Hi, You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux. AlmaLinux: 8 Type: Security Severity: Moderate Release date: 2026-11-12 Summary: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: drm/amdkfd: hold event_mutex while checkpointing CRIU events (CVE-2026-74446) * kernel: drm/amdkfd: fix SMI event cross-process information leak (CVE-2026-97422) * kernel: drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (CVE-2026-97427) * kernel: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (CVE-2026-97497) * kernel: drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (CVE-2026-97494) * kernel: drm/amdkfd: Check bounds on allocate_doorbell (CVE-2026-97495) * kernel: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS (CVE-2026-97493) * kernel: drm/amdgpu: fix buffer overflow during vBIOS update (CVE-2026-97425) * kernel: net/smc: protect clcsock lifetime in smc_getname (CVE-2026-99032) * kernel: kernel: Denial of Service via use-after-free race condition in SCSI tape driver (CVE-2026-99156) Bug Fix(es) and Enhancement(s): * soft lockup occurs during iomap_finish_ioends (JIRA:RHEL-258946) * gfs2: BUG during withdraw [AlmaLinux-8] (JIRA:RHEL-298310) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Full details, updated packages, references, and other related information: https://errata.almalinux.org/8/ALSA-2026-99031.html This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/. Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org. Kind regards, AlmaLinux Team