Linux · Security advisory · September 15, 2026

ALSA-2026:67471: Security update for 75 packages

ALSA-2026:67471, released September 15, 2026, fixes 25 CVEs across 75 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

1 rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0066

51st percentile

Priority of the 25 CVEs

Patch now 0
                                Urgent 1
                                High 24
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug-devel-matched	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-devel-matched	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-abi-stablelists	almalinux 10	6.12.0-211.55.1.el10_2
kernel-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-cross-headers	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-devel-matched	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-uki-virt	almalinux 10	6.12.0-211.55.1.el10_2
kernel-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-devel-matched	almalinux 10	6.12.0-211.55.1.el10_2
kernel-doc	almalinux 10	6.12.0-211.55.1.el10_2
kernel-headers	almalinux 10	6.12.0-211.55.1.el10_2
kernel-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-modules-extra-matched	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-debug	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-debug-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-debug-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-debug-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-debug-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-debug-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-debug	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-debug-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-debug-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-debug-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-debug-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-debug-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-tools	almalinux 10	6.12.0-211.55.1.el10_2
kernel-tools-libs	almalinux 10	6.12.0-211.55.1.el10_2
kernel-tools-libs-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-uki-virt	almalinux 10	6.12.0-211.55.1.el10_2
kernel-uki-virt-addons	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump-devel-matched	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
libperf	almalinux 10	6.12.0-211.55.1.el10_2
perf	almalinux 10	6.12.0-211.55.1.el10_2
python3-perf	almalinux 10	6.12.0-211.55.1.el10_2
rtla	almalinux 10	6.12.0-211.55.1.el10_2
rv	almalinux 10	6.12.0-211.55.1.el10_2

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2025-68745	linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Comm...	9.8	0.0050	None reported
High	CVE-2026-52924	sctp: purge outqueue on stale COOKIE-ECHO handling	9.8	0.0066	None reported
High	CVE-2026-63919	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0065	None reported
High	CVE-2026-68426	xfrm: fix stale skb->prev after async crypto steals a GSO segment	9.8	0.0050	None reported
High	CVE-2026-53246	sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing	9.8	0.0044	None reported
High	CVE-2026-53131	netfilter: require Ethernet MAC header before using eth_hdr()	9.4	0.0044	None reported
High	CVE-2026-74556	scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer	9.8	0.0040	None reported
High	CVE-2026-63889	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0036	None reported
High	CVE-2026-31539	kernel: In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirect_socket.recv_i...	8.8	0.0033	None reported
High	CVE-2026-31663	xfrm: hold dev ref until after transport_finish NF_HOOK	8.8	0.0022	None reported
High	CVE-2026-53361	af_unix: Set gc_in_progress to true in unix_gc().	8.8	0.0018	None reported
High	CVE-2025-40149	tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().	8.8	0.0017	None reported
High	CVE-2026-63917	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0017	None reported
High	CVE-2026-43248	vhost: move vdpa group bound check to vhost_vdpa	8.8	0.0016	None reported
High	CVE-2026-43368	kernel: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential overflow of shmem scatter...	8.8	0.0016	None reported
High	CVE-2026-63921	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0016	None reported
High	CVE-2026-46149	scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()	8.8	0.0014	None reported
High	CVE-2026-68264	linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Reset current_op in xe_pt_update_ops_...	8.8	0.0014	None reported
High	CVE-2026-64111	kernel-zfcpdump-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0014	None reported
High	CVE-2026-31479	kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe: always keep track of remap prev/next Duri...	8.8	0.0013	None reported
High	CVE-2026-31566	drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib	8.8	0.0013	None reported
High	CVE-2026-43370	kernel: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire...	8.8	0.0012	None reported
High	CVE-2026-23466	kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Open-code GGTT MMIO access protection GGT...	8.8	0.0010	None reported
High	CVE-2026-53239	xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()	8.8	0.0010	None reported
High	CVE-2026-31656	drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat	8.8	0.0009	None reported

Also fixes CVE-2025-68745

RHSA-2026:67150
kernel, kernel-64k, kernel-64k-core and 69 more on RHEL 9
RLSA-2026:67150
kernel on rocky 9
ALSA-2026:67150
kernel, kernel-64k, kernel-64k-core and 71 more on almalinux 9
ELSA-2026-67150-0
kernel, kernel-abi-stablelists, kernel-core and 26 more on ol 9
OPENSUSE-SU-2026:20416-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:20931-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 16.0
RHSA-2026:88687
kernel on RHEL 10
RLSA-2026:67471
kernel on rocky 10

Vendor advisory

https://osv.dev/vulnerability/ALSA-2026:67471

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo