Linux · Security advisory · May 20, 2026

ALSA-2026:19568: Security update for 74 packages

ALSA-2026:19568, released May 20, 2026, fixes 18 CVEs across 74 products. One of them is being exploited (CVE-2026-46300); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
18
2 rated Critical
Exploited
1
CVE-2026-46300
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9419
99th percentile

Priority of the 18 CVEs

Patch now 1 Urgent 2 High 15 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelalmalinux 95.14.0-687.10.1.el9_8
kernel-64kalmalinux 95.14.0-687.10.1.el9_8
kernel-64k-corealmalinux 95.14.0-687.10.1.el9_8
kernel-64k-debugalmalinux 95.14.0-687.10.1.el9_8
kernel-64k-debug-corealmalinux 95.14.0-687.10.1.el9_8
kernel-64k-debug-develalmalinux 95.14.0-687.10.1.el9_8
kernel-64k-debug-devel-matchedalmalinux 95.14.0-687.10.1.el9_8
kernel-64k-debug-modulesalmalinux 95.14.0-687.10.1.el9_8
kernel-64k-debug-modules-corealmalinux 95.14.0-687.10.1.el9_8
kernel-64k-debug-modules-extraalmalinux 95.14.0-687.10.1.el9_8
kernel-64k-develalmalinux 95.14.0-687.10.1.el9_8
kernel-64k-devel-matchedalmalinux 95.14.0-687.10.1.el9_8
kernel-64k-modulesalmalinux 95.14.0-687.10.1.el9_8
kernel-64k-modules-corealmalinux 95.14.0-687.10.1.el9_8
kernel-64k-modules-extraalmalinux 95.14.0-687.10.1.el9_8
kernel-abi-stablelistsalmalinux 95.14.0-687.10.1.el9_8
kernel-corealmalinux 95.14.0-687.10.1.el9_8
kernel-cross-headersalmalinux 95.14.0-687.10.1.el9_8
kernel-debugalmalinux 95.14.0-687.10.1.el9_8
kernel-debug-corealmalinux 95.14.0-687.10.1.el9_8
kernel-debug-develalmalinux 95.14.0-687.10.1.el9_8
kernel-debug-devel-matchedalmalinux 95.14.0-687.10.1.el9_8
kernel-debug-modulesalmalinux 95.14.0-687.10.1.el9_8
kernel-debug-modules-corealmalinux 95.14.0-687.10.1.el9_8
kernel-debug-modules-extraalmalinux 95.14.0-687.10.1.el9_8
kernel-debug-uki-virtalmalinux 95.14.0-687.10.1.el9_8
kernel-develalmalinux 95.14.0-687.10.1.el9_8
kernel-devel-matchedalmalinux 95.14.0-687.10.1.el9_8
kernel-docalmalinux 95.14.0-687.10.1.el9_8
kernel-headersalmalinux 95.14.0-687.10.1.el9_8
kernel-modulesalmalinux 95.14.0-687.10.1.el9_8
kernel-modules-corealmalinux 95.14.0-687.10.1.el9_8
kernel-modules-extraalmalinux 95.14.0-687.10.1.el9_8
kernel-rtalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-64kalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-64k-corealmalinux 95.14.0-687.10.1.el9_8
kernel-rt-64k-debugalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-64k-debug-corealmalinux 95.14.0-687.10.1.el9_8
kernel-rt-64k-debug-develalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-64k-debug-modulesalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-64k-debug-modules-corealmalinux 95.14.0-687.10.1.el9_8
kernel-rt-64k-debug-modules-extraalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-64k-develalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-64k-modulesalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-64k-modules-corealmalinux 95.14.0-687.10.1.el9_8
kernel-rt-64k-modules-extraalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-corealmalinux 95.14.0-687.10.1.el9_8
kernel-rt-debugalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-debug-corealmalinux 95.14.0-687.10.1.el9_8
kernel-rt-debug-develalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-debug-modulesalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-debug-modules-corealmalinux 95.14.0-687.10.1.el9_8
kernel-rt-debug-modules-extraalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-develalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-modulesalmalinux 95.14.0-687.10.1.el9_8
kernel-rt-modules-corealmalinux 95.14.0-687.10.1.el9_8
kernel-rt-modules-extraalmalinux 95.14.0-687.10.1.el9_8
kernel-toolsalmalinux 95.14.0-687.10.1.el9_8
kernel-tools-libsalmalinux 95.14.0-687.10.1.el9_8
kernel-tools-libs-develalmalinux 95.14.0-687.10.1.el9_8
kernel-uki-virtalmalinux 95.14.0-687.10.1.el9_8
kernel-uki-virt-addonsalmalinux 95.14.0-687.10.1.el9_8
kernel-zfcpdumpalmalinux 95.14.0-687.10.1.el9_8
kernel-zfcpdump-corealmalinux 95.14.0-687.10.1.el9_8
kernel-zfcpdump-develalmalinux 95.14.0-687.10.1.el9_8
kernel-zfcpdump-devel-matchedalmalinux 95.14.0-687.10.1.el9_8
kernel-zfcpdump-modulesalmalinux 95.14.0-687.10.1.el9_8
kernel-zfcpdump-modules-corealmalinux 95.14.0-687.10.1.el9_8
kernel-zfcpdump-modules-extraalmalinux 95.14.0-687.10.1.el9_8
libperfalmalinux 95.14.0-687.10.1.el9_8
perfalmalinux 95.14.0-687.10.1.el9_8
python3-perfalmalinux 95.14.0-687.10.1.el9_8
rtlaalmalinux 95.14.0-687.10.1.el9_8
rvalmalinux 95.14.0-687.10.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2026-46300 net: skbuff: preserve shared-frag marker during coalescing 8.1 0.1613 KEVExploited
Urgent CVE-2026-31402 kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... 9.8 0.0122 None reported
Urgent CVE-2025-68741 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex ite... 9.8 0.0043 None reported
High CVE-2026-43284 xfrm: esp: avoid in-place decrypt on shared skb frags 8.8 0.9419 None reported
High CVE-2026-46333 ptrace: slightly saner 'get_dumpable()' logic 8.1 0.0430 None reported
High CVE-2026-43503 net: skbuff: propagate shared-frag marker through frag-transfer helpers 8.8 0.0199 None reported
High CVE-2025-71116 libceph: make decode_pool() more resilient against corrupted osdmaps 8.1 0.0046 None reported
High CVE-2026-22984 kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in... 8.8 0.0041 None reported
High CVE-2026-22990 kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_app... 8.8 0.0040 None reported
High CVE-2026-31607 usbip: validate number_of_packets in usbip_pack_ret_submit() 9.8 0.0031 None reported
High CVE-2026-23136 linux: In the Linux kernel, the following vulnerability has been resolved: libceph: reset sparse-read state in osd_fault()... 8.1 0.0025 None reported
High CVE-2026-23401 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE 8.8 0.0019 None reported
High CVE-2025-39766 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit 8.1 0.0018 None reported
High CVE-2026-31532 can: raw: fix ro->uniq use-after-free in raw_rcv() 8.8 0.0017 None reported
High CVE-2026-23204 kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... 8.1 0.0015 None reported
High CVE-2026-43128 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix double dma_buf_unpin in failure p... 8.1 0.0014 None reported
High CVE-2026-23270 linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/i... 8.1 0.0014 None reported
High CVE-2026-43163 linux: In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resiz... 8.1 0.0009 None reported
Showing 1 to 18 of 18 1