PwnEscape (CVE-2026-99999) is a flaw in the Linux kernel's networking stack that lets a malicious virtual machine leak host memory, crash the host, and, in the researcher's lab, run code as root on the host. Patched kernels for AlmaLinux 8, 9, and 10 are in the testing repository now. Help us verify them before they go to production.

We've renamed the Marketing SIG to the Promo SIG. The work and the people aren't changing, so here's what we do, why we picked the new name, and how you can help.

We're planning the next two to three years of AlmaLinux, and we want to hear what you need from us. Take our five-minute survey and tell us.

atomic-ci v13 brings the Atomic SIG's images up to date with the latest bootc tooling, adds aarch64 ISOs, and lets you try an image in a live session before you install it.

It’s official: please join us in welcoming Tristan Théroux and Muuhh (Munehiro) Ikeda to the AlmaLinux OS Foundation board!

Software certification is live, a hardware certification run now takes under 10 minutes, and we're proud to announce our brand new AlmaLinux Certification Catalog at catalog.almalinux.org.

AlmaLinux 9.9 Beta "Chartreuse Bobcat" is now available for x86_64, aarch64, ppc64le, and s390x. GCC Toolset 16 lands in Enterprise Linux 9, Node.js 26 and PHP 8.4 arrive as new module streams, and fapolicyd reaches 2.0. Help us test it before the stable release.

Nominations have closed and we have our ballot: two candidates for the two open Cohort A seats, and voting opens today. Meet Muuhh Ikeda and Tristan Theroux, and see why your vote still matters.

AlmaLinux 10.3 Beta "Mauve Lion" is now available for x86_64, x86_64_v2, i686, aarch64, ppc64le, and s390x. ModSecurity and the OWASP Core Rule Set return to Enterprise Linux 10, Podman 6 moves container configuration out of /etc, and GCC Toolset 16, Node.js 26 and a .NET 11 preview arrive. Help us test it before the stable release.

Know someone who should help steer AlmaLinux? Nominations open today and close September 8. Here's what the role involves and how to put a name forward.

AlmaLinux Day: LA brought together a group of animation studios and VFX houses, with the cloud and silicon vendors that support them. Here's how the day went, and how the following week at SIGGRAPH went, where we showed AlmaLinux running across a range of Lenovo and AMD hardware.

The Microsoft UEFI Secure Boot certificates from 2011 have expired. Here's why your AlmaLinux systems will keep booting, and how to prepare for future shim updates.

GhostLock (CVE-2026-43499) is a use-after-free in the kernel's real-time mutex code that lets an unprivileged local user escalate to root and escape containers. It has been present since 2011 and affects every supported AlmaLinux release. Patched kernels are in the testing repository now — please help us verify them.

We are shipping patched kernels for two serious flaws: Januscape (CVE-2026-53359), a KVM/x86 guest-to-host escape that gives an attacker root on the host, and Bad Epoll (CVE-2026-46242), a local privilege escalation. Januscape affects every AlmaLinux release; Bad Epoll affects AlmaLinux 9 and 10. Patched kernels are in the testing repository now — please help us verify them.

A newly disclosed Linux kernel flaw in the IPv6 fragmentation path lets an unprivileged user inside a container escape to root on the host. It only affects AlmaLinux 10 and Kitten 10, and there is no CVE yet. A patched kernel for AlmaLinux 10 is in the testing repository now (Kitten's fix is coming in the next update). If you run containers or any multi-tenant workload, help us verify it.