Linux · Security advisory · September 10, 2026

ALSA-2026:66325: Security update for 25 packages

ALSA-2026:66325, released September 10, 2026, fixes 15 CVEs across 25 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
15
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0063
50th percentile

Priority of the 15 CVEs

Patch now 0 Urgent 1 High 14 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolalmalinux 84.18.0-553.162.1.el8_10
kernelalmalinux 84.18.0-553.162.1.el8_10
kernel-abi-stablelistsalmalinux 84.18.0-553.162.1.el8_10
kernel-corealmalinux 84.18.0-553.162.1.el8_10
kernel-cross-headersalmalinux 84.18.0-553.162.1.el8_10
kernel-debugalmalinux 84.18.0-553.162.1.el8_10
kernel-debug-corealmalinux 84.18.0-553.162.1.el8_10
kernel-debug-develalmalinux 84.18.0-553.162.1.el8_10
kernel-debug-modulesalmalinux 84.18.0-553.162.1.el8_10
kernel-debug-modules-extraalmalinux 84.18.0-553.162.1.el8_10
kernel-develalmalinux 84.18.0-553.162.1.el8_10
kernel-docalmalinux 84.18.0-553.162.1.el8_10
kernel-headersalmalinux 84.18.0-553.162.1.el8_10
kernel-modulesalmalinux 84.18.0-553.162.1.el8_10
kernel-modules-extraalmalinux 84.18.0-553.162.1.el8_10
kernel-toolsalmalinux 84.18.0-553.162.1.el8_10
kernel-tools-libsalmalinux 84.18.0-553.162.1.el8_10
kernel-tools-libs-develalmalinux 84.18.0-553.162.1.el8_10
kernel-zfcpdumpalmalinux 84.18.0-553.162.1.el8_10
kernel-zfcpdump-corealmalinux 84.18.0-553.162.1.el8_10
kernel-zfcpdump-develalmalinux 84.18.0-553.162.1.el8_10
kernel-zfcpdump-modulesalmalinux 84.18.0-553.162.1.el8_10
kernel-zfcpdump-modules-extraalmalinux 84.18.0-553.162.1.el8_10
perfalmalinux 84.18.0-553.162.1.el8_10
python3-perfalmalinux 84.18.0-553.162.1.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2025-68745 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Comm... 9.8 0.0050 None reported
High CVE-2026-52986 netfilter: nf_conntrack_sip: don't use simple_strtoul 9.8 0.0063 None reported
High CVE-2026-68376 sctp: fix auth_hmacs array size in struct sctp_cookie 8.1 0.0061 None reported
High CVE-2026-68300 sctp: auth: verify auth requirement when auth_chunk is NULL 9.8 0.0058 None reported
High CVE-2026-64113 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 9.8 0.0053 None reported
High CVE-2026-68117 tipc: clear sock->sk on the failed-insert path in tipc_sk_create() 9.8 0.0053 None reported
High CVE-2026-63801 tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done 8.8 0.0051 None reported
High CVE-2026-68315 sctp: validate stream count in sctp_process_strreset_inreq() 8.8 0.0051 None reported
High CVE-2026-53246 sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing 9.8 0.0044 None reported
High CVE-2026-64015 kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.1 0.0016 None reported
High CVE-2026-46149 scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() 8.8 0.0014 None reported
High CVE-2026-53091 net: pull headers in qdisc_pkt_len_segs_init() 8.4 0.0014 None reported
High CVE-2026-52942 netfilter: nf_log: validate MAC header was set before dumping it 7.1 0.0013 None reported
High CVE-2026-63971 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0013 None reported
High CVE-2026-52917 sctp: diag: reject stale associations in dump_one path 8.8 0.0013 None reported
Showing 1 to 15 of 15 1