# ALSA-2024:1607: Security update for 24 packages ALSA-2024:1607, released April 2, 2024, fixes 7 CVEs across 24 products. One of them is being exploited (CVE-2024-1086); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/alsa-2024-1607 - Platform: Linux - Released: Apr 2, 2024 - Priority: Patch now (Closes CVE-2024-1086, exploited (CISA KEV, ransomware)) - CVEs: 7, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://osv.dev/vulnerability/ALSA-2024:1607 ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-cross-headers](https://patchblox.com/security/data/product/linux/kernel-cross-headers.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-zfcpdump-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-core.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-zfcpdump-devel](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-zfcpdump-modules](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [kernel-zfcpdump-modules-extra](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-extra.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | | [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | almalinux 8 | 4.18.0-513.24.1.el8_9 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-1086](https://patchblox.com/security/data/cve/CVE-2024-1086.md) | Patch now | linux: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local... | 7.8 | 0.2806 | CISA KEV, Ransomware | | [CVE-2024-0565](https://patchblox.com/security/data/cve/CVE-2024-0565.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... | 7.4 | 0.0200 | | | [CVE-2023-6546](https://patchblox.com/security/data/cve/CVE-2023-6546.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... | 7.0 | 0.0074 | | | [CVE-2023-6931](https://patchblox.com/security/data/cve/CVE-2023-6931.md) | High | linux: A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited t... | 7.0 | 0.0072 | | | [CVE-2021-33631](https://patchblox.com/security/data/cve/CVE-2021-33631.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... | 7.8 | 0.0037 | | | [CVE-2023-51042](https://patchblox.com/security/data/cve/CVE-2023-51042.md) | High | linux: In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence us... | 7.8 | 0.0032 | | | [CVE-2022-38096](https://patchblox.com/security/data/cve/CVE-2022-38096.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... | 5.5 | 0.0080 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo