Mention userns mitigation and Alma Linux updates.

Signed-off-by: Kurt Garloff <kurt@garloff.de>

Author: garloff

blog/2026-05-10-kernel-root-exploits.md

@@ -166,8 +166,10 @@ install rxrpc /bin/false
 
 Note that these workarounds prevent IPsec from working.
 
-Update 2026-05-15: This mitigation helps against Fragnesia as well; while a patch
+Update 2026-05-15: This mitigation helps against Fragnesia as well; AppArmor preventing
+unprivileged user namespaces (ubuntu) also helps. While a patch
 for Fragnesia was proposed, a fix has not been merged into the upstream kernel yet.
+Alma Linux has gone ahead and published a fixed kernel anyhow (for testing).
 
 Update 2026-05-15: The stable kernels 7.0.8, 6.18.31, 6.12.89, 6.6.139, 5.15.207, and
 5.10.256 contain a fix for the ptrace vulnerability (CVE-2026-46333 aka ssh-keysign-pwn).