Linux · Security advisory · September 17, 2026

ALSA-2026:68532: Security update for 10 packages

ALSA-2026:68532, released September 17, 2026, fixes 23 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
23
3 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0076
55th percentile

Priority of the 23 CVEs

Patch now 0 Urgent 3 High 20 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-rtalmalinux 84.18.0-553.164.1.rt7.505.el8_10
kernel-rt-corealmalinux 84.18.0-553.164.1.rt7.505.el8_10
kernel-rt-debugalmalinux 84.18.0-553.164.1.rt7.505.el8_10
kernel-rt-debug-corealmalinux 84.18.0-553.164.1.rt7.505.el8_10
kernel-rt-debug-develalmalinux 84.18.0-553.164.1.rt7.505.el8_10
kernel-rt-debug-modulesalmalinux 84.18.0-553.164.1.rt7.505.el8_10
kernel-rt-debug-modules-extraalmalinux 84.18.0-553.164.1.rt7.505.el8_10
kernel-rt-develalmalinux 84.18.0-553.164.1.rt7.505.el8_10
kernel-rt-modulesalmalinux 84.18.0-553.164.1.rt7.505.el8_10
kernel-rt-modules-extraalmalinux 84.18.0-553.164.1.rt7.505.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-46266 linux: In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop in... 9.1 0.0047 None reported
Urgent CVE-2026-53075 ppp: require CAP_NET_ADMIN in target netns for unattached ioctls 9.8 0.0027 None reported
Urgent CVE-2026-68143 net: slip: serialize receive against buffer reallocation 9.8 0.0011 None reported
High CVE-2026-53176 IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN 9.8 0.0076 None reported
High CVE-2026-63919 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0065 None reported
High CVE-2026-53228 ipv6: sit: reload inner IPv6 header after GSO offloads 9.8 0.0058 None reported
High CVE-2026-53268 netfilter: conntrack_irc: fix possible out-of-bounds read 8.2 0.0052 None reported
High CVE-2026-68426 xfrm: fix stale skb->prev after async crypto steals a GSO segment 9.8 0.0050 None reported
High CVE-2026-43233 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 8.2 0.0046 None reported
High CVE-2026-46306 flow_dissector: do not dissect PPPoE PFC frames 8.1 0.0045 None reported
High CVE-2026-53131 netfilter: require Ethernet MAC header before using eth_hdr() 9.4 0.0044 None reported
High CVE-2026-52920 netfilter: xt_policy: fix strict mode inbound policy matching 8.3 0.0030 None reported
High CVE-2026-53275 ipv6: mcast: Fix use-after-free when processing MLD queries 8.8 0.0026 None reported
High CVE-2026-31663 xfrm: hold dev ref until after transport_finish NF_HOOK 8.8 0.0022 None reported
High CVE-2026-72298 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... 8.8 0.0019 None reported
High CVE-2026-63917 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0017 None reported
High CVE-2026-63921 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0016 None reported
High CVE-2026-43339 kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... 8.1 0.0016 None reported
High CVE-2026-53223 kernel: In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue sk... 8.1 0.0014 None reported
High CVE-2026-64002 kernel: In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports... 8.8 0.0013 None reported
High CVE-2026-23103 kernel: In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the... 8.8 0.0013 None reported
High CVE-2026-53239 xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() 8.8 0.0010 None reported
High CVE-2026-53192 ALSA: timer: Fix UAF at snd_timer_user_params() 8.8 0.0010 None reported
Showing 1 to 23 of 23 1