Linux · 
AlmaLinux · Security advisory · September 10, 2026
AlmaLinux · Security advisory · September 10, 2026ALSA-2026:66324: Security update for 10 packages
ALSA-2026:66324, released September 10, 2026, fixes 15 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
15
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0063
50th percentile
Priority of the 15 CVEs
Patch now 0
Urgent 1
High 14
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-rt | almalinux 8 | 4.18.0-553.162.1.rt7.503.el8_10 |
| kernel-rt-core | almalinux 8 | 4.18.0-553.162.1.rt7.503.el8_10 |
| kernel-rt-debug | almalinux 8 | 4.18.0-553.162.1.rt7.503.el8_10 |
| kernel-rt-debug-core | almalinux 8 | 4.18.0-553.162.1.rt7.503.el8_10 |
| kernel-rt-debug-devel | almalinux 8 | 4.18.0-553.162.1.rt7.503.el8_10 |
| kernel-rt-debug-modules | almalinux 8 | 4.18.0-553.162.1.rt7.503.el8_10 |
| kernel-rt-debug-modules-extra | almalinux 8 | 4.18.0-553.162.1.rt7.503.el8_10 |
| kernel-rt-devel | almalinux 8 | 4.18.0-553.162.1.rt7.503.el8_10 |
| kernel-rt-modules | almalinux 8 | 4.18.0-553.162.1.rt7.503.el8_10 |
| kernel-rt-modules-extra | almalinux 8 | 4.18.0-553.162.1.rt7.503.el8_10 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2025-68745 | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Comm... | 9.8 | 0.0050 | None reported |
| High | CVE-2026-52986 | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | None reported |
| High | CVE-2026-68376 | sctp: fix auth_hmacs array size in struct sctp_cookie | 8.1 | 0.0061 | None reported |
| High | CVE-2026-68300 | sctp: auth: verify auth requirement when auth_chunk is NULL | 9.8 | 0.0058 | None reported |
| High | CVE-2026-64113 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0053 | None reported |
| High | CVE-2026-68117 | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 9.8 | 0.0053 | None reported |
| High | CVE-2026-63801 | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 8.8 | 0.0051 | None reported |
| High | CVE-2026-68315 | sctp: validate stream count in sctp_process_strreset_inreq() | 8.8 | 0.0051 | None reported |
| High | CVE-2026-53246 | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | 9.8 | 0.0044 | None reported |
| High | CVE-2026-64015 | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0016 | None reported |
| High | CVE-2026-46149 | scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() | 8.8 | 0.0014 | None reported |
| High | CVE-2026-53091 | net: pull headers in qdisc_pkt_len_segs_init() | 8.4 | 0.0014 | None reported |
| High | CVE-2026-52942 | netfilter: nf_log: validate MAC header was set before dumping it | 7.1 | 0.0013 | None reported |
| High | CVE-2026-63971 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0013 | None reported |
| High | CVE-2026-52917 | sctp: diag: reject stale associations in dump_one path | 8.8 | 0.0013 | None reported |
Showing 1 to 15 of 15
1
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.