# AlmaLinux kernel update
AlmaLinux 9.4, 9.6, 9.7, 9.8 kernel has major vulnerabilities that must be fixed by installing updated kernel.
This patch fixes all previously found vulnerabilities, and latest known issues like:
- GhostLock (CVE-2026-43499)
- Januscape (CVE-2026-53359)
- Bad Epoll (CVE-2026-46242)
- IPv6 Frag Escape (CVE-2026-53362)

=====================================================================
NOTE! If you have IRIS/RDA version 10.1.x installed
update to IRIS/RDA 10.2.1 or newer before updating kernel modules.
=====================================================================

## 1.1 Online installation
If the server is able to connect internet, kernel update can be installed from AlmaLinux repositories.
As admin user run commands:
  sudo dnf clean metadata && sudo dnf update kernel kernel-devel kernel-devel-matched
  reboot
If the reboot is rejected, wait few minutes until the akmod has finished building the new kernel modules, and try reboot command again.

## 1.2 Offline installation
Copy and unpack the installation packages provided to the admin home directory.
As admin user run command:
  tar xzvf AlmaLinux9-kernel-update-2026-08.tgz
  cd AlmaLinux9-kernel-update-2026-08
  sudo dnf clean metadata && sudo dnf update ./*rpm --disablerepo="*"
  reboot
If the reboot is rejected, wait few minutes until the akmod has finished building the new kernel modules, and try reboot command again.

## 1.3 Post installation steps
After reboot, login to admin account and run command:
  qiris
  qant
  sudo dnf remove "kmod-kvaser*" "kmod-rda*" "kmod-linux-gpib*" "kmod-nrp*" --noautoremove
  sudo akmods --force
Check that RDA kernel module is loaded:
  lsmod | grep rda

## 1.4 Remove old kernel
AlmaLinux 9.6 installations has small boot partition. It's good to free some space by removing old kernel.
  sudo dnf remove kernel-core-5.14.0-570* --noautoremove

With other AlmaLinux versions, you can remove old kernels similarly if desired.

Remove offline installation files:
  cd /home/admin/
  rm -rf AlmaLinux9-kernel-update*