ALSA-2026:61887: Security update for 75 packages

ALSA-2026:61887, released September 1, 2026, fixes 37 CVEs across 75 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

5 rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0080

56th percentile

Priority of the 37 CVEs

Patch now 0
                                Urgent 5
                                High 30
                                Routine 2

Fixed package versions

Product	Release	Fixed in
kernel	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-debug	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-debug-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-debug-devel	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-debug-devel-matched	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-debug-modules	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-debug-modules-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-debug-modules-extra	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-devel	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-devel-matched	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-modules	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-modules-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-64k-modules-extra	almalinux 10	6.12.0-211.50.1.el10_2
kernel-abi-stablelists	almalinux 10	6.12.0-211.50.1.el10_2
kernel-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-cross-headers	almalinux 10	6.12.0-211.50.1.el10_2
kernel-debug	almalinux 10	6.12.0-211.50.1.el10_2
kernel-debug-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-debug-devel	almalinux 10	6.12.0-211.50.1.el10_2
kernel-debug-devel-matched	almalinux 10	6.12.0-211.50.1.el10_2
kernel-debug-modules	almalinux 10	6.12.0-211.50.1.el10_2
kernel-debug-modules-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-debug-modules-extra	almalinux 10	6.12.0-211.50.1.el10_2
kernel-debug-uki-virt	almalinux 10	6.12.0-211.50.1.el10_2
kernel-devel	almalinux 10	6.12.0-211.50.1.el10_2
kernel-devel-matched	almalinux 10	6.12.0-211.50.1.el10_2
kernel-doc	almalinux 10	6.12.0-211.50.1.el10_2
kernel-headers	almalinux 10	6.12.0-211.50.1.el10_2
kernel-modules	almalinux 10	6.12.0-211.50.1.el10_2
kernel-modules-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-modules-extra	almalinux 10	6.12.0-211.50.1.el10_2
kernel-modules-extra-matched	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-64k	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-64k-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-64k-debug	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-64k-debug-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-64k-debug-devel	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-64k-debug-modules	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-64k-debug-modules-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-64k-debug-modules-extra	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-64k-devel	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-64k-modules	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-64k-modules-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-64k-modules-extra	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-debug	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-debug-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-debug-devel	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-debug-modules	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-debug-modules-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-debug-modules-extra	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-devel	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-modules	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-modules-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-rt-modules-extra	almalinux 10	6.12.0-211.50.1.el10_2
kernel-tools	almalinux 10	6.12.0-211.50.1.el10_2
kernel-tools-libs	almalinux 10	6.12.0-211.50.1.el10_2
kernel-tools-libs-devel	almalinux 10	6.12.0-211.50.1.el10_2
kernel-uki-virt	almalinux 10	6.12.0-211.50.1.el10_2
kernel-uki-virt-addons	almalinux 10	6.12.0-211.50.1.el10_2
kernel-zfcpdump	almalinux 10	6.12.0-211.50.1.el10_2
kernel-zfcpdump-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-zfcpdump-devel	almalinux 10	6.12.0-211.50.1.el10_2
kernel-zfcpdump-devel-matched	almalinux 10	6.12.0-211.50.1.el10_2
kernel-zfcpdump-modules	almalinux 10	6.12.0-211.50.1.el10_2
kernel-zfcpdump-modules-core	almalinux 10	6.12.0-211.50.1.el10_2
kernel-zfcpdump-modules-extra	almalinux 10	6.12.0-211.50.1.el10_2
libperf	almalinux 10	6.12.0-211.50.1.el10_2
perf	almalinux 10	6.12.0-211.50.1.el10_2
python3-perf	almalinux 10	6.12.0-211.50.1.el10_2
rtla	almalinux 10	6.12.0-211.50.1.el10_2
rv	almalinux 10	6.12.0-211.50.1.el10_2

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-72130	linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers n...	9.8	0.0080	None reported
Urgent	CVE-2026-72069	linux: In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in...	9.8	0.0073	None reported
Urgent	CVE-2026-63800	pNFS: Fix use-after-free in pnfs_update_layout()	9.8	0.0064	None reported
Urgent	CVE-2026-68166	userfaultfd: prevent registration of special VMAs	9.8	0.0021	None reported
Urgent	CVE-2026-53053	iommu/amd: Fix clone_alias() to use the original device's devid	9.8	0.0013	None reported
High	CVE-2026-64320	nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page	9.1	0.0080	None reported
High	CVE-2026-53399	nfsd: release layout stid on setlease failure	9.8	0.0066	None reported
High	CVE-2026-23003	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k...	8.8	0.0055	None reported
High	CVE-2026-53392	NFSv4/flexfiles: reject zero filehandle version count	8.8	0.0053	None reported
High	CVE-2026-53397	nfsd: fix posix_acl leak on SETACL decode failure	8.8	0.0053	None reported
High	CVE-2026-53391	NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr	8.8	0.0052	None reported
High	CVE-2026-64384	smb: client: fix change notify replay double-free	9.8	0.0046	None reported
High	CVE-2026-53026	kernel: In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in nfsd4_a...	8.8	0.0043	None reported
High	CVE-2026-64136	kernel: In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_f...	9.8	0.0041	None reported
High	CVE-2026-53196	USB: serial: io_ti: fix heap overflow in get_manuf_info()	8.8	0.0027	None reported
High	CVE-2026-68480	x86/bugs: Make Safe-RET robust against interrupt injection	8.8	0.0023	None reported
High	CVE-2026-64490	linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the...	8.8	0.0019	None reported
High	CVE-2025-21834	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0018	None reported
High	CVE-2026-64276	Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count	8.8	0.0017	None reported
High	CVE-2026-64277	Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count	8.8	0.0017	None reported
High	CVE-2026-64304	linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths...	8.8	0.0017	None reported
High	CVE-2026-43408	kernel-rt-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system	7.8	0.0016	None reported
High	CVE-2026-68086	mm/khugepaged: write all dirty file folios when collapsing	8.8	0.0015	None reported
High	CVE-2026-64298	NFSv4: include MAY_WRITE in open permission mask for O_TRUNC	8.8	0.0015	None reported
High	CVE-2026-64018	kernel: In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-...	9.3	0.0014	None reported

Also fixes CVE-2026-72130

ELSA-2026-500248
kernel-uek, kernel-uek-core, kernel-uek-debug and 32 more on ol 10, ol 9
SUSE-SU-2026:4640-1
kernel-livepatch-SLE15-SP7-RT_Update_21 on sles 15.7
SUSE-SU-2026:4706-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7
OPENSUSE-SU-2026:22091-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:24197-1
kernel-default on sles 16.0
SUSE-SU-2026:24235-1
kernel-64kb, kernel-azure, kernel-default-base and 6 more on sles 16.0
RLSA-2026:61887
kernel on rocky 10
ELSA-2026-61887-0
kernel, kernel-abi-stablelists, kernel-core and 27 more on ol 10

Vendor advisory

https://osv.dev/vulnerability/ALSA-2026:61887

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/alsa-2026-61887">ALSA-2026:61887 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.