Linux · AlmaLinux · Security advisory · November 7, 2026

ALSA-2026:95370: Security update for 74 packages

ALSA-2026:95370, released November 7, 2026, fixes 16 CVEs across 74 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
16
4 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0064
50th percentile

Priority of the 16 CVEs

Patch now 0 Urgent 4 High 12 Routine 0

Fixed package versions

ProductReleaseFixed in
kernelalmalinux 95.14.0-687.66.1.el9_8
kernel-64kalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-corealmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debugalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debug-corealmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debug-develalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debug-devel-matchedalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debug-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debug-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-64k-debug-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-develalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-devel-matchedalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-64k-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-64k-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-abi-stablelistsalmalinux 95.14.0-687.66.1.el9_8
kernel-corealmalinux 95.14.0-687.66.1.el9_8
kernel-cross-headersalmalinux 95.14.0-687.66.1.el9_8
kernel-debugalmalinux 95.14.0-687.66.1.el9_8
kernel-debug-corealmalinux 95.14.0-687.66.1.el9_8
kernel-debug-develalmalinux 95.14.0-687.66.1.el9_8
kernel-debug-devel-matchedalmalinux 95.14.0-687.66.1.el9_8
kernel-debug-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-debug-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-debug-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-debug-uki-virtalmalinux 95.14.0-687.66.1.el9_8
kernel-develalmalinux 95.14.0-687.66.1.el9_8
kernel-devel-matchedalmalinux 95.14.0-687.66.1.el9_8
kernel-docalmalinux 95.14.0-687.66.1.el9_8
kernel-headersalmalinux 95.14.0-687.66.1.el9_8
kernel-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-rtalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64kalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-debugalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-debug-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-debug-develalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-debug-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-debug-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-debug-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-develalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-64k-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-debugalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-debug-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-debug-develalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-debug-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-debug-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-debug-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-develalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-rt-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-rt-modules-extraalmalinux 95.14.0-687.66.1.el9_8
kernel-toolsalmalinux 95.14.0-687.66.1.el9_8
kernel-tools-libsalmalinux 95.14.0-687.66.1.el9_8
kernel-tools-libs-develalmalinux 95.14.0-687.66.1.el9_8
kernel-uki-virtalmalinux 95.14.0-687.66.1.el9_8
kernel-uki-virt-addonsalmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdumpalmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdump-corealmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdump-develalmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdump-devel-matchedalmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdump-modulesalmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdump-modules-corealmalinux 95.14.0-687.66.1.el9_8
kernel-zfcpdump-modules-extraalmalinux 95.14.0-687.66.1.el9_8
libperfalmalinux 95.14.0-687.66.1.el9_8
perfalmalinux 95.14.0-687.66.1.el9_8
python3-perfalmalinux 95.14.0-687.66.1.el9_8
rtlaalmalinux 95.14.0-687.66.1.el9_8
rvalmalinux 95.14.0-687.66.1.el9_8

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-72221 linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callbac...9.8 0.0064 None reported
Urgent CVE-2026-72222 linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS...9.8 0.0064 None reported
Urgent CVE-2026-64541 linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pinn...9.8 0.0057 None reported
Urgent CVE-2026-89479 sctp: stop processing a packet once its association is deleted9.8 0.0050 None reported
High CVE-2026-74752 sctp: validate cookie AUTH state before use9.8 0.0052 None reported
High CVE-2026-74586 sctp: clear new_transport when removing a peer9.8 0.0050 None reported
High CVE-2026-74588 sctp: keep chunk->transport in step with the list it is queued on9.8 0.0050 None reported
High CVE-2026-98403 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system8.8 0.0021 None reported
High CVE-2026-68162 sctp: avoid auth_enable sysctl UAF during netns teardown8.8 0.0020 None reported
High CVE-2026-72080 linux: In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix use-after-free during unmount D...8.8 0.0017 None reported
High CVE-2026-80571 linux: In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: papr-phy-attest - validate cmd....8.8 0.0016 None reported
High CVE-2026-68451 s390/zcrypt: Validate length for CCA ECC private key requests8.8 0.0013 None reported
High CVE-2026-80584 s390/qeth: validate user buffer length in SNMP and ARP query ioctls8.8 0.0013 None reported
High CVE-2026-68452 s390/zcrypt: Validate length for CCA AES cipher key requests8.8 0.0013 None reported
High CVE-2026-80553 s390/vfio_ccw: Cancel existing workqueues8.8 0.0013 None reported
High CVE-2026-89488 linux: In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-fre...8.8 0.0013 None reported
Showing 1 to 16 of 16 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.