Linux · 
AlmaLinux · Security advisory · September 3, 2026
AlmaLinux · Security advisory · September 3, 2026ALSA-2026:63013: Security update for 10 packages
ALSA-2026:63013, released September 3, 2026, fixes 14 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
14
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0071
53rd percentile
Priority of the 14 CVEs
Patch now 0
Urgent 1
High 13
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-rt | almalinux 8 | 4.18.0-553.159.1.rt7.500.el8_10 |
| kernel-rt-core | almalinux 8 | 4.18.0-553.159.1.rt7.500.el8_10 |
| kernel-rt-debug | almalinux 8 | 4.18.0-553.159.1.rt7.500.el8_10 |
| kernel-rt-debug-core | almalinux 8 | 4.18.0-553.159.1.rt7.500.el8_10 |
| kernel-rt-debug-devel | almalinux 8 | 4.18.0-553.159.1.rt7.500.el8_10 |
| kernel-rt-debug-modules | almalinux 8 | 4.18.0-553.159.1.rt7.500.el8_10 |
| kernel-rt-debug-modules-extra | almalinux 8 | 4.18.0-553.159.1.rt7.500.el8_10 |
| kernel-rt-devel | almalinux 8 | 4.18.0-553.159.1.rt7.500.el8_10 |
| kernel-rt-modules | almalinux 8 | 4.18.0-553.159.1.rt7.500.el8_10 |
| kernel-rt-modules-extra | almalinux 8 | 4.18.0-553.159.1.rt7.500.el8_10 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-63800 | pNFS: Fix use-after-free in pnfs_update_layout() | 9.8 | 0.0064 | None reported |
| High | CVE-2026-64268 | RDMA/siw: bound Read Response placement to the RREAD length | 9.8 | 0.0071 | None reported |
| High | CVE-2026-53399 | nfsd: release layout stid on setlease failure | 9.8 | 0.0066 | None reported |
| High | CVE-2026-53392 | NFSv4/flexfiles: reject zero filehandle version count | 8.8 | 0.0053 | None reported |
| High | CVE-2026-53397 | nfsd: fix posix_acl leak on SETACL decode failure | 8.8 | 0.0053 | None reported |
| High | CVE-2026-53391 | NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr | 8.8 | 0.0052 | None reported |
| High | CVE-2026-74581 | net: ipv6: clear suppressed fib6 rule result | 9.8 | 0.0042 | None reported |
| High | CVE-2026-68480 | x86/bugs: Make Safe-RET robust against interrupt injection | 8.8 | 0.0023 | None reported |
| High | CVE-2025-71132 | smc91x: fix broken irq-context in PREEMPT_RT | 8.8 | 0.0022 | None reported |
| High | CVE-2024-57849 | linux: In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during s... | 8.8 | 0.0021 | None reported |
| High | CVE-2026-64298 | NFSv4: include MAY_WRITE in open permission mask for O_TRUNC | 8.8 | 0.0015 | None reported |
| High | CVE-2026-64018 | kernel: In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-... | 9.3 | 0.0014 | None reported |
| High | CVE-2026-45970 | kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0013 | None reported |
| High | CVE-2026-53185 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k... | 8.8 | 0.0011 | None reported |
Showing 1 to 14 of 14
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.