# ALSA-2026:18134: Security update for 75 packages ALSA-2026:18134, released May 19, 2026, fixes 29 CVEs across 75 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alsa-2026-18134 - Platform: Linux - Released: May 19, 2026 - Priority: Urgent (Closes CVE-2025-40320, rated Critical) - CVEs: 29, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/ALSA-2026:18134 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k](https://patchblox.com/security/data/product/linux/kernel-64k.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-core](https://patchblox.com/security/data/product/linux/kernel-64k-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-debug](https://patchblox.com/security/data/product/linux/kernel-64k-debug.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel-matched.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-extra.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-devel](https://patchblox.com/security/data/product/linux/kernel-64k-devel.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-devel-matched.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-modules](https://patchblox.com/security/data/product/linux/kernel-64k-modules.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-modules-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-modules-extra.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-cross-headers](https://patchblox.com/security/data/product/linux/kernel-cross-headers.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-debug-devel-matched.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-debug-modules-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-debug-uki-virt](https://patchblox.com/security/data/product/linux/kernel-debug-uki-virt.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-devel-matched](https://patchblox.com/security/data/product/linux/kernel-devel-matched.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-modules-core](https://patchblox.com/security/data/product/linux/kernel-modules-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-modules-extra-matched](https://patchblox.com/security/data/product/linux/kernel-modules-extra-matched.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-64k](https://patchblox.com/security/data/product/linux/kernel-rt-64k.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-64k-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-64k-debug](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-devel.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules-extra.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-64k-devel](https://patchblox.com/security/data/product/linux/kernel-rt-64k-devel.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-64k-modules](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules-extra.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-core](https://patchblox.com/security/data/product/linux/kernel-rt-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-debug-devel.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-extra.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-devel](https://patchblox.com/security/data/product/linux/kernel-rt-devel.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-modules](https://patchblox.com/security/data/product/linux/kernel-rt-modules.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-modules-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-rt-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-modules-extra.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-uki-virt](https://patchblox.com/security/data/product/linux/kernel-uki-virt.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-uki-virt-addons](https://patchblox.com/security/data/product/linux/kernel-uki-virt-addons.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-zfcpdump-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-zfcpdump-devel](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-zfcpdump-devel-matched](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel-matched.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-zfcpdump-modules](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-zfcpdump-modules-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-core.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [kernel-zfcpdump-modules-extra](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-extra.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [libperf](https://patchblox.com/security/data/product/linux/libperf.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [rtla](https://patchblox.com/security/data/product/linux/rtla.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | | [rv](https://patchblox.com/security/data/product/linux/rv.md) | almalinux 10 | 6.12.0-211.7.1.el10_2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-40320](https://patchblox.com/security/data/cve/CVE-2025-40320.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_quer... | 9.8 | 0.0042 | | | [CVE-2026-23111](https://patchblox.com/security/data/cve/CVE-2026-23111.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0052 | | | [CVE-2025-40257](https://patchblox.com/security/data/cve/CVE-2025-40257.md) | High | mptcp: fix a race in mptcp_pm_del_add_timer() | 9.8 | 0.0050 | | | [CVE-2025-40210](https://patchblox.com/security/data/cve/CVE-2025-40210.md) | High | Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" | 7.5 | 0.0036 | | | [CVE-2025-39866](https://patchblox.com/security/data/cve/CVE-2025-39866.md) | High | fs: writeback: fix use-after-free in __mark_inode_dirty() | 7.8 | 0.0031 | | | [CVE-2024-56633](https://patchblox.com/security/data/cve/CVE-2024-56633.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bp... | 7.8 | 0.0028 | | | [CVE-2025-38279](https://patchblox.com/security/data/cve/CVE-2025-38279.md) | High | bpf: Do not include stack ptr register in precision backtracking bookkeeping | 7.8 | 0.0024 | | | [CVE-2025-21839](https://patchblox.com/security/data/cve/CVE-2025-21839.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 | | | [CVE-2025-38267](https://patchblox.com/security/data/cve/CVE-2025-38267.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0021 | | | [CVE-2025-38346](https://patchblox.com/security/data/cve/CVE-2025-38346.md) | High | ftrace: Fix UAF when lookup kallsym after ftrace disabled | 7.8 | 0.0020 | | | [CVE-2025-38015](https://patchblox.com/security/data/cve/CVE-2025-38015.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.0 | 0.0020 | | | [CVE-2026-23243](https://patchblox.com/security/data/cve/CVE-2026-23243.md) | High | RDMA/umad: Reject negative data_len in ib_umad_write | 7.8 | 0.0018 | | | [CVE-2026-23002](https://patchblox.com/security/data/cve/CVE-2026-23002.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x... | 7.0 | 0.0018 | | | [CVE-2026-23040](https://patchblox.com/security/data/cve/CVE-2026-23040.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: fix typo in frequency noti... | 7.6 | 0.0017 | | | [CVE-2025-39797](https://patchblox.com/security/data/cve/CVE-2025-39797.md) | High | xfrm: Duplicate SPI Handling | 7.8 | 0.0016 | | | [CVE-2026-23210](https://patchblox.com/security/data/cve/CVE-2026-23210.md) | High | kernel-rt-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... | 7.5 | 0.0010 | | | [CVE-2025-30156](https://patchblox.com/security/data/cve/CVE-2025-30156.md) | High | Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery | 8.9 | 0.0009 | | | [CVE-2025-38405](https://patchblox.com/security/data/cve/CVE-2025-38405.md) | Routine | kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 5.5 | 0.0043 | | | [CVE-2025-40134](https://patchblox.com/security/data/cve/CVE-2025-40134.md) | Routine | kernel-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 4.7 | 0.0023 | | | [CVE-2025-38275](https://patchblox.com/security/data/cve/CVE-2025-38275.md) | Routine | phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug | 5.5 | 0.0021 | | | [CVE-2025-38470](https://patchblox.com/security/data/cve/CVE-2025-38470.md) | Routine | net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime | 5.5 | 0.0021 | | | [CVE-2025-38097](https://patchblox.com/security/data/cve/CVE-2025-38097.md) | Routine | espintcp: remove encap socket caching to avoid reference leak | 5.5 | 0.0021 | | | [CVE-2025-38166](https://patchblox.com/security/data/cve/CVE-2025-38166.md) | Routine | bpf: fix ktls panic with sockmap | 5.5 | 0.0020 | | | [CVE-2025-40034](https://patchblox.com/security/data/cve/CVE-2025-40034.md) | Routine | kernel-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system | 6.6 | 0.0020 | | | [CVE-2025-38345](https://patchblox.com/security/data/cve/CVE-2025-38345.md) | Routine | ACPICA: fix acpi operand cache leak in dswstate.c | 5.5 | 0.0020 | | | [CVE-2025-37980](https://patchblox.com/security/data/cve/CVE-2025-37980.md) | Routine | block: fix resource leak in blk_register_queue() error path | 5.5 | 0.0019 | | | [CVE-2025-38441](https://patchblox.com/security/data/cve/CVE-2025-38441.md) | Routine | kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system | 5.5 | 0.0019 | | | [CVE-2025-38202](https://patchblox.com/security/data/cve/CVE-2025-38202.md) | Routine | bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() | 5.5 | 0.0018 | | | [CVE-2025-71117](https://patchblox.com/security/data/cve/CVE-2025-71117.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several sysfs... | 5.5 | 0.0010 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo