The +4012+cd64a238 tail on an AlmaLinux module package is a build index plus a module-identity hash, not a patch counter. Verify scanner findings against the vendor advisory and the full installed package identity.