Linux · Security advisory · November 7, 2026

ALSA-2026:95100: Security update for 10 packages

ALSA-2026:95100, released November 7, 2026, fixes 6 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
6
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0087
59th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 1 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-rtalmalinux 84.18.0-553.184.1.rt7.525.el8_10
kernel-rt-corealmalinux 84.18.0-553.184.1.rt7.525.el8_10
kernel-rt-debugalmalinux 84.18.0-553.184.1.rt7.525.el8_10
kernel-rt-debug-corealmalinux 84.18.0-553.184.1.rt7.525.el8_10
kernel-rt-debug-develalmalinux 84.18.0-553.184.1.rt7.525.el8_10
kernel-rt-debug-modulesalmalinux 84.18.0-553.184.1.rt7.525.el8_10
kernel-rt-debug-modules-extraalmalinux 84.18.0-553.184.1.rt7.525.el8_10
kernel-rt-develalmalinux 84.18.0-553.184.1.rt7.525.el8_10
kernel-rt-modulesalmalinux 84.18.0-553.184.1.rt7.525.el8_10
kernel-rt-modules-extraalmalinux 84.18.0-553.184.1.rt7.525.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-64541 linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pinn... 9.8 0.0057 None reported
High CVE-2026-52929 sctp: stream: fully roll back denied add-stream state 9.8 0.0087 None reported
High CVE-2026-74586 sctp: clear new_transport when removing a peer 9.8 0.0050 None reported
High CVE-2026-80864 RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp 9.8 0.0020 None reported
High CVE-2026-80863 RDMA/rxe: Fix OOB in free_rd_atomic_resources() 7.8 0.0018 None reported
High CVE-2026-89488 linux: In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-fre... 8.8 0.0013 None reported
Showing 1 to 6 of 6 1