Linux · Security advisory · September 23, 2026

ALSA-2026:70498: Security update for 62 packages

ALSA-2026:70498, released September 23, 2026, fixes 12 CVEs across 62 products. One of them is being exploited (CVE-2025-39964); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
12
3 rated Critical
Exploited
1
CVE-2025-39964
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0161
76th percentile

Priority of the 12 CVEs

Patch now 1 Urgent 3 High 8 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-64k-debug-develalmalinux 106.12.0-211.58.1.el10_2
kernel-64k-debug-devel-matchedalmalinux 106.12.0-211.58.1.el10_2
kernel-64k-develalmalinux 106.12.0-211.58.1.el10_2
kernel-64k-devel-matchedalmalinux 106.12.0-211.58.1.el10_2
kernel-cross-headersalmalinux 106.12.0-211.58.1.el10_2
kernel-debugalmalinux 106.12.0-211.58.1.el10_2
kernel-debug-corealmalinux 106.12.0-211.58.1.el10_2
kernel-debug-develalmalinux 106.12.0-211.58.1.el10_2
kernel-debug-devel-matchedalmalinux 106.12.0-211.58.1.el10_2
kernel-debug-modulesalmalinux 106.12.0-211.58.1.el10_2
kernel-debug-modules-corealmalinux 106.12.0-211.58.1.el10_2
kernel-debug-modules-extraalmalinux 106.12.0-211.58.1.el10_2
kernel-debug-uki-virtalmalinux 106.12.0-211.58.1.el10_2
kernel-develalmalinux 106.12.0-211.58.1.el10_2
kernel-devel-matchedalmalinux 106.12.0-211.58.1.el10_2
kernel-docalmalinux 106.12.0-211.58.1.el10_2
kernel-headersalmalinux 106.12.0-211.58.1.el10_2
kernel-modulesalmalinux 106.12.0-211.58.1.el10_2
kernel-modules-corealmalinux 106.12.0-211.58.1.el10_2
kernel-modules-extraalmalinux 106.12.0-211.58.1.el10_2
kernel-modules-extra-matchedalmalinux 106.12.0-211.58.1.el10_2
kernel-rtalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-64kalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-64k-corealmalinux 106.12.0-211.58.1.el10_2
kernel-rt-64k-debugalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-64k-debug-corealmalinux 106.12.0-211.58.1.el10_2
kernel-rt-64k-debug-develalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-64k-debug-modulesalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-64k-debug-modules-corealmalinux 106.12.0-211.58.1.el10_2
kernel-rt-64k-debug-modules-extraalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-64k-develalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-64k-modulesalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-64k-modules-corealmalinux 106.12.0-211.58.1.el10_2
kernel-rt-64k-modules-extraalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-corealmalinux 106.12.0-211.58.1.el10_2
kernel-rt-debugalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-debug-corealmalinux 106.12.0-211.58.1.el10_2
kernel-rt-debug-develalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-debug-modulesalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-debug-modules-corealmalinux 106.12.0-211.58.1.el10_2
kernel-rt-debug-modules-extraalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-develalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-modulesalmalinux 106.12.0-211.58.1.el10_2
kernel-rt-modules-corealmalinux 106.12.0-211.58.1.el10_2
kernel-rt-modules-extraalmalinux 106.12.0-211.58.1.el10_2
kernel-toolsalmalinux 106.12.0-211.58.1.el10_2
kernel-tools-libsalmalinux 106.12.0-211.58.1.el10_2
kernel-tools-libs-develalmalinux 106.12.0-211.58.1.el10_2
kernel-uki-virtalmalinux 106.12.0-211.58.1.el10_2
kernel-uki-virt-addonsalmalinux 106.12.0-211.58.1.el10_2
kernel-zfcpdumpalmalinux 106.12.0-211.58.1.el10_2
kernel-zfcpdump-corealmalinux 106.12.0-211.58.1.el10_2
kernel-zfcpdump-develalmalinux 106.12.0-211.58.1.el10_2
kernel-zfcpdump-devel-matchedalmalinux 106.12.0-211.58.1.el10_2
kernel-zfcpdump-modulesalmalinux 106.12.0-211.58.1.el10_2
kernel-zfcpdump-modules-corealmalinux 106.12.0-211.58.1.el10_2
kernel-zfcpdump-modules-extraalmalinux 106.12.0-211.58.1.el10_2
libperfalmalinux 106.12.0-211.58.1.el10_2
perfalmalinux 106.12.0-211.58.1.el10_2
python3-perfalmalinux 106.12.0-211.58.1.el10_2
rtlaalmalinux 106.12.0-211.58.1.el10_2
rvalmalinux 106.12.0-211.58.1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-39964 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg 8.8 0.0161 KEVExploited
Urgent CVE-2026-64534 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_un... 9.8 0.0032 None reported
Urgent CVE-2026-68391 Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds 9.8 0.0013 None reported
Urgent CVE-2026-53062 dm cache policy smq: fix missing locks in invalidating cache blocks 9.8 0.0010 None reported
High CVE-2026-68159 libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE 9.8 0.0075 None reported
High CVE-2026-68155 libceph: Reject monmaps advertising zero monitors 8.8 0.0070 None reported
High CVE-2026-68188 Bluetooth: RFCOMM: Fix session UAF in set_termios 8.8 0.0022 None reported
High CVE-2026-63823 keys: Pin request_key_auth payload in instantiate paths 8.8 0.0016 None reported
High CVE-2026-68293 net/mlx5: Fix MCIA register buffer overflow on 32 dword reads 8.8 0.0014 None reported
High CVE-2026-45894 iommu/vt-d: Clear Present bit before tearing down PASID entry 8.8 0.0013 None reported
High CVE-2026-45959 kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix a crash due to incorrect cleanu... 8.8 0.0013 None reported
High CVE-2026-74518 mm/hugetlb: fix list corruption in allocate_file_region_entries() 8.8 0.0013 None reported
Showing 1 to 12 of 12 1