Critical Kernel Security Update for AlmaLinux: Important Vulnerabilities in Kernel Packages
Summary
ALSA-2026:A010: Important: kernel security update. Affects kernel versions < 6.12.0-124.56.5.el10_1. Fixed in 6.12.0-124.56.5.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel is the core component of any Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. AlmaLinux, a popular open-source Linux distribution, relies on the kernel for stability and performance. This vulnerability affects various kernel packages in AlmaLinux 10, potentially compromising system security and integrity.
Vulnerability Detail
This vulnerability arises from two critical issues: the first involves the propagation of the shared-frag marker through frag-transfer helpers, which could lead to unauthorized access or manipulation of network packets (CVE-2026-46300). The second issue pertains to ptrace requiring CAP_SYS_PTRACE when a task has no memory management (CVE-2026-46333), which could allow malicious processes to gain elevated privileges and compromise system security. Both vulnerabilities can have severe ramifications, including unauthorized data access and system instability.
How To Fix
Minimum fixed version
6.12.0-124.56.5.el10_1
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected kernel features by adjusting system permissions and configurations. However, this is not a permanent solution and updating the kernel is strongly recommended.
Conclusion
In summary, the recent kernel security update for AlmaLinux addresses critical vulnerabilities that could compromise system security. It is crucial for users to update their kernel packages to the patched version to mitigate these risks effectively.
See every vulnerability recorded for kernel →
FAQ
The update addresses two main vulnerabilities: CVE-2026-46300, which involves the propagation of the shared-frag marker, and CVE-2026-46333, which relates to ptrace requiring CAP_SYS_PTRACE.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. By using the Vulert playground, you can check if your application is affected without any signup.
If an immediate update is not possible, consider implementing temporary workarounds to limit access to the affected features while planning for an update.
Generally, kernel updates are designed to maintain compatibility with existing applications. However, it is advisable to test critical applications after the update to ensure they function as expected.
For detailed information, refer to the CVE pages for CVE-2026-46300 and CVE-2026-46333, as well as the official AlmaLinux advisories.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
