-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security]  kernel (SSA:2026-152-01)

New kernel packages are available for Slackware 15.0 and -current to fix
security issues.


Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/linux-5.15.209/kernel-generic-5.15.209-i586-1.txz:  Upgraded.
  This update fixes security issues:
  rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
  rxrpc: Fix anonymous key handling
  rxrpc: only handle RESPONSE during service challenge
  rxrpc: Fix recvmsg() unconditional requeue
  rxrpc: reject undecryptable rxkad response tickets
  rxrpc: Fix call removal to use RCU safe deletion
  rxrpc: Fix key quota calculation for multitoken keys
  rxrpc: proc: size address buffers for %pISpc output
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-31696
    https://www.cve.org/CVERecord?id=CVE-2026-31676
    https://www.cve.org/CVERecord?id=CVE-2026-23066
    https://www.cve.org/CVERecord?id=CVE-2026-31637
    https://www.cve.org/CVERecord?id=CVE-2026-31642
    https://www.cve.org/CVERecord?id=CVE-2026-31630
  (* Security fix *)
patches/packages/linux-5.15.209/kernel-generic-smp-5.15.209_smp-i686-1.txz:  Upgraded.
  This update fixes security issues:
  rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
  rxrpc: Fix anonymous key handling
  rxrpc: only handle RESPONSE during service challenge
  rxrpc: Fix recvmsg() unconditional requeue
  rxrpc: reject undecryptable rxkad response tickets
  rxrpc: Fix call removal to use RCU safe deletion
  rxrpc: Fix key quota calculation for multitoken keys
  rxrpc: proc: size address buffers for %pISpc output
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-31696
    https://www.cve.org/CVERecord?id=CVE-2026-31676
    https://www.cve.org/CVERecord?id=CVE-2026-23066
    https://www.cve.org/CVERecord?id=CVE-2026-31637
    https://www.cve.org/CVERecord?id=CVE-2026-31642
    https://www.cve.org/CVERecord?id=CVE-2026-31630
  (* Security fix *)
patches/packages/linux-5.15.209/kernel-headers-5.15.209_smp-x86-1.txz:  Upgraded.
patches/packages/linux-5.15.209/kernel-huge-5.15.209-i586-1.txz:  Upgraded.
  This update fixes security issues:
  rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
  rxrpc: Fix anonymous key handling
  rxrpc: only handle RESPONSE during service challenge
  rxrpc: Fix recvmsg() unconditional requeue
  rxrpc: reject undecryptable rxkad response tickets
  rxrpc: Fix call removal to use RCU safe deletion
  rxrpc: Fix key quota calculation for multitoken keys
  rxrpc: proc: size address buffers for %pISpc output
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-31696
    https://www.cve.org/CVERecord?id=CVE-2026-31676
    https://www.cve.org/CVERecord?id=CVE-2026-23066
    https://www.cve.org/CVERecord?id=CVE-2026-31637
    https://www.cve.org/CVERecord?id=CVE-2026-31642
    https://www.cve.org/CVERecord?id=CVE-2026-31630
  (* Security fix *)
patches/packages/linux-5.15.209/kernel-huge-smp-5.15.209_smp-i686-1.txz:  Upgraded.
  This update fixes security issues:
  rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
  rxrpc: Fix anonymous key handling
  rxrpc: only handle RESPONSE during service challenge
  rxrpc: Fix recvmsg() unconditional requeue
  rxrpc: reject undecryptable rxkad response tickets
  rxrpc: Fix call removal to use RCU safe deletion
  rxrpc: Fix key quota calculation for multitoken keys
  rxrpc: proc: size address buffers for %pISpc output
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2026-31696
    https://www.cve.org/CVERecord?id=CVE-2026-31676
    https://www.cve.org/CVERecord?id=CVE-2026-23066
    https://www.cve.org/CVERecord?id=CVE-2026-31637
    https://www.cve.org/CVERecord?id=CVE-2026-31642
    https://www.cve.org/CVERecord?id=CVE-2026-31630
  (* Security fix *)
patches/packages/linux-5.15.209/kernel-modules-5.15.209-i586-1.txz:  Upgraded.
patches/packages/linux-5.15.209/kernel-modules-smp-5.15.209_smp-i686-1.txz:  Upgraded.
patches/packages/linux-5.15.209/kernel-source-5.15.209_smp-noarch-1.txz:  Upgraded.
  Be sure to upgrade your initrd after upgrading the kernel packages.
  If you use lilo to boot your machine, be sure lilo.conf points to the correct
  kernel and initrd and run lilo as root to update the bootloader.
  If you use elilo to boot your machine, you should run eliloconfig to copy the
  kernel and initrd to the EFI System Partition.
+--------------------------+


Where to find the new packages:
+-----------------------------+

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated packages for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/linux-5.15.209/kernel-generic-5.15.209-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/linux-5.15.209/kernel-generic-smp-5.15.209_smp-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/linux-5.15.209/kernel-headers-5.15.209_smp-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/linux-5.15.209/kernel-huge-5.15.209-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/linux-5.15.209/kernel-huge-smp-5.15.209_smp-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/linux-5.15.209/kernel-modules-5.15.209-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/linux-5.15.209/kernel-modules-smp-5.15.209_smp-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/linux-5.15.209/kernel-source-5.15.209_smp-noarch-1.txz

Updated packages for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/linux-5.15.209/kernel-generic-5.15.209-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/linux-5.15.209/kernel-headers-5.15.209-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/linux-5.15.209/kernel-huge-5.15.209-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/linux-5.15.209/kernel-modules-5.15.209-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/linux-5.15.209/kernel-source-5.15.209-noarch-1.txz

Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-generic-6.12.92-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-headers-6.12.92-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/kernel-source-6.12.92-noarch-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/testing/packages/linux-6.18.x/kernel-generic-6.18.34-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/testing/packages/linux-6.18.x/kernel-headers-6.18.34-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/testing/packages/linux-6.18.x/kernel-source-6.18.34-noarch-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/testing/packages/linux-7.0.x/kernel-generic-7.0.11-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/testing/packages/linux-7.0.x/kernel-headers-7.0.11-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/testing/packages/linux-7.0.x/kernel-source-7.0.11-noarch-1.txz

Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/kernel-generic-6.18.34-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/kernel-headers-6.18.34-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/kernel-source-6.18.34-noarch-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/testing/packages/linux-7.0.x/kernel-generic-7.0.11-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/testing/packages/linux-7.0.x/kernel-headers-7.0.11-x86-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/testing/packages/linux-7.0.x/kernel-source-7.0.11-noarch-1.txz


MD5 signatures:
+-------------+

Slackware 15.0 packages:
0087a3143a15048e6ba145f2a084191d  kernel-generic-5.15.209-i586-1.txz
61b381a97c64d49ae6df95c218749380  kernel-generic-smp-5.15.209_smp-i686-1.txz
5619040f39e7e941b5496c54cf7cbee6  kernel-headers-5.15.209_smp-x86-1.txz
4ca45f7cc6ca2f3ba83a0ecb95a8a8a6  kernel-huge-5.15.209-i586-1.txz
b83be05421f475a23ef8f03bdeda5f78  kernel-huge-smp-5.15.209_smp-i686-1.txz
4a10e71a859bb91d2afecad49d115cf1  kernel-modules-5.15.209-i586-1.txz
e6c5e1f1aa0f6065c9b291b28040970d  kernel-modules-smp-5.15.209_smp-i686-1.txz
30f9fa767297bca0150fdb6fd09ed842  kernel-source-5.15.209_smp-noarch-1.txz

Slackware x86_64 15.0 packages:
a4dfa657205a1604a7304375dcc447ef  kernel-generic-5.15.209-x86_64-1.txz
ec28794ae0823c076bb446fb92056e88  kernel-headers-5.15.209-x86-1.txz
af313da2ce014d5696164f7a900afb61  kernel-huge-5.15.209-x86_64-1.txz
79dab68b6ff91292360784a89a275512  kernel-modules-5.15.209-x86_64-1.txz
d21fb99c8a00aeee290c1dec6050d783  kernel-source-5.15.209-noarch-1.txz

Slackware -current packages:
1e786beda07ffc5e75865efb27eda603  kernel-firmware-20260529_d953ad8-noarch-1.txz
e3e59a5f0ca8fdcbea2b35580c14fef1  kernel-generic-6.12.92-i686-1.txz
2e86867ab7888573637062568a89236a  kernel-headers-6.12.92-x86-1.txz
1ea8aeaaa7a1fd5438d06be1ce82de69  kernel-source-6.12.92-noarch-1.txz
0da6557abf8fc3a4672ffa0d4e29b704  kernel-generic-6.18.34-i686-1.txz
a1c2fda540370f8641fe411158673ff2  kernel-headers-6.18.34-x86-1.txz
89dcca6a8f587653b131e344e8f292a8  kernel-source-6.18.34-noarch-1.txz
4d69cd5a69cf01010b2c703e19215802  kernel-generic-7.0.11-i686-1.txz
1c194dfcbd015aa8b21c3e8b9acf385b  kernel-headers-7.0.11-x86-1.txz
d804983f50a917f0d302fb3e5d1996ef  kernel-source-7.0.11-noarch-1.txz

Slackware x86_64 -current packages:
1e786beda07ffc5e75865efb27eda603  kernel-firmware-20260529_d953ad8-noarch-1.txz
58878534d2b789e986f521f960605856  kernel-generic-6.18.34-x86_64-1.txz
04867dfa23926a9d626a9731a1beb035  kernel-headers-6.18.34-x86-1.txz
21cfe4f290df8d8bd87cbd4c66024d60  kernel-source-6.18.34-noarch-1.txz
f66140c36afa287308d6f56def01e64b  kernel-generic-7.0.11-x86_64-1.txz
e00d3dfdf5e137dfb8d83b4c19313cad  kernel-headers-7.0.11-x86-1.txz
2018ef751d6873adc9c4ff06810d2f68  kernel-source-7.0.11-noarch-1.txz


Installation instructions:
+------------------------+

Upgrade the packages as root:
# upgradepkg kernel-*.txz

If you are using an initrd, you'll need to rebuild it.

For a 32-bit SMP machine, use this command (substitute the appropriate
kernel version if you are not running Slackware 15.0):
# /usr/share/mkinitrd/mkinitrd_command_generator.sh -k 5.15.209-smp | bash

For a 64-bit machine, or a 32-bit uniprocessor machine, use this command
(substitute the appropriate kernel version if you are not running
Slackware 15.0):
# /usr/share/mkinitrd/mkinitrd_command_generator.sh -k 5.15.209 | bash

Please note that "uniprocessor" has to do with the kernel you are running,
not with the CPU. Most systems should run the SMP kernel (if they can)
regardless of the number of cores the CPU has. If you aren't sure which
kernel you are running, run "uname -a". If you see SMP there, you are
running the SMP kernel and should use the 5.15.209-smp version when running
mkinitrd_command_generator. Note that this is only for 32-bit -- 64-bit
systems should always use 5.15.209 as the version.

If you are using lilo or elilo to boot the machine, you'll need to ensure
that the machine is properly prepared before rebooting.

If using LILO:
By default, lilo.conf contains an image= line that references a symlink
that always points to the correct kernel. No editing should be required
unless your machine uses a custom lilo.conf. If that is the case, be sure
that the image= line references the correct kernel file.  Either way,
you'll need to run "lilo" as root to reinstall the boot loader.

If using elilo:
Ensure that the /boot/vmlinuz symlink is pointing to the kernel you wish
to use, and then run eliloconfig to update the EFI System Partition.


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com

+------------------------------------------------------------------------+
| To leave the slackware-security mailing list:                          |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message:                                                     |
|                                                                        |
|   unsubscribe slackware-security                                       |
|                                                                        |
| You will get a confirmation message back containing instructions to    |
| complete the process.  Please do not reply to this email address.      |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----

iHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCah5BXRsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjPK6gCfXMbtQrxzQxEz/DLmLast
3jGCMgoAn3FDKhMds7zd/HIDsYAFVvXu5IIW
=DCsO
-----END PGP SIGNATURE-----