# ALSA-2025:15011: Security update for 76 packages

ALSA-2025:15011, released September 2, 2025, fixes 8 CVEs across 76 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/alsa-2025-15011
- Platform: Linux
- Released: Sep 2, 2025
- Priority: High (Closes CVE-2025-38211, high severity)
- CVEs: 8, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/ALSA-2025:15011

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k](https://patchblox.com/security/data/product/linux/kernel-64k.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-core](https://patchblox.com/security/data/product/linux/kernel-64k-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-debug](https://patchblox.com/security/data/product/linux/kernel-64k-debug.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel-matched.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-extra.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-devel](https://patchblox.com/security/data/product/linux/kernel-64k-devel.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-devel-matched.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-modules](https://patchblox.com/security/data/product/linux/kernel-64k-modules.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-modules-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-modules-extra.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-cross-headers](https://patchblox.com/security/data/product/linux/kernel-cross-headers.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-debug-devel-matched.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-debug-modules-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-debug-uki-virt](https://patchblox.com/security/data/product/linux/kernel-debug-uki-virt.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-devel-matched](https://patchblox.com/security/data/product/linux/kernel-devel-matched.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-modules-core](https://patchblox.com/security/data/product/linux/kernel-modules-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-64k](https://patchblox.com/security/data/product/linux/kernel-rt-64k.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-64k-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-64k-debug](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-devel.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules-extra.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-64k-devel](https://patchblox.com/security/data/product/linux/kernel-rt-64k-devel.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-64k-modules](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules-extra.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-core](https://patchblox.com/security/data/product/linux/kernel-rt-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-debug-devel.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-debug-kvm](https://patchblox.com/security/data/product/linux/kernel-rt-debug-kvm.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-extra.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-devel](https://patchblox.com/security/data/product/linux/kernel-rt-devel.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-kvm](https://patchblox.com/security/data/product/linux/kernel-rt-kvm.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-modules](https://patchblox.com/security/data/product/linux/kernel-rt-modules.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-modules-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-rt-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-modules-extra.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-uki-virt](https://patchblox.com/security/data/product/linux/kernel-uki-virt.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-uki-virt-addons](https://patchblox.com/security/data/product/linux/kernel-uki-virt-addons.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-zfcpdump-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-zfcpdump-devel](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-zfcpdump-devel-matched](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel-matched.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-zfcpdump-modules](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-zfcpdump-modules-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-core.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [kernel-zfcpdump-modules-extra](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-extra.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [libperf](https://patchblox.com/security/data/product/linux/libperf.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [rtla](https://patchblox.com/security/data/product/linux/rtla.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |
| [rv](https://patchblox.com/security/data/product/linux/rv.md) | almalinux 9 | 5.14.0-570.39.1.el9_6 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-38211](https://patchblox.com/security/data/cve/CVE-2025-38211.md) | High | RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction | 7.8 | 0.0042 |  |
| [CVE-2025-38350](https://patchblox.com/security/data/cve/CVE-2025-38350.md) | High | net/sched: Always pass notifications when child class becomes empty | 7.8 | 0.0030 |  |
| [CVE-2025-37823](https://patchblox.com/security/data/cve/CVE-2025-37823.md) | High | net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too | 7.8 | 0.0023 |  |
| [CVE-2025-38464](https://patchblox.com/security/data/cve/CVE-2025-38464.md) | High | tipc: Fix use-after-free in tipc_conn_close(). | 7.8 | 0.0022 |  |
| [CVE-2025-38200](https://patchblox.com/security/data/cve/CVE-2025-38200.md) | High | i40e: fix MMIO write access to an invalid page in i40e_clear_hw | 7.8 | 0.0022 |  |
| [CVE-2025-38684](https://patchblox.com/security/data/cve/CVE-2025-38684.md) | High | net/sched: ets: use old 'nbands' while purging unused classes | 7.0 | 0.0018 |  |
| [CVE-2025-38500](https://patchblox.com/security/data/cve/CVE-2025-38500.md) | High | xfrm: interface: fix use-after-free after changing collect_md xfrm interface | 7.8 | 0.0017 |  |
| [CVE-2025-38461](https://patchblox.com/security/data/cve/CVE-2025-38461.md) | High | vsock: Fix transport_* TOCTOU | 7.8 | 0.0014 |  |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.