Blog on AlmaLinux

A new Linux kernel local-privilege-escalation flaw has been disclosed, and we are shipping patched kernels for it. GhostLock (CVE-2026-43499) is a use-after-free in the kernel’s real-time mutex (rtmutex) priority-inheritance code. An unprivileged local us...

We are shipping patched kernels for two serious Linux kernel vulnerabilities and would like your help verifying them before they go to production. The first, Januscape (CVE-2026-53359), is a flaw in KVM/x86 with several distinct impacts. ...

A new Linux kernel local-privilege-escalation flaw has been disclosed in the IPv6 fragmentation code, and it is serious: an unprivileged user inside a container can use it to escape to a root shell on the host. There is no CVE assigned yet, so for now we are referring to it as IPV6_FRAG_ESCAPE, the name its proof-of-concept uses. Only

We announced earlier today that AlmaLinux OS 9.2 is now certified under Common Criteria, the international standard (ISO/IEC 15408) for independently evaluating the security of IT products.

I keep coming back to how big this is for a community project. AlmaLinux is a communi...

The schedule is live, the speakers are confirmed, and I’m genuinely excited to finally show you what the day looks like.

We’re gathering Saturday, July 18, 2026 at the E-Central Downtown Los Angeles Hotel, the day before SIGGRAPH. Registration is open, it’...