# ALSA-2026:86195: Security update for 14 packages ALSA-2026:86195, released November 7, 2026, fixes 26 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alsa-2026-86195 - Platform: Linux - Released: Nov 7, 2026 - Priority: Urgent (Closes CVE-2026-92707, rated Critical) - CVEs: 26, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/ALSA-2026:86195 ## Applies to | Product | Release | Fixed in | |---|---|---| | [aspnetcore-runtime-10.0](https://patchblox.com/security/data/product/linux/aspnetcore-runtime-10.0.md) | almalinux 10 | 10.0.13-1.el10_2 | | [aspnetcore-runtime-dbg-10.0](https://patchblox.com/security/data/product/linux/aspnetcore-runtime-dbg-10.0.md) | almalinux 10 | 10.0.13-1.el10_2 | | [aspnetcore-targeting-pack-10.0](https://patchblox.com/security/data/product/linux/aspnetcore-targeting-pack-10.0.md) | almalinux 10 | 10.0.13-1.el10_2 | | [dotnet-apphost-pack-10.0](https://patchblox.com/security/data/product/linux/dotnet-apphost-pack-10.0.md) | almalinux 10 | 10.0.13-1.el10_2 | | [dotnet-host](https://patchblox.com/security/data/product/linux/dotnet-host.md) | almalinux 10 | 10.0.13-1.el10_2 | | [dotnet-hostfxr-10.0](https://patchblox.com/security/data/product/linux/dotnet-hostfxr-10.0.md) | almalinux 10 | 10.0.13-1.el10_2 | | [dotnet-runtime-10.0](https://patchblox.com/security/data/product/linux/dotnet-runtime-10.0.md) | almalinux 10 | 10.0.13-1.el10_2 | | [dotnet-runtime-dbg-10.0](https://patchblox.com/security/data/product/linux/dotnet-runtime-dbg-10.0.md) | almalinux 10 | 10.0.13-1.el10_2 | | [dotnet-sdk-10.0](https://patchblox.com/security/data/product/linux/dotnet-sdk-10.0.md) | almalinux 10 | 10.0.113-1.el10_2 | | [dotnet-sdk-10.0-source-built-artifacts](https://patchblox.com/security/data/product/linux/dotnet-sdk-10.0-source-built-artifacts.md) | almalinux 10 | 10.0.113-1.el10_2 | | [dotnet-sdk-aot-10.0](https://patchblox.com/security/data/product/linux/dotnet-sdk-aot-10.0.md) | almalinux 10 | 10.0.113-1.el10_2 | | [dotnet-sdk-dbg-10.0](https://patchblox.com/security/data/product/linux/dotnet-sdk-dbg-10.0.md) | almalinux 10 | 10.0.113-1.el10_2 | | [dotnet-targeting-pack-10.0](https://patchblox.com/security/data/product/linux/dotnet-targeting-pack-10.0.md) | almalinux 10 | 10.0.13-1.el10_2 | | [dotnet-templates-10.0](https://patchblox.com/security/data/product/linux/dotnet-templates-10.0.md) | almalinux 10 | 10.0.113-1.el10_2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-92707](https://patchblox.com/security/data/cve/CVE-2026-92707.md) | Urgent | MessagePack-CSharp Denial of Service Vulnerability | 9.4 | 0.0068 | Disclosed | | [CVE-2026-58280](https://patchblox.com/security/data/cve/CVE-2026-58280.md) | High | .NET Denial of Service Vulnerability | 9.4 | 0.0125 | | | [CVE-2026-69651](https://patchblox.com/security/data/cve/CVE-2026-69651.md) | High | .NET Denial of Service Vulnerability | 9.4 | 0.0125 | | | [CVE-2026-70159](https://patchblox.com/security/data/cve/CVE-2026-70159.md) | High | ASP.NET Core Denial of Service Vulnerability | 9.4 | 0.0123 | | | [CVE-2026-70181](https://patchblox.com/security/data/cve/CVE-2026-70181.md) | High | ASP.NET Core Denial of Service Vulnerability | 9.4 | 0.0123 | | | [CVE-2026-96958](https://patchblox.com/security/data/cve/CVE-2026-96958.md) | High | .NET Denial of Service Vulnerability | 7.5 | 0.0120 | | | [CVE-2026-96960](https://patchblox.com/security/data/cve/CVE-2026-96960.md) | High | .NET Denial of Service Vulnerability | 7.5 | 0.0120 | | | [CVE-2026-96236](https://patchblox.com/security/data/cve/CVE-2026-96236.md) | High | ASP.NET Core Denial of Service Vulnerability | 9.4 | 0.0109 | | | [CVE-2026-96233](https://patchblox.com/security/data/cve/CVE-2026-96233.md) | High | ASP.NET Core Denial of Service Vulnerability | 9.4 | 0.0099 | | | [CVE-2026-84008](https://patchblox.com/security/data/cve/CVE-2026-84008.md) | High | .NET Denial of Service Vulnerability | 7.5 | 0.0099 | | | [CVE-2026-96959](https://patchblox.com/security/data/cve/CVE-2026-96959.md) | High | .NET Denial of Service Vulnerability | 7.5 | 0.0097 | | | [CVE-2026-70186](https://patchblox.com/security/data/cve/CVE-2026-70186.md) | High | ASP.NET Core Denial of Service Vulnerability | 9.4 | 0.0096 | | | [CVE-2026-96230](https://patchblox.com/security/data/cve/CVE-2026-96230.md) | High | ASP.NET Core Remote Code Execution Vulnerability | 9.4 | 0.0095 | | | [CVE-2026-70188](https://patchblox.com/security/data/cve/CVE-2026-70188.md) | High | ASP.NET Core Security Feature Bypass Vulnerability | 9.4 | 0.0094 | | | [CVE-2026-88092](https://patchblox.com/security/data/cve/CVE-2026-88092.md) | High | ASP.NET Core Tampering Vulnerability | 9.4 | 0.0093 | | | [CVE-2026-70196](https://patchblox.com/security/data/cve/CVE-2026-70196.md) | High | ASP.NET Core Denial of Service Vulnerability | 9.4 | 0.0091 | | | [CVE-2026-102870](https://patchblox.com/security/data/cve/CVE-2026-102870.md) | High | ASP.NET Core Remote Code Execution Vulnerability | 9.4 | 0.0091 | | | [CVE-2026-66822](https://patchblox.com/security/data/cve/CVE-2026-66822.md) | High | .NET Information Disclosure Vulnerability | 9.4 | 0.0079 | | | [CVE-2026-70175](https://patchblox.com/security/data/cve/CVE-2026-70175.md) | High | ASP.NET Core Elevation of Privilege Vulnerability | 9.4 | 0.0073 | | | [CVE-2026-96237](https://patchblox.com/security/data/cve/CVE-2026-96237.md) | High | .NET Remote Code Execution Vulnerability | 9.4 | 0.0064 | | | [CVE-2026-70179](https://patchblox.com/security/data/cve/CVE-2026-70179.md) | High | ASP.NET Core Elevation of Privilege Vulnerability | 9.4 | 0.0063 | | | [CVE-2026-96957](https://patchblox.com/security/data/cve/CVE-2026-96957.md) | High | .NET Security Feature Bypass Vulnerability | 9.4 | 0.0053 | | | [CVE-2026-70183](https://patchblox.com/security/data/cve/CVE-2026-70183.md) | High | ASP.NET Core Elevation of Privilege Vulnerability | 9.4 | 0.0053 | | | [CVE-2026-96225](https://patchblox.com/security/data/cve/CVE-2026-96225.md) | High | .NET Elevation of Privilege Vulnerability | 9.4 | 0.0041 | | | [CVE-2026-96231](https://patchblox.com/security/data/cve/CVE-2026-96231.md) | High | .NET Elevation of Privilege Vulnerability | 9.4 | 0.0041 | | | [CVE-2026-96238](https://patchblox.com/security/data/cve/CVE-2026-96238.md) | High | .NET Security Feature Bypass Vulnerability | 9.4 | 0.0030 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo