Linux · Security advisory · November 7, 2026

ALSA-2026:86033: Security update for 74 packages

ALSA-2026:86033, released November 7, 2026, fixes 17 CVEs across 74 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
17
3 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0079
56th percentile

Priority of the 17 CVEs

Patch now 0 Urgent 3 High 14 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelalmalinux 95.14.0-687.59.1.el9_8
kernel-64kalmalinux 95.14.0-687.59.1.el9_8
kernel-64k-corealmalinux 95.14.0-687.59.1.el9_8
kernel-64k-debugalmalinux 95.14.0-687.59.1.el9_8
kernel-64k-debug-corealmalinux 95.14.0-687.59.1.el9_8
kernel-64k-debug-develalmalinux 95.14.0-687.59.1.el9_8
kernel-64k-debug-devel-matchedalmalinux 95.14.0-687.59.1.el9_8
kernel-64k-debug-modulesalmalinux 95.14.0-687.59.1.el9_8
kernel-64k-debug-modules-corealmalinux 95.14.0-687.59.1.el9_8
kernel-64k-debug-modules-extraalmalinux 95.14.0-687.59.1.el9_8
kernel-64k-develalmalinux 95.14.0-687.59.1.el9_8
kernel-64k-devel-matchedalmalinux 95.14.0-687.59.1.el9_8
kernel-64k-modulesalmalinux 95.14.0-687.59.1.el9_8
kernel-64k-modules-corealmalinux 95.14.0-687.59.1.el9_8
kernel-64k-modules-extraalmalinux 95.14.0-687.59.1.el9_8
kernel-abi-stablelistsalmalinux 95.14.0-687.59.1.el9_8
kernel-corealmalinux 95.14.0-687.59.1.el9_8
kernel-cross-headersalmalinux 95.14.0-687.59.1.el9_8
kernel-debugalmalinux 95.14.0-687.59.1.el9_8
kernel-debug-corealmalinux 95.14.0-687.59.1.el9_8
kernel-debug-develalmalinux 95.14.0-687.59.1.el9_8
kernel-debug-devel-matchedalmalinux 95.14.0-687.59.1.el9_8
kernel-debug-modulesalmalinux 95.14.0-687.59.1.el9_8
kernel-debug-modules-corealmalinux 95.14.0-687.59.1.el9_8
kernel-debug-modules-extraalmalinux 95.14.0-687.59.1.el9_8
kernel-debug-uki-virtalmalinux 95.14.0-687.59.1.el9_8
kernel-develalmalinux 95.14.0-687.59.1.el9_8
kernel-devel-matchedalmalinux 95.14.0-687.59.1.el9_8
kernel-docalmalinux 95.14.0-687.59.1.el9_8
kernel-headersalmalinux 95.14.0-687.59.1.el9_8
kernel-modulesalmalinux 95.14.0-687.59.1.el9_8
kernel-modules-corealmalinux 95.14.0-687.59.1.el9_8
kernel-modules-extraalmalinux 95.14.0-687.59.1.el9_8
kernel-rtalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-64kalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-64k-corealmalinux 95.14.0-687.59.1.el9_8
kernel-rt-64k-debugalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-64k-debug-corealmalinux 95.14.0-687.59.1.el9_8
kernel-rt-64k-debug-develalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-64k-debug-modulesalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-64k-debug-modules-corealmalinux 95.14.0-687.59.1.el9_8
kernel-rt-64k-debug-modules-extraalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-64k-develalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-64k-modulesalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-64k-modules-corealmalinux 95.14.0-687.59.1.el9_8
kernel-rt-64k-modules-extraalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-corealmalinux 95.14.0-687.59.1.el9_8
kernel-rt-debugalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-debug-corealmalinux 95.14.0-687.59.1.el9_8
kernel-rt-debug-develalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-debug-modulesalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-debug-modules-corealmalinux 95.14.0-687.59.1.el9_8
kernel-rt-debug-modules-extraalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-develalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-modulesalmalinux 95.14.0-687.59.1.el9_8
kernel-rt-modules-corealmalinux 95.14.0-687.59.1.el9_8
kernel-rt-modules-extraalmalinux 95.14.0-687.59.1.el9_8
kernel-toolsalmalinux 95.14.0-687.59.1.el9_8
kernel-tools-libsalmalinux 95.14.0-687.59.1.el9_8
kernel-tools-libs-develalmalinux 95.14.0-687.59.1.el9_8
kernel-uki-virtalmalinux 95.14.0-687.59.1.el9_8
kernel-uki-virt-addonsalmalinux 95.14.0-687.59.1.el9_8
kernel-zfcpdumpalmalinux 95.14.0-687.59.1.el9_8
kernel-zfcpdump-corealmalinux 95.14.0-687.59.1.el9_8
kernel-zfcpdump-develalmalinux 95.14.0-687.59.1.el9_8
kernel-zfcpdump-devel-matchedalmalinux 95.14.0-687.59.1.el9_8
kernel-zfcpdump-modulesalmalinux 95.14.0-687.59.1.el9_8
kernel-zfcpdump-modules-corealmalinux 95.14.0-687.59.1.el9_8
kernel-zfcpdump-modules-extraalmalinux 95.14.0-687.59.1.el9_8
libperfalmalinux 95.14.0-687.59.1.el9_8
perfalmalinux 95.14.0-687.59.1.el9_8
python3-perfalmalinux 95.14.0-687.59.1.el9_8
rtlaalmalinux 95.14.0-687.59.1.el9_8
rvalmalinux 95.14.0-687.59.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-99999 ipv4: validate checksum_start before completing checksum 9.3 0.0079 None reported
Urgent CVE-2026-89633 linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated... 9.8 0.0055 None reported
Urgent CVE-2026-63974 Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close 9.8 0.0035 None reported
High CVE-2026-80590 inet: frags: strip GSO state from fragments before reassembly 8.8 0.0058 None reported
High CVE-2026-64024 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 9.4 0.0031 None reported
High CVE-2026-74509 Bluetooth: hci_sync: Fix advertising data UAFs 8.8 0.0025 None reported
High CVE-2026-64572 ipv4: fib: free fib_alias with kfree_rcu() on insert error path 8.8 0.0020 None reported
High CVE-2026-98260 exec: Cleanup POSIX timers right after de_thread() 8.8 0.0019 None reported
High CVE-2026-63899 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0018 None reported
High CVE-2026-63956 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0017 None reported
High CVE-2026-63962 usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() 8.8 0.0016 None reported
High CVE-2026-64009 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0014 None reported
High CVE-2026-64114 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0014 None reported
High CVE-2026-64032 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0013 None reported
High CVE-2026-31678 openvswitch: defer tunnel netdev_put to RCU release 8.8 0.0013 None reported
High CVE-2026-93817 perf: Fix addr_filter_ranges lifetime 8.8 0.0013 None reported
High CVE-2026-52935 xfrm: espintcp: do not reuse an in-progress partial send 8.8 0.0010 None reported
Showing 1 to 17 of 17 1