Linux · Security advisory · November 7, 2026

ALSA-2026:95370: Security update for 74 packages

ALSA-2026:95370, released November 7, 2026, fixes 16 CVEs across 74 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
16
4 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0064
50th percentile

Priority of the 16 CVEs

Patch now 0 Urgent 4 High 12 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelalmalinux 95.14.0-687.66.1.el9_8
kernel-64kalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-corealmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debugalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debug-corealmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debug-develalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debug-devel-matchedalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debug-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debug-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debug-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-develalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-devel-matchedalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-64k-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-abi-stablelistsalmalinux 95.14.0-687.66.1.el9_8
kernel-corealmalinux 95.14.0-687.66.1.el9_8
kernel-cross-headersalmalinux 95.14.0-687.66.1.el9_8
kernel-debugalmalinux 95.14.0-687.66.1.el9_8
kernel-debug-corealmalinux 95.14.0-687.66.1.el9_8
kernel-debug-develalmalinux 95.14.0-687.66.1.el9_8
kernel-debug-devel-matchedalmalinux 95.14.0-687.66.1.el9_8
kernel-debug-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-debug-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-debug-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-debug-uki-virtalmalinux 95.14.0-687.66.1.el9_8
kernel-develalmalinux 95.14.0-687.66.1.el9_8
kernel-devel-matchedalmalinux 95.14.0-687.66.1.el9_8
kernel-docalmalinux 95.14.0-687.66.1.el9_8
kernel-headersalmalinux 95.14.0-687.66.1.el9_8
kernel-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-rtalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64kalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-debugalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-debug-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-debug-develalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-debug-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-debug-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-debug-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-develalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-debugalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-debug-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-debug-develalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-debug-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-debug-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-debug-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-develalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-toolsalmalinux 95.14.0-687.66.1.el9_8
kernel-tools-libsalmalinux 95.14.0-687.66.1.el9_8
kernel-tools-libs-develalmalinux 95.14.0-687.66.1.el9_8
kernel-uki-virtalmalinux 95.14.0-687.66.1.el9_8
kernel-uki-virt-addonsalmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdumpalmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdump-corealmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdump-develalmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdump-devel-matchedalmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdump-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdump-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdump-modules-extraalmalinux 95.14.0-687.66.1.el9_8
libperfalmalinux 95.14.0-687.66.1.el9_8
perfalmalinux 95.14.0-687.66.1.el9_8
python3-perfalmalinux 95.14.0-687.66.1.el9_8
rtlaalmalinux 95.14.0-687.66.1.el9_8
rvalmalinux 95.14.0-687.66.1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-72221 linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callbac... 9.8 0.0064 None reported
Urgent CVE-2026-72222 linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS... 9.8 0.0064 None reported
Urgent CVE-2026-64541 linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pinn... 9.8 0.0057 None reported
Urgent CVE-2026-89479 sctp: stop processing a packet once its association is deleted 9.8 0.0050 None reported
High CVE-2026-74752 sctp: validate cookie AUTH state before use 9.8 0.0052 None reported
High CVE-2026-74586 sctp: clear new_transport when removing a peer 9.8 0.0050 None reported
High CVE-2026-74588 sctp: keep chunk->transport in step with the list it is queued on 9.8 0.0050 None reported
High CVE-2026-98403 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system 8.8 0.0021 None reported
High CVE-2026-68162 sctp: avoid auth_enable sysctl UAF during netns teardown 8.8 0.0020 None reported
High CVE-2026-72080 linux: In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix use-after-free during unmount D... 8.8 0.0017 None reported
High CVE-2026-80571 linux: In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: papr-phy-attest - validate cmd.... 8.8 0.0016 None reported
High CVE-2026-68451 s390/zcrypt: Validate length for CCA ECC private key requests 8.8 0.0013 None reported
High CVE-2026-80584 s390/qeth: validate user buffer length in SNMP and ARP query ioctls 8.8 0.0013 None reported
High CVE-2026-68452 s390/zcrypt: Validate length for CCA AES cipher key requests 8.8 0.0013 None reported
High CVE-2026-80553 s390/vfio_ccw: Cancel existing workqueues 8.8 0.0013 None reported
High CVE-2026-89488 linux: In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-fre... 8.8 0.0013 None reported
Showing 1 to 16 of 16 1