40bb1a70c5a800fe02d42489ad71e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>