Linux · Security advisory · September 22, 2026

ALSA-2026:70459: Security update for 74 packages

ALSA-2026:70459, released September 22, 2026, fixes 13 CVEs across 74 products. One of them is being exploited (CVE-2025-39964); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
13
2 rated Critical
Exploited
1
CVE-2025-39964
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0161
76th percentile

Priority of the 13 CVEs

Patch now 1 Urgent 2 High 10 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelalmalinux 95.14.0-687.50.1.el9_8
kernel-64kalmalinux 95.14.0-687.50.1.el9_8
kernel-64k-corealmalinux 95.14.0-687.50.1.el9_8
kernel-64k-debugalmalinux 95.14.0-687.50.1.el9_8
kernel-64k-debug-corealmalinux 95.14.0-687.50.1.el9_8
kernel-64k-debug-develalmalinux 95.14.0-687.50.1.el9_8
kernel-64k-debug-devel-matchedalmalinux 95.14.0-687.50.1.el9_8
kernel-64k-debug-modulesalmalinux 95.14.0-687.50.1.el9_8
kernel-64k-debug-modules-corealmalinux 95.14.0-687.50.1.el9_8
kernel-64k-debug-modules-extraalmalinux 95.14.0-687.50.1.el9_8
kernel-64k-develalmalinux 95.14.0-687.50.1.el9_8
kernel-64k-devel-matchedalmalinux 95.14.0-687.50.1.el9_8
kernel-64k-modulesalmalinux 95.14.0-687.50.1.el9_8
kernel-64k-modules-corealmalinux 95.14.0-687.50.1.el9_8
kernel-64k-modules-extraalmalinux 95.14.0-687.50.1.el9_8
kernel-abi-stablelistsalmalinux 95.14.0-687.50.1.el9_8
kernel-corealmalinux 95.14.0-687.50.1.el9_8
kernel-cross-headersalmalinux 95.14.0-687.50.1.el9_8
kernel-debugalmalinux 95.14.0-687.50.1.el9_8
kernel-debug-corealmalinux 95.14.0-687.50.1.el9_8
kernel-debug-develalmalinux 95.14.0-687.50.1.el9_8
kernel-debug-devel-matchedalmalinux 95.14.0-687.50.1.el9_8
kernel-debug-modulesalmalinux 95.14.0-687.50.1.el9_8
kernel-debug-modules-corealmalinux 95.14.0-687.50.1.el9_8
kernel-debug-modules-extraalmalinux 95.14.0-687.50.1.el9_8
kernel-debug-uki-virtalmalinux 95.14.0-687.50.1.el9_8
kernel-develalmalinux 95.14.0-687.50.1.el9_8
kernel-devel-matchedalmalinux 95.14.0-687.50.1.el9_8
kernel-docalmalinux 95.14.0-687.50.1.el9_8
kernel-headersalmalinux 95.14.0-687.50.1.el9_8
kernel-modulesalmalinux 95.14.0-687.50.1.el9_8
kernel-modules-corealmalinux 95.14.0-687.50.1.el9_8
kernel-modules-extraalmalinux 95.14.0-687.50.1.el9_8
kernel-rtalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-64kalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-64k-corealmalinux 95.14.0-687.50.1.el9_8
kernel-rt-64k-debugalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-64k-debug-corealmalinux 95.14.0-687.50.1.el9_8
kernel-rt-64k-debug-develalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-64k-debug-modulesalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-64k-debug-modules-corealmalinux 95.14.0-687.50.1.el9_8
kernel-rt-64k-debug-modules-extraalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-64k-develalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-64k-modulesalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-64k-modules-corealmalinux 95.14.0-687.50.1.el9_8
kernel-rt-64k-modules-extraalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-corealmalinux 95.14.0-687.50.1.el9_8
kernel-rt-debugalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-debug-corealmalinux 95.14.0-687.50.1.el9_8
kernel-rt-debug-develalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-debug-modulesalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-debug-modules-corealmalinux 95.14.0-687.50.1.el9_8
kernel-rt-debug-modules-extraalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-develalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-modulesalmalinux 95.14.0-687.50.1.el9_8
kernel-rt-modules-corealmalinux 95.14.0-687.50.1.el9_8
kernel-rt-modules-extraalmalinux 95.14.0-687.50.1.el9_8
kernel-toolsalmalinux 95.14.0-687.50.1.el9_8
kernel-tools-libsalmalinux 95.14.0-687.50.1.el9_8
kernel-tools-libs-develalmalinux 95.14.0-687.50.1.el9_8
kernel-uki-virtalmalinux 95.14.0-687.50.1.el9_8
kernel-uki-virt-addonsalmalinux 95.14.0-687.50.1.el9_8
kernel-zfcpdumpalmalinux 95.14.0-687.50.1.el9_8
kernel-zfcpdump-corealmalinux 95.14.0-687.50.1.el9_8
kernel-zfcpdump-develalmalinux 95.14.0-687.50.1.el9_8
kernel-zfcpdump-devel-matchedalmalinux 95.14.0-687.50.1.el9_8
kernel-zfcpdump-modulesalmalinux 95.14.0-687.50.1.el9_8
kernel-zfcpdump-modules-corealmalinux 95.14.0-687.50.1.el9_8
kernel-zfcpdump-modules-extraalmalinux 95.14.0-687.50.1.el9_8
libperfalmalinux 95.14.0-687.50.1.el9_8
perfalmalinux 95.14.0-687.50.1.el9_8
python3-perfalmalinux 95.14.0-687.50.1.el9_8
rtlaalmalinux 95.14.0-687.50.1.el9_8
rvalmalinux 95.14.0-687.50.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-39964 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg 8.8 0.0161 KEVExploited
Urgent CVE-2026-68391 Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds 9.8 0.0013 None reported
Urgent CVE-2026-53062 dm cache policy smq: fix missing locks in invalidating cache blocks 9.8 0.0010 None reported
High CVE-2026-68155 libceph: Reject monmaps advertising zero monitors 8.8 0.0070 None reported
High CVE-2026-68157 libceph: guard missing CRUSH type name lookup 7.8 0.0070 None reported
High CVE-2026-68156 libceph: refresh auth->authorizer_buf{,_len} after authorizer update 9.8 0.0069 None reported
High CVE-2026-68188 Bluetooth: RFCOMM: Fix session UAF in set_termios 8.8 0.0022 None reported
High CVE-2026-72072 linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadat... 7.8 0.0017 None reported
High CVE-2026-63823 keys: Pin request_key_auth payload in instantiate paths 8.8 0.0016 None reported
High CVE-2026-68293 net/mlx5: Fix MCIA register buffer overflow on 32 dword reads 8.8 0.0014 None reported
High CVE-2026-45894 iommu/vt-d: Clear Present bit before tearing down PASID entry 8.8 0.0013 None reported
High CVE-2026-45959 kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix a crash due to incorrect cleanu... 8.8 0.0013 None reported
High CVE-2026-74518 mm/hugetlb: fix list corruption in allocate_file_region_entries() 8.8 0.0013 None reported
Showing 1 to 13 of 13 1