Linux · Security advisory · November 7, 2026
ALSA-2026:94629: Security update for 4 packages
ALSA-2026:94629, released November 7, 2026, fixes 14 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
14
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0040
34th percentile
Priority of the 14 CVEs
Patch now 0
Urgent 0
High 14
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| dpdk | almalinux 9 | 2:25.11-2.el9_8 |
| dpdk-devel | almalinux 9 | 2:25.11-2.el9_8 |
| dpdk-doc | almalinux 9 | 2:25.11-2.el9_8 |
| dpdk-tools | almalinux 9 | 2:25.11-2.el9_8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2026-100236 | Dpdk: dpdk: heap out-of-bounds read/write in gso header copy | 8.8 | 0.0040 | None reported | |
| High | CVE-2026-86563 | dpdk: A flaw was found in DPDK lib/vhost | 8.8 | 0.0020 | None reported | |
| High | CVE-2026-86847 | Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup | 8.8 | 0.0020 | None reported | |
| High | CVE-2026-86561 | dpdk: A flaw was found in DPDK lib/vhost | 8.8 | 0.0019 | None reported | |
| High | CVE-2026-86846 | dpdk: A flaw was found in DPDK lib/vhost vhost-crypto | 8.8 | 0.0019 | None reported | |
| High | CVE-2026-86567 | Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap | 8.8 | 0.0019 | None reported | |
| High | CVE-2026-86562 | Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) | 8.8 | 0.0018 | None reported | |
| High | CVE-2026-86566 | dpdk: A flaw was found in DPDK lib/vhost | 8.8 | 0.0017 | None reported | |
| High | CVE-2026-86856 | dpdk: A flaw was found in the DPDK nfp vDPA driver | 8.8 | 0.0017 | None reported | |
| High | CVE-2026-86565 | Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write | 8.8 | 0.0017 | None reported | |
| High | CVE-2026-86845 | dpdk: A flaw was found in DPDK lib/vhost vhost-crypto | 8.8 | 0.0017 | None reported | |
| High | CVE-2026-86849 | dpdk: A flaw was found in DPDK lib/vhost vhost-crypto | 8.8 | 0.0014 | None reported | |
| High | CVE-2026-93683 | dpdk: A flaw was found in the DPDK vhost library | 8.8 | 0.0011 | None reported | |
| High | CVE-2026-86848 | dpdk: A flaw was found in DPDK lib/vhost vhost-crypto | 8.8 | 0.0011 | None reported |
Showing 1 to 14 of 14
1