# ALSA-2024:3138: Security update for 25 packages ALSA-2024:3138, released May 22, 2024, fixes 48 CVEs across 25 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/alsa-2024-3138 - Platform: Linux - Released: May 22, 2024 - Priority: High (Closes CVE-2019-15505, high severity) - CVEs: 48, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/ALSA-2024:3138 ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-cross-headers](https://patchblox.com/security/data/product/linux/kernel-cross-headers.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-zfcpdump-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-core.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-zfcpdump-devel](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-zfcpdump-modules](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules.md) | almalinux 8 | 4.18.0-553.el8_10 | | [kernel-zfcpdump-modules-extra](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-extra.md) | almalinux 8 | 4.18.0-553.el8_10 | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | almalinux 8 | 4.18.0-553.el8_10 | | [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | almalinux 8 | 4.18.0-553.el8_10 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2019-15505](https://patchblox.com/security/data/cve/CVE-2019-15505.md) | High | kernel-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0762 | | | [CVE-2022-23222](https://patchblox.com/security/data/cve/CVE-2022-23222.md) | High | kernel-zfcpdump-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0192 | | | [CVE-2023-6121](https://patchblox.com/security/data/cve/CVE-2023-6121.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0164 | | | [CVE-2023-24023](https://patchblox.com/security/data/cve/CVE-2023-24023.md) | High | Mitre: CVE-2023-24023 Bluetooth Vulnerability | 8.0 | 0.0129 | | | [CVE-2021-4204](https://patchblox.com/security/data/cve/CVE-2021-4204.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0125 | | | [CVE-2023-25775](https://patchblox.com/security/data/cve/CVE-2023-25775.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 9.8 | 0.0105 | | | [CVE-2023-52434](https://patchblox.com/security/data/cve/CVE-2023-52434.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 8.0 | 0.0102 | | | [CVE-2023-52340](https://patchblox.com/security/data/cve/CVE-2023-52340.md) | High | linux: The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed... | 8.0 | 0.0094 | | | [CVE-2019-13631](https://patchblox.com/security/data/cve/CVE-2019-13631.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0082 | | | [CVE-2022-45934](https://patchblox.com/security/data/cve/CVE-2022-45934.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0079 | | | [CVE-2023-37453](https://patchblox.com/security/data/cve/CVE-2023-37453.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0065 | | | [CVE-2023-51780](https://patchblox.com/security/data/cve/CVE-2023-51780.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 8.0 | 0.0051 | | | [CVE-2020-25656](https://patchblox.com/security/data/cve/CVE-2020-25656.md) | High | kernel-zfcpdump-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0044 | | | [CVE-2023-42754](https://patchblox.com/security/data/cve/CVE-2023-42754.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0043 | | | [CVE-2023-39193](https://patchblox.com/security/data/cve/CVE-2023-39193.md) | High | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0042 | | | [CVE-2023-3567](https://patchblox.com/security/data/cve/CVE-2023-3567.md) | High | linux: A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel | 8.0 | 0.0042 | | | [CVE-2023-39194](https://patchblox.com/security/data/cve/CVE-2023-39194.md) | High | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0042 | | | [CVE-2023-39198](https://patchblox.com/security/data/cve/CVE-2023-39198.md) | High | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0042 | | | [CVE-2023-39189](https://patchblox.com/security/data/cve/CVE-2023-39189.md) | High | kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0040 | | | [CVE-2023-42755](https://patchblox.com/security/data/cve/CVE-2023-42755.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0040 | | | [CVE-2023-39192](https://patchblox.com/security/data/cve/CVE-2023-39192.md) | High | kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0040 | | | [CVE-2023-6932](https://patchblox.com/security/data/cve/CVE-2023-6932.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0037 | | | [CVE-2021-3753](https://patchblox.com/security/data/cve/CVE-2021-3753.md) | High | kernel-doc: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0036 | | | [CVE-2022-0500](https://patchblox.com/security/data/cve/CVE-2022-0500.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0036 | | | [CVE-2022-3565](https://patchblox.com/security/data/cve/CVE-2022-3565.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0035 | | | [CVE-2023-31083](https://patchblox.com/security/data/cve/CVE-2023-31083.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0033 | | | [CVE-2023-6622](https://patchblox.com/security/data/cve/CVE-2023-6622.md) | High | linux: A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in... | 8.0 | 0.0032 | | | [CVE-2024-26602](https://patchblox.com/security/data/cve/CVE-2024-26602.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0032 | | | [CVE-2024-0841](https://patchblox.com/security/data/cve/CVE-2024-0841.md) | High | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0030 | | | [CVE-2023-52489](https://patchblox.com/security/data/cve/CVE-2023-52489.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 8.0 | 0.0029 | | | [CVE-2023-45863](https://patchblox.com/security/data/cve/CVE-2023-45863.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0029 | | | [CVE-2023-6915](https://patchblox.com/security/data/cve/CVE-2023-6915.md) | High | linux: A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel | 8.0 | 0.0028 | | | [CVE-2023-28464](https://patchblox.com/security/data/cve/CVE-2023-28464.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0027 | | | [CVE-2023-52620](https://patchblox.com/security/data/cve/CVE-2023-52620.md) | High | kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0027 | | | [CVE-2023-51779](https://patchblox.com/security/data/cve/CVE-2023-51779.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0026 | | | [CVE-2023-52581](https://patchblox.com/security/data/cve/CVE-2023-52581.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 8.0 | 0.0026 | | | [CVE-2023-52574](https://patchblox.com/security/data/cve/CVE-2023-52574.md) | High | kernel-cross-headers: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0025 | | | [CVE-2023-6176](https://patchblox.com/security/data/cve/CVE-2023-6176.md) | High | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0025 | | | [CVE-2024-25743](https://patchblox.com/security/data/cve/CVE-2024-25743.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0025 | | | [CVE-2023-52448](https://patchblox.com/security/data/cve/CVE-2023-52448.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | 0.0024 | | | [CVE-2023-4244](https://patchblox.com/security/data/cve/CVE-2023-4244.md) | High | linux: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local... | 8.0 | 0.0024 | | | [CVE-2023-1513](https://patchblox.com/security/data/cve/CVE-2023-1513.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0023 | | | [CVE-2023-4133](https://patchblox.com/security/data/cve/CVE-2023-4133.md) | High | Kernel: cxgb4: use-after-free in ch_flower_stats_cb() | 8.0 | 0.0023 | | | [CVE-2023-52580](https://patchblox.com/security/data/cve/CVE-2023-52580.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0023 | | | [CVE-2023-38409](https://patchblox.com/security/data/cve/CVE-2023-38409.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0019 | | | [CVE-2024-26671](https://patchblox.com/security/data/cve/CVE-2024-26671.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 8.0 | 0.0019 | | | [CVE-2024-25742](https://patchblox.com/security/data/cve/CVE-2024-25742.md) | High | kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0018 | | | [CVE-2024-26609](https://patchblox.com/security/data/cve/CVE-2024-26609.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 8.0 | n/a | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo