{
  "fix": "ALSA-2026:68532",
  "url": "https://patchblox.com/security/fix/linux/alsa-2026-68532",
  "summary": "ALSA-2026:68532, released September 17, 2026, fixes 23 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 10 packages",
  "released": "2026-09-17T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-46266, rated Critical",
  "supported": true,
  "cveCount": 23,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00761,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/ALSA-2026:68532",
  "appliesTo": [
    {
      "product": "kernel-rt",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt",
      "release": "almalinux 8",
      "fixedVersion": "4.18.0-553.164.1.rt7.505.el8_10",
      "supported": true
    },
    {
      "product": "kernel-rt-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt-core",
      "release": "almalinux 8",
      "fixedVersion": "4.18.0-553.164.1.rt7.505.el8_10",
      "supported": true
    },
    {
      "product": "kernel-rt-debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt-debug",
      "release": "almalinux 8",
      "fixedVersion": "4.18.0-553.164.1.rt7.505.el8_10",
      "supported": true
    },
    {
      "product": "kernel-rt-debug-core",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt-debug-core",
      "release": "almalinux 8",
      "fixedVersion": "4.18.0-553.164.1.rt7.505.el8_10",
      "supported": true
    },
    {
      "product": "kernel-rt-debug-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt-debug-devel",
      "release": "almalinux 8",
      "fixedVersion": "4.18.0-553.164.1.rt7.505.el8_10",
      "supported": true
    },
    {
      "product": "kernel-rt-debug-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt-debug-modules",
      "release": "almalinux 8",
      "fixedVersion": "4.18.0-553.164.1.rt7.505.el8_10",
      "supported": true
    },
    {
      "product": "kernel-rt-debug-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt-debug-modules-extra",
      "release": "almalinux 8",
      "fixedVersion": "4.18.0-553.164.1.rt7.505.el8_10",
      "supported": true
    },
    {
      "product": "kernel-rt-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt-devel",
      "release": "almalinux 8",
      "fixedVersion": "4.18.0-553.164.1.rt7.505.el8_10",
      "supported": true
    },
    {
      "product": "kernel-rt-modules",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt-modules",
      "release": "almalinux 8",
      "fixedVersion": "4.18.0-553.164.1.rt7.505.el8_10",
      "supported": true
    },
    {
      "product": "kernel-rt-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt-modules-extra",
      "release": "almalinux 8",
      "fixedVersion": "4.18.0-553.164.1.rt7.505.el8_10",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-46266",
      "url": "https://patchblox.com/security/cve/CVE-2026-46266",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  inet: RAW sockets using IPPROTO_RAW MUST drop in...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00465,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53075",
      "url": "https://patchblox.com/security/cve/CVE-2026-53075",
      "title": "ppp: require CAP_NET_ADMIN in target netns for unattached ioctls",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68143",
      "url": "https://patchblox.com/security/cve/CVE-2026-68143",
      "title": "net: slip: serialize receive against buffer reallocation",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53176",
      "url": "https://patchblox.com/security/cve/CVE-2026-53176",
      "title": "IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00761,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63919",
      "url": "https://patchblox.com/security/cve/CVE-2026-63919",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.0065,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53228",
      "url": "https://patchblox.com/security/cve/CVE-2026-53228",
      "title": "ipv6: sit: reload inner IPv6 header after GSO offloads",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53268",
      "url": "https://patchblox.com/security/cve/CVE-2026-53268",
      "title": "netfilter: conntrack_irc: fix possible out-of-bounds read",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68426",
      "url": "https://patchblox.com/security/cve/CVE-2026-68426",
      "title": "xfrm: fix stale skb-\u003Eprev after async crypto steals a GSO segment",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00498,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43233",
      "url": "https://patchblox.com/security/cve/CVE-2026-43233",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46306",
      "url": "https://patchblox.com/security/cve/CVE-2026-46306",
      "title": "flow_dissector: do not dissect PPPoE PFC frames",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00449,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53131",
      "url": "https://patchblox.com/security/cve/CVE-2026-53131",
      "title": "netfilter: require Ethernet MAC header before using eth_hdr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.4,
      "epss": 0.00435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52920",
      "url": "https://patchblox.com/security/cve/CVE-2026-52920",
      "title": "netfilter: xt_policy: fix strict mode inbound policy matching",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.3,
      "epss": 0.00299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53275",
      "url": "https://patchblox.com/security/cve/CVE-2026-53275",
      "title": "ipv6: mcast: Fix use-after-free when processing MLD queries",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31663",
      "url": "https://patchblox.com/security/cve/CVE-2026-31663",
      "title": "xfrm: hold dev ref until after transport_finish NF_HOOK",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00224,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72298",
      "url": "https://patchblox.com/security/cve/CVE-2026-72298",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: L...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63917",
      "url": "https://patchblox.com/security/cve/CVE-2026-63917",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63921",
      "url": "https://patchblox.com/security/cve/CVE-2026-63921",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43339",
      "url": "https://patchblox.com/security/cve/CVE-2026-43339",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv6: prevent possible UaF in addrconf_permanent_...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.1,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53223",
      "url": "https://patchblox.com/security/cve/CVE-2026-53223",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnet: guard timestamp cmsgs to real error queue sk...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.1,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64002",
      "url": "https://patchblox.com/security/cve/CVE-2026-64002",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv4: free net-\u003Eipv4.sysctl_local_reserved_ports...",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23103",
      "url": "https://patchblox.com/security/cve/CVE-2026-23103",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipvlan: Make the addrs_lock be per port\nMake the...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53239",
      "url": "https://patchblox.com/security/cve/CVE-2026-53239",
      "title": "xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53192",
      "url": "https://patchblox.com/security/cve/CVE-2026-53192",
      "title": "ALSA: timer: Fix UAF at snd_timer_user_params()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}