# AlmaLinux kernel update
AlmaLinux 9.4, 9.6 and 9.7 kernel has two major vulnerabilities that must be fixed by installing updated kernel.
 - Copy Fail (CVE-2026-31431)
 - Dirty Frag (CVE-2026-43284, CVE-2026-43500)
 - Fragnesia (CVE-2026-46300)
 - ssh-keysign-pwn (CVE-2026-46333)

=====================================================================
NOTE! If you have IRIS/RDA version 10.1.x installed
update to IRIS/RDA 10.2.1 or newer before updating kernel modules.
=====================================================================

## 1.1 Online installation
If the server is able to connect internet, kernel update can be installed from AlmaLinux repositories.
As admin user run commands:
  sudo dnf clean metadata && sudo dnf update kernel kernel-devel kernel-devel-matched
  reboot
If the reboot is rejected, wait few minutes until the akmod has finished building the new kernel modules, and try reboot command again.

## 1.2 Offline installation
Copy and unpack the installation packages provided to the admin home directory.
As admin user run command:
  tar xzvf AlmaLinux9-kernel-update.tgz
  cd AlmaLinux9-kernel-update
  sudo dnf clean metadata && sudo dnf update ./*rpm --disablerepo="*"
  reboot
If the reboot is rejected, wait few minutes until the akmod has finished building the new kernel modules, and try reboot command again.

## 1.3 Post installation steps
After reboot, login to admin account and run command:
  qiris
  qant
  sudo dnf remove "kmod-kvaser*" "kmod-rda*" "kmod-linux-gpib*" "kmod-nrp*" --noautoremove
  sudo akmods --force
Check that RDA kernel module is loaded:
  lsmod | grep rda

## 1.4 Remove old kernel
AlmaLinux 9.6 installations has small boot partition. It's good to free some space by removing old kernel.
  sudo dnf remove kernel-core-5.14.0-570* --noautoremove

With other AlmaLinux versions, you can remove old kernels similarly if desired.

Remove offline installation files:
  cd /home/admin/
  rm -rf AlmaLinux9-kernel-update*