Linux · Security advisory · September 30, 2026
ALSA-2026:74084: Security update for 4 packages
ALSA-2026:74084, released September 30, 2026, fixes 324 CVEs across 4 products. One of them is being exploited (CVE-2026-3909); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
324
65 rated Critical
Exploited
1
CVE-2026-3909
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0995
95th percentile
Priority of the 324 CVEs
Patch now 1
Urgent 65
High 258
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| webkit2gtk3 | almalinux 8 | 2.54.0-1.el8_10 |
| webkit2gtk3-devel | almalinux 8 | 2.54.0-1.el8_10 |
| webkit2gtk3-jsc | almalinux 8 | 2.54.0-1.el8_10 |
| webkit2gtk3-jsc-devel | almalinux 8 | 2.54.0-1.el8_10 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2026-3909 | Chromium: CVE-2026-3909 Out of bounds write in Skia | 9.6 | 0.0234 | KEVExploited | |
| Urgent | CVE-2026-10881 | Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE | 9.6 | 0.0063 | None reported | |
| Urgent | CVE-2026-78904 | Chromium: CVE-2026-78904 Type confusion in ANGLE | 9.6 | 0.0062 | None reported | |
| Urgent | CVE-2026-78989 | Chromium: CVE-2026-78989 Out of bounds read in ANGLE | 9.6 | 0.0056 | None reported | |
| Urgent | CVE-2026-17687 | Chromium: CVE-2026-17687 Type Confusion in ANGLE | 9.6 | 0.0056 | None reported | |
| Urgent | CVE-2026-17655 | Chromium: CVE-2026-17655 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0055 | None reported | |
| Urgent | CVE-2026-17697 | Chromium: CVE-2026-17697 Type Confusion in ANGLE | 9.6 | 0.0055 | None reported | |
| Urgent | CVE-2026-17671 | Chromium: CVE-2026-17671 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0051 | None reported | |
| Urgent | CVE-2026-17682 | Chromium: CVE-2026-17682 Integer overflow in ANGLE | 9.6 | 0.0051 | None reported | |
| Urgent | CVE-2026-17704 | Chromium: CVE-2026-17704 Use after free in ANGLE | 9.6 | 0.0051 | None reported | |
| Urgent | CVE-2026-17717 | Chromium: CVE-2026-17717 Integer overflow in ANGLE | 9.6 | 0.0051 | None reported | |
| Urgent | CVE-2026-17676 | Chromium: CVE-2026-17676 Inappropriate implementation in ANGLE | 9.6 | 0.0049 | None reported | |
| Urgent | CVE-2026-79282 | chromium: Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute ar... | 9.6 | 0.0048 | None reported | |
| Urgent | CVE-2026-79131 | Chromium: CVE-2026-79131 Out of bounds write in ANGLE | 9.6 | 0.0048 | None reported | |
| Urgent | CVE-2026-79149 | Chromium: CVE-2026-79149 Use after free in ANGLE | 9.6 | 0.0048 | None reported | |
| Urgent | CVE-2026-79188 | Chromium: CVE-2026-79188 Out of bounds write in ANGLE | 9.6 | 0.0048 | None reported | |
| Urgent | CVE-2026-79275 | Chromium: CVE-2026-79275 Use after free in ANGLE | 9.6 | 0.0048 | None reported | |
| Urgent | CVE-2026-79019 | Chromium: CVE-2026-79019 Out of bounds write in ANGLE | 9.6 | 0.0048 | None reported | |
| Urgent | CVE-2026-17691 | Chromium: CVE-2026-17691 Out of bounds write in ANGLE | 9.6 | 0.0048 | None reported | |
| Urgent | CVE-2026-17695 | Chromium: CVE-2026-17695 Inappropriate implementation in ANGLE | 9.6 | 0.0048 | None reported | |
| Urgent | CVE-2026-17701 | Chromium: CVE-2026-17701 Out of bounds read in ANGLE | 9.6 | 0.0047 | None reported | |
| Urgent | CVE-2026-13885 | Chromium: CVE-2026-13885 Use after free in Skia | 9.6 | 0.0046 | None reported | |
| Urgent | CVE-2026-79043 | Chromium: CVE-2026-79043 Out of bounds write in ANGLE | 9.6 | 0.0046 | None reported | |
| Urgent | CVE-2026-17718 | Chromium: CVE-2026-17718 Use after free in ANGLE | 9.6 | 0.0044 | None reported | |
| Urgent | CVE-2026-17721 | Chromium: CVE-2026-17721 Out of bounds write in ANGLE | 9.6 | 0.0044 | None reported |
Showing 1 to 25 of 324
1Next