Linux · AlmaLinux · Security advisory · September 3, 2026

ALSA-2026:63129: Security update for 74 packages

ALSA-2026:63129, released September 3, 2026, fixes 27 CVEs across 74 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
27
5 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0080
56th percentile

Priority of the 27 CVEs

Patch now 0 Urgent 5 High 22 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelalmalinux 95.14.0-687.44.1.el9_8
kernel-64kalmalinux 95.14.0-687.44.1.el9_8
kernel-64k-corealmalinux 95.14.0-687.44.1.el9_8
kernel-64k-debugalmalinux 95.14.0-687.44.1.el9_8
kernel-64k-debug-corealmalinux 95.14.0-687.44.1.el9_8
kernel-64k-debug-develalmalinux 95.14.0-687.44.1.el9_8
kernel-64k-debug-devel-matchedalmalinux 95.14.0-687.44.1.el9_8
kernel-64k-debug-modulesalmalinux 95.14.0-687.44.1.el9_8
kernel-64k-debug-modules-corealmalinux 95.14.0-687.44.1.el9_8
kernel-64k-debug-modules-extraalmalinux 95.14.0-687.44.1.el9_8
kernel-64k-develalmalinux 95.14.0-687.44.1.el9_8
kernel-64k-devel-matchedalmalinux 95.14.0-687.44.1.el9_8
kernel-64k-modulesalmalinux 95.14.0-687.44.1.el9_8
kernel-64k-modules-corealmalinux 95.14.0-687.44.1.el9_8
kernel-64k-modules-extraalmalinux 95.14.0-687.44.1.el9_8
kernel-abi-stablelistsalmalinux 95.14.0-687.44.1.el9_8
kernel-corealmalinux 95.14.0-687.44.1.el9_8
kernel-cross-headersalmalinux 95.14.0-687.44.1.el9_8
kernel-debugalmalinux 95.14.0-687.44.1.el9_8
kernel-debug-corealmalinux 95.14.0-687.44.1.el9_8
kernel-debug-develalmalinux 95.14.0-687.44.1.el9_8
kernel-debug-devel-matchedalmalinux 95.14.0-687.44.1.el9_8
kernel-debug-modulesalmalinux 95.14.0-687.44.1.el9_8
kernel-debug-modules-corealmalinux 95.14.0-687.44.1.el9_8
kernel-debug-modules-extraalmalinux 95.14.0-687.44.1.el9_8
kernel-debug-uki-virtalmalinux 95.14.0-687.44.1.el9_8
kernel-develalmalinux 95.14.0-687.44.1.el9_8
kernel-devel-matchedalmalinux 95.14.0-687.44.1.el9_8
kernel-docalmalinux 95.14.0-687.44.1.el9_8
kernel-headersalmalinux 95.14.0-687.44.1.el9_8
kernel-modulesalmalinux 95.14.0-687.44.1.el9_8
kernel-modules-corealmalinux 95.14.0-687.44.1.el9_8
kernel-modules-extraalmalinux 95.14.0-687.44.1.el9_8
kernel-rtalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-64kalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-64k-corealmalinux 95.14.0-687.44.1.el9_8
kernel-rt-64k-debugalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-64k-debug-corealmalinux 95.14.0-687.44.1.el9_8
kernel-rt-64k-debug-develalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-64k-debug-modulesalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-64k-debug-modules-corealmalinux 95.14.0-687.44.1.el9_8
kernel-rt-64k-debug-modules-extraalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-64k-develalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-64k-modulesalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-64k-modules-corealmalinux 95.14.0-687.44.1.el9_8
kernel-rt-64k-modules-extraalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-corealmalinux 95.14.0-687.44.1.el9_8
kernel-rt-debugalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-debug-corealmalinux 95.14.0-687.44.1.el9_8
kernel-rt-debug-develalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-debug-modulesalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-debug-modules-corealmalinux 95.14.0-687.44.1.el9_8
kernel-rt-debug-modules-extraalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-develalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-modulesalmalinux 95.14.0-687.44.1.el9_8
kernel-rt-modules-corealmalinux 95.14.0-687.44.1.el9_8
kernel-rt-modules-extraalmalinux 95.14.0-687.44.1.el9_8
kernel-toolsalmalinux 95.14.0-687.44.1.el9_8
kernel-tools-libsalmalinux 95.14.0-687.44.1.el9_8
kernel-tools-libs-develalmalinux 95.14.0-687.44.1.el9_8
kernel-uki-virtalmalinux 95.14.0-687.44.1.el9_8
kernel-uki-virt-addonsalmalinux 95.14.0-687.44.1.el9_8
kernel-zfcpdumpalmalinux 95.14.0-687.44.1.el9_8
kernel-zfcpdump-corealmalinux 95.14.0-687.44.1.el9_8
kernel-zfcpdump-develalmalinux 95.14.0-687.44.1.el9_8
kernel-zfcpdump-devel-matchedalmalinux 95.14.0-687.44.1.el9_8
kernel-zfcpdump-modulesalmalinux 95.14.0-687.44.1.el9_8
kernel-zfcpdump-modules-corealmalinux 95.14.0-687.44.1.el9_8
kernel-zfcpdump-modules-extraalmalinux 95.14.0-687.44.1.el9_8
libperfalmalinux 95.14.0-687.44.1.el9_8
perfalmalinux 95.14.0-687.44.1.el9_8
python3-perfalmalinux 95.14.0-687.44.1.el9_8
rtlaalmalinux 95.14.0-687.44.1.el9_8
rvalmalinux 95.14.0-687.44.1.el9_8

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-72130 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers n...9.8 0.0080 None reported
Urgent CVE-2026-72069 linux: In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in...9.8 0.0073 None reported
Urgent CVE-2026-63800 pNFS: Fix use-after-free in pnfs_update_layout()9.8 0.0064 None reported
Urgent CVE-2026-68166 userfaultfd: prevent registration of special VMAs9.8 0.0021 None reported
Urgent CVE-2026-63824 KEYS: fix overflow in keyctl_pkey_params_get_2()9.8 0.0017 None reported
High CVE-2026-63887 kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_outp...9.8 0.0078 None reported
High CVE-2026-64268 RDMA/siw: bound Read Response placement to the RREAD length9.8 0.0071 None reported
High CVE-2026-63886 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s...9.8 0.0071 None reported
High CVE-2026-53399 nfsd: release layout stid on setlease failure9.8 0.0066 None reported
High CVE-2026-53392 NFSv4/flexfiles: reject zero filehandle version count8.8 0.0053 None reported
High CVE-2026-53397 nfsd: fix posix_acl leak on SETACL decode failure8.8 0.0053 None reported
High CVE-2026-63808 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system9.8 0.0053 None reported
High CVE-2026-46185 smb/client: fix out-of-bounds read in symlink_data()9.1 0.0053 None reported
High CVE-2026-53391 NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr8.8 0.0052 None reported
High CVE-2026-64387 smb: client: fix query directory replay double-free9.8 0.0046 None reported
High CVE-2026-68480 x86/bugs: Make Safe-RET robust against interrupt injection8.8 0.0023 None reported
High CVE-2026-64490 linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the...8.8 0.0019 None reported
High CVE-2026-64304 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths...8.8 0.0017 None reported
High CVE-2025-40064 smc: Fix use-after-free in __pnet_find_base_ndev().8.8 0.0015 None reported
High CVE-2026-64298 NFSv4: include MAY_WRITE in open permission mask for O_TRUNC8.8 0.0015 None reported
High CVE-2026-64018 kernel: In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-...9.3 0.0014 None reported
High CVE-2025-71147 kernel: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd...8.8 0.0014 None reported
High CVE-2026-68145 iomap: fix out-of-bounds bitmap_set() with zero-length range8.8 0.0014 None reported
High CVE-2026-64438 linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in ad...8.8 0.0014 None reported
High CVE-2026-64002 kernel: In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports...8.8 0.0013 None reported
Showing 1 to 25 of 27 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.