# ALSA-2026:76738: Security update for 75 packages ALSA-2026:76738, released October 6, 2026, fixes 35 CVEs across 75 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alsa-2026-76738 - Platform: Linux - Released: Oct 6, 2026 - Priority: Urgent (Closes CVE-2026-89972, rated Critical) - CVEs: 35, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/ALSA-2026:76738 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k](https://patchblox.com/security/data/product/linux/kernel-64k.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-core](https://patchblox.com/security/data/product/linux/kernel-64k-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-debug](https://patchblox.com/security/data/product/linux/kernel-64k-debug.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-debug-devel-matched.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-debug-modules-extra.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-devel](https://patchblox.com/security/data/product/linux/kernel-64k-devel.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-devel-matched](https://patchblox.com/security/data/product/linux/kernel-64k-devel-matched.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-modules](https://patchblox.com/security/data/product/linux/kernel-64k-modules.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-64k-modules-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-64k-modules-extra.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-abi-stablelists](https://patchblox.com/security/data/product/linux/kernel-abi-stablelists.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-core](https://patchblox.com/security/data/product/linux/kernel-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-cross-headers](https://patchblox.com/security/data/product/linux/kernel-cross-headers.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-debug-core](https://patchblox.com/security/data/product/linux/kernel-debug-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-debug-devel](https://patchblox.com/security/data/product/linux/kernel-debug-devel.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-debug-devel-matched](https://patchblox.com/security/data/product/linux/kernel-debug-devel-matched.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-debug-modules](https://patchblox.com/security/data/product/linux/kernel-debug-modules.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-debug-modules-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-debug-modules-extra.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-debug-uki-virt](https://patchblox.com/security/data/product/linux/kernel-debug-uki-virt.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-devel-matched](https://patchblox.com/security/data/product/linux/kernel-devel-matched.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-doc](https://patchblox.com/security/data/product/linux/kernel-doc.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-modules](https://patchblox.com/security/data/product/linux/kernel-modules.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-modules-core](https://patchblox.com/security/data/product/linux/kernel-modules-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-modules-extra-matched](https://patchblox.com/security/data/product/linux/kernel-modules-extra-matched.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-64k](https://patchblox.com/security/data/product/linux/kernel-rt-64k.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-64k-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-64k-debug](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-64k-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-64k-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-devel.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-64k-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-64k-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-64k-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-64k-debug-modules-extra.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-64k-devel](https://patchblox.com/security/data/product/linux/kernel-rt-64k-devel.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-64k-modules](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-64k-modules-extra.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-core](https://patchblox.com/security/data/product/linux/kernel-rt-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-debug-devel.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-extra.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-devel](https://patchblox.com/security/data/product/linux/kernel-rt-devel.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-modules](https://patchblox.com/security/data/product/linux/kernel-rt-modules.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-modules-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-rt-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-modules-extra.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-tools-libs](https://patchblox.com/security/data/product/linux/kernel-tools-libs.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-tools-libs-devel](https://patchblox.com/security/data/product/linux/kernel-tools-libs-devel.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-uki-virt](https://patchblox.com/security/data/product/linux/kernel-uki-virt.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-uki-virt-addons](https://patchblox.com/security/data/product/linux/kernel-uki-virt-addons.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-zfcpdump-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-zfcpdump-devel](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-zfcpdump-devel-matched](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-devel-matched.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-zfcpdump-modules](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-zfcpdump-modules-core](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-core.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [kernel-zfcpdump-modules-extra](https://patchblox.com/security/data/product/linux/kernel-zfcpdump-modules-extra.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [libperf](https://patchblox.com/security/data/product/linux/libperf.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [rtla](https://patchblox.com/security/data/product/linux/rtla.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | | [rv](https://patchblox.com/security/data/product/linux/rv.md) | almalinux 10 | 6.12.0-211.63.1.el10_2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-68476](https://patchblox.com/security/data/cve/CVE-2026-68476.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation... | 9.8 | 0.0071 | | | [CVE-2026-89972](https://patchblox.com/security/data/cve/CVE-2026-89972.md) | Urgent | nvme: add missing SRCU grace period in error path | 9.8 | 0.0071 | | | [CVE-2026-63984](https://patchblox.com/security/data/cve/CVE-2026-63984.md) | Urgent | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | | | [CVE-2026-64078](https://patchblox.com/security/data/cve/CVE-2026-64078.md) | Urgent | netfilter: x_tables: add and use xtables_unregister_table_exit | 9.8 | 0.0013 | | | [CVE-2026-45860](https://patchblox.com/security/data/cve/CVE-2026-45860.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: increase the connection... | 7.5 | 0.0075 | | | [CVE-2026-63922](https://patchblox.com/security/data/cve/CVE-2026-63922.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0071 | | | [CVE-2026-63924](https://patchblox.com/security/data/cve/CVE-2026-63924.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0071 | | | [CVE-2026-72320](https://patchblox.com/security/data/cve/CVE-2026-72320.md) | High | netfilter: nft_lookup: fix catchall element handling with inverted lookups | 9.1 | 0.0057 | | | [CVE-2026-74746](https://patchblox.com/security/data/cve/CVE-2026-74746.md) | High | netfilter: flowtable: publish GC-visible tuple last | 9.8 | 0.0054 | | | [CVE-2026-63994](https://patchblox.com/security/data/cve/CVE-2026-63994.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0051 | | | [CVE-2026-74669](https://patchblox.com/security/data/cve/CVE-2026-74669.md) | High | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 9.8 | 0.0051 | | | [CVE-2026-63992](https://patchblox.com/security/data/cve/CVE-2026-63992.md) | High | kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.1 | 0.0051 | | | [CVE-2026-64132](https://patchblox.com/security/data/cve/CVE-2026-64132.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0049 | | | [CVE-2026-97417](https://patchblox.com/security/data/cve/CVE-2026-97417.md) | High | netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() | 8.8 | 0.0049 | | | [CVE-2026-53357](https://patchblox.com/security/data/cve/CVE-2026-53357.md) | High | Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() | 8.0 | 0.0033 | | | [CVE-2026-64024](https://patchblox.com/security/data/cve/CVE-2026-64024.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.4 | 0.0031 | | | [CVE-2026-64557](https://patchblox.com/security/data/cve/CVE-2026-64557.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_so... | 8.8 | 0.0029 | | | [CVE-2026-46275](https://patchblox.com/security/data/cve/CVE-2026-46275.md) | High | Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths | 7.8 | 0.0023 | | | [CVE-2026-80792](https://patchblox.com/security/data/cve/CVE-2026-80792.md) | High | ipv6: fix use-after-free in ip6_finish_output2() | 8.1 | 0.0020 | | | [CVE-2026-45856](https://patchblox.com/security/data/cve/CVE-2026-45856.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it i... | 8.8 | 0.0019 | | | [CVE-2026-80775](https://patchblox.com/security/data/cve/CVE-2026-80775.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: futex: Fix race on the initial mm->futex.phash.r... | 7.0 | 0.0019 | | | [CVE-2026-72255](https://patchblox.com/security/data/cve/CVE-2026-72255.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 8.8 | 0.0018 | | | [CVE-2026-63920](https://patchblox.com/security/data/cve/CVE-2026-63920.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0017 | | | [CVE-2026-90227](https://patchblox.com/security/data/cve/CVE-2026-90227.md) | High | nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() | 8.8 | 0.0017 | | | [CVE-2026-63918](https://patchblox.com/security/data/cve/CVE-2026-63918.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0016 | | | [CVE-2026-53270](https://patchblox.com/security/data/cve/CVE-2026-53270.md) | High | ipvs: clear the svc scheduler ptr early on edit | 9.8 | 0.0016 | | | [CVE-2026-72052](https://patchblox.com/security/data/cve/CVE-2026-72052.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the devic... | 8.8 | 0.0015 | | | [CVE-2026-63829](https://patchblox.com/security/data/cve/CVE-2026-63829.md) | High | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 | | | [CVE-2026-68432](https://patchblox.com/security/data/cve/CVE-2026-68432.md) | High | vxlan: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 | | | [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 | | | [CVE-2026-63794](https://patchblox.com/security/data/cve/CVE-2026-63794.md) | High | KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path | 8.8 | 0.0014 | | | [CVE-2026-74516](https://patchblox.com/security/data/cve/CVE-2026-74516.md) | High | KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active | 8.8 | 0.0014 | | | [CVE-2026-93288](https://patchblox.com/security/data/cve/CVE-2026-93288.md) | High | netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state | 8.8 | 0.0013 | | | [CVE-2026-80921](https://patchblox.com/security/data/cve/CVE-2026-80921.md) | High | KVM: s390: vsie: zero stale crypto bits | 8.8 | 0.0013 | | | [CVE-2026-74582](https://patchblox.com/security/data/cve/CVE-2026-74582.md) | High | packet: use consistent hard_header_len in non-ring send paths | 9.8 | 0.0012 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo