# AlmaLinux kernel update
AlmaLinux10.2 kernel has major vulnerabilities that must be fixed by installing updated kernel.
This patch applies to Almalinux 10.1 and 10.2 and fixes all previously found vulnerabilities, and latest known issues like:
- GhostLock (CVE-2026-43499)
- Januscape (CVE-2026-53359)
- Bad Epoll (CVE-2026-46242)
- IPv6 Frag Escape (CVE-2026-53362)

## 1.1 Online installation
If the server is able to connect internet, kernel update can be installed from AlmaLinux repositories.
As admin user run commands:
  sudo dnf clean metadata && sudo dnf update kernel kernel-devel kernel-devel-matched
  reboot
If the reboot is rejected, wait few minutes until the akmod has finished building the new kernel modules, and try reboot command again.

## 1.2 Offline installation
Copy the installation packages provided to the admin home directory.
As admin user run command:
  tar xzvf AlmaLinux10-kernel-update-2026-08.tgz
  cd AlmaLinux10-kernel-update-2026-08
  sudo dnf clean metadata && sudo dnf update ./*rpm --disablerepo="*"
  reboot
If the reboot is rejected, wait few minutes until the akmod has finished building the new kernel modules, and try reboot command again.

## 1.3 Post installation steps
After reboot, login to admin account and run command:
  sudo akmods --rebuild --force

Check that RDA kernel module is loaded:
  lsmod | grep rda

Remove offline installation files:
  cd /home/admin/
  rm -rf AlmaLinux10-kernel-update*