ALSA-2026:67471: Security update for 75 packages

ALSA-2026:67471, released September 15, 2026, fixes 25 CVEs across 75 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

1 rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0066

51st percentile

Priority of the 25 CVEs

Patch now 0
                                Urgent 1
                                High 24
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug-devel-matched	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-debug-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-devel-matched	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-64k-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-abi-stablelists	almalinux 10	6.12.0-211.55.1.el10_2
kernel-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-cross-headers	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-devel-matched	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-debug-uki-virt	almalinux 10	6.12.0-211.55.1.el10_2
kernel-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-devel-matched	almalinux 10	6.12.0-211.55.1.el10_2
kernel-doc	almalinux 10	6.12.0-211.55.1.el10_2
kernel-headers	almalinux 10	6.12.0-211.55.1.el10_2
kernel-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-modules-extra-matched	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-debug	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-debug-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-debug-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-debug-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-debug-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-debug-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-64k-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-debug	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-debug-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-debug-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-debug-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-debug-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-debug-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-rt-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
kernel-tools	almalinux 10	6.12.0-211.55.1.el10_2
kernel-tools-libs	almalinux 10	6.12.0-211.55.1.el10_2
kernel-tools-libs-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-uki-virt	almalinux 10	6.12.0-211.55.1.el10_2
kernel-uki-virt-addons	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump-devel	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump-devel-matched	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump-modules	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump-modules-core	almalinux 10	6.12.0-211.55.1.el10_2
kernel-zfcpdump-modules-extra	almalinux 10	6.12.0-211.55.1.el10_2
libperf	almalinux 10	6.12.0-211.55.1.el10_2
perf	almalinux 10	6.12.0-211.55.1.el10_2
python3-perf	almalinux 10	6.12.0-211.55.1.el10_2
rtla	almalinux 10	6.12.0-211.55.1.el10_2
rv	almalinux 10	6.12.0-211.55.1.el10_2

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2025-68745	linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Comm...	9.8	0.0050	None reported
High	CVE-2026-52924	sctp: purge outqueue on stale COOKIE-ECHO handling	9.8	0.0066	None reported
High	CVE-2026-63919	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0065	None reported
High	CVE-2026-68426	xfrm: fix stale skb->prev after async crypto steals a GSO segment	9.8	0.0050	None reported
High	CVE-2026-53246	sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing	9.8	0.0044	None reported
High	CVE-2026-53131	netfilter: require Ethernet MAC header before using eth_hdr()	9.4	0.0044	None reported
High	CVE-2026-74556	scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer	9.8	0.0040	None reported
High	CVE-2026-63889	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0036	None reported
High	CVE-2026-31539	kernel: In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirect_socket.recv_i...	8.8	0.0033	None reported
High	CVE-2026-53361	af_unix: Set gc_in_progress to true in unix_gc().	8.8	0.0026	None reported
High	CVE-2026-31663	xfrm: hold dev ref until after transport_finish NF_HOOK	8.8	0.0022	None reported
High	CVE-2025-40149	tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().	8.8	0.0017	None reported
High	CVE-2026-63917	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0017	None reported
High	CVE-2026-43248	vhost: move vdpa group bound check to vhost_vdpa	8.8	0.0016	None reported
High	CVE-2026-43368	kernel: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential overflow of shmem scatter...	8.8	0.0016	None reported
High	CVE-2026-63921	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0016	None reported
High	CVE-2026-46149	scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()	8.8	0.0014	None reported
High	CVE-2026-68264	linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Reset current_op in xe_pt_update_ops_...	8.8	0.0014	None reported
High	CVE-2026-64111	kernel-zfcpdump-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system	8.8	0.0014	None reported
High	CVE-2026-31479	kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe: always keep track of remap prev/next Duri...	8.8	0.0013	None reported
High	CVE-2026-31566	drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib	8.8	0.0013	None reported
High	CVE-2026-43370	kernel: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire...	8.8	0.0012	None reported
High	CVE-2026-23466	kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Open-code GGTT MMIO access protection GGT...	8.8	0.0010	None reported
High	CVE-2026-53239	xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()	8.8	0.0010	None reported
High	CVE-2026-31656	drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat	8.8	0.0009	None reported

Also fixes CVE-2025-68745

RHSA-2026:67150
kernel, kernel-64k, kernel-64k-core and 69 more on RHEL 9
RLSA-2026:67150
kernel on rocky 9
ALSA-2026:67150
kernel, kernel-64k, kernel-64k-core and 71 more on almalinux 9
ELSA-2026-67150-0
kernel, kernel-abi-stablelists, kernel-core and 26 more on ol 9
OPENSUSE-SU-2026:20416-1
dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0
SUSE-SU-2026:20931-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 16.0
RHSA-2026:88687
kernel on RHEL 10
RLSA-2026:67471
kernel on rocky 10

Vendor advisory

https://osv.dev/vulnerability/ALSA-2026:67471

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/alsa-2026-67471">ALSA-2026:67471 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.