Linux · Security advisory · May 20, 2026

ALSA-2026:19569: Security update for 75 packages

ALSA-2026:19569, released May 20, 2026, fixes 14 CVEs across 75 products. One of them is being exploited (CVE-2026-46300); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
14
2 rated Critical
Exploited
1
CVE-2026-46300
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9419
99th percentile

Priority of the 14 CVEs

Patch now 1 Urgent 2 High 11 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelalmalinux 106.12.0-211.16.1.el10_2
kernel-64kalmalinux 106.12.0-211.16.1.el10_2
kernel-64k-corealmalinux 106.12.0-211.16.1.el10_2
kernel-64k-debugalmalinux 106.12.0-211.16.1.el10_2
kernel-64k-debug-corealmalinux 106.12.0-211.16.1.el10_2
kernel-64k-debug-develalmalinux 106.12.0-211.16.1.el10_2
kernel-64k-debug-devel-matchedalmalinux 106.12.0-211.16.1.el10_2
kernel-64k-debug-modulesalmalinux 106.12.0-211.16.1.el10_2
kernel-64k-debug-modules-corealmalinux 106.12.0-211.16.1.el10_2
kernel-64k-debug-modules-extraalmalinux 106.12.0-211.16.1.el10_2
kernel-64k-develalmalinux 106.12.0-211.16.1.el10_2
kernel-64k-devel-matchedalmalinux 106.12.0-211.16.1.el10_2
kernel-64k-modulesalmalinux 106.12.0-211.16.1.el10_2
kernel-64k-modules-corealmalinux 106.12.0-211.16.1.el10_2
kernel-64k-modules-extraalmalinux 106.12.0-211.16.1.el10_2
kernel-abi-stablelistsalmalinux 106.12.0-211.16.1.el10_2
kernel-corealmalinux 106.12.0-211.16.1.el10_2
kernel-cross-headersalmalinux 106.12.0-211.16.1.el10_2
kernel-debugalmalinux 106.12.0-211.16.1.el10_2
kernel-debug-corealmalinux 106.12.0-211.16.1.el10_2
kernel-debug-develalmalinux 106.12.0-211.16.1.el10_2
kernel-debug-devel-matchedalmalinux 106.12.0-211.16.1.el10_2
kernel-debug-modulesalmalinux 106.12.0-211.16.1.el10_2
kernel-debug-modules-corealmalinux 106.12.0-211.16.1.el10_2
kernel-debug-modules-extraalmalinux 106.12.0-211.16.1.el10_2
kernel-debug-uki-virtalmalinux 106.12.0-211.16.1.el10_2
kernel-develalmalinux 106.12.0-211.16.1.el10_2
kernel-devel-matchedalmalinux 106.12.0-211.16.1.el10_2
kernel-docalmalinux 106.12.0-211.16.1.el10_2
kernel-headersalmalinux 106.12.0-211.16.1.el10_2
kernel-modulesalmalinux 106.12.0-211.16.1.el10_2
kernel-modules-corealmalinux 106.12.0-211.16.1.el10_2
kernel-modules-extraalmalinux 106.12.0-211.16.1.el10_2
kernel-modules-extra-matchedalmalinux 106.12.0-211.16.1.el10_2
kernel-rtalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-64kalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-64k-corealmalinux 106.12.0-211.16.1.el10_2
kernel-rt-64k-debugalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-64k-debug-corealmalinux 106.12.0-211.16.1.el10_2
kernel-rt-64k-debug-develalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-64k-debug-modulesalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-64k-debug-modules-corealmalinux 106.12.0-211.16.1.el10_2
kernel-rt-64k-debug-modules-extraalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-64k-develalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-64k-modulesalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-64k-modules-corealmalinux 106.12.0-211.16.1.el10_2
kernel-rt-64k-modules-extraalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-corealmalinux 106.12.0-211.16.1.el10_2
kernel-rt-debugalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-debug-corealmalinux 106.12.0-211.16.1.el10_2
kernel-rt-debug-develalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-debug-modulesalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-debug-modules-corealmalinux 106.12.0-211.16.1.el10_2
kernel-rt-debug-modules-extraalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-develalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-modulesalmalinux 106.12.0-211.16.1.el10_2
kernel-rt-modules-corealmalinux 106.12.0-211.16.1.el10_2
kernel-rt-modules-extraalmalinux 106.12.0-211.16.1.el10_2
kernel-toolsalmalinux 106.12.0-211.16.1.el10_2
kernel-tools-libsalmalinux 106.12.0-211.16.1.el10_2
kernel-tools-libs-develalmalinux 106.12.0-211.16.1.el10_2
kernel-uki-virtalmalinux 106.12.0-211.16.1.el10_2
kernel-uki-virt-addonsalmalinux 106.12.0-211.16.1.el10_2
kernel-zfcpdumpalmalinux 106.12.0-211.16.1.el10_2
kernel-zfcpdump-corealmalinux 106.12.0-211.16.1.el10_2
kernel-zfcpdump-develalmalinux 106.12.0-211.16.1.el10_2
kernel-zfcpdump-devel-matchedalmalinux 106.12.0-211.16.1.el10_2
kernel-zfcpdump-modulesalmalinux 106.12.0-211.16.1.el10_2
kernel-zfcpdump-modules-corealmalinux 106.12.0-211.16.1.el10_2
kernel-zfcpdump-modules-extraalmalinux 106.12.0-211.16.1.el10_2
libperfalmalinux 106.12.0-211.16.1.el10_2
perfalmalinux 106.12.0-211.16.1.el10_2
python3-perfalmalinux 106.12.0-211.16.1.el10_2
rtlaalmalinux 106.12.0-211.16.1.el10_2
rvalmalinux 106.12.0-211.16.1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2026-46300 net: skbuff: preserve shared-frag marker during coalescing 8.1 0.1613 KEVExploited
Urgent CVE-2026-31402 kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... 9.8 0.0122 None reported
Urgent CVE-2025-68741 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex ite... 9.8 0.0043 None reported
High CVE-2026-43284 xfrm: esp: avoid in-place decrypt on shared skb frags 8.8 0.9419 None reported
High CVE-2026-46333 ptrace: slightly saner 'get_dumpable()' logic 8.1 0.0430 None reported
High CVE-2026-43503 net: skbuff: propagate shared-frag marker through frag-transfer helpers 8.8 0.0199 None reported
High CVE-2026-31408 Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold 8.8 0.0032 None reported
High CVE-2026-31607 usbip: validate number_of_packets in usbip_pack_ret_submit() 9.8 0.0031 None reported
High CVE-2024-56603 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... 8.1 0.0024 None reported
High CVE-2026-23401 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE 8.8 0.0019 None reported
High CVE-2025-39766 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit 8.1 0.0018 None reported
High CVE-2025-68724 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in as... 8.1 0.0014 None reported
High CVE-2026-43128 linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix double dma_buf_unpin in failure p... 8.1 0.0014 None reported
High CVE-2026-23270 linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/i... 8.1 0.0014 None reported
Showing 1 to 14 of 14 1