Linux · AlmaLinux · Security advisory · September 3, 2026

ALSA-2026:63014: Security update for 25 packages

ALSA-2026:63014, released September 3, 2026, fixes 14 CVEs across 25 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
14
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0071
53rd percentile

Priority of the 14 CVEs

Patch now 0 Urgent 1 High 13 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolalmalinux 84.18.0-553.159.1.el8_10
kernelalmalinux 84.18.0-553.159.1.el8_10
kernel-abi-stablelistsalmalinux 84.18.0-553.159.1.el8_10
kernel-corealmalinux 84.18.0-553.159.1.el8_10
kernel-cross-headersalmalinux 84.18.0-553.159.1.el8_10
kernel-debugalmalinux 84.18.0-553.159.1.el8_10
kernel-debug-corealmalinux 84.18.0-553.159.1.el8_10
kernel-debug-develalmalinux 84.18.0-553.159.1.el8_10
kernel-debug-modulesalmalinux 84.18.0-553.159.1.el8_10
kernel-debug-modules-extraalmalinux 84.18.0-553.159.1.el8_10
kernel-develalmalinux 84.18.0-553.159.1.el8_10
kernel-docalmalinux 84.18.0-553.159.1.el8_10
kernel-headersalmalinux 84.18.0-553.159.1.el8_10
kernel-modulesalmalinux 84.18.0-553.159.1.el8_10
kernel-modules-extraalmalinux 84.18.0-553.159.1.el8_10
kernel-toolsalmalinux 84.18.0-553.159.1.el8_10
kernel-tools-libsalmalinux 84.18.0-553.159.1.el8_10
kernel-tools-libs-develalmalinux 84.18.0-553.159.1.el8_10
kernel-zfcpdumpalmalinux 84.18.0-553.159.1.el8_10
kernel-zfcpdump-corealmalinux 84.18.0-553.159.1.el8_10
kernel-zfcpdump-develalmalinux 84.18.0-553.159.1.el8_10
kernel-zfcpdump-modulesalmalinux 84.18.0-553.159.1.el8_10
kernel-zfcpdump-modules-extraalmalinux 84.18.0-553.159.1.el8_10
perfalmalinux 84.18.0-553.159.1.el8_10
python3-perfalmalinux 84.18.0-553.159.1.el8_10

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-63800 pNFS: Fix use-after-free in pnfs_update_layout()9.8 0.0064 None reported
High CVE-2026-64268 RDMA/siw: bound Read Response placement to the RREAD length9.8 0.0071 None reported
High CVE-2026-53399 nfsd: release layout stid on setlease failure9.8 0.0066 None reported
High CVE-2026-53392 NFSv4/flexfiles: reject zero filehandle version count8.8 0.0053 None reported
High CVE-2026-53397 nfsd: fix posix_acl leak on SETACL decode failure8.8 0.0053 None reported
High CVE-2026-53391 NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr8.8 0.0052 None reported
High CVE-2026-74581 net: ipv6: clear suppressed fib6 rule result9.8 0.0042 None reported
High CVE-2026-68480 x86/bugs: Make Safe-RET robust against interrupt injection8.8 0.0023 None reported
High CVE-2025-71132 smc91x: fix broken irq-context in PREEMPT_RT8.8 0.0022 None reported
High CVE-2024-57849 linux: In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during s...8.8 0.0021 None reported
High CVE-2026-64298 NFSv4: include MAY_WRITE in open permission mask for O_TRUNC8.8 0.0015 None reported
High CVE-2026-64018 kernel: In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-...9.3 0.0014 None reported
High CVE-2026-45970 kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system8.8 0.0013 None reported
High CVE-2026-53185 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k...8.8 0.0011 None reported
Showing 1 to 14 of 14 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.