Linux · Security advisory · October 5, 2026
ALSA-2026:75747: Security update for 25 packages
ALSA-2026:75747, released October 5, 2026, fixes 29 CVEs across 25 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
29
3 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0071
53rd percentile
Priority of the 29 CVEs
Patch now 0
Urgent 3
High 26
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-abi-stablelists | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-core | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-cross-headers | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-debug | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-debug-core | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-debug-devel | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-debug-modules | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-debug-modules-extra | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-devel | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-doc | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-headers | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-modules | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-modules-extra | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-tools | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-tools-libs | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-tools-libs-devel | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-zfcpdump | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-zfcpdump-core | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-zfcpdump-devel | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-zfcpdump-modules | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| kernel-zfcpdump-modules-extra | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| perf | almalinux 8 | 4.18.0-553.171.1.el8_10 |
| python3-perf | almalinux 8 | 4.18.0-553.171.1.el8_10 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-89972 | nvme: add missing SRCU grace period in error path | 9.8 | 0.0071 | None reported | |
| Urgent | CVE-2025-39994 | media: tuner: xc5000: Fix use-after-free in xc5000_release | 9.8 | 0.0016 | None reported | |
| Urgent | CVE-2025-40242 | gfs2: Fix unlikely race in gdlm_put_lock | 9.8 | 0.0016 | None reported | |
| High | CVE-2026-74746 | netfilter: flowtable: publish GC-visible tuple last | 9.8 | 0.0054 | None reported | |
| High | CVE-2026-63994 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0051 | None reported | |
| High | CVE-2026-74669 | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 9.8 | 0.0051 | None reported | |
| High | CVE-2026-63992 | kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.1 | 0.0051 | None reported | |
| High | CVE-2026-74744 | ipvlan: inherit needed_headroom and needed_tailroom from phy_dev | 9.8 | 0.0051 | None reported | |
| High | CVE-2026-97417 | netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() | 8.8 | 0.0049 | None reported | |
| High | CVE-2026-89481 | nvme-tcp: fix host memory disclosure on R2T for a read command | 8.8 | 0.0043 | None reported | |
| High | CVE-2026-53049 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0039 | None reported | |
| High | CVE-2026-74569 | netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() | 9.8 | 0.0039 | None reported | |
| High | CVE-2022-50756 | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix mempool alloc size Convert the ma... | 8.8 | 0.0020 | None reported | |
| High | CVE-2023-54048 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 8.8 | 0.0020 | None reported | |
| High | CVE-2026-45856 | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it i... | 8.8 | 0.0019 | None reported | |
| High | CVE-2026-45861 | gfs2: Fix slab-use-after-free in qd_put | 8.8 | 0.0019 | None reported | |
| High | CVE-2026-72255 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 8.8 | 0.0018 | None reported | |
| High | CVE-2026-90227 | nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() | 8.8 | 0.0017 | None reported | |
| High | CVE-2026-53270 | ipvs: clear the svc scheduler ptr early on edit | 9.8 | 0.0016 | None reported | |
| High | CVE-2026-72052 | linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the devic... | 8.8 | 0.0015 | None reported | |
| High | CVE-2026-63829 | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 | None reported | |
| High | CVE-2026-68432 | vxlan: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 | None reported | |
| High | CVE-2026-23105 | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: qfq: Use cl_is_active to determine wh... | 8.8 | 0.0015 | None reported | |
| High | CVE-2026-52972 | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 | None reported | |
| High | CVE-2026-63794 | KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path | 8.8 | 0.0014 | None reported |
Showing 1 to 25 of 29
1Next