# AlmaLinux kernel update
AlmaLinux10.1 kernel has two major vulnerabilities that must be fixed by installing updated kernel.
 - Copy Fail (CVE-2026-31431)
 - Dirty Frag (CVE-2026-43284, CVE-2026-43500)
 - Fragnesia (CVE-2026-46300)
 - ssh-keysign-pwn (CVE-2026-46333)

## 1.1 Online installation
If the server is able to connect internet, kernel update can be installed from AlmaLinux repositories.
As admin user run commands:
  sudo dnf clean metadata && sudo dnf update kernel kernel-devel
  reboot
If the reboot is rejected, wait few minutes until the akmod has finished building the new kernel modules, and try reboot command again.

## 1.2 Offline installation
Copy the installation packages provided to the admin home directory.
As admin user run command:
  sudo dnf clean metadata && sudo dnf update ./*rpm --disablerepo="*"
  reboot
If the reboot is rejected, wait few minutes until the akmod has finished building the new kernel modules, and try reboot command again.

## 1.3 Post installation steps
After reboot, login to admin account and run command:
  sudo akmods --rebuild --force

Check that RDA kernel module is loaded:
  lsmod | grep rda

Remove offline installation files:
  cd /home/admin/
  rm -rf AlmaLinux10.1-kernel-update*