# ALSA-2023:5091: Security update for 14 packages ALSA-2023:5091, released September 12, 2023, fixes 10 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/alsa-2023-5091 - Platform: Linux - Released: Sep 12, 2023 - Priority: High (Closes CVE-2023-20593, high severity) - CVEs: 10, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/ALSA-2023:5091 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-core](https://patchblox.com/security/data/product/linux/kernel-rt-core.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-core.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-debug-devel.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-debug-kvm](https://patchblox.com/security/data/product/linux/kernel-rt-debug-kvm.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-core.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-extra.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-devel](https://patchblox.com/security/data/product/linux/kernel-rt-devel.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-kvm](https://patchblox.com/security/data/product/linux/kernel-rt-kvm.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-modules](https://patchblox.com/security/data/product/linux/kernel-rt-modules.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-modules-core.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | | [kernel-rt-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-modules-extra.md) | almalinux 9 | 5.14.0-284.30.1.rt14.315.el9_2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2023-20593](https://patchblox.com/security/data/cve/CVE-2023-20593.md) | High | amd64-microcode: An issue in “Zen 2” CPUs, under specific microarchitectural circumstances,may allow an attacker to potentially access... | 7.8 | 0.0507 | | | [CVE-2023-31248](https://patchblox.com/security/data/cve/CVE-2023-31248.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0189 | | | [CVE-2023-35001](https://patchblox.com/security/data/cve/CVE-2023-35001.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... | 7.8 | 0.0154 | | | [CVE-2023-4004](https://patchblox.com/security/data/cve/CVE-2023-4004.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... | 7.8 | 0.0092 | | | [CVE-2023-3390](https://patchblox.com/security/data/cve/CVE-2023-3390.md) | High | linux: A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c | 7.8 | 0.0091 | | | [CVE-2023-4147](https://patchblox.com/security/data/cve/CVE-2023-4147.md) | High | linux: A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID | 7.8 | 0.0055 | | | [CVE-2023-3776](https://patchblox.com/security/data/cve/CVE-2023-3776.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... | 7.8 | 0.0051 | | | [CVE-2023-3610](https://patchblox.com/security/data/cve/CVE-2023-3610.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 7.8 | 0.0025 | | | [CVE-2023-21102](https://patchblox.com/security/data/cve/CVE-2023-21102.md) | High | kernel-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 7.8 | 0.0018 | | | [CVE-2023-1637](https://patchblox.com/security/data/cve/CVE-2023-1637.md) | Routine | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... | 5.5 | 0.0022 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo