Linux · Security advisory · September 17, 2026

ALSA-2026:68570: Security update for 74 packages

ALSA-2026:68570, released September 17, 2026, fixes 31 CVEs across 74 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
31
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0097
62nd percentile

Priority of the 31 CVEs

Patch now 0 Urgent 0 High 31 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelalmalinux 95.14.0-687.49.1.el9_8
kernel-64kalmalinux 95.14.0-687.49.1.el9_8
kernel-64k-corealmalinux 95.14.0-687.49.1.el9_8
kernel-64k-debugalmalinux 95.14.0-687.49.1.el9_8
kernel-64k-debug-corealmalinux 95.14.0-687.49.1.el9_8
kernel-64k-debug-develalmalinux 95.14.0-687.49.1.el9_8
kernel-64k-debug-devel-matchedalmalinux 95.14.0-687.49.1.el9_8
kernel-64k-debug-modulesalmalinux 95.14.0-687.49.1.el9_8
kernel-64k-debug-modules-corealmalinux 95.14.0-687.49.1.el9_8
kernel-64k-debug-modules-extraalmalinux 95.14.0-687.49.1.el9_8
kernel-64k-develalmalinux 95.14.0-687.49.1.el9_8
kernel-64k-devel-matchedalmalinux 95.14.0-687.49.1.el9_8
kernel-64k-modulesalmalinux 95.14.0-687.49.1.el9_8
kernel-64k-modules-corealmalinux 95.14.0-687.49.1.el9_8
kernel-64k-modules-extraalmalinux 95.14.0-687.49.1.el9_8
kernel-abi-stablelistsalmalinux 95.14.0-687.49.1.el9_8
kernel-corealmalinux 95.14.0-687.49.1.el9_8
kernel-cross-headersalmalinux 95.14.0-687.49.1.el9_8
kernel-debugalmalinux 95.14.0-687.49.1.el9_8
kernel-debug-corealmalinux 95.14.0-687.49.1.el9_8
kernel-debug-develalmalinux 95.14.0-687.49.1.el9_8
kernel-debug-devel-matchedalmalinux 95.14.0-687.49.1.el9_8
kernel-debug-modulesalmalinux 95.14.0-687.49.1.el9_8
kernel-debug-modules-corealmalinux 95.14.0-687.49.1.el9_8
kernel-debug-modules-extraalmalinux 95.14.0-687.49.1.el9_8
kernel-debug-uki-virtalmalinux 95.14.0-687.49.1.el9_8
kernel-develalmalinux 95.14.0-687.49.1.el9_8
kernel-devel-matchedalmalinux 95.14.0-687.49.1.el9_8
kernel-docalmalinux 95.14.0-687.49.1.el9_8
kernel-headersalmalinux 95.14.0-687.49.1.el9_8
kernel-modulesalmalinux 95.14.0-687.49.1.el9_8
kernel-modules-corealmalinux 95.14.0-687.49.1.el9_8
kernel-modules-extraalmalinux 95.14.0-687.49.1.el9_8
kernel-rtalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-64kalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-64k-corealmalinux 95.14.0-687.49.1.el9_8
kernel-rt-64k-debugalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-64k-debug-corealmalinux 95.14.0-687.49.1.el9_8
kernel-rt-64k-debug-develalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-64k-debug-modulesalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-64k-debug-modules-corealmalinux 95.14.0-687.49.1.el9_8
kernel-rt-64k-debug-modules-extraalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-64k-develalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-64k-modulesalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-64k-modules-corealmalinux 95.14.0-687.49.1.el9_8
kernel-rt-64k-modules-extraalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-corealmalinux 95.14.0-687.49.1.el9_8
kernel-rt-debugalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-debug-corealmalinux 95.14.0-687.49.1.el9_8
kernel-rt-debug-develalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-debug-modulesalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-debug-modules-corealmalinux 95.14.0-687.49.1.el9_8
kernel-rt-debug-modules-extraalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-develalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-modulesalmalinux 95.14.0-687.49.1.el9_8
kernel-rt-modules-corealmalinux 95.14.0-687.49.1.el9_8
kernel-rt-modules-extraalmalinux 95.14.0-687.49.1.el9_8
kernel-toolsalmalinux 95.14.0-687.49.1.el9_8
kernel-tools-libsalmalinux 95.14.0-687.49.1.el9_8
kernel-tools-libs-develalmalinux 95.14.0-687.49.1.el9_8
kernel-uki-virtalmalinux 95.14.0-687.49.1.el9_8
kernel-uki-virt-addonsalmalinux 95.14.0-687.49.1.el9_8
kernel-zfcpdumpalmalinux 95.14.0-687.49.1.el9_8
kernel-zfcpdump-corealmalinux 95.14.0-687.49.1.el9_8
kernel-zfcpdump-develalmalinux 95.14.0-687.49.1.el9_8
kernel-zfcpdump-devel-matchedalmalinux 95.14.0-687.49.1.el9_8
kernel-zfcpdump-modulesalmalinux 95.14.0-687.49.1.el9_8
kernel-zfcpdump-modules-corealmalinux 95.14.0-687.49.1.el9_8
kernel-zfcpdump-modules-extraalmalinux 95.14.0-687.49.1.el9_8
libperfalmalinux 95.14.0-687.49.1.el9_8
perfalmalinux 95.14.0-687.49.1.el9_8
python3-perfalmalinux 95.14.0-687.49.1.el9_8
rtlaalmalinux 95.14.0-687.49.1.el9_8
rvalmalinux 95.14.0-687.49.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-63913 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... 8.8 0.0097 None reported
High CVE-2026-53176 IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN 9.8 0.0076 None reported
High CVE-2026-68159 libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE 9.8 0.0075 None reported
High CVE-2026-63919 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0065 None reported
High CVE-2026-46133 RDMA/rxe: Reject unknown opcodes before ICRC processing 8.8 0.0057 None reported
High CVE-2026-46043 RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv 9.1 0.0051 None reported
High CVE-2026-68426 xfrm: fix stale skb->prev after async crypto steals a GSO segment 9.8 0.0050 None reported
High CVE-2026-46114 RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads 8.8 0.0047 None reported
High CVE-2026-64175 kernel-debug-uki-virt: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0046 None reported
High CVE-2026-72003 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... 8.8 0.0035 None reported
High CVE-2026-53196 USB: serial: io_ti: fix heap overflow in get_manuf_info() 8.8 0.0027 None reported
High CVE-2026-64176 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0027 None reported
High CVE-2026-63869 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0026 None reported
High CVE-2026-31663 xfrm: hold dev ref until after transport_finish NF_HOOK 8.8 0.0022 None reported
High CVE-2026-23172 kernel: In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflo... 8.8 0.0020 None reported
High CVE-2026-72298 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... 8.8 0.0019 None reported
High CVE-2026-68363 wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request 8.8 0.0018 None reported
High CVE-2026-63917 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0017 None reported
High CVE-2026-72102 linux: In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_re... 8.8 0.0017 None reported
High CVE-2026-64582 RDMA/rxe: Fix a use-after-free problem in rxe_mmap 8.8 0.0017 None reported
High CVE-2026-72243 linux: In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TC... 8.8 0.0017 None reported
High CVE-2026-63921 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0016 None reported
High CVE-2026-53193 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0014 None reported
High CVE-2026-68128 linux: In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_pro... 8.8 0.0014 None reported
High CVE-2026-68200 linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback... 8.8 0.0013 None reported
Showing 1 to 25 of 31 1Next