New CVEs in Linux Kernel: CVE-2026-53359, CVE-2026-46242, CVE-2026-43499

[cyberspace]

It is time to update the servers and reboot

https://almalinux.org/blog/2026-07-09-ghostlock/
https://almalinux.org/blog/2026-07-06-januscape-bad-epoll/

[overseer]

Let the summer of AI fuzzing continue!

[cgauthey]

In my case, when I update the server, it prevents startup with the CWP secure kernel.

[cyberspace]

What version of OS do you use ? Alamlinux 8/9, something else ?

Run:

Code Select Expand

uname -r
when the server is booted with secure kernel and show output.

[cgauthey]

Distro Name: AlmaLinux release 8.10 (Cerulean Leopard)
Kernel Version: 4.18.0-553.92.1.el8_10.x86_64
Platform: x86_64

[cyberspace]

CWP Secure Kernel is a regular linux kernel with a security addon. The security addon is Tomoyo:
https://tomoyo.sourceforge.net/
The linux kernel doesn't include the security addon Tomoyo by default. The kernel must be recompiled with the Tomoyo enabled. That is why the security enhancements don't  start when you boot the server using the update kernel.

However, I think CWP Secure Kernel should protect your from such vulnerabilities. It should not allow to run suspicious executable files/binaries, etc. Anyway, it is better to get confirmation from CWP Secure Kernel developers or check the Tomoyo rules if you understand Tomoyo )