# ALSA-2026:93461: Security update for 14 packages

ALSA-2026:93461, released November 7, 2026, fixes 9 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/alsa-2026-93461
- Platform: Linux
- Released: Nov 7, 2026
- Priority: High (Closes CVE-2026-78408, high severity)
- CVEs: 9, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/ALSA-2026:93461

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [libblkid](https://patchblox.com/security/data/product/linux/libblkid.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [libblkid-devel](https://patchblox.com/security/data/product/linux/libblkid-devel.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [libfdisk](https://patchblox.com/security/data/product/linux/libfdisk.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [libfdisk-devel](https://patchblox.com/security/data/product/linux/libfdisk-devel.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [libmount](https://patchblox.com/security/data/product/linux/libmount.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [libmount-devel](https://patchblox.com/security/data/product/linux/libmount-devel.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [libsmartcols](https://patchblox.com/security/data/product/linux/libsmartcols.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [libsmartcols-devel](https://patchblox.com/security/data/product/linux/libsmartcols-devel.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [libuuid](https://patchblox.com/security/data/product/linux/libuuid.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [libuuid-devel](https://patchblox.com/security/data/product/linux/libuuid-devel.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [python3-libmount](https://patchblox.com/security/data/product/linux/python3-libmount.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [util-linux](https://patchblox.com/security/data/product/linux/util-linux.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [util-linux-core](https://patchblox.com/security/data/product/linux/util-linux-core.md) | almalinux 10 | 2.40.2-18.el10_2.20 |
| [uuidd](https://patchblox.com/security/data/product/linux/uuidd.md) | almalinux 10 | 2.40.2-18.el10_2.20 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-78408](https://patchblox.com/security/data/cve/CVE-2026-78408.md) | High | Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority | 8.0 | 0.0024 |  |
| [CVE-2026-76642](https://patchblox.com/security/data/cve/CVE-2026-76642.md) | High | util-linux libmount Privilege Escalation via Failed Mount Helper | 8.0 | 0.0022 |  |
| [CVE-2026-78410](https://patchblox.com/security/data/cve/CVE-2026-78410.md) | High | Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection | 8.0 | 0.0020 |  |
| [CVE-2026-53615](https://patchblox.com/security/data/cve/CVE-2026-53615.md) | High | util-linux libblkid DOS extended-partition overflow produces invalid partition metadata | 8.0 | 0.0018 |  |
| [CVE-2026-53613](https://patchblox.com/security/data/cve/CVE-2026-53613.md) | High | util-linux mount target TOCTOU allows local privilege escalation | 8.0 | 0.0016 |  |
| [CVE-2026-27456](https://patchblox.com/security/data/cve/CVE-2026-27456.md) | High | util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup | 8.0 | 0.0016 |  |
| [CVE-2026-53612](https://patchblox.com/security/data/cve/CVE-2026-53612.md) | High | util-linux mount hook_owner TOCTOU allows local privilege escalation | 8.0 | 0.0015 |  |
| [CVE-2026-13595](https://patchblox.com/security/data/cve/CVE-2026-13595.md) | High | util-linux: A flaw was found in the libblkid library of util-linux | 8.0 | 0.0014 |  |
| [CVE-2026-53614](https://patchblox.com/security/data/cve/CVE-2026-53614.md) | High | util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass | 8.0 | 0.0013 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo