Linux · Security advisory · May 28, 2026

ALSA-2026:21556: Security update for 74 packages

ALSA-2026:21556, released May 28, 2026, fixes 20 CVEs across 74 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
20
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0159
75th percentile

Priority of the 20 CVEs

Patch now 0 Urgent 1 High 19 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelalmalinux 95.14.0-687.12.1.el9_8
kernel-64kalmalinux 95.14.0-687.12.1.el9_8
kernel-64k-corealmalinux 95.14.0-687.12.1.el9_8
kernel-64k-debugalmalinux 95.14.0-687.12.1.el9_8
kernel-64k-debug-corealmalinux 95.14.0-687.12.1.el9_8
kernel-64k-debug-develalmalinux 95.14.0-687.12.1.el9_8
kernel-64k-debug-devel-matchedalmalinux 95.14.0-687.12.1.el9_8
kernel-64k-debug-modulesalmalinux 95.14.0-687.12.1.el9_8
kernel-64k-debug-modules-corealmalinux 95.14.0-687.12.1.el9_8
kernel-64k-debug-modules-extraalmalinux 95.14.0-687.12.1.el9_8
kernel-64k-develalmalinux 95.14.0-687.12.1.el9_8
kernel-64k-devel-matchedalmalinux 95.14.0-687.12.1.el9_8
kernel-64k-modulesalmalinux 95.14.0-687.12.1.el9_8
kernel-64k-modules-corealmalinux 95.14.0-687.12.1.el9_8
kernel-64k-modules-extraalmalinux 95.14.0-687.12.1.el9_8
kernel-abi-stablelistsalmalinux 95.14.0-687.12.1.el9_8
kernel-corealmalinux 95.14.0-687.12.1.el9_8
kernel-cross-headersalmalinux 95.14.0-687.12.1.el9_8
kernel-debugalmalinux 95.14.0-687.12.1.el9_8
kernel-debug-corealmalinux 95.14.0-687.12.1.el9_8
kernel-debug-develalmalinux 95.14.0-687.12.1.el9_8
kernel-debug-devel-matchedalmalinux 95.14.0-687.12.1.el9_8
kernel-debug-modulesalmalinux 95.14.0-687.12.1.el9_8
kernel-debug-modules-corealmalinux 95.14.0-687.12.1.el9_8
kernel-debug-modules-extraalmalinux 95.14.0-687.12.1.el9_8
kernel-debug-uki-virtalmalinux 95.14.0-687.12.1.el9_8
kernel-develalmalinux 95.14.0-687.12.1.el9_8
kernel-devel-matchedalmalinux 95.14.0-687.12.1.el9_8
kernel-docalmalinux 95.14.0-687.12.1.el9_8
kernel-headersalmalinux 95.14.0-687.12.1.el9_8
kernel-modulesalmalinux 95.14.0-687.12.1.el9_8
kernel-modules-corealmalinux 95.14.0-687.12.1.el9_8
kernel-modules-extraalmalinux 95.14.0-687.12.1.el9_8
kernel-rtalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-64kalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-64k-corealmalinux 95.14.0-687.12.1.el9_8
kernel-rt-64k-debugalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-64k-debug-corealmalinux 95.14.0-687.12.1.el9_8
kernel-rt-64k-debug-develalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modulesalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules-corealmalinux 95.14.0-687.12.1.el9_8
kernel-rt-64k-debug-modules-extraalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-64k-develalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-64k-modulesalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-64k-modules-corealmalinux 95.14.0-687.12.1.el9_8
kernel-rt-64k-modules-extraalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-corealmalinux 95.14.0-687.12.1.el9_8
kernel-rt-debugalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-debug-corealmalinux 95.14.0-687.12.1.el9_8
kernel-rt-debug-develalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-debug-modulesalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-debug-modules-corealmalinux 95.14.0-687.12.1.el9_8
kernel-rt-debug-modules-extraalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-develalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-modulesalmalinux 95.14.0-687.12.1.el9_8
kernel-rt-modules-corealmalinux 95.14.0-687.12.1.el9_8
kernel-rt-modules-extraalmalinux 95.14.0-687.12.1.el9_8
kernel-toolsalmalinux 95.14.0-687.12.1.el9_8
kernel-tools-libsalmalinux 95.14.0-687.12.1.el9_8
kernel-tools-libs-develalmalinux 95.14.0-687.12.1.el9_8
kernel-uki-virtalmalinux 95.14.0-687.12.1.el9_8
kernel-uki-virt-addonsalmalinux 95.14.0-687.12.1.el9_8
kernel-zfcpdumpalmalinux 95.14.0-687.12.1.el9_8
kernel-zfcpdump-corealmalinux 95.14.0-687.12.1.el9_8
kernel-zfcpdump-develalmalinux 95.14.0-687.12.1.el9_8
kernel-zfcpdump-devel-matchedalmalinux 95.14.0-687.12.1.el9_8
kernel-zfcpdump-modulesalmalinux 95.14.0-687.12.1.el9_8
kernel-zfcpdump-modules-corealmalinux 95.14.0-687.12.1.el9_8
kernel-zfcpdump-modules-extraalmalinux 95.14.0-687.12.1.el9_8
libperfalmalinux 95.14.0-687.12.1.el9_8
perfalmalinux 95.14.0-687.12.1.el9_8
python3-perfalmalinux 95.14.0-687.12.1.el9_8
rtlaalmalinux 95.14.0-687.12.1.el9_8
rvalmalinux 95.14.0-687.12.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-68366 linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect Th... 8.8 0.0020 None reported
High CVE-2026-23455 kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng... 9.1 0.0159 None reported
High CVE-2026-46195 smb: client: validate dacloffset before building DACL pointers 9.8 0.0068 None reported
High CVE-2026-31685 netfilter: ip6t_eui64: reject invalid MAC header for all packets 9.4 0.0049 None reported
High CVE-2026-43158 linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs... 8.8 0.0047 None reported
High CVE-2026-43190 kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length befo... 8.2 0.0046 None reported
High CVE-2026-31709 smb: client: validate the whole DACL before rewriting it in cifsacl 8.8 0.0035 None reported
High CVE-2026-31408 Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold 8.8 0.0032 None reported
High CVE-2026-43110 linux: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF ev... 8.8 0.0027 None reported
High CVE-2026-43051 linux: In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intu... 8.1 0.0026 None reported
High CVE-2025-38653 proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al 7.8 0.0018 None reported
High CVE-2026-43303 mm/page_alloc: clear page->private in free_pages_prepare() 7.8 0.0017 None reported
High CVE-2026-23392 netfilter: nf_tables: release flowtable after rcu grace period on error 8.8 0.0017 None reported
High CVE-2025-71089 iommu: disable SVA when CONFIG_X86 is set 7.8 0.0016 None reported
High CVE-2025-68183 linux: In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or... 7.8 0.0015 None reported
High CVE-2025-68724 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in as... 8.1 0.0014 None reported
High CVE-2026-43027 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to e... 7.8 0.0013 None reported
High CVE-2026-43020 linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load... 7.8 0.0013 None reported
High CVE-2026-31684 net: sched: act_csum: validate nested VLAN headers 7.8 0.0012 None reported
High CVE-2026-43023 kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in sco_sock_c... 7.8 0.0010 None reported
Showing 1 to 20 of 20 1